{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-bead75b0f9233e05", "name": "No API endpoints detected", "shortDescription": {"text": "No API endpoints detected"}, "fullDescription": {"text": "The scanner did not find FastAPI/Flask/Express/NestJS/GraphQL/gRPC routes. If this repo exposes APIs, the framework may be unsupported."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d05c81e94306f95a", "name": "Stray `console.log` in TS/JS \u2014 .claude/helpers/github-safe.js:39", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/helpers/github-safe.js:39"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d8b168f5f176318", "name": "Stray `console.log` in TS/JS \u2014 .claude/helpers/session.js:46", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/helpers/session.js:46"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e5bb54f33715bc8", "name": "Stray `console.log` in TS/JS \u2014 .claude/helpers/memory.js:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/helpers/memory.js:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-befd92e8ffcf88e1", "name": "Stray `console.log` in TS/JS \u2014 .claude/helpers/router.js:98", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/helpers/router.js:98"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18d569122b530993", "name": "Stray `console.log` in TS/JS \u2014 .claude/helpers/statusline.js:347", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/helpers/statusline.js:347"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87bc0e064cd25f99", "name": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/components/SiteHeader.tsx:29", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/components/SiteHeader.tsx:29"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cf51c082d093197f", "name": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/app/admin/stitch/page.tsx:227", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/app/admin/stitch/page.tsx:227"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-699a8178e6c248a2", "name": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/app/[gameSlug]/map/[mapSlug]/MapScreen.tsx:217", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/app/[gameSlug]/map/[mapSlug]/MapScreen.tsx:217"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-54f84eb6a5c71352", "name": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/lib/panels/CategoryPanel.tsx:94", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/lib/panels/CategoryPanel.tsx:94"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-224446c3780a36fa", "name": "Privileged port 1000 in use", "shortDescription": {"text": "Privileged port 1000 in use"}, "fullDescription": {"text": "Port 1000 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4dc6ba48bc2459c9", "name": "Privileged port 127 in use", "shortDescription": {"text": "Privileged port 127 in use"}, "fullDescription": {"text": "Port 127 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7316de582c096f7", "name": "Docker base image is tag-pinned but not digest-pinned: eclipse-temurin:17-jdk-noble", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: eclipse-temurin:17-jdk-noble"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-673adcdac1f08366", "name": "Docker base image is tag-pinned but not digest-pinned: eclipse-temurin:17-jre-noble", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: eclipse-temurin:17-jre-noble"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e5531f0b09b8aebc", "name": "Docker base image is tag-pinned but not digest-pinned: docker.io/library/ruby:$RUBY_VERSION-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: docker.io/library/ruby:$RUBY_VERSION-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d0c3834201acabb", "name": "Dockerfile runs as root: src/gateway/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/gateway/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-da23a7e624c438c4", "name": "Docker base image is tag-pinned but not digest-pinned: golang:1.24.7-bookworm", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.24.7-bookworm"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f33d19a67507aa1a", "name": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5f15c6ce86103102", "name": "Dockerfile runs as root: src/tiler/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/tiler/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f258c2c171f7c046", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim-bookworm", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim-bookworm"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-70fb8e06c7218695", "name": "Dockerfile runs as root: src/tile/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/tile/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c30176e5cf4b6dd5", "name": "Docker base image is tag-pinned but not digest-pinned: rust:1.94-slim-bookworm", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: rust:1.94-slim-bookworm"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e56c58eb03cb581e", "name": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/cc-debian12:nonroot", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/cc-debian12:nonroot"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e43613ef0459e027", "name": "Insecure pattern 'node_child_process' in .claude/helpers/github-safe.js:22", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/github-safe.js:22"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b6908704327c332", "name": "Insecure pattern 'node_child_process' in .claude/helpers/learning-service.mjs:24", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/learning-service.mjs:24"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-68ce8f3bdd5109ba", "name": "Insecure pattern 'node_child_process' in .claude/helpers/metrics-db.mjs:12", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/metrics-db.mjs:12"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c560f832f566f260", "name": "Insecure pattern 'node_child_process' in .claude/helpers/statusline.cjs:25", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/statusline.cjs:25"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed6a8367320a36f5", "name": "Insecure pattern 'node_child_process' in .claude/helpers/ruflo-hook.cjs:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/ruflo-hook.cjs:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c04da070b378c91f", "name": "Insecure pattern 'node_child_process' in .claude/helpers/statusline.js:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/statusline.js:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27c1e394185436e2", "name": "Insecure pattern 'node_child_process' in .claude/skills/github-code-review/SKILL.md:380", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/skills/github-code-review/SKILL.md:380"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-abebf87eef3adaa3", "name": "Insecure pattern 'node_child_process' in .claude/skills/v3-security-overhaul/SKILL.md:71", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/skills/v3-security-overhaul/SKILL.md:71"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-164fa71735eea940", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "ruby/setup-ruby@v1 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50929167cf82cff0", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-go@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-21d66f350f1e77ee", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-java@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cfa51855f29d88c0", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53d837989b2b3f3e", "name": "GitHub Action tracks a moving branch", "shortDescription": {"text": "GitHub Action tracks a moving branch"}, "fullDescription": {"text": "dtolnay/rust-toolchain@master can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f35d84a51253804c", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "Swatinem/rust-cache@v2 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "9 test file(s) for 93 source file(s) (ratio 0.10). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3ed68815bca2f8c", "name": "Node manifest has dependencies but no lockfile: package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 161 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 24 placeholder/mock markers across 8 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, lockfile. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cc55229a7a3c078d", "name": "Agent authority lacks a verifier contract: .mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24f2ea4bd14badc1", "name": "Agent instruction contains unpinned remote install: CLAUDE.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: CLAUDE.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-122f91b7f2906dc4", "name": "Agent authority lacks a verifier contract: .claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c5f98b152cddb6d", "name": "Agent authority lacks a verifier contract: .claude/launch.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/launch.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e2d5ba504ad8cc73", "name": "Agent instruction contains unpinned remote install: .claude/commands/claude-flow-help.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/commands/claude-flow-help.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-133522674206264c", "name": "Agent authority lacks a verifier contract: .claude/commands/automation/smart-spawn.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/automation/smart-spawn.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-943b1b5c941fc9b4", "name": "Agent authority lacks a verifier contract: .claude/commands/automation/workflow-select.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/automation/workflow-select.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e5cf38d9fb6f954", "name": "Agent authority lacks a verifier contract: .claude/commands/automation/smart-agents.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/automation/smart-agents.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fd95ed8feae32ca7", "name": "Agent authority lacks a verifier contract: .claude/commands/monitoring/status.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/monitoring/status.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-197f2e1f333a466e", "name": "Agent authority lacks a verifier contract: .claude/commands/monitoring/agent-metrics.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/monitoring/agent-metrics.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e836aeb64cdfe6d5", "name": "Agent authority lacks a verifier contract: .claude/commands/monitoring/swarm-monitor.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/monitoring/swarm-monitor.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e99365509cea0e5", "name": "Agent authority lacks a verifier contract: .claude/commands/monitoring/real-time-view.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/monitoring/real-time-view.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17bf2bdb3e215bda", "name": "Agent authority lacks a verifier contract: .claude/commands/monitoring/agents.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/monitoring/agents.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0bba08f6b4610fac", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-init.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-init.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c63a18eca091e1c", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-strategies.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-strategies.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e17e651f4eea497", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-status.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-status.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-45c441daf735538a", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/analysis.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/analysis.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e04ff83e12885fd0", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/optimization.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/optimization.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-83cb02541f86044a", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-modes.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-modes.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7750ed9e76a74f8a", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-background.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-background.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b8c570511cc12c7", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-monitor.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-monitor.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5e51d3c453ee19a", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-analysis.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-analysis.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-56a159a6818dc14d", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-spawn.