{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-c776e469cde2fdbd", "name": "Possibly dead Python function: verify_url", "shortDescription": {"text": "Possibly dead Python function: verify_url"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f9d130bc9fb8b9ea", "name": "Possibly dead Python function: format_citation_nature", "shortDescription": {"text": "Possibly dead Python function: format_citation_nature"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dbfc43ecc155b4af", "name": "Possibly dead Python function: create_config_file", "shortDescription": {"text": "Possibly dead Python function: create_config_file"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2d0014d817db140", "name": "Possibly dead Python function: create_violin_plot", "shortDescription": {"text": "Possibly dead Python function: create_violin_plot"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c0abf5beb6e3c43", "name": "Possibly dead Python function: log_message", "shortDescription": {"text": "Possibly dead Python function: log_message"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0d7d32d2b32a69c8", "name": "Possibly dead Python function: do_GET", "shortDescription": {"text": "Possibly dead Python function: do_GET"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d50388840dfa7ac", "name": "Possibly dead Python function: do_POST", "shortDescription": {"text": "Possibly dead Python function: do_POST"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-70e6080476c8a9c8", "name": "Possibly dead Python function: run_single_query", "shortDescription": {"text": "Possibly dead Python function: run_single_query"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a808f06de8c88490", "name": "Possibly dead Python function: do_GET", "shortDescription": {"text": "Possibly dead Python function: do_GET"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-66d53816ad54e01b", "name": "Possibly dead Python function: do_POST", "shortDescription": {"text": "Possibly dead Python function: do_POST"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07324cde38d57b28", "name": "Possibly dead Python function: log_message", "shortDescription": {"text": "Possibly dead Python function: log_message"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-770b3515bd28b1a7", "name": "Possibly dead Python function: safe_stat_mtime", "shortDescription": {"text": "Possibly dead Python function: safe_stat_mtime"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46992d3b4cc94ca1", "name": "Possibly dead Python function: ease_in_quad", "shortDescription": {"text": "Possibly dead Python function: ease_in_quad"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1eda6dd8c2a1d0c4", "name": "Possibly dead Python function: ease_out_quad", "shortDescription": {"text": "Possibly dead Python function: ease_out_quad"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-466e7dc3ed7d0cdf", "name": "Possibly dead Python function: ease_in_out_quad", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_quad"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43f4b77a48f330f3", "name": "Possibly dead Python function: ease_in_cubic", "shortDescription": {"text": "Possibly dead Python function: ease_in_cubic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a66cd94fa66581d", "name": "Possibly dead Python function: ease_out_cubic", "shortDescription": {"text": "Possibly dead Python function: ease_out_cubic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a204067c9363d8e9", "name": "Possibly dead Python function: ease_in_out_cubic", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_cubic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bbd6c5773a4c582d", "name": "Possibly dead Python function: ease_in_out_bounce", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_bounce"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4232236647c0072b", "name": "Possibly dead Python function: ease_in_elastic", "shortDescription": {"text": "Possibly dead Python function: ease_in_elastic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea6303816dd6a3a5", "name": "Possibly dead Python function: ease_out_elastic", "shortDescription": {"text": "Possibly dead Python function: ease_out_elastic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d2bad836c123db8", "name": "Possibly dead Python function: ease_in_out_elastic", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_elastic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-94dd0563cd6c5e87", "name": "Possibly dead Python function: interpolate", "shortDescription": {"text": "Possibly dead Python function: interpolate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f360d212a4681a60", "name": "Possibly dead Python function: ease_back_in", "shortDescription": {"text": "Possibly dead Python function: ease_back_in"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c3f5ebe3f474bfa7", "name": "Possibly dead Python function: ease_back_out", "shortDescription": {"text": "Possibly dead Python function: ease_back_out"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a2be1abd363028f", "name": "Possibly dead Python function: ease_back_in_out", "shortDescription": {"text": "Possibly dead Python function: ease_back_in_out"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02b1dd5772664f89", "name": "Possibly dead Python function: apply_squash_stretch", "shortDescription": {"text": "Possibly dead Python function: apply_squash_stretch"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c7723fd760e4809e", "name": "Possibly dead Python function: calculate_arc_motion", "shortDescription": {"text": "Possibly dead Python function: calculate_arc_motion"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0e9d9ea456ff74ce", "name": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/merge-to-pdf.ts:91", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/merge-to-pdf.ts:91"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f2726320569d7597", "name": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/extract-figure.ts:72", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/extract-figure.ts:72"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86c9e8ed8cac14d0", "name": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/apply-template.ts:152", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/apply-template.ts:152"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2703a8fdb07a9f0", "name": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/merge-to-pptx.ts:111", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/merge-to-pptx.ts:111"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-216166b5e8c38a8d", "name": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/detect-figures.ts:275", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/detect-figures.ts:275"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d4686dc2928bc952", "name": "Stray `console.log` in TS/JS \u2014 writing-skills/render-graphs.js:124", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 writing-skills/render-graphs.js:124"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a052ba5563d614b5", "name": "Insecure pattern 'subprocess_shell_true' in web-to-app/scripts/app_validator.py:112", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in web-to-app/scripts/app_validator.py:112"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ae54e422119b343e", "name": "Insecure pattern 'direct_innerhtml_assignment' in skill-creator/assets/eval_review.html:69", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in skill-creator/assets/eval_review.html:69"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c62b3dc558d1c56", "name": "Insecure pattern 'direct_innerhtml_assignment' in skill-creator/eval-viewer/viewer.html:766", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in skill-creator/eval-viewer/viewer.html:766"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c0d4f7351a96b77", "name": "Insecure pattern 'eval_used' in teacher-paper/scripts/regression_test.py:182", "shortDescription": {"text": "Insecure pattern 'eval_used' in teacher-paper/scripts/regression_test.py:182"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-01bd6dd62ac69b5b", "name": "Insecure pattern 'direct_innerhtml_assignment' in brainstorming/scripts/helper.js:57", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in brainstorming/scripts/helper.js:57"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4eefecb7d9f4c372", "name": "Insecure pattern 'node_child_process' in darwin-skill/scripts/screenshot.mjs:60", "shortDescription": {"text": "Insecure pattern 'node_child_process' in darwin-skill/scripts/screenshot.mjs:60"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d24ef43ec88ec921", "name": "Insecure pattern 'direct_innerhtml_assignment' in darwin-skill/assets/chart-ratchet-en.html:266", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in darwin-skill/assets/chart-ratchet-en.html:266"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff4c5d0dc3d69982", "name": "Insecure pattern 'direct_innerhtml_assignment' in darwin-skill/assets/chart-ratchet.html:268", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in darwin-skill/assets/chart-ratchet.html:268"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1aa468df7e32af0e", "name": "Insecure pattern 'subprocess_shell_true' in webapp-testing/scripts/with_server.py:71", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in webapp-testing/scripts/with_server.py:71"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7aea534ed8a5666e", "name": "Possible secret in opencode-migration/opencode_windows_preview.json", "shortDescription": {"text": "Possible secret in opencode-migration/opencode_windows_preview.json"}, "fullDescription": {"text": "Detected pattern matching openai_or_anthropic_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-e58294dada9f3b79", "name": "Insecure pattern 'weak_hash' in opencode-migration/README.md:132", "shortDescription": {"text": "Insecure pattern 'weak_hash' in opencode-migration/README.md:132"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eac1f7cf4a4ad8ca", "name": "Insecure pattern 'weak_hash' in opencode-migration/package_skill.sh:50", "shortDescription": {"text": "Insecure pattern 'weak_hash' in opencode-migration/package_skill.sh:50"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c3b8207d56cb49d", "name": "Insecure pattern 'weak_hash' in opencode-migration/scripts/migration_installer.py:143", "shortDescription": {"text": "Insecure pattern 'weak_hash' in opencode-migration/scripts/migration_installer.py:143"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3472c85d07b7df3", "name": "Insecure pattern 'weak_hash' in opencode-migration/scripts/config_packager.py:356", "shortDescription": {"text": "Insecure pattern 'weak_hash' in opencode-migration/scripts/config_packager.py:356"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4788521a5799f8a6", "name": "Insecure pattern 'cors_wildcard' in skill-seekers/api/main.py:26", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in skill-seekers/api/main.py:26"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8592446753ad570e", "name": "Insecure pattern 'cors_wildcard' in skill-seekers/src/skill_seekers/mcp/server_fastmcp.py:1146", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in skill-seekers/src/skill_seekers/mcp/server_fastmcp.py:1146"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0fc1948b42aa8f71", "name": "Insecure pattern 'subprocess_shell_true' in skill-manager/scripts/smart_batch_update.py:17", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in skill-manager/scripts/smart_batch_update.py:17"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-78a3e63256ca36ed", "name": "Insecure pattern 'subprocess_shell_true' in skill-manager/scripts/batch_update.py:14", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in skill-manager/scripts/batch_update.py:14"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-91a13463b7424b7d", "name": "Insecure pattern 'node_child_process' in writing-skills/render-graphs.js:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in writing-skills/render-graphs.js:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ac84b30018855db", "name": "Insecure pattern 'subprocess_shell_true' in skills-backup/setup_auto_backup.py:82", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in skills-backup/setup_auto_backup.py:82"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca000ddad4729a64", "name": "Possible secret in langsmith-fetch/README.md", "shortDescription": {"text": "Possible secret in langsmith-fetch/README.md"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-ea489086f816929c", "name": "Possible secret in langsmith-fetch/SKILL.md", "shortDescription": {"text": "Possible secret in langsmith-fetch/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-3df8dcd4169cbceb", "name": "Insecure pattern 'dangerous_innerhtml' in vercel-react-best-practices/AGENTS.md:2013", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in vercel-react-best-practices/AGENTS.md:2013"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a658a66454acd00d", "name": "Insecure pattern 'subprocess_shell_true' in general-skills-backup/setup_auto_backup.py:82", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in general-skills-backup/setup_auto_backup.py:82"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f6dcc0e0b38f4e8c", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-564221f3cc046aa8", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-840b581cd7df7ed0", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f3c19cad4d6a9a9", "name": "Very large file: general-sci-writing/scripts/state_manager.py (3787 lines)", "shortDescription": {"text": "Very large file: general-sci-writing/scripts/state_manager.py (3787 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea536618c8c6574c", "name": "Very large file: reviewer-response-sci/scripts/build_full_package.py (1311 lines)", "shortDescription": {"text": "Very large file: reviewer-response-sci/scripts/build_full_package.py (1311 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fec97d4c6d4964d3", "name": "Very large file: teacher-paper/scripts/assemble.py (1788 lines)", "shortDescription": {"text": "Very large file: teacher-paper/scripts/assemble.py (1788 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02c923310d090b85", "name": "Very large file: revise-sci/scripts/revise_units.py (1329 lines)", "shortDescription": {"text": "Very large file: revise-sci/scripts/revise_units.py (1329 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e6cf0bc01703696", "name": "Very large file: sci2doc/scripts/state_manager.py (2357 lines)", "shortDescription": {"text": "Very large file: sci2doc/scripts/state_manager.py (2357 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-79341bc79b862ef2", "name": "Very large file: sci2doc/scripts/check_quality.py (2546 lines)", "shortDescription": {"text": "Very large file: sci2doc/scripts/check_quality.py (2546 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e2feb0e27850650e", "name": "Very large file: skill-seekers/src/skill_seekers/mcp/server_legacy.py (2302 lines)", "shortDescription": {"text": "Very large file: skill-seekers/src/skill_seekers/mcp/server_legacy.py (2302 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d01b0fefb12c5428", "name": "Very large file: skill-seekers/src/skill_seekers/cli/github_scraper.py (1466 lines)", "shortDescription": {"text": "Very large file: skill-seekers/src/skill_seekers/cli/github_scraper.py (1466 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58f49206bda5eb78", "name": "Very large file: skill-seekers/src/skill_seekers/cli/pattern_recognizer.py (1825 lines)", "shortDescription": {"text": "Very large file: skill-seekers/src/skill_seekers/cli/pattern_recognizer.py (1825 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f4d74b917500895d", "name": "Very large file: skill-seekers/src/skill_seekers/cli/doc_scraper.py (2332 lines)", "shortDescription": {"text": "Very large file: skill-seekers/src/skill_seekers/cli/doc_scraper.py (2332 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb03ff0e3a0ab68b", "name": "Very large file: skill-seekers/src/skill_seekers/cli/code_analyzer.py (1462 lines)", "shortDescription": {"text": "Very large file: skill-seekers/src/skill_seekers/cli/code_analyzer.py (1462 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e10b6a065d632802", "name": "Very large file: skill-seekers/src/skill_seekers/cli/unified_skill_builder.py (1605 lines)", "shortDescription": {"text": "Very large file: skill-seekers/src/skill_seekers/cli/unified_skill_builder.py (1605 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-beb0fd0ba233c336", "name": "Very large file: review-writing/scripts/state_manager.py (1483 lines)", "shortDescription": {"text": "Very large file: review-writing/scripts/state_manager.py (1483 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "84 tests / 352 src (ratio 0.24)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 4115 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 55 placeholder/mock markers across 19 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8203812ffb08d734", "name": "Agent instruction/config may expose a secret: invoice-organizer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: invoice-organizer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a5c1fdb2fcc99d87", "name": "Agent authority lacks a verifier contract: invoice-organizer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: invoice-organizer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8216a8e377b699ea", "name": "Agent instruction contains unpinned remote install: web-to-app/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: web-to-app/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dbf23789726202ff", "name": "Agent authority lacks a verifier contract: matplotlib/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: matplotlib/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b1df84405f7c2a24", "name": "Agent instruction/config may expose a secret: requesting-code-review/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: requesting-code-review/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f42c4889786391b7", "name": "Agent instruction/config may expose a secret: flowio/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: flowio/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-94db0f9722f8064e", "name": "Agent authority lacks a verifier contract: storage-analyzer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: storage-analyzer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a10de067cc2d2479", "name": "Agent instruction/config may expose a secret: bgpt-paper-search/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: bgpt-paper-search/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8347518c38ab719d", "name": "Agent authority lacks a verifier contract: bgpt-paper-search/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: bgpt-paper-search/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97e97d7be2ab276e", "name": "Agent instruction/config may expose a secret: using-superpowers/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: