{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-f7640bc0f7acad45", "name": "Possibly dead Python function: refuse_if_canonical", "shortDescription": {"text": "Possibly dead Python function: refuse_if_canonical"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b422aab29897c125", "name": "Possibly dead Python function: verify_interview_complete", "shortDescription": {"text": "Possibly dead Python function: verify_interview_complete"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-191471141eb1e4d7", "name": "Possibly dead Python function: research_unknown_answer", "shortDescription": {"text": "Possibly dead Python function: research_unknown_answer"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9235d7b03cc00a4", "name": "Possibly dead Python function: log_fallback", "shortDescription": {"text": "Possibly dead Python function: log_fallback"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8bda7f9bac72581a", "name": "Possibly dead Python function: log_answer", "shortDescription": {"text": "Possibly dead Python function: log_answer"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-61f5f949a21a4500", "name": "Possibly dead Python function: call_llm_for_adherence", "shortDescription": {"text": "Possibly dead Python function: call_llm_for_adherence"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3067ad8f742211b7", "name": "Possibly dead Python function: render_deck", "shortDescription": {"text": "Possibly dead Python function: render_deck"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf5b3b5405dbb665", "name": "Possibly dead Python function: handle_starttag", "shortDescription": {"text": "Possibly dead Python function: handle_starttag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae6a0d7e5244c612", "name": "Possibly dead Python function: handle_endtag", "shortDescription": {"text": "Possibly dead Python function: handle_endtag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a3a8f5944c40f49e", "name": "Possibly dead Python function: handle_data", "shortDescription": {"text": "Possibly dead Python function: handle_data"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a34239370f13b695", "name": "Possibly dead Python function: extract_pdf_text", "shortDescription": {"text": "Possibly dead Python function: extract_pdf_text"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f1fee08de83fb98", "name": "Possibly dead Python function: call_moonshot", "shortDescription": {"text": "Possibly dead Python function: call_moonshot"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dca6e618d96b040e", "name": "Possibly dead Python function: ensure_trio_quad_rows", "shortDescription": {"text": "Possibly dead Python function: ensure_trio_quad_rows"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aff336d037b30f10", "name": "Possibly dead Python function: trigger_link_body", "shortDescription": {"text": "Possibly dead Python function: trigger_link_body"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-818a693296d39cbd", "name": "Possibly dead Python function: create_workflow", "shortDescription": {"text": "Possibly dead Python function: create_workflow"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a3d85a588cfa2b72", "name": "Possibly dead Python function: status_block", "shortDescription": {"text": "Possibly dead Python function: status_block"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b93fd43ba14b4ee0", "name": "Possibly dead Python function: progress", "shortDescription": {"text": "Possibly dead Python function: progress"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8433975b3e5d9aa7", "name": "Possibly dead Python function: bottom_toolbar", "shortDescription": {"text": "Possibly dead Python function: bottom_toolbar"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-77b35cef4a5f9178", "name": "Possibly dead Python function: toolbar", "shortDescription": {"text": "Possibly dead Python function: toolbar"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a04cd02bdab5323c", "name": "Possibly dead Python function: resolve_key", "shortDescription": {"text": "Possibly dead Python function: resolve_key"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74a4fff083d691de", "name": "Possibly dead Python function: repl", "shortDescription": {"text": "Possibly dead Python function: repl"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-427eed6f2f5dc560", "name": "Possibly dead Python function: seed_canonical_from_skill22", "shortDescription": {"text": "Possibly dead Python function: seed_canonical_from_skill22"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0437736c58e7c1e4", "name": "Possibly dead Python function: find_all_keys_for_service", "shortDescription": {"text": "Possibly dead Python function: find_all_keys_for_service"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e1a0637096b2d6f4", "name": "Stray `console.log` in TS/JS \u2014 46-kie-callback-relay/box-kv-poller.js:91", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 46-kie-callback-relay/box-kv-poller.js:91"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea9b2b28737dd94f", "name": "Stray `console.log` in TS/JS \u2014 46-kie-callback-relay/kie-slide-submitter.js:121", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 46-kie-callback-relay/kie-slide-submitter.js:121"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a60551df6cac1ef7", "name": "Stray `console.log` in TS/JS \u2014 46-kie-callback-relay/worker/src/index.js:350", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 46-kie-callback-relay/worker/src/index.js:350"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3351021513d45f60", "name": "Privileged port 11 in use", "shortDescription": {"text": "Privileged port 11 in use"}, "fullDescription": {"text": "Port 11 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e6df0d2094065434", "name": "Privileged port 59 in use", "shortDescription": {"text": "Privileged port 59 in use"}, "fullDescription": {"text": "Port 59 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1fedf7502ee6f401", "name": "Privileged port 18 in use", "shortDescription": {"text": "Privileged port 18 in use"}, "fullDescription": {"text": "Port 18 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88a6231c5979d44e", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ce941aee0390bea3", "name": "Possible secret in 41-build-with-ai-playbook/scripts/test/L4-safety.sh", "shortDescription": {"text": "Possible secret in 41-build-with-ai-playbook/scripts/test/L4-safety.sh"}, "fullDescription": {"text": "Detected pattern matching openai_or_anthropic_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-62adde6a11dd313d", "name": "Insecure pattern 'cors_wildcard' in 38-conversational-ai-system/scripts/29-deploy-pixel-cloudflare.sh:168", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in 38-conversational-ai-system/scripts/29-deploy-pixel-cloudflare.sh:168"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11bedc2f27137ddc", "name": "Insecure pattern 'exec_used' in 23-ai-workforce-blueprint/scripts/test-sop-substance-models.sh:100", "shortDescription": {"text": "Insecure pattern 'exec_used' in 23-ai-workforce-blueprint/scripts/test-sop-substance-models.sh:100"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-df598e9f0e985a7a", "name": "Insecure pattern 'exec_used' in 23-ai-workforce-blueprint/scripts/test-gate-company-dir-resolution.sh:145", "shortDescription": {"text": "Insecure pattern 'exec_used' in 23-ai-workforce-blueprint/scripts/test-gate-company-dir-resolution.sh:145"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-aff1311e3befa7f5", "name": "Insecure pattern 'subprocess_shell_true' in 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:620", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:620"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-074db6e00874fdd5", "name": "Possible secret in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/internal/transport.py", "shortDescription": {"text": "Possible secret in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/internal/transport.py"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-53317f6e8704130f", "name": "Possible secret in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/ghl_internal_client.py", "shortDescription": {"text": "Possible secret in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/ghl_internal_client.py"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-8bec13f5d4e2c750", "name": "Insecure pattern 'subprocess_shell_true' in shared-utils/check-skill-prereqs.sh:177", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in shared-utils/check-skill-prereqs.sh:177"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-93d003a622275ab5", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e38b76bd6d206f3a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e05bea8b37ff4c2", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a4c88afb3370e683", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-42cb1acbcf3b5510", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-139c595b4bb92f76", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cbc84aa05713be54", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8330543dba1dea93", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cbfb15ef0a79aeda", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9348fbe28a54dac", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b839a3712242efc7", "name": "Install-time lifecycle script performs network/shell-sensitive actions", "shortDescription": {"text": "Install-time lifecycle script performs network/shell-sensitive actions"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-965412d3897ad436", "name": "Very large file: install.sh (5987 lines)", "shortDescription": {"text": "Very large file: install.sh (5987 