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-spawn.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-381f5d2a5e23a0ab", "name": "Agent authority lacks a verifier contract: .claude/commands/swarm/research.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/research.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d71cd6e47c02529", "name": "Agent instruction/config may expose a secret: .claude/commands/github/issue-tracker.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/github/issue-tracker.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a48f0a7a322b4fc3", "name": "Agent authority lacks a verifier contract: .claude/commands/github/repo-analyze.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/repo-analyze.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-46e699e02194410f", "name": "Agent instruction/config may expose a secret: .claude/commands/github/sync-coordinator.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/github/sync-coordinator.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-74dbb6bacaa064ee", "name": "Agent authority lacks a verifier contract: .claude/commands/github/pr-enhance.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/pr-enhance.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be6f6fc1affd2640", "name": "Agent authority lacks a verifier contract: .claude/commands/github/issue-triage.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/issue-triage.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7e4ace6dab989c8", "name": "Agent authority lacks a verifier contract: .claude/commands/github/code-review.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/code-review.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d5c01a7a814dd1f", "name": "Agent instruction/config may expose a secret: .claude/commands/github/release-manager.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/github/release-manager.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-96e852ec787b8741", "name": "Agent instruction/config may expose a secret: .claude/commands/github/repo-architect.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/github/repo-architect.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a38504332b02e084", "name": "Agent instruction/config may expose a secret: .claude/commands/github/pr-manager.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/github/pr-manager.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fadb96a708125716", "name": "Agent authority lacks a verifier contract: .claude/commands/github/swarm-issue.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/swarm-issue.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-54f30e6a9ab71fa5", "name": "Agent authority lacks a verifier contract: .claude/commands/github/project-board-sync.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/project-board-sync.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ceeb8933799b7150", "name": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-memory.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-memory.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef7b160935342a9f", "name": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-stop.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-stop.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-89ae2e1da3a028c2", "name": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-status.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-status.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03281728c0a1105d", "name": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-consensus.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-consensus.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8eec3e77ae52d223", "name": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-resume.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-resume.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c59ddcda8eb437f2", "name": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-wizard.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-wizard.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-622e26e8d31af92b", "name": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-metrics.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-metrics.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7241b2e3a099b49", "name": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-init.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-init.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e3cf292caba4bd5", "name": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-sessions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-sessions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-abb2941302a63be9", "name": "Agent authority lacks a verifier contract: .claude/commands/coordination/swarm-init.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/swarm-init.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-274acbed691bec1e", "name": "Agent authority lacks a verifier contract: .claude/commands/coordination/init.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/init.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c939fcbd325c9aeb", "name": "Agent authority lacks a verifier contract: .claude/commands/coordination/spawn.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/spawn.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6127460aaa267fe2", "name": "Agent authority lacks a verifier contract: .claude/commands/coordination/orchestrate.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/orchestrate.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d6a755937447f3ad", "name": "Agent authority lacks a verifier contract: .claude/commands/coordination/agent-spawn.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/agent-spawn.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f2ed11d5e3cfc86", "name": "Agent authority lacks a verifier contract: .claude/commands/coordination/task-orchestrate.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/task-orchestrate.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d778eb83136e55c5", "name": "Agent authority lacks a verifier contract: .claude/commands/analysis/token-efficiency.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/analysis/token-efficiency.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f96df1e6af32a81", "name": "Agent authority lacks a verifier contract: .claude/commands/analysis/performance-report.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/analysis/performance-report.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62f9d659cb6b42aa", "name": "Agent authority lacks a verifier contract: .claude/commands/analysis/COMMAND_COMPLIANCE_REPORT.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/analysis/COMMAND_COMPLIANCE_REPORT.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd5713fd6351dd24", "name": "Agent authority lacks a verifier contract: .claude/commands/analysis/token-usage.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/analysis/token-usage.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18fb49cea8f73784", "name": "Agent authority lacks a verifier contract: .claude/commands/analysis/bottleneck-detect.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/analysis/bottleneck-detect.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b83f5d5b4aa2875", "name": "Agent authority lacks a verifier contract: .claude/commands/agents/metrics.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/metrics.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d714aebb80aaf855", "name": "Agent authority lacks a verifier contract: .claude/commands/agents/logs.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/logs.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1a5648ed17adeac", "name": "Agent authority lacks a verifier contract: .claude/commands/agents/list.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/list.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f11335b2b52688b5", "name": "Agent authority lacks a verifier contract: .claude/commands/agents/status.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/status.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72ef9739e7ffedda", "name": "Agent authority lacks a verifier contract: .claude/commands/agents/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb2f28716397a621", "name": "Agent authority lacks a verifier contract: .claude/commands/agents/health.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/health.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2586bc87f636e84", "name": "Agent authority lacks a verifier contract: .claude/commands/agents/agent-coordination.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/agent-coordination.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df789d9c555f52c7", "name": "Agent authority lacks a verifier contract: .claude/commands/agents/pool.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/pool.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90c9c9993a0371e4", "name": "Agent authority lacks a verifier contract: .claude/commands/agents/stop.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/stop.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-98233df7c90762e9", "name": "Agent authority lacks a verifier contract: .claude/commands/memory/memory-persist.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/memory/memory-persist.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bc60962a8f356141", "name": "Agent authority lacks a verifier contract: .claude/commands/memory/memory-search.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/memory/memory-search.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47799ed56543cb9c", "name": "Agent authority lacks a verifier contract: .claude/commands/memory/neural.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/memory/neural.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-37e2925b2d90b7f0", "name": "Agent authority lacks a verifier contract: .claude/commands/memory/memory-usage.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/memory/memory-usage.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-678f0006e3f742bd", "name": "Agent authority lacks a verifier contract: .claude/commands/optimization/auto-topology.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/optimization/auto-topology.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b91db97d1267c82", "name": "Agent authority lacks a verifier contract: .claude/commands/optimization/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/optimization/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-984755b4953bba20", "name": "Agent authority lacks a verifier contract: .claude/commands/optimization/topology-optimize.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/optimization/topology-optimize.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2b5a994140b678e1", "name": "Agent authority lacks a verifier contract: .claude/commands/optimization/parallel-execute.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/optimization/parallel-execute.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ecd9dbc8e691615", "name": "Agent authority lacks a verifier contract: .claude/commands/optimization/cache-manage.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/optimization/cache-manage.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-58e1f00dd6a50d82", "name": "Agent instruction/config may expose a secret: .claude/commands/hooks/post-task.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/hooks/post-task.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-786493ca2daa6c83", "name": "Agent authority lacks a verifier contract: .claude/commands/hooks/post-task.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hooks/post-task.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d17cebdb2d322e78", "name": "Agent authority lacks a verifier contract: .claude/commands/hooks/pre-task.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hooks/pre-task.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8b5937b7ffe10288", "name": "Agent authority lacks a verifier contract: .claude/commands/hooks/session-end.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hooks/session-end.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf983c6eea41bf76", "name": "Agent authority lacks a verifier contract: .claude/commands/hooks/post-edit.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/hooks/post-edit.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-153e6ff3ec715685", "name": "Agent authority lacks a verifier contract: .claude/commands/workflows/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/workflows/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f418bab86e089e1", "name": "Agent authority lacks a verifier contract: .claude/commands/workflows/research.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/workflows/research.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b55f692e2f5a4b2", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/innovator.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/innovator.