using-superpowers/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5aa722290c7a98e2", "name": "Agent instruction/config may expose a secret: developer-growth-analysis/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: developer-growth-analysis/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-52cbf3a13642756a", "name": "Agent instruction contains unpinned remote install: paper-slide-deck/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: paper-slide-deck/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca355d3923ada2a4", "name": "Agent instruction/config may expose a secret: connect/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: connect/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b02ece44c65226d5", "name": "Agent authority lacks a verifier contract: connect/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: connect/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-64c462a57a765f64", "name": "Agent instruction/config may expose a secret: connect-apps/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: connect-apps/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-25898010dddd6fd3", "name": "Agent instruction/config may expose a secret: domain-name-brainstormer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: domain-name-brainstormer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cf4a2a17e4efc28b", "name": "Agent instruction/config may expose a secret: skill-creator/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skill-creator/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-710662f6d0ca5848", "name": "Agent instruction/config may expose a secret: planning-with-files/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: planning-with-files/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1faf64f76940427c", "name": "Agent instruction/config may expose a secret: lead-research-assistant/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: lead-research-assistant/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-42c9701e491b92d1", "name": "Agent authority lacks a verifier contract: lead-research-assistant/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: lead-research-assistant/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ca04b4715876b59", "name": "Agent authority lacks a verifier contract: read/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: read/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8dedca32e6ee59eb", "name": "Agent instruction/config may expose a secret: slack-gif-creator/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: slack-gif-creator/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-68b16baf42105da0", "name": "Agent authority lacks a verifier contract: slack-gif-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: slack-gif-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d44d2d28f29f5998", "name": "Agent instruction/config may expose a secret: test-driven-development/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: test-driven-development/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-df9c58ea5b3a15f8", "name": "Agent authority lacks a verifier contract: fetch-everything/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: fetch-everything/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b9e96c96ec6f1ea", "name": "Agent instruction/config may expose a secret: theme-factory/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: theme-factory/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4e2474c582abf157", "name": "Agent instruction/config may expose a secret: internal-comms/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: internal-comms/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a0451425d9936857", "name": "Agent authority lacks a verifier contract: uniprot-database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: uniprot-database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e9cfe27e9f0991a5", "name": "Agent instruction/config may expose a secret: doc-coauthoring/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: doc-coauthoring/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c376ae467229b97e", "name": "Agent authority lacks a verifier contract: ai-autonomy/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: ai-autonomy/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e2b71c60c7738918", "name": "Agent authority lacks a verifier contract: hatch-pet/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: hatch-pet/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c758ebdd0fdbb7fc", "name": "Agent instruction/config may expose a secret: skill-evolution-manager/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skill-evolution-manager/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1d8551de78fcf279", "name": "Agent instruction/config may expose a secret: brainstorming/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: brainstorming/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4aab37c49d850527", "name": "Agent authority lacks a verifier contract: aihot/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: aihot/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f86abf33cc4b6152", "name": "Agent instruction/config may expose a secret: tailored-resume-generator/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: tailored-resume-generator/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f1e4968fc89b69c5", "name": "Agent authority lacks a verifier contract: write/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: write/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-714450d2c236efaf", "name": "Agent authority lacks a verifier contract: pyzotero/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: pyzotero/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a3656d492bce4c09", "name": "Agent instruction/config may expose a secret: raffle-winner-picker/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: raffle-winner-picker/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-72e9b0883658ea22", "name": "Agent instruction/config may expose a secret: humanizer-zh/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: humanizer-zh/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-69b31d6c7d5d519f", "name": "Agent instruction/config may expose a secret: darwin-skill/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: darwin-skill/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4dc7c5c3188e84e9", "name": "Agent instruction/config may expose a secret: webapp-testing/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: webapp-testing/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-00889418315341ec", "name": "Agent authority lacks a verifier contract: guizang-ppt-skill/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: guizang-ppt-skill/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-05639b1258f379f7", "name": "Agent authority lacks a verifier contract: defuddle/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: defuddle/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48b56955db94917f", "name": "Agent instruction contains unpinned remote install: defuddle/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: defuddle/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62f4c64156867108", "name": "Agent authority lacks a verifier contract: opencode-migration/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: opencode-migration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-52d2291d1e4ead16", "name": "Agent instruction/config may expose a secret: skill-seekers/CLAUDE.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skill-seekers/CLAUDE.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-060b4f00b348318b", "name": "Agent instruction/config may expose a secret: skill-seekers/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skill-seekers/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bbe3a2bd6a391a38", "name": "Agent authority lacks a verifier contract: skill-seekers/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skill-seekers/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1d0395c172ca73f", "name": "Agent authority lacks a verifier contract: skill-seekers/.claude/mcp_config.example.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: skill-seekers/.claude/mcp_config.example.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97f3bfcec9265de9", "name": "Agent authority lacks a verifier contract: research-add-items/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: research-add-items/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e94c9dd30af5ed99", "name": "Agent instruction/config may expose a secret: biorxiv-database/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: biorxiv-database/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-02c0d5737087ba24", "name": "Agent instruction/config may expose a secret: skill-manager/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skill-manager/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-82fdbdbae09c1cf7", "name": "Agent instruction/config may expose a secret: writing-skills/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: writing-skills/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b63ce1db6dd2d182", "name": "Agent instruction/config may expose a secret: mcp-builder/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: mcp-builder/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2d2b09d2aa8f0128", "name": "Agent instruction/config may expose a secret: verification-before-completion/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: verification-before-completion/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-65bb6198ee651998", "name": "Agent instruction/config may expose a secret: agent-browser/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: agent-browser/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6a4d244b90cdd559", "name": "Agent instruction contains unpinned remote install: agent-browser/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: agent-browser/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-617274e808dcc52f", "name": "Agent instruction/config may expose a secret: using-git-worktrees/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: using-git-worktrees/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8497f46cba19a511", "name": "Agent instruction/config may expose a secret: dispatching-parallel-agents/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: dispatching-parallel-agents/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-571b6288857c3c6e", "name": "Agent instruction/config may expose a secret: artifacts-builder/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: artifacts-builder/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d11557de653fda4a", "name": "Agent authority lacks a verifier contract: skills-backup/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills-backup/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d1be57b08b8a358", "name": "Agent authority lacks a verifier contract: comfyui-skill/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: comfyui-skill/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-445fa9938219d4c8", "name": "Agent instruction/config may expose a secret: file-organizer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: file-organizer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9484a951a48680e9", "name": "Agent instruction/config may expose a secret: receiving-code-review/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: receiving-code-review/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3c9167c6cab09f0c", "name": "Agent authority lacks a verifier contract: social-clip/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: social-clip/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aba704f77f46bf07", "name": "Agent instruction contains unpinned remote install: social-clip/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: social-clip/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94475a221987ed8a", "name": "Agent instruction/config may expose a secret: content-research-writer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: content-research-writer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5c9dd80f3824bb71", "name": "Agent instruction/config may expose a secret: skill-share/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skill-share/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2399df992c2109f0", "name": "Agent authority lacks a verifier contract: yt-dlp-downloader/skill.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: yt-dlp-downloader/skill.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30127dab4c6ebfe9", "name": "Agent instruction/config may expose a secret: writing-plans/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: writing-plans/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ef7471c43e538108", "name": "Agent authority lacks a verifier contract: bioservices/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: bioservices/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6459db7f6224c57e", "name": "Agent instruction/config may expose a secret: docx/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: docx/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e93e77e73b83c13f", "name": "Agent authority lacks a verifier contract: docx/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: docx/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-680bce96fc3b49ae", "name": "Agent instruction contains unpinned remote install: docx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: docx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8917eb7dbe0ab945", "name": "Agent instruction/config may expose a secret: executing-plans/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: executing-plans/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-45d9dc00a3eeae3e", "name": "Agent authority lacks a verifier contract: research-report/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: research-report/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36b0c69c0e7223eb", "name": "Agent instruction/config may expose a secret: pptx/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: pptx/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a8b67f674595135d", "name": "Agent instruction contains unpinned remote install: pptx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: pptx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-01f712641f663521", "name": "Agent authority lacks a verifier contract: clinicaltrials-database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: clinicaltrials-database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5cdf79c046ccbe1b", "name": "Agent instruction/config may expose a secret: twitter-algorithm-optimizer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: twitter-algorithm-optimizer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2944fa0e478649a0", "name": "Agent authority lacks a verifier contract: research-add-fields/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: research-add-fields/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc4b4304fa15aeaa", "name": "Agent instruction/config may expose a secret: xlsx/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: xlsx/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e98c96f3bd935596", "name": "Agent instruction/config may expose a secret: bettafish/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: bettafish/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fbd232a2c130db86", "name": "Agent authority lacks a verifier contract: bettafish/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: bettafish/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11c79a0dc53aba4e", "name": "Agent instruction/config may expose a secret: canvas-design/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: canvas-design/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-79438dadcb094f6a", "name": "Agent authority lacks a verifier contract: novelai-skill/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: novelai-skill/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d62095591f140bb2", "name": "Agent instruction/config may expose a secret: image-enhancer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: image-enhancer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c95dabfba8f2441c", "name": "Agent authority lacks a verifier contract: reviewer-simulator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: reviewer-simulator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d40296404d089cab", "name": "Agent instruction/config may expose a secret: finishing-a-development-branch/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: finishing-a-development-branch/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-af977191b79db0d9", "name": "Agent instruction/config may expose a secret: pdf/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: pdf/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d8eb0c49c36ae188", "name": "Agent instruction/config may expose a secret: meeting-insights-analyzer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: meeting-insights-analyzer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7112fe2b4ce5e5bf", "name": "Agent authority lacks a verifier contract: meeting-insights-analyzer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: meeting-insights-analyzer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff5fd0b88d89a893", "name": "Agent instruction/config may expose a secret: qutip/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: qutip/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a1888bced08cd1b5", "name": "Agent instruction/config may expose a secret: competitive-ads-extractor/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: competitive-ads-extractor/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-65e7ab5ad4306827", "name": "Agent authority lacks a verifier contract: hv-analysis/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: hv-analysis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65f14e3ee4300ec2", "name": "Agent instruction/config may expose a secret: systematic-debugging/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: systematic-debugging/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b0f89ba069e09c41", "name": "Agent authority lacks a verifier contract: generate-image/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: generate-image/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4ab5cf71f127c78", "name": "Agent instruction/config may expose a secret: changelog-generator/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: changelog-generator/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-43d6261b33768990", "name": "Agent authority lacks a verifier contract: changelog-generator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: changelog-generator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4fcba842b90d63fd", "name": "Agent authority lacks a verifier contract: hivision-idphotos/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: hivision-idphotos/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-263ac89b809072dd", "name": "Agent authority lacks a verifier contract: research-deep/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: research-deep/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c23a2fe2c1aba9f6", "name": "Agent authority lacks a verifier contract: autocli/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: autocli/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1972383cebeab11e", "name": "Agent instruction contains unpinned remote install: autocli/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: autocli/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71f9cb2ab0f9dc8f", "name": "Agent instruction/config may expose a secret: langsmith-fetch/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: langsmith-fetch/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a0f7116317e72b55", "name": "Agent instruction/config may expose a secret: algorithmic-art/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: algorithmic-art/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b3d7128cfa666fa2", "name": "Agent instruction/config may expose a secret: brand-guidelines/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: brand-guidelines/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f1a2ce6bc36d5de3", "name": "Agent authority lacks a verifier contract: general-skills-backup/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: general-skills-backup/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b1552e54ec0afd2d", "name": "Agent instruction/config may expose a secret: self-improving-agent/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: self-improving-agent/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fe59812befe8fdd2", "name": "Agent instruction/config may expose a secret: github-to-skills/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: github-to-skills/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-aa19439873853ea1", "name": "Agent instruction/config may expose a secret: web-artifacts-builder/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: web-artifacts-builder/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b38043ec347056e8", "name": "Agent instruction/config may expose a secret: subagent-driven-development/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: subagent-driven-development/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f56f0d0454397b48", "name": "Agent instruction contains unpinned remote install: geniml/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: geniml/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f040350cd7db9797", "name": "Network/subprocess call without timeout or try/except \u2014 web-to-app/scripts/app_validator.py:143", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 web-to-app/scripts/app_validator.py:143"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72bfa348ee8f2015", "name": "Network/subprocess call without timeout or try/except \u2014 web-to-app/scripts/pake_builder.py:40", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 web-to-app/scripts/pake_builder.py:40"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81c981d55b509205", "name": "Commented-code block (5 lines) in matplotlib/scripts/plot_template.py:186", "shortDescription": {"text": "Commented-code block (5 lines) in matplotlib/scripts/plot_template.py:186"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ac7eedef8f534e05", "name": "Network/subprocess call without timeout or try/except \u2014 storage-analyzer/scripts/server.py:91", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 storage-analyzer/scripts/server.py:91"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8a27628d0f13350", "name": "Stub function `log_message` (body is just `pass`/`return`) \u2014 storage-analyzer/scripts/server.py:160", "shortDescription": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 storage-analyzer/scripts/server.py:160"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6368cf50c2328e52", "name": "Commented-code block (5 lines) in skill-creator/scripts/improve_description.py:158", "shortDescription": {"text": "Commented-code block (5 lines) in skill-creator/scripts/improve_description.py:158"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-20a1908ef188e20d", "name": "Network/subprocess call without timeout or try/except \u2014 skill-creator/scripts/run_eval.py:85", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-creator/scripts/run_eval.py:85"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-396f6f05d385ad72", "name": "Network/subprocess call without timeout or try/except \u2014 read/scripts/fetch_feishu.py:45", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 read/scripts/fetch_feishu.py:45"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2919d7a1c046038", "name": "Network/subprocess call without timeout or try/except \u2014 fetch-everything/scripts/fetch_everything.py:96", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 fetch-everything/scripts/fetch_everything.py:96"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d1c6796ca5f15c56", "name": "Legacy-named symbol `restore_literature_sync_backup` in general-sci-writing/scripts/state_manager.py:2087", "shortDescription": {"text": "Legacy-named symbol `restore_literature_sync_backup` in general-sci-writing/scripts/state_manager.py:2087"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2356c6f880fe41b", "name": "Network/subprocess call without timeout or try/except \u2014 general-sci-writing/scripts/state_manager.py:3776", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 general-sci-writing/scripts/state_manager.py:3776"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df57f6795564588f", "name": "Legacy-named symbol `reviewer_sidebar_width_v1` in reviewer-response-sci/scripts/build_full_package.py:1164", "shortDescription": {"text": "Legacy-named symbol `reviewer_sidebar_width_v1` in reviewer-response-sci/scripts/build_full_package.py:1164"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0d07af0d3884cbc1", "name": "Commented-code block (5 lines) in reviewer-response-sci/scripts/build_full_package.py:90", "shortDescription": {"text": "Commented-code block (5 lines) in reviewer-response-sci/scripts/build_full_package.py:90"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-90cd8909f18fa380", "name": "Legacy-named symbol `reviewer_sidebar_width_v1` in reviewer-response-sci/scripts/html_format_check.py:69", "shortDescription": {"text": "Legacy-named symbol `reviewer_sidebar_width_v1` in reviewer-response-sci/scripts/html_format_check.py:69"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25aa6659c39e1f8c", "name": "Network/subprocess call without timeout or try/except \u2014 uniprot-database/scripts/uniprot_client.py:61", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 uniprot-database/scripts/uniprot_client.py:61"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-506bc5764f3fcf95", "name": "Network/subprocess call without timeout or try/except \u2014 ai-autonomy/scripts/run_autonomy.py:81", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 ai-autonomy/scripts/run_autonomy.py:81"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f753d0d5487bbbe6", "name": "Network/subprocess call without timeout or try/except \u2014 ai-autonomy/scripts/run_team.py:276", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 ai-autonomy/scripts/run_team.py:276"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-181f4faa588f6d10", "name": "Network/subprocess call without timeout or try/except \u2014 ai-autonomy/references/templates/init.py:47", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 ai-autonomy/references/templates/init.py:47"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4fd834f705c5a19", "name": "Network/subprocess call without timeout or try/except \u2014 hatch-pet/scripts/generate_pet_image.py:124", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 hatch-pet/scripts/generate_pet_image.py:124"}, "fullDescription": {"text": "`urllib.request.urlopen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ec9f3a3961215f06", "name": "Network/subprocess call without timeout or try/except \u2014 teacher-paper/scripts/fetch_everything.py:96", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 teacher-paper/scripts/fetch_everything.py:96"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9107f4c536ed72cb", "name": "Legacy-named symbol `101_q01_v2` in teacher-paper/scripts/assemble.py:573", "shortDescription": {"text": "Legacy-named symbol `101_q01_v2` in teacher-paper/scripts/assemble.py:573"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a1a4a6cb6e22f386", "name": "Network/subprocess call without timeout or try/except \u2014 teacher-paper/scripts/assemble.py:919", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 teacher-paper/scripts/assemble.py:919"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a935cb5d05a2dae9", "name": "Network/subprocess call without timeout or try/except \u2014 teacher-paper/scripts/setup.py:375", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 teacher-paper/scripts/setup.py:375"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8d756a51df52a548", "name": "Legacy-named symbol `101_q01_v2` in teacher-paper/scripts/regression_test.py:578", "shortDescription": {"text": "Legacy-named symbol `101_q01_v2` in teacher-paper/scripts/regression_test.py:578"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-798da7e77b7cc5c5", "name": "Network/subprocess call without timeout or try/except \u2014 skill-evolution-manager/scripts/align_all.py:22", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-evolution-manager/scripts/align_all.py:22"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-abaf004da6ccaabc", "name": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/run_pipeline.py:32", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/run_pipeline.py:32"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa33f81bd287db38", "name": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/polish_revisions.py:252", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/polish_revisions.py:252"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a00d128a951e70ae", "name": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/execute_reference_search.py:146", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/execute_reference_search.py:146"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8adcff1c16ebdc60", "name": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/ensure_global_skill.py:18", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/ensure_global_skill.py:18"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ea6138b645f6492", "name": "Commented-code block (5 lines) in sci2doc/scripts/state_manager.py:1043", "shortDescription": {"text": "Commented-code block (5 lines) in sci2doc/scripts/state_manager.py:1043"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8cd45ab141fb89c7", "name": "Network/subprocess call without timeout or try/except \u2014 sci2doc/scripts/state_manager.py:2290", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 sci2doc/scripts/state_manager.py:2290"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ceb2f680ffb01735", "name": "Legacy-named symbol `no_backup` in opencode-migration/scripts/migration_installer.py:543", "shortDescription": {"text": "Legacy-named symbol `no_backup` in opencode-migration/scripts/migration_installer.py:543"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f64cde3d33c1a31a", "name": "Legacy-named symbol `test_mcp_legacy` in skill-seekers/tests/test_unified_mcp_integration.py:114", "shortDescription": {"text": "Legacy-named symbol `test_mcp_legacy` in skill-seekers/tests/test_unified_mcp_integration.py:114"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f7e54bdd02c8471", "name": "Commented-code block (5 lines) in skill-seekers/tests/test_architecture_scenarios.py:599", "shortDescription": {"text": "Commented-code block (5 lines) in skill-seekers/tests/test_architecture_scenarios.py:599"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b624f7e8ed32bfa7", "name": "Legacy-named symbol `skill_v2` in skill-seekers/tests/test_config_validation.py:66", "shortDescription": {"text": "Legacy-named symbol `skill_v2` in skill-seekers/tests/test_config_validation.py:66"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9654f3a2eb5e40b", "name": "Legacy-named symbol `skill_v2` in skill-seekers/tests/test_adaptors/test_claude_adaptor.py:280", "shortDescription": {"text": "Legacy-named symbol `skill_v2` in skill-seekers/tests/test_adaptors/test_claude_adaptor.py:280"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-087dd1dd20d81c94", "name": "Commented-code block (24 lines) in skill-seekers/src/skill_seekers/cli/doc_scraper.py:727", "shortDescription": {"text": "Commented-code block (24 lines) in skill-seekers/src/skill_seekers/cli/doc_scraper.py:727"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f8f777d08cb17d82", "name": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/doc_scraper.py:2259", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/doc_scraper.py:2259"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b22e85cd3a2930a", "name": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/enhance_skill_local.py:965", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/enhance_skill_local.py:965"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e8c451ed0df6ccf", "name": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/rate_limit_handler.py:43", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/rate_limit_handler.py:43"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0fd182f47e4c2bdc", "name": "Commented-code block (6 lines) in skill-seekers/src/skill_seekers/cli/language_detector.py:47", "shortDescription": {"text": "Commented-code block (6 lines) in skill-seekers/src/skill_seekers/cli/language_detector.py:47"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d9f52aef09dd25bb", "name": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/utils.py:45", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/utils.py:45"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85bf60afa49b1d09", "name": "Legacy-named symbol `_validate_legacy` in skill-seekers/src/skill_seekers/cli/config_validator.py:87", "shortDescription": {"text": "Legacy-named symbol `_validate_legacy` in skill-seekers/src/skill_seekers/cli/config_validator.py:87"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa857d24da26c2de", "name": "Commented-code block (5 lines) in skill-seekers/src/skill_seekers/cli/conflict_detector.py:115", "shortDescription": {"text": "Commented-code block (5 lines) in skill-seekers/src/skill_seekers/cli/conflict_detector.py:115"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-59e894a63ab52d43", "name": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/unified_scraper.py:196", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/unified_scraper.py:196"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1680f2b112afd509", "name": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/github_fetcher.py:209", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/github_fetcher.py:209"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8f0bb73232d5d78", "name": "Network/subprocess call without timeout or try/except \u2014 skill-manager/scripts/batch_update.py:12", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-manager/scripts/batch_update.py:12"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b88ecc7d176409da", "name": "Network/subprocess call without timeout or try/except \u2014 review-writing/scripts/init_project.py:117", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 review-writing/scripts/init_project.py:117"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f626e53be6630403", "name": "Network/subprocess call without timeout or try/except \u2014 skills-backup/setup_auto_backup.py:54", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills-backup/setup_auto_backup.py:54"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ccafc873e8b95ab3", "name": "Commented-code block (5 lines) in skills-backup/scripts/auto_sync.py:68", "shortDescription": {"text": "Commented-code block (5 lines) in skills-backup/scripts/auto_sync.py:68"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-31c7f2e58839da40", "name": "Network/subprocess call without timeout or try/except \u2014 skills-backup/scripts/auto_sync.py:26", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills-backup/scripts/auto_sync.py:26"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b11047202e4161c2", "name": "Network/subprocess call without timeout or try/except \u2014 skills-backup/scripts/sync_skills.py:28", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills-backup/scripts/sync_skills.py:28"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed9c72bbc792ac66", "name": "Network/subprocess call without timeout or try/except \u2014 docx/scripts/office/soffice.py:14", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 docx/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d3a3476f098b97e2", "name": "Network/subprocess call without timeout or try/except \u2014 docx/scripts/office/validators/redlining.py:138", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 docx/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a660ea4096a15f4", "name": "Legacy-named symbol `xml_copy` in docx/scripts/office/validators/base.py:705", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in docx/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ba78728b859829e", "name": "Network/subprocess call without timeout or try/except \u2014 pptx/scripts/thumbnail.py:161", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 pptx/scripts/thumbnail.py:161"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7224856b3233ea94", "name": "Network/subprocess call without timeout or try/except \u2014 pptx/scripts/office/soffice.py:14", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 pptx/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0fcad51cdf2be6d2", "name": "Network/subprocess call without timeout or try/except \u2014 pptx/scripts/office/validators/redlining.py:138", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 pptx/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b58a58a9736f0a8", "name": "Legacy-named symbol `xml_copy` in pptx/scripts/office/validators/base.py:705", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in pptx/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-13b2b2933d16f689", "name": "Network/subprocess call without timeout or try/except \u2014 clinicaltrials-database/scripts/query_clinicaltrials.py:87", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 clinicaltrials-database/scripts/query_clinicaltrials.py:87"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1fb17f4b08d46fa7", "name": "Network/subprocess call without timeout or try/except \u2014 xlsx/scripts/recalc.py:92", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 xlsx/scripts/recalc.