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c10304cd0cfb6b4a", "name": "Very large file: update-skills.sh (1857 lines)", "shortDescription": {"text": "Very large file: update-skills.sh (1857 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f0fbe9e99429e350", "name": "Very large file: 38-conversational-ai-system/scripts/05-update-agents-md.sh (945 lines)", "shortDescription": {"text": "Very large file: 38-conversational-ai-system/scripts/05-update-agents-md.sh (945 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-745141b7cb9a940a", "name": "Very large file: 38-conversational-ai-system/scripts/21-generate-client-reference-sheet.sh (861 lines)", "shortDescription": {"text": "Very large file: 38-conversational-ai-system/scripts/21-generate-client-reference-sheet.sh (861 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2243c6966d43f1c7", "name": "Very large file: 23-ai-workforce-blueprint/scripts/persona-selector-v2.py (1403 lines)", "shortDescription": {"text": "Very large file: 23-ai-workforce-blueprint/scripts/persona-selector-v2.py (1403 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eab321f08f0be539", "name": "Very large file: 23-ai-workforce-blueprint/scripts/build-workforce.py (5248 lines)", "shortDescription": {"text": "Very large file: 23-ai-workforce-blueprint/scripts/build-workforce.py (5248 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-84df6530fe2bfa6b", "name": "Very large file: 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py (1803 lines)", "shortDescription": {"text": "Very large file: 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py (1803 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e30e3cdc50c7daf", "name": "Very large file: 37-zhc-closeout/scripts/run-closeout.sh (1036 lines)", "shortDescription": {"text": "Very large file: 37-zhc-closeout/scripts/run-closeout.sh (1036 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b083d657d695142", "name": "Very large file: 44-convert-and-flow-operator/tools/engine/tests/test_e2e_unit11.py (1873 lines)", "shortDescription": {"text": "Very large file: 44-convert-and-flow-operator/tools/engine/tests/test_e2e_unit11.py (1873 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3da338004d1e60e5", "name": "Very large file: 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/gohighlevel_cli.py (1574 lines)", "shortDescription": {"text": "Very large file: 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/gohighlevel_cli.py (1574 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56224eada9044085", "name": "Very large file: shared-utils/fleet_refresh_runner.py (1346 lines)", "shortDescription": {"text": "Very large file: shared-utils/fleet_refresh_runner.py (1346 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "12 test file(s) for 135 source file(s) (ratio 0.09). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a893241ad690904", "name": "Node manifest has dependencies but no lockfile: 37-zhc-closeout/templates/workforce-org-chart/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: 37-zhc-closeout/templates/workforce-org-chart/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-285629d1848cfc60", "name": "Node manifest has dependencies but no lockfile: 46-kie-callback-relay/worker/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: 46-kie-callback-relay/worker/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 2015 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 231 placeholder/mock markers across 85 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, lockfile. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9b676f580dc67f5c", "name": "Agent authority lacks a verifier contract: 16-summarize-youtube/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 16-summarize-youtube/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11a55fc909c2ae64", "name": "Agent authority lacks a verifier contract: 15-blackceo-team-management/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 15-blackceo-team-management/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-32eccadf8dbfc7a9", "name": "Agent instruction/config may expose a secret: 09-context7/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: 09-context7/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8c18a7d5ba305a34", "name": "Agent authority lacks a verifier contract: 21-tavily-search/upstream-original/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 21-tavily-search/upstream-original/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1c2d8caf9c42098a", "name": "Agent authority lacks a verifier contract: platform/vps/skills/markitdown-skill/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: platform/vps/skills/markitdown-skill/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-916c82a6adb96f4f", "name": "Agent authority lacks a verifier contract: 24-storyboard-writer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 24-storyboard-writer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79a1c23c086cd927", "name": "Agent authority lacks a verifier contract: 26-caption-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 26-caption-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f987e4be7a69248", "name": "Agent authority lacks a verifier contract: 20-youtube-watcher/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 20-youtube-watcher/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48e390a9db3cf3f3", "name": "Agent authority lacks a verifier contract: 20-youtube-watcher/upstream-original/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 20-youtube-watcher/upstream-original/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38b09a441525f562", "name": "Agent authority lacks a verifier contract: 39-real-estate-playbook/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 39-real-estate-playbook/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ed94509457423b9", "name": "Agent authority lacks a verifier contract: 27-video-editor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 27-video-editor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f9bd003650efebef", "name": "Agent authority lacks a verifier contract: 30-fish-audio-api-reference/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 30-fish-audio-api-reference/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-44ba8cef2ca4b1a8", "name": "Agent authority lacks a verifier contract: 17-self-improving-agent/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 17-self-improving-agent/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-293bb740f793d9b7", "name": "Agent instruction/config may expose a secret: 17-self-improving-agent/upstream-original/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: 17-self-improving-agent/upstream-original/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cf06360528575a65", "name": "Agent instruction/config may expose a secret: 28-cinematic-forge/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: 28-cinematic-forge/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0a2caa53764bf6b0", "name": "Agent authority lacks a verifier contract: 40-zhc-public-records-scraper/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 40-zhc-public-records-scraper/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c702bd870f65401", "name": "Agent instruction contains unpinned remote install: 11-superdesign/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: 11-superdesign/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-246aa2f575abeee3", "name": "Agent authority lacks a verifier contract: 19-humanizer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: 19-humanizer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-37dbee7cf2598f56", "name": "Commented-code block (5 lines) in tests/unit/deep-health.test.ts:64", "shortDescription": {"text": "Commented-code block (5 lines) in tests/unit/deep-health.test.ts:64"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-39b9b715ec6ccab5", "name": "Commented-code block (6 lines) in scripts/check-floor-count-drift.py:114", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/check-floor-count-drift.py:114"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b967439547b100a2", "name": "Commented-code block (5 lines) in scripts/generate-trio-roles.py:841", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/generate-trio-roles.py:841"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4c42d0757107de67", "name": "Network/subprocess call without timeout or try/except \u2014 26-caption-creator/Scripts/animated_captions.py:95", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 26-caption-creator/Scripts/animated_captions.py:95"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-95899b93f80325fc", "name": "Legacy-named symbol `r15_old` in 38-conversational-ai-system/_wire_rules_15_16.py:18", "shortDescription": {"text": "Legacy-named symbol `r15_old` in 38-conversational-ai-system/_wire_rules_15_16.py:18"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53c04160c837ab1d", "name": "Commented-code block (6 lines) in 38-conversational-ai-system/_wire_rules_15_16.py:4", "shortDescription": {"text": "Commented-code block (6 lines) in 38-conversational-ai-system/_wire_rules_15_16.py:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f27bd9cc50c16902", "name": "Commented-code block (5 lines) in 38-conversational-ai-system/templates/zhc-pixel/zhc-pixel.template.js:135", "shortDescription": {"text": "Commented-code block (5 lines) in 38-conversational-ai-system/templates/zhc-pixel/zhc-pixel.template.js:135"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8f094317bc9b209f", "name": "Commented-code block (7 lines) in 23-ai-workforce-blueprint/scripts/persona-selector-v2.py:270", "shortDescription": {"text": "Commented-code block (7 lines) in 