{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-5c0103798f47dfea", "name": "Possibly dead Python function: escape_angle", "shortDescription": {"text": "Possibly dead Python function: escape_angle"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a3232a9a64113a95", "name": "Possibly dead Python function: run_langgraph_workflow", "shortDescription": {"text": "Possibly dead Python function: run_langgraph_workflow"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f4dbbb5468a6b87", "name": "Possibly dead Python function: security_node", "shortDescription": {"text": "Possibly dead Python function: security_node"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e1fad807a1860ea", "name": "Possibly dead Python function: tech_node", "shortDescription": {"text": "Possibly dead Python function: tech_node"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d9c113105dc0cbb", "name": "Possibly dead Python function: stream_analysis_with_tracing", "shortDescription": {"text": "Possibly dead Python function: stream_analysis_with_tracing"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5cafc5529bc3aeba", "name": "Possibly dead Python function: batch_analyze_with_tracing", "shortDescription": {"text": "Possibly dead Python function: batch_analyze_with_tracing"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71d1b28839176723", "name": "Possibly dead Python function: multi_context_analysis", "shortDescription": {"text": "Possibly dead Python function: multi_context_analysis"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dd5287755e9d4cb9", "name": "Possibly dead Python function: high_throughput_analysis", "shortDescription": {"text": "Possibly dead Python function: high_throughput_analysis"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e69664a31463dbe9", "name": "Possibly dead Python function: generate_embeddings_batch", "shortDescription": {"text": "Possibly dead Python function: generate_embeddings_batch"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49289b2cdd7da687", "name": "Possibly dead Python function: prewarm_models", "shortDescription": {"text": "Possibly dead Python function: prewarm_models"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf34978dce0a910e", "name": "Possibly dead Python function: deprecation_warning", "shortDescription": {"text": "Possibly dead Python function: deprecation_warning"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-880464a755089909", "name": "Possibly dead Python function: hash_password", "shortDescription": {"text": "Possibly dead Python function: hash_password"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-40700ec7cdebe554", "name": "Possibly dead Python function: verify_password", "shortDescription": {"text": "Possibly dead Python function: verify_password"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-35e526ddee8669c7", "name": "Possibly dead Python function: create_access_token", "shortDescription": {"text": "Possibly dead Python function: create_access_token"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2048a59f1e8286bb", "name": "Possibly dead Python function: verify_access_token", "shortDescription": {"text": "Possibly dead Python function: verify_access_token"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec2fdc45b3ef1c1a", "name": "Possibly dead Python function: create_rate_limiter", "shortDescription": {"text": "Possibly dead Python function: create_rate_limiter"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8887ea730f1be46b", "name": "Possibly dead Python function: check_rate_limit", "shortDescription": {"text": "Possibly dead Python function: check_rate_limit"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-32eb72078af2cf96", "name": "Possibly dead Python function: safe_analyze", "shortDescription": {"text": "Possibly dead Python function: safe_analyze"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02903984d647e300", "name": "Possibly dead Python function: add_raw", "shortDescription": {"text": "Possibly dead Python function: add_raw"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-79e6d18abca8ff2b", "name": "Possibly dead Python function: build_analysis_prompt", "shortDescription": {"text": "Possibly dead Python function: build_analysis_prompt"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c48ac73952d3df16", "name": "Possibly dead Python function: build_qa_prompt", "shortDescription": {"text": "Possibly dead Python function: build_qa_prompt"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e3ced75399a14e0", "name": "Possibly dead Python function: route_after_action", "shortDescription": {"text": "Possibly dead Python function: route_after_action"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9ac6f235cb89b3a", "name": "Possibly dead Python function: crag_query", "shortDescription": {"text": "Possibly dead Python function: crag_query"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-df61312558f9a10f", "name": "Possibly dead Python function: archive", "shortDescription": {"text": "Possibly dead Python function: archive"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dbed407fbee270e3", "name": "Possibly dead Python function: update_description", "shortDescription": {"text": "Possibly dead Python function: update_description"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af9ef9f11b1a4cd9", "name": "Stray `console.log` in TS/JS \u2014 tests/unit/test-json-validity.js:56", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/unit/test-json-validity.js:56"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b022fc9d39959593", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/components/changelog-timeline.tsx:83", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/components/changelog-timeline.tsx:83"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-491a69f23310f265", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/components/search-highlight.tsx:11", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/components/search-highlight.tsx:11"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-74dcadab0031dea4", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/components/structured-data.tsx:27", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/components/structured-data.tsx:27"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f5506dec2978334d", "name": "`truncate` class