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-145b25e83dfae7c1", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/tutorial.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/tutorial.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-aea9ce8500651411", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/tutorial.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/tutorial.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-56e25ec61fbe48c6", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/code.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/code.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9a1e2a0d2f2fee34", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/sparc.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/sparc.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-03086e0a7e44b2e6", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/batch-executor.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/batch-executor.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ffea67f8ea442865", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/post-deployment-monitoring-mode.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/post-deployment-monitoring-mode.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-62660382aa28e045", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/post-deployment-monitoring-mode.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/post-deployment-monitoring-mode.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f238695ce7739da", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/documenter.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/documenter.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc86c8b7b9fe2245", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/designer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/designer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-880c8be4effa2bda", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/architect.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/architect.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b2f2449b22375e8", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/refinement-optimization-mode.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/refinement-optimization-mode.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f14bb75e6f4acd31", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/refinement-optimization-mode.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/refinement-optimization-mode.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-811fd948456e9b41", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/docs-writer.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/docs-writer.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c55825c879d8d930", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/docs-writer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/docs-writer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-34a932f2da704d40", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/integration.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/integration.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-06a970c127cfbcb5", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/supabase-admin.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/supabase-admin.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-685aa2132bda1aff", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/security-review.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/security-review.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-afb3800368c145df", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/security-review.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/security-review.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-013ed90594cd468d", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/swarm-coordinator.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/swarm-coordinator.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8b3058f1936119c", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/spec-pseudocode.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/spec-pseudocode.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4431dc38d13dcfe5", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/spec-pseudocode.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/spec-pseudocode.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dacd3f2e07bb2e45", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/analyzer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/analyzer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3e9d1fae51a22527", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/devops.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/devops.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ebd1ad4ddfd06917", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/workflow-manager.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/workflow-manager.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a2dfbcd5e1a10cb2", "name": "Agent instruction/config may expose a secret: .claude/commands/sparc/debug.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/debug.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6d2db4e8dba14dfc", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/debug.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/debug.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a35e881035e8730c", "name": "Agent authority lacks a verifier contract: .claude/commands/sparc/memory-manager.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/memory-manager.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dd5eb8d74e9c847c", "name": "Agent instruction/config may expose a secret: .claude/agents/swarm/hierarchical-coordinator.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agents/swarm/hierarchical-coordinator.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b2e07a98e586d672", "name": "Agent instruction/config may expose a secret: .claude/agents/swarm/adaptive-coordinator.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agents/swarm/adaptive-coordinator.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5fae87c2ae599549", "name": "Agent instruction/config may expose a secret: .claude/agents/swarm/mesh-coordinator.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agents/swarm/mesh-coordinator.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-97feea90675db00b", "name": "Agent authority lacks a verifier contract: .claude/agents/consensus/performance-benchmarker.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/consensus/performance-benchmarker.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe259f4c78ac36b0", "name": "Agent authority lacks a verifier contract: .claude/agents/consensus/gossip-coordinator.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/consensus/gossip-coordinator.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eeb9543f41c2a7d6", "name": "Agent instruction/config may expose a secret: .claude/agents/consensus/security-manager.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agents/consensus/security-manager.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-069ae2cd2994cd22", "name": "Agent instruction/config may expose a secret: .claude/agents/sparc/architecture.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agents/sparc/architecture.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-176167ecb8446c71", "name": "Agent instruction/config may expose a secret: .claude/agents/sparc/refinement.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agents/sparc/refinement.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f1246529183053ac", "name": "Agent instruction/config may expose a secret: .claude/skills/github-release-management/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/github-release-management/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6983649e7d7e43ac", "name": "Agent instruction/config may expose a secret: .claude/skills/v3-mcp-optimization/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/v3-mcp-optimization/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a62c458cb61c4e61", "name": "Agent instruction/config may expose a secret: .claude/skills/agentdb-memory-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/agentdb-memory-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-da91f6524b65a9da", "name": "Agent authority lacks a verifier contract: .claude/skills/agentdb-memory-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/agentdb-memory-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e01c464e06447d96", "name": "Agent instruction/config may expose a secret: .claude/skills/v3-security-overhaul/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/v3-security-overhaul/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-21ec62032ac1355a", "name": "Agent instruction contains unpinned remote install: .claude/skills/swarm-advanced/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/swarm-advanced/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8e65337e518ac9af", "name": "Agent authority lacks a verifier contract: .claude/skills/v3-cli-modernization/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/v3-cli-modernization/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de924889b300be84", "name": "Agent instruction/config may expose a secret: .claude/skills/sparc-methodology/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/sparc-methodology/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c6429d215bd94462", "name": "Agent authority lacks a verifier contract: .claude/skills/v3-performance-optimization/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/v3-performance-optimization/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0cd7ca04e6382d99", "name": "Agent authority lacks a verifier contract: .claude/skills/v3-memory-unification/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/v3-memory-unification/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3603ed6d8e3dab44", "name": "Agent authority lacks a verifier contract: .claude/skills/v3-integration-deep/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/v3-integration-deep/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf01fd75262fa110", "name": "Agent instruction/config may expose a secret: .claude/skills/github-multi-repo/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/github-multi-repo/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ff1b04715d1cd44b", "name": "Agent instruction/config may expose a secret: .claude/skills/reasoningbank-intelligence/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/reasoningbank-intelligence/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a58c814f49ae7cf5", "name": "Agent authority lacks a verifier contract: .claude/skills/reasoningbank-intelligence/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/reasoningbank-intelligence/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03f10e7d59a3abfb", "name": "Agent instruction/config may expose a secret: .claude/skills/agentdb-vector-search/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/agentdb-vector-search/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3e97402e422e2021", "name": "Agent instruction/config may expose a secret: .claude/skills/hooks-automation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/hooks-automation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6f46d2ab1ba22022", "name": "Agent instruction contains unpinned remote install: .claude/skills/hooks-automation/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/hooks-automation/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ab321361b36d8da9", "name": "Agent instruction/config may expose a secret: .claude/skills/github-workflow-automation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/github-workflow-automation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0a761f0bb4b48b29", "name": "Agent instruction contains unpinned remote install: .claude/skills/github-workflow-automation/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/github-workflow-automation/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3aac565d04eedcd7", "name": "Agent instruction/config may expose a secret: .claude/skills/agentdb-advanced/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/agentdb-advanced/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9ddfe6ab99078478", "name": "Agent instruction contains unpinned remote install: .claude/skills/skill-builder/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/skill-builder/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9aeb2209d2141de7", "name": "Agent instruction contains unpinned remote install: .claude/skills/pair-programming/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/pair-programming/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-34f0e51508e90cd0", "name": "Commented-code block (8 lines) in .claude/helpers/session.js:13", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/helpers/session.js:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-470bec1fcc17d86e", "name": "Commented-code block (5 lines) in .claude/helpers/intelligence.cjs:111", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/helpers/intelligence.cjs:111"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-547c00bb458a5038", "name": "Commented-code block (7 lines) in .claude/helpers/statusline.cjs:31", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/helpers/statusline.cjs:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7966ea237033c9a3", "name": "Commented-code block (5 lines) in .claude/helpers/hook-handler.cjs:115", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/helpers/hook-handler.cjs:115"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-df194e902deebb2b", "name": "Commented-code block (5 lines) in .claude/helpers/statusline.js:83", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/helpers/statusline.js:83"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8a6c5e9c57ca0ad6", "name": "Commented-code block (6 lines) in webapp/scripts/generate-category-icons.mjs:3", "shortDescription": {"text": "Commented-code block (6 lines) in webapp/scripts/generate-category-icons.mjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f1ce0f01f5b03938", "name": "Commented-code block (5 lines) in webapp/src/app/sitemap.ts:5", "shortDescription": {"text": "Commented-code block (5 lines) in webapp/src/app/sitemap.ts:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7a6df6aa24fd09f5", "name": "Commented-code block (7 lines) in webapp/src/app/api/admin/presign/route.ts:6", "shortDescription": {"text": "Commented-code block (7 lines) in webapp/src/app/api/admin/presign/route.