23-ai-workforce-blueprint/scripts/persona-selector-v2.py:270"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-91259a945c42abfc", "name": "Legacy-named symbol `would_copy` in 23-ai-workforce-blueprint/scripts/reconcile-legacy-tree.py:163", "shortDescription": {"text": "Legacy-named symbol `would_copy` in 23-ai-workforce-blueprint/scripts/reconcile-legacy-tree.py:163"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d88aa2d527ec568a", "name": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/populate-sops-from-manifest.py:309", "shortDescription": {"text": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/populate-sops-from-manifest.py:309"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-027db99da93b15c7", "name": "Network/subprocess call without timeout or try/except \u2014 23-ai-workforce-blueprint/scripts/populate-sops-from-manifest.py", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 23-ai-workforce-blueprint/scripts/populate-sops-from-manifest.py:228"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9251a5778b59e177", "name": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/department-floor.py:82", "shortDescription": {"text": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/department-floor.py:82"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-af278e25909ab324", "name": "Commented-code block (6 lines) in 23-ai-workforce-blueprint/scripts/_qc_company_info.py:4", "shortDescription": {"text": "Commented-code block (6 lines) in 23-ai-workforce-blueprint/scripts/_qc_company_info.py:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a6d4036d9020c4ba", "name": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/_qc_owner_chat.py:4", "shortDescription": {"text": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/_qc_owner_chat.py:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-89e3eb2c316ca707", "name": "Network/subprocess call without timeout or try/except \u2014 23-ai-workforce-blueprint/scripts/select-persona-for-task.py:92", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 23-ai-workforce-blueprint/scripts/select-persona-for-task.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f5f57e26788ec73", "name": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/create_role_workspaces.py:108", "shortDescription": {"text": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/create_role_workspaces.py:108"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cea326cb72939341", "name": "Legacy-named symbol `canonical_legacy` in 23-ai-workforce-blueprint/scripts/build-workforce.py:926", "shortDescription": {"text": "Legacy-named symbol `canonical_legacy` in 23-ai-workforce-blueprint/scripts/build-workforce.py:926"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f47dda17fff45b26", "name": "Commented-code block (7 lines) in 23-ai-workforce-blueprint/scripts/build-workforce.py:61", "shortDescription": {"text": "Commented-code block (7 lines) in 23-ai-workforce-blueprint/scripts/build-workforce.py:61"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a2693e782f71d8c6", "name": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/verify-persona-adherence.py:164", "shortDescription": {"text": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/verify-persona-adherence.py:164"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-75025f34faebff76", "name": "Commented-code block (6 lines) in 23-ai-workforce-blueprint/scripts/archive/select-persona-for-task.py:210", "shortDescription": {"text": "Commented-code block (6 lines) in 23-ai-workforce-blueprint/scripts/archive/select-persona-for-task.py:210"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ca49306b16dd7e22", "name": "Legacy-named symbol `mac_legacy` in 23-ai-workforce-blueprint/lib/detect_platform.py:36", "shortDescription": {"text": "Legacy-named symbol `mac_legacy` in 23-ai-workforce-blueprint/lib/detect_platform.py:36"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-01b2e8fcd3779dd6", "name": "Commented-code block (7 lines) in 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:98", "shortDescription": {"text": "Commented-code block (7 lines) in 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:98"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ba111a560341ef0d", "name": "Network/subprocess call without timeout or try/except \u2014 22-book-to-persona-coaching-leadership-system/pipeline/orchestra", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:585"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d40a91406324f9da", "name": "Commented-code block (5 lines) in 32-command-center-setup/scripts/seed-workspaces.py:433", "shortDescription": {"text": "Commented-code block (5 lines) in 32-command-center-setup/scripts/seed-workspaces.py:433"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f908f4670db23548", "name": "Commented-code block (8 lines) in 37-zhc-closeout/templates/workforce-org-chart/render.mjs:13", "shortDescription": {"text": "Commented-code block (8 lines) in 37-zhc-closeout/templates/workforce-org-chart/render.mjs:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-30ed5f8accf630c8", "name": "Commented-code block (10 lines) in 37-zhc-closeout/templates/workforce-org-chart/cluster-classifier.js:11", "shortDescription": {"text": "Commented-code block (10 lines) in 37-zhc-closeout/templates/workforce-org-chart/cluster-classifier.js:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-167c0c42b058dc76", "name": "Commented-code block (7 lines) in 44-convert-and-flow-operator/tools/engine/builders/_email_sequences_parser.py:38", "shortDescription": {"text": "Commented-code block (7 lines) in 44-convert-and-flow-operator/tools/engine/builders/_email_sequences_parser.py:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bbd7f6b0d6676d1b", "name": "Commented-code block (5 lines) in 44-convert-and-flow-operator/tools/engine/tests/test_e2e_unit11.py:1206", "shortDescription": {"text": "Commented-code block (5 lines) in 44-convert-and-flow-operator/tools/engine/tests/test_e2e_unit11.py:1206"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5a3bde245b1417b8", "name": "Commented-code block (9 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/gohighlevel_cli.py:", "shortDescription": {"text": "Commented-code block (9 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/gohighlevel_cli.py:891"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0fcd7c1f1a51b5f2", "name": "Commented-code block (9 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/internal/transport.", "shortDescription": {"text": "Commented-code block (9 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/internal/transport.py:118"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1350ef71f3bece68", "name": "Commented-code block (9 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/workflow_buil", "shortDescription": {"text": "Commented-code block (9 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/workflow_builder.py:230"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2cd404623a51461d", "name": "Commented-code block (5 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/write_lock.py", "shortDescription": {"text": "Commented-code block (5 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/write_lock.py:34"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4764a4f2dcb4d9a5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 46-kie-callback-relay/box-kv-poller.js:314", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 46-kie-callback-relay/box-kv-poller.js:314"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-01f5b4c767acf2d8", "name": "`fetch()` without try/.catch or AbortSignal \u2014 46-kie-callback-relay/worker/src/index.js:239", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 46-kie-callback-relay/worker/src/index.js:239"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a25671f4b5df5ac2", "name": "Commented-code block (7 lines) in shared-utils/nudge-incomplete-interviews.py:37", "shortDescription": {"text": "Commented-code block (7 lines) in shared-utils/nudge-incomplete-interviews.py:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8357646194df29f8", "name": "Commented-code block (5 lines) in shared-utils/api_key_utils.py:32", "shortDescription": {"text": "Commented-code block (5 lines) in shared-utils/api_key_utils.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d25e8e462b8d5a15", "name": "Legacy-named symbol `mac_legacy` in shared-utils/detect_platform.py:56", "shortDescription": {"text": "Legacy-named symbol `mac_legacy` in shared-utils/detect_platform.py:56"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c555f670a019145b", "name": "Legacy-named symbol `sorted_legacy` in shared-utils/migrate_zhc_runner.py:188", "shortDescription": {"text": "Legacy-named symbol `sorted_legacy` in shared-utils/migrate_zhc_runner.py:188"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-22f4a0bc38e55ef3", "name": "Network/subprocess call without timeout or try/except \u2014 shared-utils/migrate_zhc_runner.py:398", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 shared-utils/migrate_zhc_runner.py:398"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b3ec733fcaf1d7d6", "name": "Commented-code block (6 lines) in shared-utils/select_model.py:268", "shortDescription": {"text": "Commented-code block (6 lines) in shared-utils/select_model.py:268"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5564229c21751c80", "name": "Commented-code block (5 lines) in shared-utils/fleet_refresh_runner.py:826", "shortDescription": {"text": "Commented-code block (5 lines) in shared-utils/fleet_refresh_runner.py:826"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8ec66d8cfa2a0636", "name": "Legacy-named symbol `mac_legacy` in shared-utils/resolve_injected_core_files.py:179", "shortDescription": {"text": "Legacy-named symbol `mac_legacy` in