without `title=` for hover reveal \u2014 docs/site/components/skill-recommender.tsx:219", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 docs/site/components/skill-recommender.tsx:219"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a77e41624c52a82d", "name": "React Flow <MiniMap> without dark background \u2014 docs/site/components/skill-dependency-graph.tsx:204", "shortDescription": {"text": "React Flow <MiniMap> without dark background \u2014 docs/site/components/skill-dependency-graph.tsx:204"}, "fullDescription": {"text": "A bare <MiniMap> renders with the vendor's white default in dark themes. Wrap the canvas in a class that overrides `.react-flow__minimap` background, or pass an explicit `style`/`maskColor`/`bgColor`.\n\nWhy: P1 in CHECKLIST.md \u2014 vendor defaults bleed light through.\nRule id: fq.minimap.no-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-34e39f6088669502", "name": "React Flow <Controls> without dark theming \u2014 docs/site/components/skill-dependency-graph.tsx:203", "shortDescription": {"text": "React Flow <Controls> without dark theming \u2014 docs/site/components/skill-dependency-graph.tsx:203"}, "fullDescription": {"text": "`<Controls>` ships with white buttons. Override `.react-flow__controls` and `.react-flow__controls-button` in your stylesheet or pass a styled wrapper.\n\nWhy: P1 in CHECKLIST.md \u2014 vendor defaults bleed light through.\nRule id: fq.controls.no-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ab1f83023517a21", "name": "`truncate` class without `title=` for hover reveal \u2014 docs/site/components/component-dna.tsx:126", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 docs/site/components/component-dna.tsx:126"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7b291713f6b05a5f", "name": "`truncate` class without `title=` for hover reveal \u2014 docs/site/components/analytics/ranked-table.tsx:12", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 docs/site/components/analytics/ranked-table.tsx:12"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-005a12e6c9ddeaf4", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/app/docs/[[...slug]]/page.tsx:81", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/app/docs/[[...slug]]/page.tsx:81"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-234cf0e59e8187f5", "name": "Stray `console.log` in TS/JS \u2014 scripts/generate-indexes.js:252", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-indexes.js:252"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-26b3462ce505e9ce", "name": "Stray `console.log` in TS/JS \u2014 scripts/generate-changelog-data.js:123", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-changelog-data.js:123"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e288a443520492a7", "name": "Stray `console.log` in TS/JS \u2014 scripts/generate-docs-data.js:76", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-docs-data.js:76"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d9991595abf7cf9", "name": "Stray `console.log` in TS/JS \u2014 scripts/verify-imports.js:147", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-imports.js:147"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6216869288b6f58b", "name": "Stray `console.log` in TS/JS \u2014 scripts/generate-ci-report.ts:794", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-ci-report.ts:794"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-05de4c483e01760a", "name": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/test-heygen.ts:14", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/test-heygen.ts:14"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0235f690c6d6d789", "name": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/check-status.ts:15", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/check-status.ts:15"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-999f0a15adbcb5b6", "name": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/generate-install-avatar.ts:39", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/generate-install-avatar.ts:39"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ba4df8e699dea817", "name": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/generate-avatar.ts:37", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/generate-avatar.ts:37"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d468572260874a67", "name": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/coverage/prettify.js:2", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/coverage/prettify.js:2"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d41f0fa2c790013", "name": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/src/components/shared/__tests__/CodePreview.test.tsx:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/src/components/shared/__tests__/CodePreview.test.tsx:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4d7358a85d8bbf9", "name": "TODO/FIXME marker in shipping code \u2014 src/hooks/src/__tests__/lib/debt-markers.test.ts:55", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 src/hooks/src/__tests__/lib/debt-markers.test.ts:55"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0b3ad687345d28c6", "name": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/pretool/file-guard.test.ts:262", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/pretool/file-guard.test.ts:262"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-89bc232ac3f47858", "name": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:131", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:131"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9c2a6cdeadfacd9e", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:190"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c3b5c3883c9c1ff6", "name": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/pretool/code-quality-gate.test.ts:61", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/pretool/code-quality-gate.test.ts:61"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-15c5b0ebc6c8ff43", "name": "TODO/FIXME