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-38c62c991cde69ee", "name": "`fetch()` without try/.catch or AbortSignal \u2014 webapp/src/app/api/admin/presign/route.ts:44", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 webapp/src/app/api/admin/presign/route.ts:44"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f8303a5e8f291ce6", "name": "Commented-code block (5 lines) in webapp/src/lib/iconPresets.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in webapp/src/lib/iconPresets.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c2e8a385524b3baf", "name": "`fetch()` without try/.catch or AbortSignal \u2014 webapp/src/lib/api/client.ts:65", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 webapp/src/lib/api/client.ts:65"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3876849cca80c76e", "name": "Commented-code block (6 lines) in webapp/src/lib/map/crs.test.ts:10", "shortDescription": {"text": "Commented-code block (6 lines) in webapp/src/lib/map/crs.test.ts:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a9836457f7ec50c4", "name": "23 env vars used in code but missing from .env.example", "shortDescription": {"text": "23 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `GITHUB_SAFE_DRY_RUN`, `KAFKA_BROKERS`, `KAFKA_GROUP`, `KAFKA_SASL_MECHANISM`, `KAFKA_SASL_PASSWORD`, `KAFKA_SASL_USERNAME`, `KAFKA_SECURITY_PROTOCOL`, `NEXT_PUBLIC_ASSET_BASE_URL` + 15 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/tiler/storage.py:put_tile, src/tiler/storage.py:put_tile, src/tiler/storage.py:put_tile\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/18130"}, "properties": {"repository": "richiexuetang/ritcher-map", "repoUrl": "https://github.com/richiexuetang/ritcher-map", "branch": "main"}, "results": [{"ruleId": "scanner-bead75b0f9233e05", "level": "none", "message": {"text": "No API endpoints detected"}, "properties": {"repobilityId": "0f8bb852027c38f8", "scanner": "scanner-primary", "fingerprint": "bead75b0f9233e05", "layer": "api", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-d05c81e94306f95a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/helpers/github-safe.js:39"}, "properties": {"repobilityId": "bb9d953a659d1a24", "scanner": "scanner-primary", "fingerprint": "d05c81e94306f95a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7d8b168f5f176318", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/helpers/session.js:46"}, "properties": {"repobilityId": "37f048fff05cacb1", "scanner": "scanner-primary", "fingerprint": "7d8b168f5f176318", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9e5bb54f33715bc8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/helpers/memory.js:33"}, "properties": {"repobilityId": "945dff8a7ec2aa9c", "scanner": "scanner-primary", "fingerprint": "9e5bb54f33715bc8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-befd92e8ffcf88e1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/helpers/router.js:98"}, "properties": {"repobilityId": "b7d1687dbc282c5d", "scanner": "scanner-primary", "fingerprint": "befd92e8ffcf88e1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-18d569122b530993", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/helpers/statusline.js:347"}, "properties": {"repobilityId": "238e04e50f6810a6", "scanner": "scanner-primary", "fingerprint": "18d569122b530993", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-87bc0e064cd25f99", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/components/SiteHeader.tsx:29"}, "properties": {"repobilityId": "fae5d963c93fc34a", "scanner": "scanner-primary", "fingerprint": "87bc0e064cd25f99", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-cf51c082d093197f", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/app/admin/stitch/page.tsx:227"}, "properties": {"repobilityId": "7bc45210e332b3c2", "scanner": "scanner-primary", "fingerprint": "cf51c082d093197f", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-699a8178e6c248a2", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/app/[gameSlug]/map/[mapSlug]/MapScreen.tsx:217"}, "properties": {"repobilityId": "d2dfc4fefff882d8", "scanner": "scanner-primary", "fingerprint": "699a8178e6c248a2", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-54f84eb6a5c71352", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 webapp/src/lib/panels/CategoryPanel.tsx:94"}, "properties": {"repobilityId": "814775bc14667573", "scanner": "scanner-primary", "fingerprint": "54f84eb6a5c71352", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-224446c3780a36fa", "level": "warning", "message": {"text": "Privileged port 1000 in use"}, "properties": {"repobilityId": "5ac9fc9372cfe169", "scanner": "scanner-primary", "fingerprint": "224446c3780a36fa", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/accounts/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4dc6ba48bc2459c9", "level": "warning", "message": {"text": "Privileged port 127 in use"}, "properties": {"repobilityId": "afafb77f13b4bf59", "scanner": "scanner-primary", "fingerprint": "4dc6ba48bc2459c9", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/accounts/config/deploy.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f7316de582c096f7", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: eclipse-temurin:17-jdk-noble"}, "properties": {"repobilityId": "b2fbb6e08f57c21a", "scanner": "scanner-primary", "fingerprint": "f7316de582c096f7", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/catalog/Dockerfile"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-673adcdac1f08366", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: eclipse-temurin:17-jre-noble"}, "properties": {"repobilityId": "cc8c2e6dd3dd49e7", "scanner": "scanner-primary", "fingerprint": "673adcdac1f08366", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/catalog/Dockerfile"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-e5531f0b09b8aebc", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: docker.io/library/ruby:$RUBY_VERSION-slim"}, "properties": {"repobilityId": "799d5b429c1d5ca4", "scanner": "scanner-primary", "fingerprint": "e5531f0b09b8aebc", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/accounts/Dockerfile"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-8d0c3834201acabb", "level": "warning", "message": {"text": "Dockerfile runs as root: src/gateway/Dockerfile"}, "properties": {"repobilityId": "ee35df73194a267f", "scanner": "scanner-primary", "fingerprint": "8d0c3834201acabb", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-da23a7e624c438c4", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.24.7-bookworm"}, "properties": {"repobilityId": "187746a3b019cd15", "scanner": "scanner-primary", "fingerprint": "da23a7e624c438c4", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/gateway/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-f33d19a67507aa1a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot"}, "properties": {"repobilityId": "75cde180e87d2812", "scanner": "scanner-primary", "fingerprint": "f33d19a67507aa1a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/gateway/Dockerfile"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-5f15c6ce86103102", "level": "warning", "message": {"text": "Dockerfile runs as root: src/tiler/Dockerfile"}, "properties": {"repobilityId": "1baca33c3662bcc6", "scanner": "scanner-primary", "fingerprint": "5f15c6ce86103102", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-f258c2c171f7c046", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim-bookworm"}, "properties": {"repobilityId": "8f35cb4c5add68ef", "scanner": "scanner-primary", "fingerprint": "f258c2c171f7c046", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/tiler/Dockerfile"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-70fb8e06c7218695", "level": "warning", "message": {"text": "Dockerfile runs as root: src/tile/Dockerfile"}, "properties": {"repobilityId": "51ceab8818c6bf80", "scanner": "scanner-primary", "fingerprint": "70fb8e06c7218695", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c30176e5cf4b6dd5", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: rust:1.94-slim-bookworm"}, "properties": {"repobilityId": "5b046686600d97e8", "scanner": "scanner-primary", "fingerprint": "c30176e5cf4b6dd5", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/tile/Dockerfile"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-e56c58eb03cb581e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/cc-debian12:nonroot"}, "properties": {"repobilityId": "0dfa2b5412cddaff", "scanner": "scanner-primary", "fingerprint": "e56c58eb03cb581e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/tile/Dockerfile"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-e43613ef0459e027", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/github-safe.js:22"}, "properties": {"repobilityId": "2d56a3c5a4e7ca64", "scanner": "scanner-primary", "fingerprint": "e43613ef0459e027", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/helpers/github-safe.js"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-5b6908704327c332", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/learning-service.mjs:24"}, "properties": {"repobilityId": "7e029b41c22db433", "scanner": "scanner-primary", "fingerprint": "5b6908704327c332", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/helpers/learning-service.mjs"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-68ce8f3bdd5109ba", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/metrics-db.mjs:12"}, "properties": {"repobilityId": "79f8447c21ecc431", "scanner": "scanner-primary", "fingerprint": "68ce8f3bdd5109ba", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/helpers/metrics-db.mjs"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-c560f832f566f260", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/statusline.cjs:25"}, "properties": {"repobilityId": "ab071a8f21604a91", "scanner": "scanner-primary", "fingerprint": "c560f832f566f260", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/helpers/statusline.cjs"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-ed6a8367320a36f5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/ruflo-hook.cjs:15"}, "properties": {"repobilityId": "167be777703a17ec", "scanner": "scanner-primary", "fingerprint": "ed6a8367320a36f5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/helpers/ruflo-hook.cjs"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-c04da070b378c91f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/helpers/statusline.js:14"}, "properties": {"repobilityId": "ddfa45eedcc306d5", "scanner": "scanner-primary", "fingerprint": "c04da070b378c91f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/helpers/statusline.js"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-27c1e394185436e2", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/skills/github-code-review/SKILL.md:380"}, "properties": {"repobilityId": "6e7c57271e08d678", "scanner": "scanner-primary", "fingerprint": "27c1e394185436e2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/github-code-review/SKILL.md"}, "region": {"startLine": 380}}}]}, {"ruleId": "scanner-abebf87eef3adaa3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/skills/v3-security-overhaul/SKILL.md:71"}, "properties": {"repobilityId": "c477caf597b1e671", "scanner": "scanner-primary", "fingerprint": "abebf87eef3adaa3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/v3-security-overhaul/SKILL.