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca7d456d71b9539e", "name": "Network/subprocess call without timeout or try/except \u2014 xlsx/scripts/office/soffice.py:14", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 xlsx/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9aa7d59bbfd5ef5d", "name": "Network/subprocess call without timeout or try/except \u2014 xlsx/scripts/office/validators/redlining.py:138", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 xlsx/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f22d5640c4b31083", "name": "Legacy-named symbol `xml_copy` in xlsx/scripts/office/validators/base.py:705", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in xlsx/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-268088fc51a45255", "name": "Network/subprocess call without timeout or try/except \u2014 bettafish/scripts/wrapper.py:14", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 bettafish/scripts/wrapper.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fdf6d60fb2116a53", "name": "Commented-code block (8 lines) in systematic-debugging/condition-based-waiting-example.ts:140", "shortDescription": {"text": "Commented-code block (8 lines) in systematic-debugging/condition-based-waiting-example.ts:140"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-170ca58091b81aad", "name": "Network/subprocess call without timeout or try/except \u2014 generate-image/scripts/generate_image.py:144", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 generate-image/scripts/generate_image.py:144"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65fa730670549058", "name": "Network/subprocess call without timeout or try/except \u2014 hivision-idphotos/scripts/hivision_task.py:31", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 hivision-idphotos/scripts/hivision_task.py:31"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b532527158912888", "name": "Commented-code block (8 lines) in algorithmic-art/templates/generator_template.js:15", "shortDescription": {"text": "Commented-code block (8 lines) in algorithmic-art/templates/generator_template.js:15"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f125564792bbbee6", "name": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/setup_auto_backup.py:54", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/setup_auto_backup.py:54"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7c740255891923f", "name": "Commented-code block (5 lines) in general-skills-backup/scripts/auto_sync.py:80", "shortDescription": {"text": "Commented-code block (5 lines) in general-skills-backup/scripts/auto_sync.py:80"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f15ecb4552b12e18", "name": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/scripts/auto_sync.py:27", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/scripts/auto_sync.py:27"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-96f353274c924779", "name": "Legacy-named symbol `setup_auto_backup` in general-skills-backup/scripts/quick_start.py:15", "shortDescription": {"text": "Legacy-named symbol `setup_auto_backup` in general-skills-backup/scripts/quick_start.py:15"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8640fc8652ca381a", "name": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/scripts/quick_start.py:23", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/scripts/quick_start.py:23"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84e129fc66ddc45c", "name": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/scripts/sync_skills.py:29", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/scripts/sync_skills.py:29"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88e31f4d63f488e4", "name": "Network/subprocess call without timeout or try/except \u2014 github-to-skills/scripts/create_github_skill.py:64", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 github-to-skills/scripts/create_github_skill.py:64"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f697022b8ecb2933", "name": "46 env vars used in code but missing from .env.example", "shortDescription": {"text": "46 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOKEN`, `ANTHROPIC_BASE_URL`, `APPDATA`, `BRAINSTORM_DIR`, `BRAINSTORM_HOST`, `BRAINSTORM_OWNER_PID`, `BRAINSTORM_PORT` + 38 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nweb-to-app/scripts/pwabuilder_converter.py:cleanup, web-to-app/scripts/pake_builder.py:cleanup\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nfetch-everything/scripts/url-converter.py:test_service, fetch-everything/scripts/url-converter.py:get_content, teacher-paper/scripts/url-converter.py:test_service, teacher-paper/scripts/url-converter.py:get_content\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5baa8971ebe192a1", "name": "Unused endpoint: GET /", "shortDescription": {"text": "Unused endpoint: GET /"}, "fullDescription": {"text": "`skill-seekers/api/main.py` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-138cd260d552a823", "name": "Unused endpoint: GET /api/configs", "shortDescription": {"text": "Unused endpoint: GET /api/configs"}, "fullDescription": {"text": "`skill-seekers/api/main.py` declares `GET /api/configs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ac192233ae843675", "name": "Unused endpoint: GET /api/configs/{name}", "shortDescription": {"text": "Unused endpoint: GET /api/configs/{name}"}, "fullDescription": {"text": "`skill-seekers/api/main.py` declares `GET /api/configs/{name}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5926c673ce6a1271", "name": "Unused endpoint: GET /api/categories", "shortDescription": {"text": "Unused endpoint: GET /api/categories"}, "fullDescription": {"text": "`skill-seekers/api/main.py` declares `GET /api/categories` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-324dcf72c55ec038", "name": "Unused endpoint: GET /api/download/{config_name}", "shortDescription": {"text": "Unused endpoint: GET /api/download/{config_name}"}, "fullDescription": {"text": "`skill-seekers/api/main.py` declares `GET /api/download/{config_name}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/22876"}, "properties": {"repository": "wsxwj123/opencode-skills-backup", "repoUrl": "https://github.com/wsxwj123/opencode-skills-backup", "branch": "main"}, "results": [{"ruleId": "scanner-c776e469cde2fdbd", "level": "note", "message": {"text": "Possibly dead Python function: verify_url"}, "properties": {"repobilityId": "7b2e283d4d54d1c0", "scanner": "scanner-primary", "fingerprint": "c776e469cde2fdbd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "literature-review/scripts/verify_citations.py:96"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f9d130bc9fb8b9ea", "level": "note", "message": {"text": "Possibly dead Python function: format_citation_nature"}, "properties": {"repobilityId": "b1b2ebf6083b5048", "scanner": "scanner-primary", "fingerprint": "f9d130bc9fb8b9ea", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "literature-review/scripts/verify_citations.py:161"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dbfc43ecc155b4af", "level": "note", "message": {"text": "Possibly dead Python function: create_config_file"}, "properties": {"repobilityId": "39367a762e4ee7c2", "scanner": "scanner-primary", "fingerprint": "dbfc43ecc155b4af", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "web-to-app/scripts/pake_builder.py:200"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2d0014d817db140", "level": "note", "message": {"text": "Possibly dead Python function: create_violin_plot"}, "properties": {"repobilityId": "f76f536d5d2d58fe", "scanner": "scanner-primary", "fingerprint": "a2d0014d817db140", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "matplotlib/scripts/plot_template.py:255"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c0abf5beb6e3c43", "level": "note", "message": {"text": "Possibly dead Python function: log_message"}, "properties": {"repobilityId": "965f3150b4af5b2e", "scanner": "scanner-primary", "fingerprint": "2c0abf5beb6e3c43", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "storage-analyzer/scripts/server.py:160"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0d7d32d2b32a69c8", "level": "note", "message": {"text": "Possibly dead Python function: do_GET"}, "properties": {"repobilityId": "2d943bb45e4f13bd", "scanner": "scanner-primary", "fingerprint": "0d7d32d2b32a69c8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "storage-analyzer/scripts/server.py:171"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d50388840dfa7ac", "level": "note", "message": {"text": "Possibly dead Python function: do_POST"}, "properties": {"repobilityId": "53357410ca9379a9", "scanner": "scanner-primary", "fingerprint": "2d50388840dfa7ac", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "storage-analyzer/scripts/server.py:180"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-70e6080476c8a9c8", "level": "note", "message": {"text": "Possibly dead Python function: run_single_query"}, "properties": {"repobilityId": "1056c4dff9b57a73", "scanner": "scanner-primary", "fingerprint": "70e6080476c8a9c8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-creator/scripts/run_eval.py:35"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a808f06de8c88490", "level": "note", "message": {"text": "Possibly dead Python function: do_GET"}, "properties": {"repobilityId": "2d943bb45e4f13bd", "scanner": "scanner-primary", "fingerprint": "a808f06de8c88490", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-creator/eval-viewer/generate_review.py:332"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-66d53816ad54e01b", "level": "note", "message": {"text": "Possibly dead Python function: do_POST"}, "properties": {"repobilityId": "53357410ca9379a9", "scanner": "scanner-primary", "fingerprint": "66d53816ad54e01b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-creator/eval-viewer/generate_review.py:361"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07324cde38d57b28", "level": "note", "message": {"text": "Possibly dead Python function: log_message"}, "properties": {"repobilityId": "965f3150b4af5b2e", "scanner": "scanner-primary", "fingerprint": "07324cde38d57b28", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-creator/eval-viewer/generate_review.py:382"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-770b3515bd28b1a7", "level": "note", "message": {"text": "Possibly dead Python function: safe_stat_mtime"}, "properties": {"repobilityId": "55816b9eaf90a63c", "scanner": "scanner-primary", "fingerprint": "770b3515bd28b1a7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "planning-with-files/scripts/session-catchup.py:93"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-46992d3b4cc94ca1", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_quad"}, "properties": {"repobilityId": "9c54008225f34fad", "scanner": "scanner-primary", "fingerprint": "46992d3b4cc94ca1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:17"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1eda6dd8c2a1d0c4", "level": "note", "message": {"text": "Possibly dead Python function: ease_out_quad"}, "properties": {"repobilityId": "74b589b882a977ff", "scanner": "scanner-primary", "fingerprint": "1eda6dd8c2a1d0c4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:22"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-466e7dc3ed7d0cdf", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_quad"}, "properties": {"repobilityId": "142c853223e69301", "scanner": "scanner-primary", "fingerprint": "466e7dc3ed7d0cdf", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:27"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43f4b77a48f330f3", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_cubic"}, "properties": {"repobilityId": "04c4b3dd3a4c80b5", "scanner": "scanner-primary", "fingerprint": "43f4b77a48f330f3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:34"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a66cd94fa66581d", "level": "note", "message": {"text": "Possibly dead Python function: ease_out_cubic"}, "properties": {"repobilityId": "1527d30f50a4943b", "scanner": "scanner-primary", "fingerprint": "3a66cd94fa66581d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:39"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a204067c9363d8e9", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_cubic"}, "properties": {"repobilityId": "4e32e71f9a5016ac", "scanner": "scanner-primary", "fingerprint": "a204067c9363d8e9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:44"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bbd6c5773a4c582d", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_bounce"}, "properties": {"repobilityId": "0185838c943af0e6", "scanner": "scanner-primary", "fingerprint": "bbd6c5773a4c582d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:71"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4232236647c0072b", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_elastic"}, "properties": {"repobilityId": "4a3d8bcbd5ff465b", "scanner": "scanner-primary", "fingerprint": "4232236647c0072b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:78"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ea6303816dd6a3a5", "level": "note", "message": {"text": "Possibly dead Python function: ease_out_elastic"}, "properties": {"repobilityId": "fa5c6451007cfca8", "scanner": "scanner-primary", "fingerprint": "ea6303816dd6a3a5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:85"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d2bad836c123db8", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_elastic"}, "properties": {"repobilityId": "00839dd091318e93", "scanner": "scanner-primary", "fingerprint": "4d2bad836c123db8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:92"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94dd0563cd6c5e87", "level": "note", "message": {"text": "Possibly dead Python function: interpolate"}, "properties": {"repobilityId": "7f46b343ca4d0a22", "scanner": "scanner-primary", "fingerprint": "94dd0563cd6c5e87", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:122"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f360d212a4681a60", "level": "note", "message": {"text": "Possibly dead Python function: ease_back_in"}, "properties": {"repobilityId": "56b2b016f0ad05d0", "scanner": "scanner-primary", "fingerprint": "f360d212a4681a60", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:140"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c3f5ebe3f474bfa7", "level": "note", "message": {"text": "Possibly dead Python function: ease_back_out"}, "properties": {"repobilityId": "32646da19ba276ce", "scanner": "scanner-primary", "fingerprint": "c3f5ebe3f474bfa7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:147"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a2be1abd363028f", "level": "note", "message": {"text": "Possibly dead Python function: ease_back_in_out"}, "properties": {"repobilityId": "2b283166adb35df2", "scanner": "scanner-primary", "fingerprint": "0a2be1abd363028f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:154"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-02b1dd5772664f89", "level": "note", "message": {"text": "Possibly dead Python function: apply_squash_stretch"}, "properties": {"repobilityId": "69472943e1b79017", "scanner": "scanner-primary", "fingerprint": "02b1dd5772664f89", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:163"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c7723fd760e4809e", "level": "note", "message": {"text": "Possibly dead Python function: calculate_arc_motion"}, "properties": {"repobilityId": "624162caad1aec81", "scanner": "scanner-primary", "fingerprint": "c7723fd760e4809e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:195"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0e9d9ea456ff74ce", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/merge-to-pdf.ts:91"}, "properties": {"repobilityId": "7ba42e5c6ac853e3", "scanner": "scanner-primary", "fingerprint": "0e9d9ea456ff74ce", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f2726320569d7597", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/extract-figure.ts:72"}, "properties": {"repobilityId": "9a53a2eaf77abcfb", "scanner": "scanner-primary", "fingerprint": "f2726320569d7597", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-86c9e8ed8cac14d0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/apply-template.ts:152"}, "properties": {"repobilityId": "9e3b32a6bf3a7374", "scanner": "scanner-primary", "fingerprint": "86c9e8ed8cac14d0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d2703a8fdb07a9f0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/merge-to-pptx.ts:111"}, "properties": {"repobilityId": "ae90c087584b6ceb", "scanner": "scanner-primary", "fingerprint": "d2703a8fdb07a9f0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-216166b5e8c38a8d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 paper-slide-deck/scripts/detect-figures.ts:275"}, "properties": {"repobilityId": "90cbd4e0144ec6f9", "scanner": "scanner-primary", "fingerprint": "216166b5e8c38a8d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d4686dc2928bc952", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 writing-skills/render-graphs.js:124"}, "properties": {"repobilityId": "f56d1c8697184265", "scanner": "scanner-primary", "fingerprint": "d4686dc2928bc952", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-a052ba5563d614b5", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in web-to-app/scripts/app_validator.py:112"}, "properties": {"repobilityId": "6a034f0cc255d272", "scanner": "scanner-primary", "fingerprint": "a052ba5563d614b5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "web-to-app/scripts/app_validator.