marker in shipping code \u2014 src/hooks/src/__tests__/skill/test-pattern-validator.test.ts:539", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 src/hooks/src/__tests__/skill/test-pattern-validator.test.ts:539"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-139f55d60ff221f7", "name": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/skill/test-pattern-validator.test.ts:171", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/skill/test-pattern-validator.test.ts:171"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc9f717b8008853e", "name": "TODO/FIXME marker in shipping code \u2014 src/hooks/src/__tests__/posttool/stale-import-detector.test.ts:46", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 src/hooks/src/__tests__/posttool/stale-import-detector.test.ts:46"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0006ffec330bc3cc", "name": "Stray `console.log` in TS/JS \u2014 src/hooks/src/cli/generate-http-hooks.ts:133", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/src/cli/generate-http-hooks.ts:133"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f712ada07a90b7d7", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 src/hooks/src/pretool/Write/security-pattern-validator.ts:53", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/hooks/src/pretool/Write/security-pattern-validator.ts:53"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cdff7d4fbd774ba9", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 src/skills/react-server-components-framework/examples/blog-app-exa", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/skills/react-server-components-framework/examples/blog-app-example.tsx:291"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-984cb853ba4656e8", "name": "Stray `console.log` in TS/JS \u2014 src/skills/monitoring-observability/scripts/opentelemetry-tracing.ts:42", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/monitoring-observability/scripts/opentelemetry-tracing.ts:42"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3cd66e7bd9b268d6", "name": "Stray `console.log` in TS/JS \u2014 src/skills/performance/scripts/performance-monitoring.ts:257", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/performance/scripts/performance-monitoring.ts:257"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-21680cdab97e3a5d", "name": "Stray `console.log` in TS/JS \u2014 src/skills/performance/scripts/frontend-optimization.tsx:53", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/performance/scripts/frontend-optimization.tsx:53"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f801ff40b4377a1b", "name": "Stray `console.log` in TS/JS \u2014 src/skills/rag-retrieval/scripts/rag-pipeline-template.ts:80", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/rag-retrieval/scripts/rag-pipeline-template.ts:80"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-79d9b93c8f779ec4", "name": "Stray `console.log` in TS/JS \u2014 src/skills/vite-advanced/scripts/custom-plugin.ts:41", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/vite-advanced/scripts/custom-plugin.ts:41"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-845eadbeb60af4e4", "name": "Stray `console.log` in TS/JS \u2014 src/skills/agent-orchestration/scripts/agent-workflow-template.ts:172", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/agent-orchestration/scripts/agent-workflow-template.ts:172"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a66d468ca4890b33", "name": "Stray `console.log` in TS/JS \u2014 src/skills/accessibility/scripts/accessible-form-template.tsx:115", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/accessibility/scripts/accessible-form-template.tsx:115"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a70b7553500dfb3e", "name": "Stray `console.log` in TS/JS \u2014 src/skills/accessibility/scripts/accessible-component-template.tsx:68", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/accessibility/scripts/accessible-component-template.tsx:68"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e728b5078176af1e", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 plugins/ork/skills/react-server-components-framework/examples/blog", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 plugins/ork/skills/react-server-components-framework/examples/blog-app-example.tsx:291"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-469e7fecef0dd47f", "name": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/monitoring-observability/scripts/opentelemetry-tracing.ts:42", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/monitoring-observability/scripts/opentelemetry-tracing.ts:42"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1cb7158e00676910", "name": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/performance/scripts/performance-monitoring.ts:257", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/performance/scripts/performance-monitoring.ts:257"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49ed54d1839180fa", "name": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/performance/scripts/frontend-optimization.tsx:53", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/performance/scripts/frontend-optimization.tsx:53"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f024320090813dce", "name": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/rag-retrieval/scripts/rag-pipeline-template.ts:80", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/rag-retrieval/scripts/rag-pipeline-template.ts:80"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c0bc63ec035a92cc", "name": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/vite-advanced/scripts/custom-plugin.ts:41", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/vite-advanced/scripts/custom-plugin.ts:41"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0203e4d57060a7b", "name": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/agent-orchestration/scripts/agent-workflow-template.ts:172", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/agent-orchestration/scripts/agent-workflow-template.ts:172"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-225543b44eb6253b", "name": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/accessibility/scripts/accessible-form-template.tsx:115", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/accessibility/scripts/accessible-form-template.tsx:115"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d51aa9f27d167933", "name": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/accessibility/scripts/accessible-component-template.tsx:68", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/accessibility/scripts/accessible-component-template.tsx:68"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-114d0db00d4c3272", "name": "Privileged port 256 in use", "shortDescription": {"text": "Privileged port 256 in use"}, "fullDescription": {"text": "Port 256 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84f2b6208960391e", "name": "Privileged port 64 in use", "shortDescription": {"text": "Privileged port 64 in use"}, "fullDescription": {"text": "Port 64 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7ce0027c11e0927", "name": "Privileged port 15 in use", "shortDescription": {"text": "Privileged port 15 in use"}, "fullDescription": {"text": "Port 15 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94e26402befbb784", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c9ec71965a5a8a22", "name": "Privileged port 10 in use", "shortDescription": {"text": "Privileged port 10 in use"}, "fullDescription": {"text": "Port 10 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4531eb8283be3c9", "name": "Privileged port 45 in use", "shortDescription": {"text": "Privileged port 45 in use"}, "fullDescription": {"text": "Port 45 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa35eb5698dba4b8", "name": "Privileged port 11 in use", "shortDescription": {"text": "Privileged port 11 in use"}, "fullDescription": {"text": "Port 11 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-28dc43becf3a9550", "name": "Privileged port 30 in use", "shortDescription": {"text": "Privileged port 30 in use"}, "fullDescription": {"text": "Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c28a5b480b2c92a0", "name": "Privileged port 4 in use", "shortDescription": {"text": "Privileged port 4 in use"}, "fullDescription": {"text": "Port 4 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-773d4990a7450312", "name": "Privileged port 2 in use", "shortDescription": {"text": "Privileged port 2 in use"}, "fullDescription": {"text": "Port 2 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3aa19c1e9eba5b7", "name": "Runtime dotenv file present in repo: docs/site/.env.tpl", "shortDescription": {"text": "Runtime dotenv file present in repo: docs/site/.env.tpl"}, "fullDescription": {"text": "`docs/site/.env.tpl` looks like a runtime dotenv file. It contains secret-looking assignments for ANALYTICS_HMAC_SECRET. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-098537665cf5c5b7", "name": "Insecure pattern 'eval_used' in docs/feat--121-observability-consolidation/m121-observability.html:545", "shortDescription": {"text": "Insecure pattern 'eval_used' in docs/feat--121-observability-consolidation/m121-observability.html:545"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f7fe3a14a94b96c2", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--121-observability-consolidation/m121-observability.html:394", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--121-observability-consolidation/m121-observability.html:394"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-226fdafe53e62c36", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1862-ci-sentinel-loop/sentinel-loop-fixes.html:81", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1862-ci-sentinel-loop/sentinel-loop-fixes.html:81"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-009b4c984ece8811", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m141-2-step3-payloads/payload-schemas-explorer.html:129", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m141-2-step3-payloads/payload-schemas-explorer.html:129"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c648beb2328a91dd", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--dynamic-workflow-patterns/dynamic-workflow-patterns-playgro", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--dynamic-workflow-patterns/dynamic-workflow-patterns-playground.html:59"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d9f833a594bb39c", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--scorecard-publish-restriction/scorecard-publish-restriction.", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--scorecard-publish-restriction/scorecard-publish-restriction.html:118"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8d3327bbff4e8b43", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-157-adoption/cc-157-adoption.html:75", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-157-adoption/cc-157-adoption.html:75"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9dbdee50fb96b217", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m141-1-contract-package/hook-contract-explorer.html:252", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m141-1-contract-package/hook-contract-explorer.html:252"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-57939989a1faead2", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-adoption-ws2-model-resilience/availability-simulator.html", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-adoption-ws2-model-resilience/availability-simulator.html:108"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b165c9ce9c941d7c", "name": "Insecure