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-164fa71735eea940", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "11a3e50282753ef7", "scanner": "scanner-primary", "fingerprint": "164fa71735eea940", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/accounts.yml"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-50929167cf82cff0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2767bd7b3119f27e", "scanner": "scanner-primary", "fingerprint": "50929167cf82cff0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/gateway.yml"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-21d66f350f1e77ee", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7adb414023e2786f", "scanner": "scanner-primary", "fingerprint": "21d66f350f1e77ee", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/catalog.yml"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-cfa51855f29d88c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d0acc043dcdfe702", "scanner": "scanner-primary", "fingerprint": "cfa51855f29d88c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tiler.yml"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-53d837989b2b3f3e", "level": "error", "message": {"text": "GitHub Action tracks a moving branch"}, "properties": {"repobilityId": "eb3a7e5530bc425f", "scanner": "scanner-primary", "fingerprint": "53d837989b2b3f3e", "layer": "cicd", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tile.yml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-f35d84a51253804c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cf2c178841e9fd5a", "scanner": "scanner-primary", "fingerprint": "f35d84a51253804c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tile.yml"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "eb4d01cf2de5068f", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b3ed68815bca2f8c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: package.json"}, "properties": {"repobilityId": "7edae0550c126386", "scanner": "scanner-primary", "fingerprint": "b3ed68815bca2f8c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "3d62bbcbd6b7542f", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "ebf27a8e05a27f3e", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "6bb5a5319172573e", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "7f60a709cdd87fff", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "10a62a4e78ff6963", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "1f740468bf1e306e", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "c110fe725783f565", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-cc55229a7a3c078d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .mcp.json"}, "properties": {"repobilityId": "51942fb3d5b8b5b4", "scanner": "scanner-primary", "fingerprint": "cc55229a7a3c078d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-24f2ea4bd14badc1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: CLAUDE.md"}, "properties": {"repobilityId": "0f6049734704e537", "scanner": "scanner-primary", "fingerprint": "24f2ea4bd14badc1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 171}}}]}, {"ruleId": "scanner-122f91b7f2906dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "properties": {"repobilityId": "a2967269048b6a9d", "scanner": "scanner-primary", "fingerprint": "122f91b7f2906dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c5f98b152cddb6d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/launch.json"}, "properties": {"repobilityId": "0de48c0f4ab303d8", "scanner": "scanner-primary", "fingerprint": "2c5f98b152cddb6d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/launch.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e2d5ba504ad8cc73", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/commands/claude-flow-help.md"}, "properties": {"repobilityId": "fd7fbbcda7215758", "scanner": "scanner-primary", "fingerprint": "e2d5ba504ad8cc73", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/claude-flow-help.md"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-133522674206264c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/automation/smart-spawn.md"}, "properties": {"repobilityId": "536df4c8df0c04b7", "scanner": "scanner-primary", "fingerprint": "133522674206264c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/automation/smart-spawn.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-943b1b5c941fc9b4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/automation/workflow-select.md"}, "properties": {"repobilityId": "8d3698e3d562e6d8", "scanner": "scanner-primary", "fingerprint": "943b1b5c941fc9b4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/automation/workflow-select.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e5cf38d9fb6f954", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/automation/smart-agents.md"}, "properties": {"repobilityId": "87cef96ea8c3e79a", "scanner": "scanner-primary", "fingerprint": "2e5cf38d9fb6f954", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/automation/smart-agents.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd95ed8feae32ca7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/monitoring/status.md"}, "properties": {"repobilityId": "e3a5e1a05eedaefe", "scanner": "scanner-primary", "fingerprint": "fd95ed8feae32ca7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/monitoring/status.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-197f2e1f333a466e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/monitoring/agent-metrics.md"}, "properties": {"repobilityId": "a86e7930bf529d54", "scanner": "scanner-primary", "fingerprint": "197f2e1f333a466e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/monitoring/agent-metrics.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e836aeb64cdfe6d5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/monitoring/swarm-monitor.md"}, "properties": {"repobilityId": "034bb836588a8350", "scanner": "scanner-primary", "fingerprint": "e836aeb64cdfe6d5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/monitoring/swarm-monitor.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0e99365509cea0e5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/monitoring/real-time-view.md"}, "properties": {"repobilityId": "7336d68161594ed4", "scanner": "scanner-primary", "fingerprint": "0e99365509cea0e5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/monitoring/real-time-view.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-17bf2bdb3e215bda", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/monitoring/agents.md"}, "properties": {"repobilityId": "82702ce0693735a5", "scanner": "scanner-primary", "fingerprint": "17bf2bdb3e215bda", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/monitoring/agents.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0bba08f6b4610fac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-init.md"}, "properties": {"repobilityId": "885893eac4e1edbe", "scanner": "scanner-primary", "fingerprint": "0bba08f6b4610fac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/swarm-init.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c63a18eca091e1c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-strategies.md"}, "properties": {"repobilityId": "2d97fff57a1cb9f7", "scanner": "scanner-primary", "fingerprint": "9c63a18eca091e1c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/swarm-strategies.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0e17e651f4eea497", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-status.md"}, "properties": {"repobilityId": "fcfe08c62ab2d7be", "scanner": "scanner-primary", "fingerprint": "0e17e651f4eea497", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/swarm-status.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-45c441daf735538a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/analysis.md"}, "properties": {"repobilityId": "2c2ccf89cbd5cad4", "scanner": "scanner-primary", "fingerprint": "45c441daf735538a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/analysis.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e04ff83e12885fd0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/optimization.md"}, "properties": {"repobilityId": "f04604981e4b8772", "scanner": "scanner-primary", "fingerprint": "e04ff83e12885fd0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/optimization.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-83cb02541f86044a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-modes.md"}, "properties": {"repobilityId": "e64cf26abe5190ca", "scanner": "scanner-primary", "fingerprint": "83cb02541f86044a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/swarm-modes.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7750ed9e76a74f8a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-background.md"}, "properties": {"repobilityId": "fa443504b7646fb7", "scanner": "scanner-primary", "fingerprint": "7750ed9e76a74f8a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/swarm-background.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4b8c570511cc12c7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-monitor.md"}, "properties": {"repobilityId": "3ac8dd6c568305df", "scanner": "scanner-primary", "fingerprint": "4b8c570511cc12c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/swarm-monitor.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b5e51d3c453ee19a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-analysis.md"}, "properties": {"repobilityId": "ee6cdaeed50bfb51", "scanner": "scanner-primary", "fingerprint": "b5e51d3c453ee19a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/swarm-analysis.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-56a159a6818dc14d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/swarm-spawn.md"}, "properties": {"repobilityId": "027c65db84549b65", "scanner": "scanner-primary", "fingerprint": "56a159a6818dc14d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/swarm-spawn.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-381f5d2a5e23a0ab", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/swarm/research.md"}, "properties": {"repobilityId": "8f17bf6c61d030ab", "scanner": "scanner-primary", "fingerprint": "381f5d2a5e23a0ab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/swarm/research.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d71cd6e47c02529", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/github/issue-tracker.md"}, "properties": {"repobilityId": "4866e12709384ba2", "scanner": "scanner-primary", "fingerprint": "4d71cd6e47c02529", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/issue-tracker.md"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-a48f0a7a322b4fc3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/repo-analyze.md"}, "properties": {"repobilityId": "ca07a5806f63bd5a", "scanner": "scanner-primary", "fingerprint": "a48f0a7a322b4fc3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/repo-analyze.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-46e699e02194410f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/github/sync-coordinator.md"}, "properties": {"repobilityId": "81be617de2cb32a0", "scanner": "scanner-primary", "fingerprint": "46e699e02194410f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/sync-coordinator.md"}, "region": {"startLine": 78}}}]}, {"ruleId": "scanner-74dbb6bacaa064ee", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/pr-enhance.md"}, "properties": {"repobilityId": "2f137dc91f714ad8", "scanner": "scanner-primary", "fingerprint": "74dbb6bacaa064ee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/pr-enhance.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-be6f6fc1affd2640", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/issue-triage.md"}, "properties": {"repobilityId": "ed805952ecf99404", "scanner": "scanner-primary", "fingerprint": "be6f6fc1affd2640", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/issue-triage.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f7e4ace6dab989c8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/code-review.md"}, "properties": {"repobilityId": "cedbfb38c6cf00e5", "scanner": "scanner-primary", "fingerprint": "f7e4ace6dab989c8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/code-review.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9d5c01a7a814dd1f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/github/release-manager.md"}, "properties": {"repobilityId": "f174d24994a3ca72", "scanner": "scanner-primary", "fingerprint": "9d5c01a7a814dd1f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/release-manager.md"}, "region": {"startLine": 229}}}]}, {"ruleId": "scanner-96e852ec787b8741", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/github/repo-architect.md"}, "properties": {"repobilityId": "683670a6002db808", "scanner": "scanner-primary", "fingerprint": "96e852ec787b8741", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/repo-architect.md"}, "region": {"startLine": 228}}}]}, {"ruleId": "scanner-a38504332b02e084", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/github/pr-manager.md"}, "properties": {"repobilityId": "53b1ab1acf87a7f0", "scanner": "scanner-primary", "fingerprint": "a38504332b02e084", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/pr-manager.