shared-utils/resolve_injected_core_files.py:179"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-959ed7ebb989d9da", "name": "Commented-code block (9 lines) in src/lib/health/deep-checks.ts:21", "shortDescription": {"text": "Commented-code block (9 lines) in src/lib/health/deep-checks.ts:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-768306a346cf490d", "name": "50 env vars used in code but missing from .env.example", "shortDescription": {"text": "50 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `BLACKCEO_COMMAND_CENTER_ROOT`, `CAF_DATA_DIR`, `CAF_INTERNAL_MAX_WORKERS`, `CAF_INTERNAL_STEP_BACKOFF_MS`, `CC_PUBLIC_URL`, `CLI_ANYTHING_NO_COLOR`, `COMPANY_BRAND_COLORS`, `COMPANY_INDUSTRY` + 42 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n23-ai-workforce-blueprint/scripts/create_role_workspaces.py:stub_memory, shared-utils/create-role-workspaces.py:stub_memory\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n44-convert-and-flow-operator/tools/engine/builders/wf5-ht-interest-builder.py:email_step_seq, 44-convert-and-flow-operator/tools/engine/builders/wf1-course-interest-builder.py:email_step_seq, 44-convert-and-flow-operator/tools/engine/builders/wf6-post-call-sales-builder.py:email_step_seq\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21651"}, "properties": {"repository": "trevorotts1/openclaw-onboarding", "repoUrl": "https://github.com/trevorotts1/openclaw-onboarding", "branch": "main"}, "results": [{"ruleId": "scanner-f7640bc0f7acad45", "level": "note", "message": {"text": "Possibly dead Python function: refuse_if_canonical"}, "properties": {"repobilityId": "3b479c7051c7c149", "scanner": "scanner-primary", "fingerprint": "f7640bc0f7acad45", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "23-ai-workforce-blueprint/scripts/sop_boundary_gate.py:160"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b422aab29897c125", "level": "note", "message": {"text": "Possibly dead Python function: verify_interview_complete"}, "properties": {"repobilityId": "b60cb1462deb6dc6", "scanner": "scanner-primary", "fingerprint": "b422aab29897c125", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "23-ai-workforce-blueprint/scripts/build-workforce.py:760"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-191471141eb1e4d7", "level": "note", "message": {"text": "Possibly dead Python function: research_unknown_answer"}, "properties": {"repobilityId": "df47f6dcb11f4567", "scanner": "scanner-primary", "fingerprint": "191471141eb1e4d7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "23-ai-workforce-blueprint/scripts/build-workforce.py:2269"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9235d7b03cc00a4", "level": "note", "message": {"text": "Possibly dead Python function: log_fallback"}, "properties": {"repobilityId": "fde6a79991a14eff", "scanner": "scanner-primary", "fingerprint": "b9235d7b03cc00a4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "23-ai-workforce-blueprint/scripts/build-workforce.py:4999"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8bda7f9bac72581a", "level": "note", "message": {"text": "Possibly dead Python function: log_answer"}, "properties": {"repobilityId": "9d82a6a0d27e416e", "scanner": "scanner-primary", "fingerprint": "8bda7f9bac72581a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "23-ai-workforce-blueprint/scripts/build-workforce.py:5036"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-61f5f949a21a4500", "level": "note", "message": {"text": "Possibly dead Python function: call_llm_for_adherence"}, "properties": {"repobilityId": "c8801aa622cd2f08", "scanner": "scanner-primary", "fingerprint": "61f5f949a21a4500", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "23-ai-workforce-blueprint/scripts/verify-persona-adherence.py:146"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3067ad8f742211b7", "level": "note", "message": {"text": "Possibly dead Python function: render_deck"}, "properties": {"repobilityId": "57edb011c1c202f0", "scanner": "scanner-primary", "fingerprint": "3067ad8f742211b7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "23-ai-workforce-blueprint/templates/presentation-render/render_deck.py:254"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bf5b3b5405dbb665", "level": "note", "message": {"text": "Possibly dead Python function: handle_starttag"}, "properties": {"repobilityId": "3bf216d149959ebf", "scanner": "scanner-primary", "fingerprint": "bf5b3b5405dbb665", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:539"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ae6a0d7e5244c612", "level": "note", "message": {"text": "Possibly dead Python function: handle_endtag"}, "properties": {"repobilityId": "7eb6f3decafc1766", "scanner": "scanner-primary", "fingerprint": "ae6a0d7e5244c612", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:542"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a3a8f5944c40f49e", "level": "note", "message": {"text": "Possibly dead Python function: handle_data"}, "properties": {"repobilityId": "3a673a278f4fc1e6", "scanner": "scanner-primary", "fingerprint": "a3a8f5944c40f49e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:545"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a34239370f13b695", "level": "note", "message": {"text": "Possibly dead Python function: extract_pdf_text"}, "properties": {"repobilityId": "3c12d59126986edb", "scanner": "scanner-primary", "fingerprint": "a34239370f13b695", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:778"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f1fee08de83fb98", "level": "note", "message": {"text": "Possibly dead Python function: call_moonshot"}, "properties": {"repobilityId": "37c89fce46a246ed", "scanner": "scanner-primary", "fingerprint": "0f1fee08de83fb98", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:893"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dca6e618d96b040e", "level": "note", "message": {"text": "Possibly dead Python function: ensure_trio_quad_rows"}, "properties": {"repobilityId": "16c59f51b7343a00", "scanner": "scanner-primary", "fingerprint": "dca6e618d96b040e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "32-command-center-setup/scripts/lib-trio-quad-rows.py:57"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aff336d037b30f10", "level": "note", "message": {"text": "Possibly dead Python function: trigger_link_body"}, "properties": {"repobilityId": "c13df4173aa10017", "scanner": "scanner-primary", "fingerprint": "aff336d037b30f10", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/internal/contract.py:109"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-818a693296d39cbd", "level": "note", "message": {"text": "Possibly dead Python function: create_workflow"}, "properties": {"repobilityId": "2ef83a113384b42e", "scanner": "scanner-primary", "fingerprint": "818a693296d39cbd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/internal/adapter.py:89"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a3d85a588cfa2b72", "level": "note", "message": {"text": "Possibly dead Python function: status_block"}, "properties": {"repobilityId": "9e9918c8353acb67", "scanner": "scanner-primary", "fingerprint": "a3d85a588cfa2b72", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/repl_skin.py:333"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b93fd43ba14b4ee0", "level": "note", "message": {"text": "Possibly dead Python function: progress"}, "properties": {"repobilityId": "97c07eb024e59ee8", "scanner": "scanner-primary", "fingerprint": "b93fd43ba14b4ee0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/repl_skin.py:349"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8433975b3e5d9aa7", "level": "note", "message": {"text": "Possibly dead Python function: bottom_toolbar"}, "properties": {"repobilityId": "91ad8f41373c11bf", "scanner": "scanner-primary", "fingerprint": "8433975b3e5d9aa7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/repl_skin.py:487"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-77b35cef4a5f9178", "level": "note", "message": {"text": "Possibly dead Python function: toolbar"}, "properties": {"repobilityId": "a246c76c99501dd7", "scanner": "scanner-primary", "fingerprint": "77b35cef4a5f9178", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/repl_skin.py:496"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a04cd02bdab5323c", "level": "note", "message": {"text": "Possibly dead Python function: resolve_key"}, "properties": {"repobilityId": "6612bc665b62984e", "scanner": "scanner-primary", "fingerprint": "a04cd02bdab5323c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "shared-utils/key_resolver.py:80"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74a4fff083d691de", "level": "note", "message": {"text": "Possibly dead Python function: repl"}, "properties": {"repobilityId": "6f5d3779bbb8be8b", "scanner": "scanner-primary", "fingerprint": "74a4fff083d691de", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "shared-utils/nudge-incomplete-interviews.py:140"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-427eed6f2f5dc560", "level": "note", "message": {"text": "Possibly dead Python function: seed_canonical_from_skill22"}, "properties": {"repobilityId": "b3a0bfda13d8db61", "scanner": "scanner-primary", "fingerprint": "427eed6f2f5dc560", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "shared-utils/resolve_persona_categories_path.py:104"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0437736c58e7c1e4", "level": "note", "message": {"text": "Possibly dead Python function: find_all_keys_for_service"}, "properties": {"repobilityId": "837e0545105a104f", "scanner": "scanner-primary", "fingerprint": "0437736c58e7c1e4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "shared-utils/api_key_utils.py:262"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1a0637096b2d6f4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 46-kie-callback-relay/box-kv-poller.js:91"}, "properties": {"repobilityId": "1c0d7b126c3231b7", "scanner": "scanner-primary", "fingerprint": "e1a0637096b2d6f4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ea9b2b28737dd94f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 46-kie-callback-relay/kie-slide-submitter.js:121"}, "properties": {"repobilityId": "e6107298a4c30074", "scanner": "scanner-primary", "fingerprint": "ea9b2b28737dd94f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a60551df6cac1ef7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 46-kie-callback-relay/worker/src/index.js:350"}, "properties": {"repobilityId": "b4a1cf7746681e3d", "scanner": "scanner-primary", "fingerprint": "a60551df6cac1ef7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3351021513d45f60", "level": "warning", "message": {"text": "Privileged port 11 in use"}, "properties": {"repobilityId": "5b3038c67fabb4c8", "scanner": "scanner-primary", "fingerprint": "3351021513d45f60", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/setup-weekly-update.