{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-d80526297cd7fba6", "name": "Agent authority lacks a verifier contract: plugins/ios-qa/.mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ios-qa/.mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3de12c5c1cfeb958", "name": "Agent authority lacks a verifier contract: plugins/ios-qa/skills/ios-qa/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ios-qa/skills/ios-qa/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c6acbd9e0822e2a4", "name": "Agent authority lacks a verifier contract: plugins/ios-qa/skills/ios-fixer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ios-qa/skills/ios-fixer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24e1b4062db7318d", "name": "Agent authority lacks a verifier contract: plugins/metis-core/skills/release/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/metis-core/skills/release/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-336b828f6549712c", "name": "Agent authority lacks a verifier contract: plugins/metis-core/skills/task/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/metis-core/skills/task/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e754e05ac855992", "name": "Agent authority lacks a verifier contract: plugins/metis-core/skills/swarm/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/metis-core/skills/swarm/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24919"}, "properties": {"repository": "chensagi/metis", "repoUrl": "https://github.com/chensagi/metis", "branch": "main"}, "results": [{"ruleId": "scanner-d80526297cd7fba6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ios-qa/.mcp.json"}, "properties": {"repobilityId": "0c4ed0e7a5f04e2f", "scanner": "scanner-primary", "fingerprint": "d80526297cd7fba6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ios-qa/.mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3de12c5c1cfeb958", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ios-qa/skills/ios-qa/SKILL.md"}, "properties": {"repobilityId": "06088be8859cdeeb", "scanner": "scanner-primary", "fingerprint": "3de12c5c1cfeb958", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ios-qa/skills/ios-qa/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c6acbd9e0822e2a4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ios-qa/skills/ios-fixer/SKILL.md"}, "properties": {"repobilityId": "b55ef17ef6ddb5a4", "scanner": "scanner-primary", "fingerprint": "c6acbd9e0822e2a4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ios-qa/skills/ios-fixer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-24e1b4062db7318d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/metis-core/skills/release/SKILL.md"}, "properties": {"repobilityId": "72472ca8dcb2a4fa", "scanner": "scanner-primary", "fingerprint": "24e1b4062db7318d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/metis-core/skills/release/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-336b828f6549712c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/metis-core/skills/task/SKILL.md"}, "properties": {"repobilityId": "b254e6ed5078d143", "scanner": "scanner-primary", "fingerprint": "336b828f6549712c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/metis-core/skills/task/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e754e05ac855992", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/metis-core/skills/swarm/SKILL.md"}, "properties": {"repobilityId": "c430ef2a4f341f30", "scanner": "scanner-primary", "fingerprint": "4e754e05ac855992", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/metis-core/skills/swarm/SKILL.md"}, "region": {"startLine": 1}}}]}]}]}