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-fadb96a708125716", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/swarm-issue.md"}, "properties": {"repobilityId": "7e2d9ee6e9b92df1", "scanner": "scanner-primary", "fingerprint": "fadb96a708125716", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/swarm-issue.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-54f30e6a9ab71fa5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/github/project-board-sync.md"}, "properties": {"repobilityId": "3bf19fd9bb552b09", "scanner": "scanner-primary", "fingerprint": "54f30e6a9ab71fa5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/github/project-board-sync.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ceeb8933799b7150", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-memory.md"}, "properties": {"repobilityId": "bc8b97b45a51eba4", "scanner": "scanner-primary", "fingerprint": "ceeb8933799b7150", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hive-mind/hive-mind-memory.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef7b160935342a9f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-stop.md"}, "properties": {"repobilityId": "fe2bfcfc21865fb2", "scanner": "scanner-primary", "fingerprint": "ef7b160935342a9f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hive-mind/hive-mind-stop.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-89ae2e1da3a028c2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-status.md"}, "properties": {"repobilityId": "57ae09819352f92a", "scanner": "scanner-primary", "fingerprint": "89ae2e1da3a028c2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hive-mind/hive-mind-status.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03281728c0a1105d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-consensus.md"}, "properties": {"repobilityId": "28aac60724635cba", "scanner": "scanner-primary", "fingerprint": "03281728c0a1105d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hive-mind/hive-mind-consensus.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8eec3e77ae52d223", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-resume.md"}, "properties": {"repobilityId": "129a2783d6d07fb4", "scanner": "scanner-primary", "fingerprint": "8eec3e77ae52d223", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hive-mind/hive-mind-resume.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c59ddcda8eb437f2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-wizard.md"}, "properties": {"repobilityId": "f923f009205477eb", "scanner": "scanner-primary", "fingerprint": "c59ddcda8eb437f2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hive-mind/hive-mind-wizard.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-622e26e8d31af92b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-metrics.md"}, "properties": {"repobilityId": "152cd86361d19764", "scanner": "scanner-primary", "fingerprint": "622e26e8d31af92b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hive-mind/hive-mind-metrics.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a7241b2e3a099b49", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-init.md"}, "properties": {"repobilityId": "efbf324b5afbb666", "scanner": "scanner-primary", "fingerprint": "a7241b2e3a099b49", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hive-mind/hive-mind-init.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9e3cf292caba4bd5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hive-mind/hive-mind-sessions.md"}, "properties": {"repobilityId": "e5995453051a5d82", "scanner": "scanner-primary", "fingerprint": "9e3cf292caba4bd5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hive-mind/hive-mind-sessions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-abb2941302a63be9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/swarm-init.md"}, "properties": {"repobilityId": "da06252bc49495fa", "scanner": "scanner-primary", "fingerprint": "abb2941302a63be9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/coordination/swarm-init.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-274acbed691bec1e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/init.md"}, "properties": {"repobilityId": "b2a64bdb7d24b3a0", "scanner": "scanner-primary", "fingerprint": "274acbed691bec1e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/coordination/init.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c939fcbd325c9aeb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/spawn.md"}, "properties": {"repobilityId": "d413cd152659501b", "scanner": "scanner-primary", "fingerprint": "c939fcbd325c9aeb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/coordination/spawn.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6127460aaa267fe2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/orchestrate.md"}, "properties": {"repobilityId": "c850b167cd3d7537", "scanner": "scanner-primary", "fingerprint": "6127460aaa267fe2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/coordination/orchestrate.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d6a755937447f3ad", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/agent-spawn.md"}, "properties": {"repobilityId": "918a608cb3534b7b", "scanner": "scanner-primary", "fingerprint": "d6a755937447f3ad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/coordination/agent-spawn.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9f2ed11d5e3cfc86", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/coordination/task-orchestrate.md"}, "properties": {"repobilityId": "cd460fa8c25eb659", "scanner": "scanner-primary", "fingerprint": "9f2ed11d5e3cfc86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/coordination/task-orchestrate.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d778eb83136e55c5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/analysis/token-efficiency.md"}, "properties": {"repobilityId": "66a08b1adf6ee0e0", "scanner": "scanner-primary", "fingerprint": "d778eb83136e55c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/analysis/token-efficiency.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f96df1e6af32a81", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/analysis/performance-report.md"}, "properties": {"repobilityId": "11fd6830d1e1403e", "scanner": "scanner-primary", "fingerprint": "3f96df1e6af32a81", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/analysis/performance-report.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62f9d659cb6b42aa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/analysis/COMMAND_COMPLIANCE_REPORT.md"}, "properties": {"repobilityId": "1a33067f5519c2a0", "scanner": "scanner-primary", "fingerprint": "62f9d659cb6b42aa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/analysis/COMMAND_COMPLIANCE_REPORT.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd5713fd6351dd24", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/analysis/token-usage.md"}, "properties": {"repobilityId": "94449dd1636cbc86", "scanner": "scanner-primary", "fingerprint": "cd5713fd6351dd24", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/analysis/token-usage.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-18fb49cea8f73784", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/analysis/bottleneck-detect.md"}, "properties": {"repobilityId": "ae7532f911dc1185", "scanner": "scanner-primary", "fingerprint": "18fb49cea8f73784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/analysis/bottleneck-detect.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b83f5d5b4aa2875", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/metrics.md"}, "properties": {"repobilityId": "cefa85d7c8fec8c4", "scanner": "scanner-primary", "fingerprint": "1b83f5d5b4aa2875", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/metrics.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d714aebb80aaf855", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/logs.md"}, "properties": {"repobilityId": "7eba9951e1100966", "scanner": "scanner-primary", "fingerprint": "d714aebb80aaf855", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/logs.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1a5648ed17adeac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/list.md"}, "properties": {"repobilityId": "fbf7bca1008eb822", "scanner": "scanner-primary", "fingerprint": "a1a5648ed17adeac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/list.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f11335b2b52688b5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/status.md"}, "properties": {"repobilityId": "8e0b8b5ce7aa57d6", "scanner": "scanner-primary", "fingerprint": "f11335b2b52688b5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/status.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72ef9739e7ffedda", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/README.md"}, "properties": {"repobilityId": "5728279ae5a2bec0", "scanner": "scanner-primary", "fingerprint": "72ef9739e7ffedda", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb2f28716397a621", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/health.md"}, "properties": {"repobilityId": "c22482058957d7ab", "scanner": "scanner-primary", "fingerprint": "cb2f28716397a621", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/health.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c2586bc87f636e84", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/agent-coordination.md"}, "properties": {"repobilityId": "6432963417618f91", "scanner": "scanner-primary", "fingerprint": "c2586bc87f636e84", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/agent-coordination.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df789d9c555f52c7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/pool.md"}, "properties": {"repobilityId": "4972aecf5be32ef2", "scanner": "scanner-primary", "fingerprint": "df789d9c555f52c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/pool.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90c9c9993a0371e4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/stop.md"}, "properties": {"repobilityId": "6c007a4ab81dd235", "scanner": "scanner-primary", "fingerprint": "90c9c9993a0371e4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/stop.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-98233df7c90762e9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/memory/memory-persist.md"}, "properties": {"repobilityId": "7c38204a0338b7f3", "scanner": "scanner-primary", "fingerprint": "98233df7c90762e9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/memory/memory-persist.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bc60962a8f356141", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/memory/memory-search.md"}, "properties": {"repobilityId": "66042797a7819ad0", "scanner": "scanner-primary", "fingerprint": "bc60962a8f356141", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/memory/memory-search.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47799ed56543cb9c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/memory/neural.md"}, "properties": {"repobilityId": "0f948951bfa0fa33", "scanner": "scanner-primary", "fingerprint": "47799ed56543cb9c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/memory/neural.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37e2925b2d90b7f0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/memory/memory-usage.md"}, "properties": {"repobilityId": "dcad65ae27fcc613", "scanner": "scanner-primary", "fingerprint": "37e2925b2d90b7f0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/memory/memory-usage.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-678f0006e3f742bd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/optimization/auto-topology.md"}, "properties": {"repobilityId": "94c10e342dacaf74", "scanner": "scanner-primary", "fingerprint": "678f0006e3f742bd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/optimization/auto-topology.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b91db97d1267c82", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/optimization/README.md"}, "properties": {"repobilityId": "fced2458fbe38795", "scanner": "scanner-primary", "fingerprint": "7b91db97d1267c82", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/optimization/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-984755b4953bba20", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/optimization/topology-optimize.md"}, "properties": {"repobilityId": "177d7abb2467b687", "scanner": "scanner-primary", "fingerprint": "984755b4953bba20", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/optimization/topology-optimize.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b5a994140b678e1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/optimization/parallel-execute.md"}, "properties": {"repobilityId": "0d12a2b1fe85834e", "scanner": "scanner-primary", "fingerprint": "2b5a994140b678e1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/optimization/parallel-execute.