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e6df0d2094065434", "level": "warning", "message": {"text": "Privileged port 59 in use"}, "properties": {"repobilityId": "6c14a9dab4958e92", "scanner": "scanner-primary", "fingerprint": "e6df0d2094065434", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/setup-weekly-update.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1fedf7502ee6f401", "level": "warning", "message": {"text": "Privileged port 18 in use"}, "properties": {"repobilityId": "2d7b5e7d9c158e43", "scanner": "scanner-primary", "fingerprint": "1fedf7502ee6f401", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "39-real-estate-playbook/scripts/07-register-crons.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-88a6231c5979d44e", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "88a6231c5979d44e", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "35-social-media-planner/scripts/register-weekly-cron.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-ce941aee0390bea3", "level": "error", "message": {"text": "Possible secret in 41-build-with-ai-playbook/scripts/test/L4-safety.sh"}, "properties": {"repobilityId": "0930070b06bee558", "scanner": "scanner-primary", "fingerprint": "ce941aee0390bea3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "41-build-with-ai-playbook/scripts/test/L4-safety.sh"}, "region": {"startLine": 91}}}]}, {"ruleId": "scanner-62adde6a11dd313d", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in 38-conversational-ai-system/scripts/29-deploy-pixel-cloudflare.sh:168"}, "properties": {"repobilityId": "01ecb57de1c9aae7", "scanner": "scanner-primary", "fingerprint": "62adde6a11dd313d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "38-conversational-ai-system/scripts/29-deploy-pixel-cloudflare.sh"}, "region": {"startLine": 168}}}]}, {"ruleId": "scanner-11bedc2f27137ddc", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in 23-ai-workforce-blueprint/scripts/test-sop-substance-models.sh:100"}, "properties": {"repobilityId": "81ad88d83ea06ec4", "scanner": "scanner-primary", "fingerprint": "11bedc2f27137ddc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "23-ai-workforce-blueprint/scripts/test-sop-substance-models.sh"}, "region": {"startLine": 100}}}]}, {"ruleId": "scanner-df598e9f0e985a7a", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in 23-ai-workforce-blueprint/scripts/test-gate-company-dir-resolution.sh:145"}, "properties": {"repobilityId": "3675cec9d1fda8b1", "scanner": "scanner-primary", "fingerprint": "df598e9f0e985a7a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "23-ai-workforce-blueprint/scripts/test-gate-company-dir-resolution.sh"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-aff1311e3befa7f5", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:620"}, "properties": {"repobilityId": "f787fe45a9088615", "scanner": "scanner-primary", "fingerprint": "aff1311e3befa7f5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py"}, "region": {"startLine": 620}}}]}, {"ruleId": "scanner-074db6e00874fdd5", "level": "error", "message": {"text": "Possible secret in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/internal/transport.py"}, "properties": {"repobilityId": "4b91d705cfb04e2e", "scanner": "scanner-primary", "fingerprint": "074db6e00874fdd5", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/internal/transport.py"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-53317f6e8704130f", "level": "error", "message": {"text": "Possible secret in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/ghl_internal_client.py"}, "properties": {"repobilityId": "b2db67e590bd003d", "scanner": "scanner-primary", "fingerprint": "53317f6e8704130f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/ghl_internal_client.py"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-8bec13f5d4e2c750", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in shared-utils/check-skill-prereqs.sh:177"}, "properties": {"repobilityId": "5e0336ff59fb9a81", "scanner": "scanner-primary", "fingerprint": "8bec13f5d4e2c750", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "shared-utils/check-skill-prereqs.sh"}, "region": {"startLine": 177}}}]}, {"ruleId": "scanner-93d003a622275ab5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fd98144769edb434", "scanner": "scanner-primary", "fingerprint": "93d003a622275ab5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/version-consistency.yml"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-93d003a622275ab5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "48fcaea36df0f5a0", "scanner": "scanner-primary", "fingerprint": "93d003a622275ab5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/version-consistency.yml"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-93d003a622275ab5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fd98144769edb434", "scanner": "scanner-primary", "fingerprint": "93d003a622275ab5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/version-consistency.yml"}, "region": {"startLine": 196}}}]}, {"ruleId": "scanner-93d003a622275ab5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fd98144769edb434", "scanner": "scanner-primary", "fingerprint": "93d003a622275ab5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/version-consistency.yml"}, "region": {"startLine": 276}}}]}, {"ruleId": "scanner-93d003a622275ab5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fd98144769edb434", "scanner": "scanner-primary", "fingerprint": "93d003a622275ab5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/version-consistency.yml"}, "region": {"startLine": 338}}}]}, {"ruleId": "scanner-e38b76bd6d206f3a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5c70b95d9612388a", "scanner": "scanner-primary", "fingerprint": "e38b76bd6d206f3a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/qc-static.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-e38b76bd6d206f3a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bac60bcf56eaf011", "scanner": "scanner-primary", "fingerprint": "e38b76bd6d206f3a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/qc-static.yml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-9e05bea8b37ff4c2", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b4cfbc81245168d5", "scanner": "scanner-primary", "fingerprint": "9e05bea8b37ff4c2", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cron-owner-chat-guard.yml"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-9e05bea8b37ff4c2", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "af5450e428c99f75", "scanner": "scanner-primary", "fingerprint": "9e05bea8b37ff4c2", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cron-owner-chat-guard.yml"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-a4c88afb3370e683", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8981dc07687fcedb", "scanner": "scanner-primary", "fingerprint": "a4c88afb3370e683", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bounded-resume-cron-guard.yml"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-42cb1acbcf3b5510", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d4ad645a12d797fc", "scanner": "scanner-primary", "fingerprint": "42cb1acbcf3b5510", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/closeout-watchdog-guard.yml"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-42cb1acbcf3b5510", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "539269fb72aa3bee", "scanner": "scanner-primary", "fingerprint": "42cb1acbcf3b5510", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/closeout-watchdog-guard.yml"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-139c595b4bb92f76", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "45cf181e75524c1b", "scanner": "scanner-primary", "fingerprint": "139c595b4bb92f76", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/core-updates-wiring-guard.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-139c595b4bb92f76", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5baccb360195955a", "scanner": "scanner-primary", "fingerprint": "139c595b4bb92f76", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/core-updates-wiring-guard.yml"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-cbc84aa05713be54", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "72b394676af2f85e", "scanner": "scanner-primary", "fingerprint": "cbc84aa05713be54", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/wire-no-match-guard.