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-ae54e422119b343e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in skill-creator/assets/eval_review.html:69"}, "properties": {"repobilityId": "cac8dbeb1b7b7130", "scanner": "scanner-primary", "fingerprint": "ae54e422119b343e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-creator/assets/eval_review.html"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-4c62b3dc558d1c56", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in skill-creator/eval-viewer/viewer.html:766"}, "properties": {"repobilityId": "24c5d2a4f5e1e715", "scanner": "scanner-primary", "fingerprint": "4c62b3dc558d1c56", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-creator/eval-viewer/viewer.html"}, "region": {"startLine": 766}}}]}, {"ruleId": "scanner-5c0d4f7351a96b77", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in teacher-paper/scripts/regression_test.py:182"}, "properties": {"repobilityId": "dcd3ae3ba4c8b22e", "scanner": "scanner-primary", "fingerprint": "5c0d4f7351a96b77", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "teacher-paper/scripts/regression_test.py"}, "region": {"startLine": 182}}}]}, {"ruleId": "scanner-01bd6dd62ac69b5b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in brainstorming/scripts/helper.js:57"}, "properties": {"repobilityId": "2bf3491a10b41e5f", "scanner": "scanner-primary", "fingerprint": "01bd6dd62ac69b5b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "brainstorming/scripts/helper.js"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-4eefecb7d9f4c372", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in darwin-skill/scripts/screenshot.mjs:60"}, "properties": {"repobilityId": "93f63bf82ccbffe8", "scanner": "scanner-primary", "fingerprint": "4eefecb7d9f4c372", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "darwin-skill/scripts/screenshot.mjs"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-d24ef43ec88ec921", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in darwin-skill/assets/chart-ratchet-en.html:266"}, "properties": {"repobilityId": "43a9e638dcc53a33", "scanner": "scanner-primary", "fingerprint": "d24ef43ec88ec921", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "darwin-skill/assets/chart-ratchet-en.html"}, "region": {"startLine": 266}}}]}, {"ruleId": "scanner-ff4c5d0dc3d69982", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in darwin-skill/assets/chart-ratchet.html:268"}, "properties": {"repobilityId": "d97e8a8e9a01ba98", "scanner": "scanner-primary", "fingerprint": "ff4c5d0dc3d69982", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "darwin-skill/assets/chart-ratchet.html"}, "region": {"startLine": 268}}}]}, {"ruleId": "scanner-1aa468df7e32af0e", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in webapp-testing/scripts/with_server.py:71"}, "properties": {"repobilityId": "8c014690d0b8bee6", "scanner": "scanner-primary", "fingerprint": "1aa468df7e32af0e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "webapp-testing/scripts/with_server.py"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-7aea534ed8a5666e", "level": "error", "message": {"text": "Possible secret in opencode-migration/opencode_windows_preview.json"}, "properties": {"repobilityId": "15a1e8c452f7d8e1", "scanner": "scanner-primary", "fingerprint": "7aea534ed8a5666e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "opencode-migration/opencode_windows_preview.json"}, "region": {"startLine": 207}}}]}, {"ruleId": "scanner-7aea534ed8a5666e", "level": "error", "message": {"text": "Possible secret in opencode-migration/opencode_windows_preview.json"}, "properties": {"repobilityId": "15a1e8c452f7d8e1", "scanner": "scanner-primary", "fingerprint": "7aea534ed8a5666e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "opencode-migration/opencode_windows_preview.json"}, "region": {"startLine": 310}}}]}, {"ruleId": "scanner-7aea534ed8a5666e", "level": "error", "message": {"text": "Possible secret in opencode-migration/opencode_windows_preview.json"}, "properties": {"repobilityId": "15a1e8c452f7d8e1", "scanner": "scanner-primary", "fingerprint": "7aea534ed8a5666e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "opencode-migration/opencode_windows_preview.json"}, "region": {"startLine": 427}}}]}, {"ruleId": "scanner-7aea534ed8a5666e", "level": "error", "message": {"text": "Possible secret in opencode-migration/opencode_windows_preview.json"}, "properties": {"repobilityId": "15a1e8c452f7d8e1", "scanner": "scanner-primary", "fingerprint": "7aea534ed8a5666e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "opencode-migration/opencode_windows_preview.json"}, "region": {"startLine": 509}}}]}, {"ruleId": "scanner-7aea534ed8a5666e", "level": "error", "message": {"text": "Possible secret in opencode-migration/opencode_windows_preview.json"}, "properties": {"repobilityId": "15a1e8c452f7d8e1", "scanner": "scanner-primary", "fingerprint": "7aea534ed8a5666e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "opencode-migration/opencode_windows_preview.json"}, "region": {"startLine": 617}}}]}, {"ruleId": "scanner-e58294dada9f3b79", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in opencode-migration/README.md:132"}, "properties": {"repobilityId": "e82ff7951ed1934d", "scanner": "scanner-primary", "fingerprint": "e58294dada9f3b79", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "opencode-migration/README.md"}, "region": {"startLine": 132}}}]}, {"ruleId": "scanner-eac1f7cf4a4ad8ca", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in opencode-migration/package_skill.sh:50"}, "properties": {"repobilityId": "0603abce07339195", "scanner": "scanner-primary", "fingerprint": "eac1f7cf4a4ad8ca", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "opencode-migration/package_skill.sh"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-5c3b8207d56cb49d", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in opencode-migration/scripts/migration_installer.py:143"}, "properties": {"repobilityId": "df1491cb048f709f", "scanner": "scanner-primary", "fingerprint": "5c3b8207d56cb49d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "opencode-migration/scripts/migration_installer.py"}, "region": {"startLine": 143}}}]}, {"ruleId": "scanner-f3472c85d07b7df3", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in opencode-migration/scripts/config_packager.py:356"}, "properties": {"repobilityId": "91923f30d7f3aba8", "scanner": "scanner-primary", "fingerprint": "f3472c85d07b7df3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "opencode-migration/scripts/config_packager.py"}, "region": {"startLine": 356}}}]}, {"ruleId": "scanner-4788521a5799f8a6", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in skill-seekers/api/main.py:26"}, "properties": {"repobilityId": "8f8fdbf0e0b14968", "scanner": "scanner-primary", "fingerprint": "4788521a5799f8a6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/api/main.py"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-8592446753ad570e", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in skill-seekers/src/skill_seekers/mcp/server_fastmcp.py:1146"}, "properties": {"repobilityId": "7746687cc40bd3a4", "scanner": "scanner-primary", "fingerprint": "8592446753ad570e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/src/skill_seekers/mcp/server_fastmcp.py"}, "region": {"startLine": 1146}}}]}, {"ruleId": "scanner-0fc1948b42aa8f71", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in skill-manager/scripts/smart_batch_update.py:17"}, "properties": {"repobilityId": "39d18eca42a464b6", "scanner": "scanner-primary", "fingerprint": "0fc1948b42aa8f71", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-manager/scripts/smart_batch_update.py"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-78a3e63256ca36ed", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in skill-manager/scripts/batch_update.py:14"}, "properties": {"repobilityId": "8e21fecfcc63c9c3", "scanner": "scanner-primary", "fingerprint": "78a3e63256ca36ed", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-manager/scripts/batch_update.py"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-91a13463b7424b7d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in writing-skills/render-graphs.js:18"}, "properties": {"repobilityId": "67b965cbc5b36c7c", "scanner": "scanner-primary", "fingerprint": "91a13463b7424b7d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "writing-skills/render-graphs.js"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-1ac84b30018855db", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in skills-backup/setup_auto_backup.py:82"}, "properties": {"repobilityId": "146059241471cf1a", "scanner": "scanner-primary", "fingerprint": "1ac84b30018855db", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-backup/setup_auto_backup.py"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-ca000ddad4729a64", "level": "error", "message": {"text": "Possible secret in langsmith-fetch/README.md"}, "properties": {"repobilityId": "d08c5f1f20127c8b", "scanner": "scanner-primary", "fingerprint": "ca000ddad4729a64", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "langsmith-fetch/README.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-ea489086f816929c", "level": "error", "message": {"text": "Possible secret in langsmith-fetch/SKILL.md"}, "properties": {"repobilityId": "ad3f633338fe3e8c", "scanner": "scanner-primary", "fingerprint": "ea489086f816929c", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "langsmith-fetch/SKILL.md"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-3df8dcd4169cbceb", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in vercel-react-best-practices/AGENTS.md:2013"}, "properties": {"repobilityId": "448780634d2c3ab3", "scanner": "scanner-primary", "fingerprint": "3df8dcd4169cbceb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vercel-react-best-practices/AGENTS.md"}, "region": {"startLine": 2013}}}]}, {"ruleId": "scanner-a658a66454acd00d", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in general-skills-backup/setup_auto_backup.py:82"}, "properties": {"repobilityId": "a6d0d1ecff77c3a5", "scanner": "scanner-primary", "fingerprint": "a658a66454acd00d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "general-skills-backup/setup_auto_backup.py"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-f6dcc0e0b38f4e8c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ad373634e072321b", "scanner": "scanner-primary", "fingerprint": "f6dcc0e0b38f4e8c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/.github/workflows/tests.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-f6dcc0e0b38f4e8c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ad373634e072321b", "scanner": "scanner-primary", "fingerprint": "f6dcc0e0b38f4e8c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/.github/workflows/tests.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-f6dcc0e0b38f4e8c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3bec3e1bc79af120", "scanner": "scanner-primary", "fingerprint": "f6dcc0e0b38f4e8c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/.github/workflows/tests.yml"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-f6dcc0e0b38f4e8c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "646bd042fd986a0f", "scanner": "scanner-primary", "fingerprint": "f6dcc0e0b38f4e8c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/.github/workflows/tests.yml"}, "region": {"startLine": 101}}}]}, {"ruleId": "scanner-564221f3cc046aa8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c665814feeec559d", "scanner": "scanner-primary", "fingerprint": "564221f3cc046aa8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/.github/workflows/release.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-564221f3cc046aa8", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0e25bca484260230", "scanner": "scanner-primary", "fingerprint": "564221f3cc046aa8", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/.github/workflows/release.yml"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-840b581cd7df7ed0", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b8269e4b2a24152d", "scanner": "scanner-primary", "fingerprint": "840b581cd7df7ed0", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/.github/workflows/release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f3c19cad4d6a9a9", "level": "note", "message": {"text": "Very large file: general-sci-writing/scripts/state_manager.py (3787 lines)"}, "properties": {"repobilityId": "8891c4695495e4c6", "scanner": "scanner-primary", "fingerprint": "2f3c19cad4d6a9a9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea536618c8c6574c", "level": "note", "message": {"text": "Very large file: reviewer-response-sci/scripts/build_full_package.py (1311 lines)"}, "properties": {"repobilityId": "082675f8d34d061d", "scanner": "scanner-primary", "fingerprint": "ea536618c8c6574c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-fec97d4c6d4964d3", "level": "note", "message": {"text": "Very large file: teacher-paper/scripts/assemble.py (1788 lines)"}, "properties": {"repobilityId": "0a38ae8852cb90db", "scanner": "scanner-primary", "fingerprint": "fec97d4c6d4964d3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-02c923310d090b85", "level": "note", "message": {"text": "Very large file: revise-sci/scripts/revise_units.py (1329 lines)"}, "properties": {"repobilityId": "252605a50f91f241", "scanner": "scanner-primary", "fingerprint": "02c923310d090b85", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9e6cf0bc01703696", "level": "note", "message": {"text": "Very large file: sci2doc/scripts/state_manager.py (2357 lines)"}, "properties": {"repobilityId": "5edec64860da5799", "scanner": "scanner-primary", "fingerprint": "9e6cf0bc01703696", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-79341bc79b862ef2", "level": "note", "message": {"text": "Very large file: sci2doc/scripts/check_quality.py (2546 lines)"}, "properties": {"repobilityId": "86e0fd5ad2695ffb", "scanner": "scanner-primary", "fingerprint": "79341bc79b862ef2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e2feb0e27850650e", "level": "note", "message": {"text": "Very large file: skill-seekers/src/skill_seekers/mcp/server_legacy.py (2302 lines)"}, "properties": {"repobilityId": "c86372ce461802aa", "scanner": "scanner-primary", "fingerprint": "e2feb0e27850650e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d01b0fefb12c5428", "level": "note", "message": {"text": "Very large file: skill-seekers/src/skill_seekers/cli/github_scraper.py (1466 lines)"}, "properties": {"repobilityId": "c32db035ecfff802", "scanner": "scanner-primary", "fingerprint": "d01b0fefb12c5428", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-58f49206bda5eb78", "level": "note", "message": {"text": "Very large file: skill-seekers/src/skill_seekers/cli/pattern_recognizer.py (1825 lines)"}, "properties": {"repobilityId": "2ab5ca21f34293e7", "scanner": "scanner-primary", "fingerprint": "58f49206bda5eb78", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f4d74b917500895d", "level": "note", "message": {"text": "Very large file: skill-seekers/src/skill_seekers/cli/doc_scraper.py (2332 lines)"}, "properties": {"repobilityId": "d59494715c6bf440", "scanner": "scanner-primary", "fingerprint": "f4d74b917500895d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-fb03ff0e3a0ab68b", "level": "note", "message": {"text": "Very large file: skill-seekers/src/skill_seekers/cli/code_analyzer.py (1462 lines)"}, "properties": {"repobilityId": "e7c347e8e2886d57", "scanner": "scanner-primary", "fingerprint": "fb03ff0e3a0ab68b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e10b6a065d632802", "level": "note", "message": {"text": "Very large file: skill-seekers/src/skill_seekers/cli/unified_skill_builder.py (1605 lines)"}, "properties": {"repobilityId": "de177bea58b6afa4", "scanner": "scanner-primary", "fingerprint": "e10b6a065d632802", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-beb0fd0ba233c336", "level": "note", "message": {"text": "Very large file: review-writing/scripts/state_manager.py (1483 lines)"}, "properties": {"repobilityId": "c86541e4561af039", "scanner": "scanner-primary", "fingerprint": "beb0fd0ba233c336", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "9049de266dc26ce2", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "e675bcd72d6383b4", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "acb4e8d64744090a", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "62de4725fff4b771", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "8399ce55cd6eee35", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8203812ffb08d734", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: invoice-organizer/SKILL.md"}, "properties": {"repobilityId": "32e9d25bc32dc0e5", "scanner": "scanner-primary", "fingerprint": "8203812ffb08d734", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "invoice-organizer/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-a5c1fdb2fcc99d87", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: invoice-organizer/SKILL.md"}, "properties": {"repobilityId": "857cf8946bde2419", "scanner": "scanner-primary", "fingerprint": "a5c1fdb2fcc99d87", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "invoice-organizer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8216a8e377b699ea", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: web-to-app/SKILL.md"}, "properties": {"repobilityId": "890a857b4faba8c8", "scanner": "scanner-primary", "fingerprint": "8216a8e377b699ea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "web-to-app/SKILL.md"}, "region": {"startLine": 359}}}]}, {"ruleId": "scanner-dbf23789726202ff", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: matplotlib/SKILL.md"}, "properties": {"repobilityId": "84f48646f113c661", "scanner": "scanner-primary", "fingerprint": "dbf23789726202ff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "matplotlib/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b1df84405f7c2a24", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: requesting-code-review/SKILL.md"}, "properties": {"repobilityId": "57c1f268ae32d870", "scanner": "scanner-primary", "fingerprint": "b1df84405f7c2a24", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requesting-code-review/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-f42c4889786391b7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: flowio/SKILL.md"}, "properties": {"repobilityId": "269f91b31cffe27a", "scanner": "scanner-primary", "fingerprint": "f42c4889786391b7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flowio/SKILL.md"}, "region": {"startLine": 177}}}]}, {"ruleId": "scanner-94db0f9722f8064e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: storage-analyzer/SKILL.md"}, "properties": {"repobilityId": "4dbf5d93c933e5eb", "scanner": "scanner-primary", "fingerprint": "94db0f9722f8064e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "storage-analyzer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a10de067cc2d2479", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: bgpt-paper-search/SKILL.md"}, "properties": {"repobilityId": "0dc3f38f2d456533", "scanner": "scanner-primary", "fingerprint": "a10de067cc2d2479", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "bgpt-paper-search/SKILL.md"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-8347518c38ab719d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: bgpt-paper-search/SKILL.md"}, "properties": {"repobilityId": "5442e3cfda02fdf8", "scanner": "scanner-primary", "fingerprint": "8347518c38ab719d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "bgpt-paper-search/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97e97d7be2ab276e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: using-superpowers/SKILL.md"}, "properties": {"repobilityId": "72a1282f41ca003e", "scanner": "scanner-primary", "fingerprint": "97e97d7be2ab276e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "using-superpowers/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-5aa722290c7a98e2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: developer-growth-analysis/SKILL.md"}, "properties": {"repobilityId": "29428222b5ff71d7", "scanner": "scanner-primary", "fingerprint": "5aa722290c7a98e2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "developer-growth-analysis/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-52cbf3a13642756a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: paper-slide-deck/SKILL.md"}, "properties": {"repobilityId": "b9dc7429ee73689c", "scanner": "scanner-primary", "fingerprint": "52cbf3a13642756a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "paper-slide-deck/SKILL.md"}, "region": {"startLine": 206}}}]}, {"ruleId": "scanner-ca355d3923ada2a4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: connect/SKILL.md"}, "properties": {"repobilityId": "d307f7cf864d9568", "scanner": "scanner-primary", "fingerprint": "ca355d3923ada2a4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "connect/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-b02ece44c65226d5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: connect/SKILL.md"}, "properties": {"repobilityId": "30f9c73fb1a0a04b", "scanner": "scanner-primary", "fingerprint": "b02ece44c65226d5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "connect/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-64c462a57a765f64", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: connect-apps/SKILL.md"}, "properties": {"repobilityId": "602f6459df6f440a", "scanner": "scanner-primary", "fingerprint": "64c462a57a765f64", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "connect-apps/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-25898010dddd6fd3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: domain-name-brainstormer/SKILL.md"}, "properties": {"repobilityId": "62234cc8e5e09b82", "scanner": "scanner-primary", "fingerprint": "25898010dddd6fd3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "domain-name-brainstormer/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-cf4a2a17e4efc28b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skill-creator/SKILL.md"}, "properties": {"repobilityId": "377692638758552e", "scanner": "scanner-primary", "fingerprint": "cf4a2a17e4efc28b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-creator/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-710662f6d0ca5848", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: planning-with-files/SKILL.md"}, "properties": {"repobilityId": "09e69642d27c703d", "scanner": "scanner-primary", "fingerprint": "710662f6d0ca5848", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "planning-with-files/SKILL.md"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-1faf64f76940427c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: lead-research-assistant/SKILL.md"}, "properties": {"repobilityId": "dc971a679336996f", "scanner": "scanner-primary", "fingerprint": "1faf64f76940427c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lead-research-assistant/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-42c9701e491b92d1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: lead-research-assistant/SKILL.md"}, "properties": {"repobilityId": "9b464f19b4086705", "scanner": "scanner-primary", "fingerprint": "42c9701e491b92d1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lead-research-assistant/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ca04b4715876b59", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: read/SKILL.md"}, "properties": {"repobilityId": "d06a0f812b44faa1", "scanner": "scanner-primary", "fingerprint": "6ca04b4715876b59", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "read/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8dedca32e6ee59eb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: slack-gif-creator/SKILL.md"}, "properties": {"repobilityId": "1a7e730c5611fa04", "scanner": "scanner-primary", "fingerprint": "8dedca32e6ee59eb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-68b16baf42105da0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: slack-gif-creator/SKILL.md"}, "properties": {"repobilityId": "af832145e8c7adae", "scanner": "scanner-primary", "fingerprint": "68b16baf42105da0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d44d2d28f29f5998", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: test-driven-development/SKILL.md"}, "properties": {"repobilityId": "a3f5bd95d9a2d86a", "scanner": "scanner-primary", "fingerprint": "d44d2d28f29f5998", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "test-driven-development/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-df9c58ea5b3a15f8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: fetch-everything/SKILL.md"}, "properties": {"repobilityId": "9867db7d4131c05b", "scanner": "scanner-primary", "fingerprint": "df9c58ea5b3a15f8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "fetch-everything/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9b9e96c96ec6f1ea", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: theme-factory/SKILL.md"}, "properties": {"repobilityId": "e686c6e34222b863", "scanner": "scanner-primary", "fingerprint": "9b9e96c96ec6f1ea", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "theme-factory/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-4e2474c582abf157", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: internal-comms/SKILL.md"}, "properties": {"repobilityId": "60faaf9da2a4df34", "scanner": "scanner-primary", "fingerprint": "4e2474c582abf157", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "internal-comms/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-a0451425d9936857", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: uniprot-database/SKILL.md"}, "properties": {"repobilityId": "35aaf96be89cfb55", "scanner": "scanner-primary", "fingerprint": "a0451425d9936857", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "uniprot-database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e9cfe27e9f0991a5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: doc-coauthoring/SKILL.md"}, "properties": {"repobilityId": "415ad9ea98d507ef", "scanner": "scanner-primary", "fingerprint": "e9cfe27e9f0991a5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "doc-coauthoring/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-c376ae467229b97e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: ai-autonomy/SKILL.md"}, "properties": {"repobilityId": "21bf23afa524fffa", "scanner": "scanner-primary", "fingerprint": "c376ae467229b97e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ai-autonomy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e2b71c60c7738918", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: hatch-pet/SKILL.md"}, "properties": {"repobilityId": "17378c88dd6b3889", "scanner": "scanner-primary", "fingerprint": "e2b71c60c7738918", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "hatch-pet/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c758ebdd0fdbb7fc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skill-evolution-manager/SKILL.md"}, "properties": {"repobilityId": "33a9501c10b073b4", "scanner": "scanner-primary", "fingerprint": "c758ebdd0fdbb7fc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-evolution-manager/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-1d8551de78fcf279", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: brainstorming/SKILL.md"}, "properties": {"repobilityId": "540a6da01634fcad", "scanner": "scanner-primary", "fingerprint": "1d8551de78fcf279", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "brainstorming/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-4aab37c49d850527", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: aihot/SKILL.md"}, "properties": {"repobilityId": "dc8b9ee0512557d6", "scanner": "scanner-primary", "fingerprint": "4aab37c49d850527", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aihot/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f86abf33cc4b6152", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tailored-resume-generator/SKILL.md"}, "properties": {"repobilityId": "318c5960a2b4fab7", "scanner": "scanner-primary", "fingerprint": "f86abf33cc4b6152", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tailored-resume-generator/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-f1e4968fc89b69c5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: write/SKILL.md"}, "properties": {"repobilityId": "9aedf66c17496fc0", "scanner": "scanner-primary", "fingerprint": "f1e4968fc89b69c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "write/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-714450d2c236efaf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: pyzotero/SKILL.md"}, "properties": {"repobilityId": "55e0c69a24f5a6fa", "scanner": "scanner-primary", "fingerprint": "714450d2c236efaf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pyzotero/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a3656d492bce4c09", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: raffle-winner-picker/SKILL.md"}, "properties": {"repobilityId": "0427dc78d06c2f1d", "scanner": "scanner-primary", "fingerprint": "a3656d492bce4c09", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "raffle-winner-picker/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-72e9b0883658ea22", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: humanizer-zh/SKILL.md"}, "properties": {"repobilityId": "5a01c593dc0d6e43", "scanner": "scanner-primary", "fingerprint": "72e9b0883658ea22", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "humanizer-zh/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-69b31d6c7d5d519f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: darwin-skill/SKILL.md"}, "properties": {"repobilityId": "d6ab756c00eecfe1", "scanner": "scanner-primary", "fingerprint": "69b31d6c7d5d519f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "darwin-skill/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-4dc7c5c3188e84e9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: webapp-testing/SKILL.md"}, "properties": {"repobilityId": "ed9156d054834be0", "scanner": "scanner-primary", "fingerprint": "4dc7c5c3188e84e9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "webapp-testing/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-00889418315341ec", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: guizang-ppt-skill/SKILL.md"}, "properties": {"repobilityId": "9cfb67e005d3f6ab", "scanner": "scanner-primary", "fingerprint": "00889418315341ec", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guizang-ppt-skill/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-05639b1258f379f7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: defuddle/SKILL.md"}, "properties": {"repobilityId": "dbd2327ddd0ff613", "scanner": "scanner-primary", "fingerprint": "05639b1258f379f7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "defuddle/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-48b56955db94917f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: defuddle/SKILL.md"}, "properties": {"repobilityId": "6bbdf55de55f042c", "scanner": "scanner-primary", "fingerprint": "48b56955db94917f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "defuddle/SKILL.md"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-62f4c64156867108", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: opencode-migration/SKILL.md"}, "properties": {"repobilityId": "52064a1ed95b48c8", "scanner": "scanner-primary", "fingerprint": "62f4c64156867108", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "opencode-migration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-52d2291d1e4ead16", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skill-seekers/CLAUDE.md"}, "properties": {"repobilityId": "4b723f8e5e7f0532", "scanner": "scanner-primary", "fingerprint": "52d2291d1e4ead16", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/CLAUDE.md"}, "region": {"startLine": 431}}}]}, {"ruleId": "scanner-060b4f00b348318b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skill-seekers/SKILL.md"}, "properties": {"repobilityId": "27f181832ab1f8a2", "scanner": "scanner-primary", "fingerprint": "060b4f00b348318b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/SKILL.md"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-bbe3a2bd6a391a38", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skill-seekers/SKILL.md"}, "properties": {"repobilityId": "5aa7141694b5bc39", "scanner": "scanner-primary", "fingerprint": "bbe3a2bd6a391a38", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1d0395c172ca73f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skill-seekers/.claude/mcp_config.example.json"}, "properties": {"repobilityId": "a2270217f29b4d56", "scanner": "scanner-primary", "fingerprint": "e1d0395c172ca73f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-seekers/.claude/mcp_config.example.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97f3bfcec9265de9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: research-add-items/SKILL.md"}, "properties": {"repobilityId": "e34e968c49c6dd06", "scanner": "scanner-primary", "fingerprint": "97f3bfcec9265de9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "research-add-items/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e94c9dd30af5ed99", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: biorxiv-database/SKILL.md"}, "properties": {"repobilityId": "a44d3f533415a91c", "scanner": "scanner-primary", "fingerprint": "e94c9dd30af5ed99", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "biorxiv-database/SKILL.md"}, "region": {"startLine": 305}}}]}, {"ruleId": "scanner-02c0d5737087ba24", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skill-manager/SKILL.md"}, "properties": {"repobilityId": "fd501e4b75a3e746", "scanner": "scanner-primary", "fingerprint": "02c0d5737087ba24", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-manager/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-82fdbdbae09c1cf7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: writing-skills/SKILL.md"}, "properties": {"repobilityId": "7fa7900b0286da71", "scanner": "scanner-primary", "fingerprint": "82fdbdbae09c1cf7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "writing-skills/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-b63ce1db6dd2d182", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: mcp-builder/SKILL.md"}, "properties": {"repobilityId": "faf514fa11af3ecf", "scanner": "scanner-primary", "fingerprint": "b63ce1db6dd2d182", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "mcp-builder/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-2d2b09d2aa8f0128", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: verification-before-completion/SKILL.md"}, "properties": {"repobilityId": "35fed6d72512ce49", "scanner": "scanner-primary", "fingerprint": "2d2b09d2aa8f0128", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "verification-before-completion/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-65bb6198ee651998", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: agent-browser/SKILL.md"}, "properties": {"repobilityId": "761d7bba99d79857", "scanner": "scanner-primary", "fingerprint": "65bb6198ee651998", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-browser/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-6a4d244b90cdd559", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: agent-browser/SKILL.md"}, "properties": {"repobilityId": "a9827a4efc3b8df2", "scanner": "scanner-primary", "fingerprint": "6a4d244b90cdd559", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-browser/SKILL.md"}, "region": {"startLine": 274}}}]}, {"ruleId": "scanner-617274e808dcc52f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: using-git-worktrees/SKILL.md"}, "properties": {"repobilityId": "596019d31757b1e4", "scanner": "scanner-primary", "fingerprint": "617274e808dcc52f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "using-git-worktrees/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-8497f46cba19a511", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: dispatching-parallel-agents/SKILL.md"}, "properties": {"repobilityId": "d520f9f570c8a08c", "scanner": "scanner-primary", "fingerprint": "8497f46cba19a511", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dispatching-parallel-agents/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-571b6288857c3c6e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: artifacts-builder/SKILL.md"}, "properties": {"repobilityId": "271fec6d131e1c26", "scanner": "scanner-primary", "fingerprint": "571b6288857c3c6e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "artifacts-builder/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-d11557de653fda4a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills-backup/SKILL.md"}, "properties": {"repobilityId": "173b23866c7b8226", "scanner": "scanner-primary", "fingerprint": "d11557de653fda4a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-backup/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5d1be57b08b8a358", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: comfyui-skill/SKILL.md"}, "properties": {"repobilityId": "24a33ce86ccec537", "scanner": "scanner-primary", "fingerprint": "5d1be57b08b8a358", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "comfyui-skill/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-445fa9938219d4c8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: file-organizer/SKILL.md"}, "properties": {"repobilityId": "56915984266a11f3", "scanner": "scanner-primary", "fingerprint": "445fa9938219d4c8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "file-organizer/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-9484a951a48680e9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: receiving-code-review/SKILL.md"}, "properties": {"repobilityId": "143663e769d4edc4", "scanner": "scanner-primary", "fingerprint": "9484a951a48680e9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "receiving-code-review/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-3c9167c6cab09f0c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: social-clip/SKILL.md"}, "properties": {"repobilityId": "2237b57640ac3b07", "scanner": "scanner-primary", "fingerprint": "3c9167c6cab09f0c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "social-clip/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aba704f77f46bf07", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: social-clip/SKILL.md"}, "properties": {"repobilityId": "66d2587b7237e504", "scanner": "scanner-primary", "fingerprint": "aba704f77f46bf07", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "social-clip/SKILL.md"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-94475a221987ed8a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: content-research-writer/SKILL.md"}, "properties": {"repobilityId": "fc283fdc1f54483f", "scanner": "scanner-primary", "fingerprint": "94475a221987ed8a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "content-research-writer/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-5c9dd80f3824bb71", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skill-share/SKILL.md"}, "properties": {"repobilityId": "b6145ca0dd72965b", "scanner": "scanner-primary", "fingerprint": "5c9dd80f3824bb71", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-share/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-2399df992c2109f0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: yt-dlp-downloader/skill.md"}, "properties": {"repobilityId": "69e0ad1e8aa33142", "scanner": "scanner-primary", "fingerprint": "2399df992c2109f0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yt-dlp-downloader/skill.