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ecd9dbc8e691615", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/optimization/cache-manage.md"}, "properties": {"repobilityId": "639f089d6dff5df9", "scanner": "scanner-primary", "fingerprint": "5ecd9dbc8e691615", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/optimization/cache-manage.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58e1f00dd6a50d82", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/hooks/post-task.md"}, "properties": {"repobilityId": "68700d5afea7bc6d", "scanner": "scanner-primary", "fingerprint": "58e1f00dd6a50d82", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hooks/post-task.md"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-786493ca2daa6c83", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hooks/post-task.md"}, "properties": {"repobilityId": "125cae6b6e0abbca", "scanner": "scanner-primary", "fingerprint": "786493ca2daa6c83", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hooks/post-task.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d17cebdb2d322e78", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hooks/pre-task.md"}, "properties": {"repobilityId": "992eb04e79519370", "scanner": "scanner-primary", "fingerprint": "d17cebdb2d322e78", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hooks/pre-task.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8b5937b7ffe10288", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hooks/session-end.md"}, "properties": {"repobilityId": "952dd41c46d0f1b0", "scanner": "scanner-primary", "fingerprint": "8b5937b7ffe10288", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hooks/session-end.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf983c6eea41bf76", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/hooks/post-edit.md"}, "properties": {"repobilityId": "59a4f997a5ec73fd", "scanner": "scanner-primary", "fingerprint": "cf983c6eea41bf76", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/hooks/post-edit.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-153e6ff3ec715685", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/workflows/README.md"}, "properties": {"repobilityId": "e85fe2645438b58d", "scanner": "scanner-primary", "fingerprint": "153e6ff3ec715685", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/workflows/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8f418bab86e089e1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/workflows/research.md"}, "properties": {"repobilityId": "1b6d5b5ab6d593cf", "scanner": "scanner-primary", "fingerprint": "8f418bab86e089e1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/workflows/research.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9b55f692e2f5a4b2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/innovator.md"}, "properties": {"repobilityId": "8187913755745611", "scanner": "scanner-primary", "fingerprint": "9b55f692e2f5a4b2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/innovator.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-145b25e83dfae7c1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/tutorial.md"}, "properties": {"repobilityId": "dab740b8b5bdf7da", "scanner": "scanner-primary", "fingerprint": "145b25e83dfae7c1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/tutorial.md"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-aea9ce8500651411", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/tutorial.md"}, "properties": {"repobilityId": "7145f5a8f436528d", "scanner": "scanner-primary", "fingerprint": "aea9ce8500651411", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/tutorial.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-56e25ec61fbe48c6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/code.md"}, "properties": {"repobilityId": "93e6bd13a54c6bc3", "scanner": "scanner-primary", "fingerprint": "56e25ec61fbe48c6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/code.md"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-9a1e2a0d2f2fee34", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/sparc.md"}, "properties": {"repobilityId": "6772e9e1210253e3", "scanner": "scanner-primary", "fingerprint": "9a1e2a0d2f2fee34", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/sparc.md"}, "region": {"startLine": 91}}}]}, {"ruleId": "scanner-03086e0a7e44b2e6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/batch-executor.md"}, "properties": {"repobilityId": "353b7ca679f77b71", "scanner": "scanner-primary", "fingerprint": "03086e0a7e44b2e6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/batch-executor.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ffea67f8ea442865", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/post-deployment-monitoring-mode.md"}, "properties": {"repobilityId": "9b68977eaeeea953", "scanner": "scanner-primary", "fingerprint": "ffea67f8ea442865", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/post-deployment-monitoring-mode.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-62660382aa28e045", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/post-deployment-monitoring-mode.md"}, "properties": {"repobilityId": "df0ad84f24f8a6f0", "scanner": "scanner-primary", "fingerprint": "62660382aa28e045", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/post-deployment-monitoring-mode.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9f238695ce7739da", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/documenter.md"}, "properties": {"repobilityId": "7308e296c6c34587", "scanner": "scanner-primary", "fingerprint": "9f238695ce7739da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/documenter.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc86c8b7b9fe2245", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/designer.md"}, "properties": {"repobilityId": "21e19a9b7eb34fc9", "scanner": "scanner-primary", "fingerprint": "fc86c8b7b9fe2245", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/designer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-880c8be4effa2bda", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/architect.md"}, "properties": {"repobilityId": "cc93d4627e5dfea9", "scanner": "scanner-primary", "fingerprint": "880c8be4effa2bda", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/architect.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b2f2449b22375e8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/refinement-optimization-mode.md"}, "properties": {"repobilityId": "9b49de95cd2ab92c", "scanner": "scanner-primary", "fingerprint": "1b2f2449b22375e8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/refinement-optimization-mode.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-f14bb75e6f4acd31", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/refinement-optimization-mode.md"}, "properties": {"repobilityId": "7d4978d255f6566d", "scanner": "scanner-primary", "fingerprint": "f14bb75e6f4acd31", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/refinement-optimization-mode.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-811fd948456e9b41", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/docs-writer.md"}, "properties": {"repobilityId": "15afc8914caa4af0", "scanner": "scanner-primary", "fingerprint": "811fd948456e9b41", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/docs-writer.md"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-c55825c879d8d930", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/docs-writer.md"}, "properties": {"repobilityId": "f5947a7f835fc12f", "scanner": "scanner-primary", "fingerprint": "c55825c879d8d930", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/docs-writer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-34a932f2da704d40", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/integration.md"}, "properties": {"repobilityId": "d1ca253e3ad2c799", "scanner": "scanner-primary", "fingerprint": "34a932f2da704d40", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/integration.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-06a970c127cfbcb5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/supabase-admin.md"}, "properties": {"repobilityId": "b5f2f8351e1d84e4", "scanner": "scanner-primary", "fingerprint": "06a970c127cfbcb5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/supabase-admin.md"}, "region": {"startLine": 328}}}]}, {"ruleId": "scanner-685aa2132bda1aff", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/security-review.md"}, "properties": {"repobilityId": "6d168b774f02b9ec", "scanner": "scanner-primary", "fingerprint": "685aa2132bda1aff", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/security-review.md"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-afb3800368c145df", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/security-review.md"}, "properties": {"repobilityId": "0afcff889c37b7fe", "scanner": "scanner-primary", "fingerprint": "afb3800368c145df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/security-review.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-013ed90594cd468d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/swarm-coordinator.md"}, "properties": {"repobilityId": "9afc70ceebc1e48a", "scanner": "scanner-primary", "fingerprint": "013ed90594cd468d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/swarm-coordinator.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8b3058f1936119c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/spec-pseudocode.md"}, "properties": {"repobilityId": "fea3a0becf334964", "scanner": "scanner-primary", "fingerprint": "b8b3058f1936119c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/spec-pseudocode.md"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-4431dc38d13dcfe5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/spec-pseudocode.md"}, "properties": {"repobilityId": "4fd2abd5f81526ad", "scanner": "scanner-primary", "fingerprint": "4431dc38d13dcfe5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/spec-pseudocode.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dacd3f2e07bb2e45", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/analyzer.md"}, "properties": {"repobilityId": "0fd01f1ac1ac6b39", "scanner": "scanner-primary", "fingerprint": "dacd3f2e07bb2e45", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/analyzer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3e9d1fae51a22527", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/devops.md"}, "properties": {"repobilityId": "f929faff13634bb4", "scanner": "scanner-primary", "fingerprint": "3e9d1fae51a22527", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/devops.md"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-ebd1ad4ddfd06917", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/workflow-manager.md"}, "properties": {"repobilityId": "2406f8b6d768e21a", "scanner": "scanner-primary", "fingerprint": "ebd1ad4ddfd06917", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/workflow-manager.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2dfbcd5e1a10cb2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/sparc/debug.md"}, "properties": {"repobilityId": "e1adc1a214a1b714", "scanner": "scanner-primary", "fingerprint": "a2dfbcd5e1a10cb2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/debug.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-6d2db4e8dba14dfc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/debug.md"}, "properties": {"repobilityId": "f4b2b57c89315bff", "scanner": "scanner-primary", "fingerprint": "6d2db4e8dba14dfc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/debug.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a35e881035e8730c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/sparc/memory-manager.md"}, "properties": {"repobilityId": "49c25c2f5070aa7e", "scanner": "scanner-primary", "fingerprint": "a35e881035e8730c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/sparc/memory-manager.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd5eb8d74e9c847c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agents/swarm/hierarchical-coordinator.md"}, "properties": {"repobilityId": "3350d96ac568ba9b", "scanner": "scanner-primary", "fingerprint": "dd5eb8d74e9c847c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/swarm/hierarchical-coordinator.md"}, "region": {"startLine": 560}}}]}, {"ruleId": "scanner-b2e07a98e586d672", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agents/swarm/adaptive-coordinator.md"}, "properties": {"repobilityId": "2ed8cc1bc78d8c57", "scanner": "scanner-primary", "fingerprint": "b2e07a98e586d672", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/swarm/adaptive-coordinator.md"}, "region": {"startLine": 810}}}]}, {"ruleId": "scanner-5fae87c2ae599549", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agents/swarm/mesh-coordinator.md"}, "properties": {"repobilityId": "4964fb365aecee08", "scanner": "scanner-primary", "fingerprint": "5fae87c2ae599549", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/swarm/mesh-coordinator.md"}, "region": {"startLine": 732}}}]}, {"ruleId": "scanner-97feea90675db00b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/consensus/performance-benchmarker.md"}, "properties": {"repobilityId": "8ac38f3a9954276b", "scanner": "scanner-primary", "fingerprint": "97feea90675db00b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/consensus/performance-benchmarker.