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-8330543dba1dea93", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "278f15eb1e1fdfdf", "scanner": "scanner-primary", "fingerprint": "8330543dba1dea93", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-e2e.yml"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-8330543dba1dea93", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9a3756663888b51e", "scanner": "scanner-primary", "fingerprint": "8330543dba1dea93", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-e2e.yml"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-8330543dba1dea93", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "278f15eb1e1fdfdf", "scanner": "scanner-primary", "fingerprint": "8330543dba1dea93", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-e2e.yml"}, "region": {"startLine": 166}}}]}, {"ruleId": "scanner-8330543dba1dea93", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9a3756663888b51e", "scanner": "scanner-primary", "fingerprint": "8330543dba1dea93", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-e2e.yml"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-8330543dba1dea93", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "278f15eb1e1fdfdf", "scanner": "scanner-primary", "fingerprint": "8330543dba1dea93", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-e2e.yml"}, "region": {"startLine": 246}}}]}, {"ruleId": "scanner-8330543dba1dea93", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9a3756663888b51e", "scanner": "scanner-primary", "fingerprint": "8330543dba1dea93", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-e2e.yml"}, "region": {"startLine": 249}}}]}, {"ruleId": "scanner-8330543dba1dea93", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "278f15eb1e1fdfdf", "scanner": "scanner-primary", "fingerprint": "8330543dba1dea93", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-e2e.yml"}, "region": {"startLine": 339}}}]}, {"ruleId": "scanner-8330543dba1dea93", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9a3756663888b51e", "scanner": "scanner-primary", "fingerprint": "8330543dba1dea93", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-e2e.yml"}, "region": {"startLine": 342}}}]}, {"ruleId": "scanner-8330543dba1dea93", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "61edab73c8a76314", "scanner": "scanner-primary", "fingerprint": "8330543dba1dea93", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-e2e.yml"}, "region": {"startLine": 369}}}]}, {"ruleId": "scanner-cbfb15ef0a79aeda", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3b343b9a97d729fe", "scanner": "scanner-primary", "fingerprint": "cbfb15ef0a79aeda", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/model-selector-guard.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-cbfb15ef0a79aeda", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "134292f5872bf162", "scanner": "scanner-primary", "fingerprint": "cbfb15ef0a79aeda", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/model-selector-guard.yml"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-e9348fbe28a54dac", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8e20300a87f3b528", "scanner": "scanner-primary", "fingerprint": "e9348fbe28a54dac", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-install-path.yml"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-e9348fbe28a54dac", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8e20300a87f3b528", "scanner": "scanner-primary", "fingerprint": "e9348fbe28a54dac", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-install-path.yml"}, "region": {"startLine": 139}}}]}, {"ruleId": "scanner-e9348fbe28a54dac", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8e20300a87f3b528", "scanner": "scanner-primary", "fingerprint": "e9348fbe28a54dac", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill44-install-path.yml"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-b839a3712242efc7", "level": "warning", "message": {"text": "Install-time lifecycle script performs network/shell-sensitive actions"}, "properties": {"repobilityId": "22a31b5ace986c1d", "scanner": "scanner-primary", "fingerprint": "b839a3712242efc7", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "37-zhc-closeout/templates/workforce-org-chart/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-965412d3897ad436", "level": "note", "message": {"text": "Very large file: install.sh (5987 lines)"}, "properties": {"repobilityId": "642d236e3dbb2bb8", "scanner": "scanner-primary", "fingerprint": "965412d3897ad436", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c10304cd0cfb6b4a", "level": "note", "message": {"text": "Very large file: update-skills.sh (1857 lines)"}, "properties": {"repobilityId": "37cad1ed6f5ddee4", "scanner": "scanner-primary", "fingerprint": "c10304cd0cfb6b4a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f0fbe9e99429e350", "level": "note", "message": {"text": "Very large file: 38-conversational-ai-system/scripts/05-update-agents-md.sh (945 lines)"}, "properties": {"repobilityId": "575f1e89ac018c12", "scanner": "scanner-primary", "fingerprint": "f0fbe9e99429e350", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-745141b7cb9a940a", "level": "note", "message": {"text": "Very large file: 38-conversational-ai-system/scripts/21-generate-client-reference-sheet.sh (861 lines)"}, "properties": {"repobilityId": "cbe6697de0525738", "scanner": "scanner-primary", "fingerprint": "745141b7cb9a940a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2243c6966d43f1c7", "level": "note", "message": {"text": "Very large file: 23-ai-workforce-blueprint/scripts/persona-selector-v2.py (1403 lines)"}, "properties": {"repobilityId": "058dab942ea40e1b", "scanner": "scanner-primary", "fingerprint": "2243c6966d43f1c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-eab321f08f0be539", "level": "note", "message": {"text": "Very large file: 23-ai-workforce-blueprint/scripts/build-workforce.py (5248 lines)"}, "properties": {"repobilityId": "de5a84d32df76e5b", "scanner": "scanner-primary", "fingerprint": "eab321f08f0be539", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-84df6530fe2bfa6b", "level": "note", "message": {"text": "Very large file: 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py (1803 lines)"}, "properties": {"repobilityId": "786a8b1ab0d151bc", "scanner": "scanner-primary", "fingerprint": "84df6530fe2bfa6b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2e30e3cdc50c7daf", "level": "note", "message": {"text": "Very large file: 37-zhc-closeout/scripts/run-closeout.sh (1036 lines)"}, "properties": {"repobilityId": "a22467b155697863", "scanner": "scanner-primary", "fingerprint": "2e30e3cdc50c7daf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-7b083d657d695142", "level": "note", "message": {"text": "Very large file: 44-convert-and-flow-operator/tools/engine/tests/test_e2e_unit11.py (1873 lines)"}, "properties": {"repobilityId": "1508d7f57aa04f31", "scanner": "scanner-primary", "fingerprint": "7b083d657d695142", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3da338004d1e60e5", "level": "note", "message": {"text": "Very large file: 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/gohighlevel_cli.py (1574 lines)"}, "properties": {"repobilityId": "9fca147778cc7556", "scanner": "scanner-primary", "fingerprint": "3da338004d1e60e5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-56224eada9044085", "level": "note", "message": {"text": "Very large file: shared-utils/fleet_refresh_runner.py (1346 lines)"}, "properties": {"repobilityId": "1faf45240873ab36", "scanner": "scanner-primary", "fingerprint": "56224eada9044085", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "557d9333e13a225e", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-0a893241ad690904", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: 37-zhc-closeout/templates/workforce-org-chart/package.json"}, "properties": {"repobilityId": "c15aedcc9af33fc4", "scanner": "scanner-primary", "fingerprint": "0a893241ad690904", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "37-zhc-closeout/templates/workforce-org-chart/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-285629d1848cfc60", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: 46-kie-callback-relay/worker/package.json"}, "properties": {"repobilityId": "3e4ab470874990d7", "scanner": "scanner-primary", "fingerprint": "285629d1848cfc60", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "46-kie-callback-relay/worker/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "f8fd86816823959f", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "aec2f77f7240dbe8", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "b4ed4760c290a314", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "0fd76f5ff45b4714", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "f49b3817a889dd86", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "fb2430eb26283271", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "b06cacc803348ed5", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-9b676f580dc67f5c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 16-summarize-youtube/SKILL.md"}, "properties": {"repobilityId": "2b39c628d4c58e4f", "scanner": "scanner-primary", "fingerprint": "9b676f580dc67f5c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "16-summarize-youtube/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11a55fc909c2ae64", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 15-blackceo-team-management/SKILL.md"}, "properties": {"repobilityId": "8e2c978a9832b21a", "scanner": "scanner-primary", "fingerprint": "11a55fc909c2ae64", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "15-blackceo-team-management/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-32eccadf8dbfc7a9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: 09-context7/SKILL.md"}, "properties": {"repobilityId": "520aebcca13b6b19", "scanner": "scanner-primary", "fingerprint": "32eccadf8dbfc7a9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "09-context7/SKILL.md"}, "region": {"startLine": 65}}}]}, {"ruleId": "scanner-8c18a7d5ba305a34", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 