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30127dab4c6ebfe9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: writing-plans/SKILL.md"}, "properties": {"repobilityId": "6d9ad0ef37edc1bf", "scanner": "scanner-primary", "fingerprint": "30127dab4c6ebfe9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "writing-plans/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-ef7471c43e538108", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: bioservices/SKILL.md"}, "properties": {"repobilityId": "58a08cf80cd9807a", "scanner": "scanner-primary", "fingerprint": "ef7471c43e538108", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "bioservices/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6459db7f6224c57e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: docx/SKILL.md"}, "properties": {"repobilityId": "d77f053112dd6120", "scanner": "scanner-primary", "fingerprint": "6459db7f6224c57e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docx/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-e93e77e73b83c13f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: docx/SKILL.md"}, "properties": {"repobilityId": "149361c67a832799", "scanner": "scanner-primary", "fingerprint": "e93e77e73b83c13f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docx/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-680bce96fc3b49ae", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: docx/SKILL.md"}, "properties": {"repobilityId": "7ada883523c4030b", "scanner": "scanner-primary", "fingerprint": "680bce96fc3b49ae", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docx/SKILL.md"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-8917eb7dbe0ab945", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: executing-plans/SKILL.md"}, "properties": {"repobilityId": "60257985b98fe236", "scanner": "scanner-primary", "fingerprint": "8917eb7dbe0ab945", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "executing-plans/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-45d9dc00a3eeae3e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: research-report/SKILL.md"}, "properties": {"repobilityId": "6aaaa05985bbcdbf", "scanner": "scanner-primary", "fingerprint": "45d9dc00a3eeae3e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "research-report/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-36b0c69c0e7223eb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: pptx/SKILL.md"}, "properties": {"repobilityId": "3dd5efa22ea99bd3", "scanner": "scanner-primary", "fingerprint": "36b0c69c0e7223eb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pptx/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-a8b67f674595135d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: pptx/SKILL.md"}, "properties": {"repobilityId": "bf47618ee913be1e", "scanner": "scanner-primary", "fingerprint": "a8b67f674595135d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pptx/SKILL.md"}, "region": {"startLine": 231}}}]}, {"ruleId": "scanner-01f712641f663521", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: clinicaltrials-database/SKILL.md"}, "properties": {"repobilityId": "55cbea1fe18c2826", "scanner": "scanner-primary", "fingerprint": "01f712641f663521", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "clinicaltrials-database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5cdf79c046ccbe1b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: twitter-algorithm-optimizer/SKILL.md"}, "properties": {"repobilityId": "54247d6eebd8c985", "scanner": "scanner-primary", "fingerprint": "5cdf79c046ccbe1b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "twitter-algorithm-optimizer/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-2944fa0e478649a0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: research-add-fields/SKILL.md"}, "properties": {"repobilityId": "2726ef92637ef2b5", "scanner": "scanner-primary", "fingerprint": "2944fa0e478649a0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "research-add-fields/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dc4b4304fa15aeaa", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: xlsx/SKILL.md"}, "properties": {"repobilityId": "4b8ff49455671db3", "scanner": "scanner-primary", "fingerprint": "dc4b4304fa15aeaa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "xlsx/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-e98c96f3bd935596", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: bettafish/SKILL.md"}, "properties": {"repobilityId": "2ba6285025794e27", "scanner": "scanner-primary", "fingerprint": "e98c96f3bd935596", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "bettafish/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-fbd232a2c130db86", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: bettafish/SKILL.md"}, "properties": {"repobilityId": "35fe3829172b960a", "scanner": "scanner-primary", "fingerprint": "fbd232a2c130db86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "bettafish/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11c79a0dc53aba4e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: canvas-design/SKILL.md"}, "properties": {"repobilityId": "9e6d17ddddb25a27", "scanner": "scanner-primary", "fingerprint": "11c79a0dc53aba4e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-79438dadcb094f6a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: novelai-skill/SKILL.md"}, "properties": {"repobilityId": "80281709330cdf4a", "scanner": "scanner-primary", "fingerprint": "79438dadcb094f6a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "novelai-skill/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d62095591f140bb2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: image-enhancer/SKILL.md"}, "properties": {"repobilityId": "13f398faacee7d8f", "scanner": "scanner-primary", "fingerprint": "d62095591f140bb2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "image-enhancer/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-c95dabfba8f2441c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: reviewer-simulator/SKILL.md"}, "properties": {"repobilityId": "abb835bf138cd0bf", "scanner": "scanner-primary", "fingerprint": "c95dabfba8f2441c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "reviewer-simulator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d40296404d089cab", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: finishing-a-development-branch/SKILL.md"}, "properties": {"repobilityId": "4d83a9cc29461d10", "scanner": "scanner-primary", "fingerprint": "d40296404d089cab", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "finishing-a-development-branch/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-af977191b79db0d9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: pdf/SKILL.md"}, "properties": {"repobilityId": "8d5b202981effeab", "scanner": "scanner-primary", "fingerprint": "af977191b79db0d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pdf/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-d8eb0c49c36ae188", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: meeting-insights-analyzer/SKILL.md"}, "properties": {"repobilityId": "e9a32a04f0dd3929", "scanner": "scanner-primary", "fingerprint": "d8eb0c49c36ae188", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "meeting-insights-analyzer/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-7112fe2b4ce5e5bf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: meeting-insights-analyzer/SKILL.md"}, "properties": {"repobilityId": "6c98bcde78f66a4f", "scanner": "scanner-primary", "fingerprint": "7112fe2b4ce5e5bf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "meeting-insights-analyzer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ff5fd0b88d89a893", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: qutip/SKILL.md"}, "properties": {"repobilityId": "6848af1cac920aa5", "scanner": "scanner-primary", "fingerprint": "ff5fd0b88d89a893", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qutip/SKILL.md"}, "region": {"startLine": 315}}}]}, {"ruleId": "scanner-a1888bced08cd1b5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: competitive-ads-extractor/SKILL.md"}, "properties": {"repobilityId": "cd4d0fbf00670995", "scanner": "scanner-primary", "fingerprint": "a1888bced08cd1b5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "competitive-ads-extractor/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-65e7ab5ad4306827", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: hv-analysis/SKILL.md"}, "properties": {"repobilityId": "44b6ddf275b2e722", "scanner": "scanner-primary", "fingerprint": "65e7ab5ad4306827", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "hv-analysis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65f14e3ee4300ec2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: systematic-debugging/SKILL.md"}, "properties": {"repobilityId": "a2220522b27cb2e8", "scanner": "scanner-primary", "fingerprint": "65f14e3ee4300ec2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "systematic-debugging/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-b0f89ba069e09c41", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: generate-image/SKILL.md"}, "properties": {"repobilityId": "cee4301b228c3237", "scanner": "scanner-primary", "fingerprint": "b0f89ba069e09c41", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "generate-image/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e4ab5cf71f127c78", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: changelog-generator/SKILL.md"}, "properties": {"repobilityId": "657a259f1aa51fe3", "scanner": "scanner-primary", "fingerprint": "e4ab5cf71f127c78", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "changelog-generator/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-43d6261b33768990", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: changelog-generator/SKILL.md"}, "properties": {"repobilityId": "6df083a2485196b6", "scanner": "scanner-primary", "fingerprint": "43d6261b33768990", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "changelog-generator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4fcba842b90d63fd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: hivision-idphotos/SKILL.md"}, "properties": {"repobilityId": "a6df946def5db1c5", "scanner": "scanner-primary", "fingerprint": "4fcba842b90d63fd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "hivision-idphotos/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-263ac89b809072dd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: research-deep/SKILL.md"}, "properties": {"repobilityId": "c0eff8fb8da1ee59", "scanner": "scanner-primary", "fingerprint": "263ac89b809072dd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "research-deep/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c23a2fe2c1aba9f6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: autocli/SKILL.md"}, "properties": {"repobilityId": "e8fd2b2fd76a4e9a", "scanner": "scanner-primary", "fingerprint": "c23a2fe2c1aba9f6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "autocli/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1972383cebeab11e", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: autocli/SKILL.md"}, "properties": {"repobilityId": "23044a81e8db9b00", "scanner": "scanner-primary", "fingerprint": "1972383cebeab11e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "autocli/SKILL.md"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-71f9cb2ab0f9dc8f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: langsmith-fetch/SKILL.md"}, "properties": {"repobilityId": "83c40dda82072607", "scanner": "scanner-primary", "fingerprint": "71f9cb2ab0f9dc8f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "langsmith-fetch/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-a0f7116317e72b55", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: algorithmic-art/SKILL.md"}, "properties": {"repobilityId": "cc7400374aa60a69", "scanner": "scanner-primary", "fingerprint": "a0f7116317e72b55", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "algorithmic-art/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-b3d7128cfa666fa2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: brand-guidelines/SKILL.md"}, "properties": {"repobilityId": "b8b89e6bf6968a93", "scanner": "scanner-primary", "fingerprint": "b3d7128cfa666fa2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "brand-guidelines/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-f1a2ce6bc36d5de3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: general-skills-backup/SKILL.md"}, "properties": {"repobilityId": "03a71098e1f6872b", "scanner": "scanner-primary", "fingerprint": "f1a2ce6bc36d5de3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "general-skills-backup/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b1552e54ec0afd2d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: self-improving-agent/SKILL.md"}, "properties": {"repobilityId": "251b09a984766d45", "scanner": "scanner-primary", "fingerprint": "b1552e54ec0afd2d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "self-improving-agent/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-fe59812befe8fdd2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: github-to-skills/SKILL.md"}, "properties": {"repobilityId": "7fabd4f4970fad8a", "scanner": "scanner-primary", "fingerprint": "fe59812befe8fdd2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "github-to-skills/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-aa19439873853ea1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: web-artifacts-builder/SKILL.md"}, "properties": {"repobilityId": "dbd4513cfff2591f", "scanner": "scanner-primary", "fingerprint": "aa19439873853ea1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "web-artifacts-builder/SKILL.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-b38043ec347056e8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: subagent-driven-development/SKILL.md"}, "properties": {"repobilityId": "5de88ef09d6d91f8", "scanner": "scanner-primary", "fingerprint": "b38043ec347056e8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "subagent-driven-development/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-f56f0d0454397b48", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: geniml/SKILL.md"}, "properties": {"repobilityId": "c288529e84aafc14", "scanner": "scanner-primary", "fingerprint": "f56f0d0454397b48", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "geniml/SKILL.md"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-f040350cd7db9797", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 web-to-app/scripts/app_validator.py:143"}, "properties": {"repobilityId": "4d28aa3503755cb8", "scanner": "scanner-primary", "fingerprint": "f040350cd7db9797", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-72bfa348ee8f2015", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 web-to-app/scripts/pake_builder.py:40"}, "properties": {"repobilityId": "6d2f1be7905d139b", "scanner": "scanner-primary", "fingerprint": "72bfa348ee8f2015", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-81c981d55b509205", "level": "none", "message": {"text": "Commented-code block (5 lines) in matplotlib/scripts/plot_template.py:186"}, "properties": {"repobilityId": "78b8aba75d302870", "scanner": "scanner-primary", "fingerprint": "81c981d55b509205", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ac7eedef8f534e05", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 storage-analyzer/scripts/server.py:91"}, "properties": {"repobilityId": "63c02405cb30f849", "scanner": "scanner-primary", "fingerprint": "ac7eedef8f534e05", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b8a27628d0f13350", "level": "note", "message": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 storage-analyzer/scripts/server.py:160"}, "properties": {"repobilityId": "db3d45f89644fb6b", "scanner": "scanner-primary", "fingerprint": "b8a27628d0f13350", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-6368cf50c2328e52", "level": "none", "message": {"text": "Commented-code block (5 lines) in skill-creator/scripts/improve_description.py:158"}, "properties": {"repobilityId": "1f8745cd4459b745", "scanner": "scanner-primary", "fingerprint": "6368cf50c2328e52", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-20a1908ef188e20d", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-creator/scripts/run_eval.py:85"}, "properties": {"repobilityId": "7d29b1484c151ba2", "scanner": "scanner-primary", "fingerprint": "20a1908ef188e20d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-396f6f05d385ad72", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 read/scripts/fetch_feishu.py:45"}, "properties": {"repobilityId": "2d9eab6a4939de28", "scanner": "scanner-primary", "fingerprint": "396f6f05d385ad72", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c2919d7a1c046038", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 fetch-everything/scripts/fetch_everything.py:96"}, "properties": {"repobilityId": "82a9b891de6b5969", "scanner": "scanner-primary", "fingerprint": "c2919d7a1c046038", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d1c6796ca5f15c56", "level": "note", "message": {"text": "Legacy-named symbol `restore_literature_sync_backup` in general-sci-writing/scripts/state_manager.py:2087"}, "properties": {"repobilityId": "c5717f109c758197", "scanner": "scanner-primary", "fingerprint": "d1c6796ca5f15c56", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d2356c6f880fe41b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 general-sci-writing/scripts/state_manager.py:3776"}, "properties": {"repobilityId": "70517bc9ba276228", "scanner": "scanner-primary", "fingerprint": "d2356c6f880fe41b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-df57f6795564588f", "level": "note", "message": {"text": "Legacy-named symbol `reviewer_sidebar_width_v1` in reviewer-response-sci/scripts/build_full_package.py:1164"}, "properties": {"repobilityId": "1622d4782e6116ae", "scanner": "scanner-primary", "fingerprint": "df57f6795564588f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0d07af0d3884cbc1", "level": "none", "message": {"text": "Commented-code block (5 lines) in reviewer-response-sci/scripts/build_full_package.py:90"}, "properties": {"repobilityId": "98f3ce0f3a9d529d", "scanner": "scanner-primary", "fingerprint": "0d07af0d3884cbc1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-90cd8909f18fa380", "level": "note", "message": {"text": "Legacy-named symbol `reviewer_sidebar_width_v1` in reviewer-response-sci/scripts/html_format_check.py:69"}, "properties": {"repobilityId": "53792c63d1046be6", "scanner": "scanner-primary", "fingerprint": "90cd8909f18fa380", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-25aa6659c39e1f8c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 uniprot-database/scripts/uniprot_client.py:61"}, "properties": {"repobilityId": "4c0aad953a1fe9a6", "scanner": "scanner-primary", "fingerprint": "25aa6659c39e1f8c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-506bc5764f3fcf95", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 ai-autonomy/scripts/run_autonomy.py:81"}, "properties": {"repobilityId": "c88a159e5d0cbebc", "scanner": "scanner-primary", "fingerprint": "506bc5764f3fcf95", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f753d0d5487bbbe6", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 ai-autonomy/scripts/run_team.py:276"}, "properties": {"repobilityId": "de4393c49218ec64", "scanner": "scanner-primary", "fingerprint": "f753d0d5487bbbe6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-181f4faa588f6d10", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 ai-autonomy/references/templates/init.py:47"}, "properties": {"repobilityId": "8f3b41dad30466e9", "scanner": "scanner-primary", "fingerprint": "181f4faa588f6d10", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e4fd834f705c5a19", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 hatch-pet/scripts/generate_pet_image.py:124"}, "properties": {"repobilityId": "0b95bb3c62feca8a", "scanner": "scanner-primary", "fingerprint": "e4fd834f705c5a19", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ec9f3a3961215f06", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 