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fe259f4c78ac36b0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/consensus/gossip-coordinator.md"}, "properties": {"repobilityId": "c4167901277f2948", "scanner": "scanner-primary", "fingerprint": "fe259f4c78ac36b0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/consensus/gossip-coordinator.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eeb9543f41c2a7d6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agents/consensus/security-manager.md"}, "properties": {"repobilityId": "899038eb54d7c203", "scanner": "scanner-primary", "fingerprint": "eeb9543f41c2a7d6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/consensus/security-manager.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-069ae2cd2994cd22", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agents/sparc/architecture.md"}, "properties": {"repobilityId": "a7b21d8c61ea50c7", "scanner": "scanner-primary", "fingerprint": "069ae2cd2994cd22", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/sparc/architecture.md"}, "region": {"startLine": 670}}}]}, {"ruleId": "scanner-176167ecb8446c71", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agents/sparc/refinement.md"}, "properties": {"repobilityId": "26679bfccb1562d2", "scanner": "scanner-primary", "fingerprint": "176167ecb8446c71", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/sparc/refinement.md"}, "region": {"startLine": 431}}}]}, {"ruleId": "scanner-f1246529183053ac", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/github-release-management/SKILL.md"}, "properties": {"repobilityId": "9707a5b198ecbdbd", "scanner": "scanner-primary", "fingerprint": "f1246529183053ac", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/github-release-management/SKILL.md"}, "region": {"startLine": 192}}}]}, {"ruleId": "scanner-6983649e7d7e43ac", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/v3-mcp-optimization/SKILL.md"}, "properties": {"repobilityId": "52d56e0ea1f9ddb1", "scanner": "scanner-primary", "fingerprint": "6983649e7d7e43ac", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/v3-mcp-optimization/SKILL.md"}, "region": {"startLine": 715}}}]}, {"ruleId": "scanner-a62c458cb61c4e61", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/agentdb-memory-patterns/SKILL.md"}, "properties": {"repobilityId": "b4e81075dd0dc422", "scanner": "scanner-primary", "fingerprint": "a62c458cb61c4e61", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agentdb-memory-patterns/SKILL.md"}, "region": {"startLine": 336}}}]}, {"ruleId": "scanner-da91f6524b65a9da", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/agentdb-memory-patterns/SKILL.md"}, "properties": {"repobilityId": "54c47d2bed9c2bca", "scanner": "scanner-primary", "fingerprint": "da91f6524b65a9da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agentdb-memory-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e01c464e06447d96", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/v3-security-overhaul/SKILL.md"}, "properties": {"repobilityId": "4480a36d4e38364d", "scanner": "scanner-primary", "fingerprint": "e01c464e06447d96", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/v3-security-overhaul/SKILL.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-21ec62032ac1355a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/swarm-advanced/SKILL.md"}, "properties": {"repobilityId": "1bdf952e2567ed66", "scanner": "scanner-primary", "fingerprint": "21ec62032ac1355a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/swarm-advanced/SKILL.md"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-8e65337e518ac9af", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/v3-cli-modernization/SKILL.md"}, "properties": {"repobilityId": "d706d5e0663766d1", "scanner": "scanner-primary", "fingerprint": "8e65337e518ac9af", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/v3-cli-modernization/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de924889b300be84", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/sparc-methodology/SKILL.md"}, "properties": {"repobilityId": "dd6e43ec302f20db", "scanner": "scanner-primary", "fingerprint": "de924889b300be84", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/sparc-methodology/SKILL.md"}, "region": {"startLine": 686}}}]}, {"ruleId": "scanner-c6429d215bd94462", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/v3-performance-optimization/SKILL.md"}, "properties": {"repobilityId": "eeb9cf0cd0fd1e82", "scanner": "scanner-primary", "fingerprint": "c6429d215bd94462", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/v3-performance-optimization/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0cd7ca04e6382d99", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/v3-memory-unification/SKILL.md"}, "properties": {"repobilityId": "af727e0deb1367eb", "scanner": "scanner-primary", "fingerprint": "0cd7ca04e6382d99", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/v3-memory-unification/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3603ed6d8e3dab44", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/v3-integration-deep/SKILL.md"}, "properties": {"repobilityId": "1c297c5d49639a6b", "scanner": "scanner-primary", "fingerprint": "3603ed6d8e3dab44", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/v3-integration-deep/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf01fd75262fa110", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/github-multi-repo/SKILL.md"}, "properties": {"repobilityId": "fde2346e65f4dec4", "scanner": "scanner-primary", "fingerprint": "cf01fd75262fa110", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/github-multi-repo/SKILL.md"}, "region": {"startLine": 162}}}]}, {"ruleId": "scanner-ff1b04715d1cd44b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/reasoningbank-intelligence/SKILL.md"}, "properties": {"repobilityId": "bc084102981c18b3", "scanner": "scanner-primary", "fingerprint": "ff1b04715d1cd44b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/reasoningbank-intelligence/SKILL.md"}, "region": {"startLine": 151}}}]}, {"ruleId": "scanner-a58c814f49ae7cf5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/reasoningbank-intelligence/SKILL.md"}, "properties": {"repobilityId": "7b51b8b19e327782", "scanner": "scanner-primary", "fingerprint": "a58c814f49ae7cf5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/reasoningbank-intelligence/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03f10e7d59a3abfb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/agentdb-vector-search/SKILL.md"}, "properties": {"repobilityId": "4d12b19d4e830675", "scanner": "scanner-primary", "fingerprint": "03f10e7d59a3abfb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agentdb-vector-search/SKILL.md"}, "region": {"startLine": 334}}}]}, {"ruleId": "scanner-3e97402e422e2021", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/hooks-automation/SKILL.md"}, "properties": {"repobilityId": "a0ddac79a2d25895", "scanner": "scanner-primary", "fingerprint": "3e97402e422e2021", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/hooks-automation/SKILL.md"}, "region": {"startLine": 612}}}]}, {"ruleId": "scanner-6f46d2ab1ba22022", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/hooks-automation/SKILL.md"}, "properties": {"repobilityId": "64ceda204d400437", "scanner": "scanner-primary", "fingerprint": "6f46d2ab1ba22022", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/hooks-automation/SKILL.md"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-ab321361b36d8da9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/github-workflow-automation/SKILL.md"}, "properties": {"repobilityId": "fb1a91acb0bdd6e7", "scanner": "scanner-primary", "fingerprint": "ab321361b36d8da9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/github-workflow-automation/SKILL.md"}, "region": {"startLine": 671}}}]}, {"ruleId": "scanner-0a761f0bb4b48b29", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/github-workflow-automation/SKILL.md"}, "properties": {"repobilityId": "6e496611d758856d", "scanner": "scanner-primary", "fingerprint": "0a761f0bb4b48b29", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/github-workflow-automation/SKILL.md"}, "region": {"startLine": 1002}}}]}, {"ruleId": "scanner-3aac565d04eedcd7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/agentdb-advanced/SKILL.md"}, "properties": {"repobilityId": "aeb47a74a8f5cc0f", "scanner": "scanner-primary", "fingerprint": "3aac565d04eedcd7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agentdb-advanced/SKILL.md"}, "region": {"startLine": 306}}}]}, {"ruleId": "scanner-9ddfe6ab99078478", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/skill-builder/SKILL.md"}, "properties": {"repobilityId": "54a63ffc4d18291c", "scanner": "scanner-primary", "fingerprint": "9ddfe6ab99078478", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/skill-builder/SKILL.md"}, "region": {"startLine": 777}}}]}, {"ruleId": "scanner-9aeb2209d2141de7", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/pair-programming/SKILL.md"}, "properties": {"repobilityId": "a224ee9dfb623f6c", "scanner": "scanner-primary", "fingerprint": "9aeb2209d2141de7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/pair-programming/SKILL.md"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-34f0e51508e90cd0", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/helpers/session.js:13"}, "properties": {"repobilityId": "f3aa179333310f01", "scanner": "scanner-primary", "fingerprint": "34f0e51508e90cd0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-470bec1fcc17d86e", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/helpers/intelligence.cjs:111"}, "properties": {"repobilityId": "c2feb82bcabb074e", "scanner": "scanner-primary", "fingerprint": "470bec1fcc17d86e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-547c00bb458a5038", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/helpers/statusline.cjs:31"}, "properties": {"repobilityId": "9ddf1b6700cbf826", "scanner": "scanner-primary", "fingerprint": "547c00bb458a5038", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7966ea237033c9a3", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/helpers/hook-handler.cjs:115"}, "properties": {"repobilityId": "dc3a44b4ea9fbe15", "scanner": "scanner-primary", "fingerprint": "7966ea237033c9a3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-df194e902deebb2b", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/helpers/statusline.js:83"}, "properties": {"repobilityId": "df0d8487a11c467a", "scanner": "scanner-primary", "fingerprint": "df194e902deebb2b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8a6c5e9c57ca0ad6", "level": "none", "message": {"text": "Commented-code block (6 lines) in webapp/scripts/generate-category-icons.mjs:3"}, "properties": {"repobilityId": "dd7ed14c32407c61", "scanner": "scanner-primary", "fingerprint": "8a6c5e9c57ca0ad6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f1ce0f01f5b03938", "level": "none", "message": {"text": "Commented-code block (5 lines) in webapp/src/app/sitemap.ts:5"}, "properties": {"repobilityId": "a150cada60d1dc92", "scanner": "scanner-primary", "fingerprint": "f1ce0f01f5b03938", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7a6df6aa24fd09f5", "level": "none", "message": {"text": "Commented-code block (7 lines) in webapp/src/app/api/admin/presign/route.ts:6"}, "properties": {"repobilityId": "851f2740035f399e", "scanner": "scanner-primary", "fingerprint": "7a6df6aa24fd09f5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-38c62c991cde69ee", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 webapp/src/app/api/admin/presign/route.ts:44"}, "properties": {"repobilityId": "9dc66a50bdf34b78", "scanner": "scanner-primary", "fingerprint": "38c62c991cde69ee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f8303a5e8f291ce6", "level": "none", "message": {"text": "Commented-code block (5 lines) in webapp/src/lib/iconPresets.ts:1"}, "properties": {"repobilityId": "3e797d8591f1ab73", "scanner": "scanner-primary", "fingerprint": "f8303a5e8f291ce6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c2e8a385524b3baf", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 webapp/src/lib/api/client.ts:65"}, "properties": {"repobilityId": "3c75db7f03fea7a4", "scanner": "scanner-primary", "fingerprint": "c2e8a385524b3baf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3876849cca80c76e", "level": "none", "message": {"text": "Commented-code block (6 lines) in webapp/src/lib/map/crs.test.ts:10"}, "properties": {"repobilityId": "ab7b3eef16de7da2", "scanner": "scanner-primary", "fingerprint": "3876849cca80c76e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a9836457f7ec50c4", "level": "note", "message": {"text": "23 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "71ec3608d30f8bcd", "scanner": "scanner-primary", "fingerprint": "a9836457f7ec50c4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "bd37f89407b6c6f9", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "b842aebc990e971a", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}