21-tavily-search/upstream-original/SKILL.md"}, "properties": {"repobilityId": "c58431d4ce17e2b2", "scanner": "scanner-primary", "fingerprint": "8c18a7d5ba305a34", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "21-tavily-search/upstream-original/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1c2d8caf9c42098a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: platform/vps/skills/markitdown-skill/SKILL.md"}, "properties": {"repobilityId": "52134a23e022f190", "scanner": "scanner-primary", "fingerprint": "1c2d8caf9c42098a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "platform/vps/skills/markitdown-skill/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-916c82a6adb96f4f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 24-storyboard-writer/SKILL.md"}, "properties": {"repobilityId": "7c20d7008e967fd6", "scanner": "scanner-primary", "fingerprint": "916c82a6adb96f4f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "24-storyboard-writer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79a1c23c086cd927", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 26-caption-creator/SKILL.md"}, "properties": {"repobilityId": "39530dbad9fe2aff", "scanner": "scanner-primary", "fingerprint": "79a1c23c086cd927", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "26-caption-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1f987e4be7a69248", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 20-youtube-watcher/SKILL.md"}, "properties": {"repobilityId": "361a2d7bf54fc7a0", "scanner": "scanner-primary", "fingerprint": "1f987e4be7a69248", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "20-youtube-watcher/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-48e390a9db3cf3f3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 20-youtube-watcher/upstream-original/SKILL.md"}, "properties": {"repobilityId": "62aa8731ace107a7", "scanner": "scanner-primary", "fingerprint": "48e390a9db3cf3f3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "20-youtube-watcher/upstream-original/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38b09a441525f562", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 39-real-estate-playbook/SKILL.md"}, "properties": {"repobilityId": "fa90e20ef7e2650b", "scanner": "scanner-primary", "fingerprint": "38b09a441525f562", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "39-real-estate-playbook/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ed94509457423b9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 27-video-editor/SKILL.md"}, "properties": {"repobilityId": "9846deafb6da8316", "scanner": "scanner-primary", "fingerprint": "5ed94509457423b9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "27-video-editor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f9bd003650efebef", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 30-fish-audio-api-reference/SKILL.md"}, "properties": {"repobilityId": "9015cde63fdbee17", "scanner": "scanner-primary", "fingerprint": "f9bd003650efebef", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "30-fish-audio-api-reference/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-44ba8cef2ca4b1a8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 17-self-improving-agent/SKILL.md"}, "properties": {"repobilityId": "3c96577b95bef332", "scanner": "scanner-primary", "fingerprint": "44ba8cef2ca4b1a8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "17-self-improving-agent/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-293bb740f793d9b7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: 17-self-improving-agent/upstream-original/SKILL.md"}, "properties": {"repobilityId": "eaf3c0e5ea122b44", "scanner": "scanner-primary", "fingerprint": "293bb740f793d9b7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "17-self-improving-agent/upstream-original/SKILL.md"}, "region": {"startLine": 159}}}]}, {"ruleId": "scanner-cf06360528575a65", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: 28-cinematic-forge/SKILL.md"}, "properties": {"repobilityId": "9d01e5b2bd831c12", "scanner": "scanner-primary", "fingerprint": "cf06360528575a65", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "28-cinematic-forge/SKILL.md"}, "region": {"startLine": 272}}}]}, {"ruleId": "scanner-0a2caa53764bf6b0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 40-zhc-public-records-scraper/SKILL.md"}, "properties": {"repobilityId": "5cd91eda61f0f6f2", "scanner": "scanner-primary", "fingerprint": "0a2caa53764bf6b0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "40-zhc-public-records-scraper/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c702bd870f65401", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: 11-superdesign/SKILL.md"}, "properties": {"repobilityId": "9a7e1903e9640f5b", "scanner": "scanner-primary", "fingerprint": "9c702bd870f65401", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "11-superdesign/SKILL.md"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-246aa2f575abeee3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: 19-humanizer/SKILL.md"}, "properties": {"repobilityId": "0c31eddc23d071a8", "scanner": "scanner-primary", "fingerprint": "246aa2f575abeee3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "19-humanizer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37dbee7cf2598f56", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/unit/deep-health.test.ts:64"}, "properties": {"repobilityId": "d27296f3c89e9895", "scanner": "scanner-primary", "fingerprint": "37dbee7cf2598f56", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-39b9b715ec6ccab5", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/check-floor-count-drift.py:114"}, "properties": {"repobilityId": "ab7b676ef6081bd3", "scanner": "scanner-primary", "fingerprint": "39b9b715ec6ccab5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b967439547b100a2", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/generate-trio-roles.py:841"}, "properties": {"repobilityId": "eb2c133193ae0e25", "scanner": "scanner-primary", "fingerprint": "b967439547b100a2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4c42d0757107de67", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 26-caption-creator/Scripts/animated_captions.py:95"}, "properties": {"repobilityId": "194996659db0d6ad", "scanner": "scanner-primary", "fingerprint": "4c42d0757107de67", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-95899b93f80325fc", "level": "note", "message": {"text": "Legacy-named symbol `r15_old` in 38-conversational-ai-system/_wire_rules_15_16.py:18"}, "properties": {"repobilityId": "df34daf8bc42764e", "scanner": "scanner-primary", "fingerprint": "95899b93f80325fc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-53c04160c837ab1d", "level": "none", "message": {"text": "Commented-code block (6 lines) in 38-conversational-ai-system/_wire_rules_15_16.py:4"}, "properties": {"repobilityId": "7e999e45d8ba3160", "scanner": "scanner-primary", "fingerprint": "53c04160c837ab1d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f27bd9cc50c16902", "level": "none", "message": {"text": "Commented-code block (5 lines) in 38-conversational-ai-system/templates/zhc-pixel/zhc-pixel.template.js:135"}, "properties": {"repobilityId": "718049306d08d70b", "scanner": "scanner-primary", "fingerprint": "f27bd9cc50c16902", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8f094317bc9b209f", "level": "none", "message": {"text": "Commented-code block (7 lines) in 23-ai-workforce-blueprint/scripts/persona-selector-v2.py:270"}, "properties": {"repobilityId": "01178820800da6f9", "scanner": "scanner-primary", "fingerprint": "8f094317bc9b209f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-91259a945c42abfc", "level": "note", "message": {"text": "Legacy-named symbol `would_copy` in 23-ai-workforce-blueprint/scripts/reconcile-legacy-tree.py:163"}, "properties": {"repobilityId": "1359b661dacacb51", "scanner": "scanner-primary", "fingerprint": "91259a945c42abfc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d88aa2d527ec568a", "level": "none", "message": {"text": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/populate-sops-from-manifest.py:309"}, "properties": {"repobilityId": "1fd9878ba0080855", "scanner": "scanner-primary", "fingerprint": "d88aa2d527ec568a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-027db99da93b15c7", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 23-ai-workforce-blueprint/scripts/populate-sops-from-manifest.py:228"}, "properties": {"repobilityId": "90abf66d62e3c527", "scanner": "scanner-primary", "fingerprint": "027db99da93b15c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9251a5778b59e177", "level": "none", "message": {"text": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/department-floor.py:82"}, "properties": {"repobilityId": "5e5421ed8b04d6ad", "scanner": "scanner-primary", "fingerprint": "9251a5778b59e177", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-af278e25909ab324", "level": "none", "message": {"text": "Commented-code block (6 lines) in 23-ai-workforce-blueprint/scripts/_qc_company_info.py:4"}, "properties": {"repobilityId": "a6c7598759da7b89", "scanner": "scanner-primary", "fingerprint": "af278e25909ab324", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a6d4036d9020c4ba", "level": "none", "message": {"text": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/_qc_owner_chat.py:4"}, "properties": {"repobilityId": "020ed5a893f547f3", "scanner": "scanner-primary", "fingerprint": "a6d4036d9020c4ba", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-89e3eb2c316ca707", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 