teacher-paper/scripts/fetch_everything.py:96"}, "properties": {"repobilityId": "3716938f6641d2b1", "scanner": "scanner-primary", "fingerprint": "ec9f3a3961215f06", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9107f4c536ed72cb", "level": "note", "message": {"text": "Legacy-named symbol `101_q01_v2` in teacher-paper/scripts/assemble.py:573"}, "properties": {"repobilityId": "091f4fcb53c1ef7b", "scanner": "scanner-primary", "fingerprint": "9107f4c536ed72cb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a1a4a6cb6e22f386", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 teacher-paper/scripts/assemble.py:919"}, "properties": {"repobilityId": "134d5cd3921a924d", "scanner": "scanner-primary", "fingerprint": "a1a4a6cb6e22f386", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a935cb5d05a2dae9", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 teacher-paper/scripts/setup.py:375"}, "properties": {"repobilityId": "341f676ce123796f", "scanner": "scanner-primary", "fingerprint": "a935cb5d05a2dae9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8d756a51df52a548", "level": "note", "message": {"text": "Legacy-named symbol `101_q01_v2` in teacher-paper/scripts/regression_test.py:578"}, "properties": {"repobilityId": "275ab8028904c7a1", "scanner": "scanner-primary", "fingerprint": "8d756a51df52a548", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-798da7e77b7cc5c5", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-evolution-manager/scripts/align_all.py:22"}, "properties": {"repobilityId": "2b90ecbceef5b7a5", "scanner": "scanner-primary", "fingerprint": "798da7e77b7cc5c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-abaf004da6ccaabc", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/run_pipeline.py:32"}, "properties": {"repobilityId": "0a2318588d457588", "scanner": "scanner-primary", "fingerprint": "abaf004da6ccaabc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fa33f81bd287db38", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/polish_revisions.py:252"}, "properties": {"repobilityId": "89e5b1b481cf248f", "scanner": "scanner-primary", "fingerprint": "fa33f81bd287db38", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a00d128a951e70ae", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/execute_reference_search.py:146"}, "properties": {"repobilityId": "f8c17b0b39d435c1", "scanner": "scanner-primary", "fingerprint": "a00d128a951e70ae", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8adcff1c16ebdc60", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 revise-sci/scripts/ensure_global_skill.py:18"}, "properties": {"repobilityId": "7c7e611623d2b76f", "scanner": "scanner-primary", "fingerprint": "8adcff1c16ebdc60", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7ea6138b645f6492", "level": "none", "message": {"text": "Commented-code block (5 lines) in sci2doc/scripts/state_manager.py:1043"}, "properties": {"repobilityId": "a800d42364690524", "scanner": "scanner-primary", "fingerprint": "7ea6138b645f6492", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8cd45ab141fb89c7", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 sci2doc/scripts/state_manager.py:2290"}, "properties": {"repobilityId": "2504773123757141", "scanner": "scanner-primary", "fingerprint": "8cd45ab141fb89c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ceb2f680ffb01735", "level": "note", "message": {"text": "Legacy-named symbol `no_backup` in opencode-migration/scripts/migration_installer.py:543"}, "properties": {"repobilityId": "a0af7be7760282bd", "scanner": "scanner-primary", "fingerprint": "ceb2f680ffb01735", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f64cde3d33c1a31a", "level": "note", "message": {"text": "Legacy-named symbol `test_mcp_legacy` in skill-seekers/tests/test_unified_mcp_integration.py:114"}, "properties": {"repobilityId": "647c2695980a5e1e", "scanner": "scanner-primary", "fingerprint": "f64cde3d33c1a31a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0f7e54bdd02c8471", "level": "none", "message": {"text": "Commented-code block (5 lines) in skill-seekers/tests/test_architecture_scenarios.py:599"}, "properties": {"repobilityId": "11935afdc2bb09ca", "scanner": "scanner-primary", "fingerprint": "0f7e54bdd02c8471", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b624f7e8ed32bfa7", "level": "note", "message": {"text": "Legacy-named symbol `skill_v2` in skill-seekers/tests/test_config_validation.py:66"}, "properties": {"repobilityId": "0ea159d8894d14bb", "scanner": "scanner-primary", "fingerprint": "b624f7e8ed32bfa7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b9654f3a2eb5e40b", "level": "note", "message": {"text": "Legacy-named symbol `skill_v2` in skill-seekers/tests/test_adaptors/test_claude_adaptor.py:280"}, "properties": {"repobilityId": "9f258331b89f6d83", "scanner": "scanner-primary", "fingerprint": "b9654f3a2eb5e40b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-087dd1dd20d81c94", "level": "none", "message": {"text": "Commented-code block (24 lines) in skill-seekers/src/skill_seekers/cli/doc_scraper.py:727"}, "properties": {"repobilityId": "4f00c11ec98ef45c", "scanner": "scanner-primary", "fingerprint": "087dd1dd20d81c94", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f8f777d08cb17d82", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/doc_scraper.py:2259"}, "properties": {"repobilityId": "a50f58d147d91e54", "scanner": "scanner-primary", "fingerprint": "f8f777d08cb17d82", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0b22e85cd3a2930a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/enhance_skill_local.py:965"}, "properties": {"repobilityId": "0cf55e8e7d6a3e21", "scanner": "scanner-primary", "fingerprint": "0b22e85cd3a2930a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4e8c451ed0df6ccf", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/rate_limit_handler.py:43"}, "properties": {"repobilityId": "06a79273d5c05e2c", "scanner": "scanner-primary", "fingerprint": "4e8c451ed0df6ccf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0fd182f47e4c2bdc", "level": "none", "message": {"text": "Commented-code block (6 lines) in skill-seekers/src/skill_seekers/cli/language_detector.py:47"}, "properties": {"repobilityId": "915c00909bad2c34", "scanner": "scanner-primary", "fingerprint": "0fd182f47e4c2bdc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d9f52aef09dd25bb", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/utils.py:45"}, "properties": {"repobilityId": "413f18f114d36311", "scanner": "scanner-primary", "fingerprint": "d9f52aef09dd25bb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-85bf60afa49b1d09", "level": "note", "message": {"text": "Legacy-named symbol `_validate_legacy` in skill-seekers/src/skill_seekers/cli/config_validator.py:87"}, "properties": {"repobilityId": "09ed8a5ac1e44f8a", "scanner": "scanner-primary", "fingerprint": "85bf60afa49b1d09", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-aa857d24da26c2de", "level": "none", "message": {"text": "Commented-code block (5 lines) in skill-seekers/src/skill_seekers/cli/conflict_detector.py:115"}, "properties": {"repobilityId": "158964c964da90b7", "scanner": "scanner-primary", "fingerprint": "aa857d24da26c2de", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-59e894a63ab52d43", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/unified_scraper.py:196"}, "properties": {"repobilityId": "c3d060398daf4be4", "scanner": "scanner-primary", "fingerprint": "59e894a63ab52d43", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1680f2b112afd509", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-seekers/src/skill_seekers/cli/github_fetcher.py:209"}, "properties": {"repobilityId": "042033767b7d8cdc", "scanner": "scanner-primary", "fingerprint": "1680f2b112afd509", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a8f0bb73232d5d78", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skill-manager/scripts/batch_update.py:12"}, "properties": {"repobilityId": "91d0a4b2af2b66bf", "scanner": "scanner-primary", "fingerprint": "a8f0bb73232d5d78", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b88ecc7d176409da", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 review-writing/scripts/init_project.py:117"}, "properties": {"repobilityId": "68ee407df4c5f8c8", "scanner": "scanner-primary", "fingerprint": "b88ecc7d176409da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f626e53be6630403", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills-backup/setup_auto_backup.py:54"}, "properties": {"repobilityId": "3427c55648c5d513", "scanner": "scanner-primary", "fingerprint": "f626e53be6630403", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ccafc873e8b95ab3", "level": "none", "message": {"text": "Commented-code block (5 lines) in skills-backup/scripts/auto_sync.py:68"}, "properties": {"repobilityId": "d4fd2592764a05f3", "scanner": "scanner-primary", "fingerprint": "ccafc873e8b95ab3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-31c7f2e58839da40", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills-backup/scripts/auto_sync.py:26"}, "properties": {"repobilityId": "6d5a6b57d7b6a9a6", "scanner": "scanner-primary", "fingerprint": "31c7f2e58839da40", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b11047202e4161c2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills-backup/scripts/sync_skills.py:28"}, "properties": {"repobilityId": "0119b457a1c73578", "scanner": "scanner-primary", "fingerprint": "b11047202e4161c2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ed9c72bbc792ac66", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 docx/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "d3eeab17ca3b158b", "scanner": "scanner-primary", "fingerprint": "ed9c72bbc792ac66", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d3a3476f098b97e2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 docx/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "7efaa9b500cd2ce1", "scanner": "scanner-primary", "fingerprint": "d3a3476f098b97e2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3a660ea4096a15f4", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in docx/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "59f21c9c0ff9ee9d", "scanner": "scanner-primary", "fingerprint": "3a660ea4096a15f4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6ba78728b859829e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 pptx/scripts/thumbnail.py:161"}, "properties": {"repobilityId": "09d0b40ce1087dd7", "scanner": "scanner-primary", "fingerprint": "6ba78728b859829e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7224856b3233ea94", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 pptx/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "71956c29755c042c", "scanner": "scanner-primary", "fingerprint": "7224856b3233ea94", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0fcad51cdf2be6d2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 pptx/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "e39ace5b642293d3", "scanner": "scanner-primary", "fingerprint": "0fcad51cdf2be6d2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9b58a58a9736f0a8", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in pptx/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "6f0fd37fc99f2d36", "scanner": "scanner-primary", "fingerprint": "9b58a58a9736f0a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-13b2b2933d16f689", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 clinicaltrials-database/scripts/query_clinicaltrials.py:87"}, "properties": {"repobilityId": "875470713d456af3", "scanner": "scanner-primary", "fingerprint": "13b2b2933d16f689", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1fb17f4b08d46fa7", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 xlsx/scripts/recalc.py:92"}, "properties": {"repobilityId": "5cadc7cb5943eb0e", "scanner": "scanner-primary", "fingerprint": "1fb17f4b08d46fa7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ca7d456d71b9539e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 xlsx/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "fe775495e92d7f92", "scanner": "scanner-primary", "fingerprint": "ca7d456d71b9539e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9aa7d59bbfd5ef5d", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 xlsx/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "fb34c3be3c4b4e5c", "scanner": "scanner-primary", "fingerprint": "9aa7d59bbfd5ef5d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f22d5640c4b31083", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in xlsx/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "574643edf12a5e4b", "scanner": "scanner-primary", "fingerprint": "f22d5640c4b31083", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-268088fc51a45255", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 bettafish/scripts/wrapper.py:14"}, "properties": {"repobilityId": "4fa8f909f18d781d", "scanner": "scanner-primary", "fingerprint": "268088fc51a45255", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fdf6d60fb2116a53", "level": "none", "message": {"text": "Commented-code block (8 lines) in systematic-debugging/condition-based-waiting-example.ts:140"}, "properties": {"repobilityId": "3fa255bdb0e79332", "scanner": "scanner-primary", "fingerprint": "fdf6d60fb2116a53", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-170ca58091b81aad", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 generate-image/scripts/generate_image.py:144"}, "properties": {"repobilityId": "cf2f36e308f9b250", "scanner": "scanner-primary", "fingerprint": "170ca58091b81aad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-65fa730670549058", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 hivision-idphotos/scripts/hivision_task.py:31"}, "properties": {"repobilityId": "3996563dfdefdd44", "scanner": "scanner-primary", "fingerprint": "65fa730670549058", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b532527158912888", "level": "none", "message": {"text": "Commented-code block (8 lines) in algorithmic-art/templates/generator_template.js:15"}, "properties": {"repobilityId": "f540fd5682f7ab88", "scanner": "scanner-primary", "fingerprint": "b532527158912888", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f125564792bbbee6", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/setup_auto_backup.py:54"}, "properties": {"repobilityId": "9d176f59806956cf", "scanner": "scanner-primary", "fingerprint": "f125564792bbbee6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f7c740255891923f", "level": "none", "message": {"text": "Commented-code block (5 lines) in general-skills-backup/scripts/auto_sync.py:80"}, "properties": {"repobilityId": "ab6138d5d1d437d2", "scanner": "scanner-primary", "fingerprint": "f7c740255891923f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f15ecb4552b12e18", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/scripts/auto_sync.py:27"}, "properties": {"repobilityId": "b288397405b4d8fa", "scanner": "scanner-primary", "fingerprint": "f15ecb4552b12e18", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-96f353274c924779", "level": "note", "message": {"text": "Legacy-named symbol `setup_auto_backup` in general-skills-backup/scripts/quick_start.py:15"}, "properties": {"repobilityId": "aaa516d2099010fe", "scanner": "scanner-primary", "fingerprint": "96f353274c924779", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8640fc8652ca381a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/scripts/quick_start.py:23"}, "properties": {"repobilityId": "4dda2259e04ba272", "scanner": "scanner-primary", "fingerprint": "8640fc8652ca381a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-84e129fc66ddc45c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 general-skills-backup/scripts/sync_skills.py:29"}, "properties": {"repobilityId": "9a039d0a74415b8d", "scanner": "scanner-primary", "fingerprint": "84e129fc66ddc45c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-88e31f4d63f488e4", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 github-to-skills/scripts/create_github_skill.py:64"}, "properties": {"repobilityId": "84af6f3a71cef17c", "scanner": "scanner-primary", "fingerprint": "88e31f4d63f488e4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f697022b8ecb2933", "level": "note", "message": {"text": "46 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "ced2925b2cb9d989", "scanner": "scanner-primary", "fingerprint": "f697022b8ecb2933", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9f5a0d915ca3f213", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "881da9a94c7ef2c2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ef79b85f8311d4d6", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c2dc94246ac6775f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9406b1fcf979d991", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f791ab62f3c881db", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4c05f7adf13b2e5b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "38dc2c027145553d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6e05032227977de9", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a29a5e5503e60fc4", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d3bb428172ffdfcf", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9d579bec932199ad", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a54ca0acdd2a7ffb", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f19bd5d36fa1fac2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "3d4a61853ac8cf1c", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "82ddc38ea2587bdf", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6d6cb682081f2875", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "aeadce6d57d94d48", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7c6cc7f22903ebe1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4f2195e38ac9e45f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-5baa8971ebe192a1", "level": "note", "message": {"text": "Unused endpoint: GET /"}, "properties": {"repobilityId": "bb40af029449ceaf", "scanner": "scanner-primary", "fingerprint": "5baa8971ebe192a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-138cd260d552a823", "level": "note", "message": {"text": "Unused endpoint: GET /api/configs"}, "properties": {"repobilityId": "d3a52a68bd57d7f4", "scanner": "scanner-primary", "fingerprint": "138cd260d552a823", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ac192233ae843675", "level": "note", "message": {"text": "Unused endpoint: GET /api/configs/{name}"}, "properties": {"repobilityId": "c2937bb3a99cb997", "scanner": "scanner-primary", "fingerprint": "ac192233ae843675", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5926c673ce6a1271", "level": "note", "message": {"text": "Unused endpoint: GET /api/categories"}, "properties": {"repobilityId": "4ea3e519f462520d", "scanner": "scanner-primary", "fingerprint": "5926c673ce6a1271", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-324dcf72c55ec038", "level": "note", "message": {"text": "Unused endpoint: GET /api/download/{config_name}"}, "properties": {"repobilityId": "9f891139485e00bb", "scanner": "scanner-primary", "fingerprint": "324dcf72c55ec038", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}