23-ai-workforce-blueprint/scripts/select-persona-for-task.py:92"}, "properties": {"repobilityId": "d00da17b4232315e", "scanner": "scanner-primary", "fingerprint": "89e3eb2c316ca707", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8f5f57e26788ec73", "level": "none", "message": {"text": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/create_role_workspaces.py:108"}, "properties": {"repobilityId": "a2b2ce408e36334b", "scanner": "scanner-primary", "fingerprint": "8f5f57e26788ec73", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cea326cb72939341", "level": "note", "message": {"text": "Legacy-named symbol `canonical_legacy` in 23-ai-workforce-blueprint/scripts/build-workforce.py:926"}, "properties": {"repobilityId": "65fb61f04574ae0c", "scanner": "scanner-primary", "fingerprint": "cea326cb72939341", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f47dda17fff45b26", "level": "none", "message": {"text": "Commented-code block (7 lines) in 23-ai-workforce-blueprint/scripts/build-workforce.py:61"}, "properties": {"repobilityId": "fde5d78153d7c8dd", "scanner": "scanner-primary", "fingerprint": "f47dda17fff45b26", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a2693e782f71d8c6", "level": "none", "message": {"text": "Commented-code block (5 lines) in 23-ai-workforce-blueprint/scripts/verify-persona-adherence.py:164"}, "properties": {"repobilityId": "628eefcb517129ab", "scanner": "scanner-primary", "fingerprint": "a2693e782f71d8c6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-75025f34faebff76", "level": "none", "message": {"text": "Commented-code block (6 lines) in 23-ai-workforce-blueprint/scripts/archive/select-persona-for-task.py:210"}, "properties": {"repobilityId": "93595bb1d003125e", "scanner": "scanner-primary", "fingerprint": "75025f34faebff76", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ca49306b16dd7e22", "level": "note", "message": {"text": "Legacy-named symbol `mac_legacy` in 23-ai-workforce-blueprint/lib/detect_platform.py:36"}, "properties": {"repobilityId": "26d282ff36462dbf", "scanner": "scanner-primary", "fingerprint": "ca49306b16dd7e22", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-01b2e8fcd3779dd6", "level": "none", "message": {"text": "Commented-code block (7 lines) in 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:98"}, "properties": {"repobilityId": "8e4003a8186ac5bf", "scanner": "scanner-primary", "fingerprint": "01b2e8fcd3779dd6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ba111a560341ef0d", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 22-book-to-persona-coaching-leadership-system/pipeline/orchestrator.py:585"}, "properties": {"repobilityId": "ea4e69cc2dd68dd4", "scanner": "scanner-primary", "fingerprint": "ba111a560341ef0d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d40a91406324f9da", "level": "none", "message": {"text": "Commented-code block (5 lines) in 32-command-center-setup/scripts/seed-workspaces.py:433"}, "properties": {"repobilityId": "81b6e9e54fe2fcd3", "scanner": "scanner-primary", "fingerprint": "d40a91406324f9da", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f908f4670db23548", "level": "none", "message": {"text": "Commented-code block (8 lines) in 37-zhc-closeout/templates/workforce-org-chart/render.mjs:13"}, "properties": {"repobilityId": "5d7bebfceb5ae8cf", "scanner": "scanner-primary", "fingerprint": "f908f4670db23548", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-30ed5f8accf630c8", "level": "none", "message": {"text": "Commented-code block (10 lines) in 37-zhc-closeout/templates/workforce-org-chart/cluster-classifier.js:11"}, "properties": {"repobilityId": "e513fedda1130da3", "scanner": "scanner-primary", "fingerprint": "30ed5f8accf630c8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-167c0c42b058dc76", "level": "none", "message": {"text": "Commented-code block (7 lines) in 44-convert-and-flow-operator/tools/engine/builders/_email_sequences_parser.py:38"}, "properties": {"repobilityId": "3ad5db9d26e83110", "scanner": "scanner-primary", "fingerprint": "167c0c42b058dc76", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bbd7f6b0d6676d1b", "level": "none", "message": {"text": "Commented-code block (5 lines) in 44-convert-and-flow-operator/tools/engine/tests/test_e2e_unit11.py:1206"}, "properties": {"repobilityId": "c823f47cc36998b8", "scanner": "scanner-primary", "fingerprint": "bbd7f6b0d6676d1b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5a3bde245b1417b8", "level": "none", "message": {"text": "Commented-code block (9 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/gohighlevel_cli.py:891"}, "properties": {"repobilityId": "9792a82e52dd116b", "scanner": "scanner-primary", "fingerprint": "5a3bde245b1417b8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0fcd7c1f1a51b5f2", "level": "none", "message": {"text": "Commented-code block (9 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/internal/transport.py:118"}, "properties": {"repobilityId": "58cb54eb8eb2dd4f", "scanner": "scanner-primary", "fingerprint": "0fcd7c1f1a51b5f2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1350ef71f3bece68", "level": "none", "message": {"text": "Commented-code block (9 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/workflow_builder.py:230"}, "properties": {"repobilityId": "87a995dd50960026", "scanner": "scanner-primary", "fingerprint": "1350ef71f3bece68", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2cd404623a51461d", "level": "none", "message": {"text": "Commented-code block (5 lines) in 44-convert-and-flow-operator/tools/engine/cli_anything/gohighlevel/utils/write_lock.py:34"}, "properties": {"repobilityId": "395ce59eeaebf9f7", "scanner": "scanner-primary", "fingerprint": "2cd404623a51461d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4764a4f2dcb4d9a5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 46-kie-callback-relay/box-kv-poller.js:314"}, "properties": {"repobilityId": "39de6cf1e5cf6fdc", "scanner": "scanner-primary", "fingerprint": "4764a4f2dcb4d9a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-01f5b4c767acf2d8", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 46-kie-callback-relay/worker/src/index.js:239"}, "properties": {"repobilityId": "e6c484e76fde7b45", "scanner": "scanner-primary", "fingerprint": "01f5b4c767acf2d8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a25671f4b5df5ac2", "level": "none", "message": {"text": "Commented-code block (7 lines) in shared-utils/nudge-incomplete-interviews.py:37"}, "properties": {"repobilityId": "687c3a313823aa79", "scanner": "scanner-primary", "fingerprint": "a25671f4b5df5ac2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8357646194df29f8", "level": "none", "message": {"text": "Commented-code block (5 lines) in shared-utils/api_key_utils.py:32"}, "properties": {"repobilityId": "7fc3fb0285327b38", "scanner": "scanner-primary", "fingerprint": "8357646194df29f8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d25e8e462b8d5a15", "level": "note", "message": {"text": "Legacy-named symbol `mac_legacy` in shared-utils/detect_platform.py:56"}, "properties": {"repobilityId": "e15f987d8a17c1bf", "scanner": "scanner-primary", "fingerprint": "d25e8e462b8d5a15", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c555f670a019145b", "level": "note", "message": {"text": "Legacy-named symbol `sorted_legacy` in shared-utils/migrate_zhc_runner.py:188"}, "properties": {"repobilityId": "ac8a571445a3eb26", "scanner": "scanner-primary", "fingerprint": "c555f670a019145b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-22f4a0bc38e55ef3", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 shared-utils/migrate_zhc_runner.py:398"}, "properties": {"repobilityId": "5f648c8a7781cd40", "scanner": "scanner-primary", "fingerprint": "22f4a0bc38e55ef3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b3ec733fcaf1d7d6", "level": "none", "message": {"text": "Commented-code block (6 lines) in shared-utils/select_model.py:268"}, "properties": {"repobilityId": "35bad43668b4de7c", "scanner": "scanner-primary", "fingerprint": "b3ec733fcaf1d7d6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5564229c21751c80", "level": "none", "message": {"text": "Commented-code block (5 lines) in shared-utils/fleet_refresh_runner.py:826"}, "properties": {"repobilityId": "56df83970d4af80c", "scanner": "scanner-primary", "fingerprint": "5564229c21751c80", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8ec66d8cfa2a0636", "level": "note", "message": {"text": "Legacy-named symbol `mac_legacy` in shared-utils/resolve_injected_core_files.py:179"}, "properties": {"repobilityId": "372150314a0a1f3e", "scanner": "scanner-primary", "fingerprint": "8ec66d8cfa2a0636", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-959ed7ebb989d9da", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/lib/health/deep-checks.ts:21"}, "properties": {"repobilityId": "c9ff6e212ac39ea0", "scanner": "scanner-primary", "fingerprint": "959ed7ebb989d9da", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-768306a346cf490d", "level": "note", "message": {"text": "50 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "d773c011a3ba8e67", "scanner": "scanner-primary", "fingerprint": "768306a346cf490d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "5edca03cb5fee176", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4f06b54182574960", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ee4f1e002c7db745", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "dbb4616dc69634e4", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "616fb27cf258cad5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "40aa79364b3cea28", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1945b3af49000064", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "0dac8b85ff337f22", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c80c3090d93d2716", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "1c1854a8bd174d3e", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "5870fd593c30bbdb", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}