pattern 'insert_adjacent_html' in docs/fix--cc-adoption-ws2-model-resilience/availability-simulator.html:117", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in docs/fix--cc-adoption-ws2-model-resilience/availability-simulator.html:117"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36e11587e209f2b1", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--issue-reference-checker-worktree-dispatcher/issue-reference-", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--issue-reference-checker-worktree-dispatcher/issue-reference-checker.html:222"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-57f8639c63d44d2c", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--watchdog-session-id-bypass/playground.html:130", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--watchdog-session-id-bypass/playground.html:130"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa845a6b05e757fa", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1826-envelope-input-guard/index.html:146", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1826-envelope-input-guard/index.html:146"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7f2ea6f2d2969a4", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--sessionend-budget-2165/sessionend-budget-playground.html:169", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--sessionend-budget-2165/sessionend-budget-playground.html:169"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-82f6335b51da5c1d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--ci-rebuild-hooks-from-src/stale-dist.html:61", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--ci-rebuild-hooks-from-src/stale-dist.html:61"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ad626f67f67224a", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--docs-agent-ready/agent-readiness-playground.html:165", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--docs-agent-ready/agent-readiness-playground.html:165"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24f0034a122e8c19", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--agents-category-recategorize/category-shift.html:187", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--agents-category-recategorize/category-shift.html:187"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0419f1da147db677", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--2268-types-cc-ledger-168/hook-protocol-ledger-playground.h", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--2268-types-cc-ledger-168/hook-protocol-ledger-playground.html:88"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f637eca04a68d55b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m122-cc-2.1.118-2.1.119/m122-summary.html:97", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m122-cc-2.1.118-2.1.119/m122-summary.html:97"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3bfe3e0556c0660d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--docs-landing-claude-design-1247/playground.html:853", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--docs-landing-claude-design-1247/playground.html:853"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f452f7b1830ef197", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-dedup-changelog-ref/dedup-key.html:63", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-dedup-changelog-ref/dedup-key.html:63"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb700c8fe65b05e0", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--2045-snapshot-anchored-dedup/snap-dedup-explorer.html:66", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--2045-snapshot-anchored-dedup/snap-dedup-explorer.html:66"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d434c7804f556c7a", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-2162-adoption/cc-2162-adoption.html:148", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-2162-adoption/cc-2162-adoption.html:148"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ba3d9b411ff902bb", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--mcp-registry-published/gap-explorer.html:141", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--mcp-registry-published/gap-explorer.html:141"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-429413cd0f83f4e6", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--lib-currency-lane1/lane1-hard-breaks.html:110", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--lib-currency-lane1/lane1-hard-breaks.html:110"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b59ccd75d957f730", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m126-effort-skills-filter/effort-and-filter.html:208", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m126-effort-skills-filter/effort-and-filter.html:208"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea881d1ff0a95ed0", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--2012-inline-migrations/playground.html:93", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--2012-inline-migrations/playground.html:93"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e128db4edcf2417", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2163-2166-doc-adoption/cc-doc-adoption-verdicts-playgrou", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2163-2166-doc-adoption/cc-doc-adoption-verdicts-playground.html:100"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb285fe5d4adf567", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-debt/ork-debt-ledger-playground.html:188", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-debt/ork-debt-ledger-playground.html:188"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b745dca81e2d689b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m130-cc-auto-adoption/pipeline-trace.html:218", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m130-cc-auto-adoption/pipeline-trace.html:218"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5ac071dc46cb158", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--1554-closes-drift/closes-n-drift-playground.html:95", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--1554-closes-drift/closes-n-drift-playground.html:95"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0d4bb91ac2cd76d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--nested-delegation-depth/depth-injection.html:87", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--nested-delegation-depth/depth-injection.html:87"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d59fde6e4fed3b13", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1911-m168-phase1-delete-monitors-json/playground.html:747", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1911-m168-phase1-delete-monitors-json/playground.html:747"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1cf4b3880465b4c9", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--brainstorm-skill-headroom/skill-cliff-map.html:102", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--brainstorm-skill-headroom/skill-cliff-map.html:102"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5ae0e48fed1f204", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-ladder-docs-batch/playground.html:81", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-ladder-docs-batch/playground.html:81"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f67e8113a20821b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1912-m168-phase2-sqlite-layer-1/playground.html:747", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1912-m168-phase2-sqlite-layer-1/playground.html:747"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f631b99c7faf076e", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--vercel-labs-tool-bumps-apr15/vercel-labs-stack-upgrade.htm", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--vercel-labs-tool-bumps-apr15/vercel-labs-stack-upgrade.html:400"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8905b16e8e79fbac", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--orank-b-to-a/orank-b-to-a-playground.html:65", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--orank-b-to-a/orank-b-to-a-playground.html:65"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-00316153c03c8db5", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--security-hook-override-ci-divergence/security-hook-override-", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--security-hook-override-ci-divergence/security-hook-override-playground.html:205"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d33aceaf601bae7", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m168-finish-1915-1916-1874/m168-finish-explorer.html:60", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m168-finish-1915-1916-1874/m168-finish-explorer.html:60"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4f8896d8224edd8", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1990-worktreecreate-envelope/playground.html:112", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1990-worktreecreate-envelope/playground.html:112"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b70f8b5f00ed179", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--mcpso-sameas/gap-explorer.html:141", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--mcpso-sameas/gap-explorer.html:141"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18e5e71e710f47d7", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--skill-activation-channels/skill-activation-channels.html:21", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--skill-activation-channels/skill-activation-channels.html:210"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e480be6a9344694d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2285-skills-sh-install/gap-explorer.html:140", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2285-skills-sh-install/gap-explorer.html:140"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2cad9d5da00c9e9f", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m125-lane-a-version-watch-emulate-autodiscover/lane-a.html:", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m125-lane-a-version-watch-emulate-autodiscover/lane-a.html:162"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a7a31b128732531", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1910-hook-envelope-hookeventname/hook-envelope-explorer.html", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1910-hook-envelope-hookeventname/hook-envelope-explorer.html:105"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cde75834858c9131", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--fable-access-suspended/fable-surface-map.html:67", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--fable-access-suspended/fable-surface-map.html:67"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f5caea608eff9e2", "name": "Insecure pattern 'insert_adjacent_html' in docs/chore--fable-access-suspended/fable-surface-map.html:71", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in docs/chore--fable-access-suspended/fable-surface-map.html:71"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18510f39c81efc03", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2264-secret-skip-stash/playground.html:295", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2264-secret-skip-stash/playground.html:295"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1bb7ebd6e27eda50", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-triage-skip-below-floor/below-floor-skip-playground.html:", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-triage-skip-below-floor/below-floor-skip-playground.html:131"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cba1a1cd090a3c1a", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/test--worktree-stdout-guard-2016/worktree-stdout-explorer.html:83", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/test--worktree-stdout-guard-2016/worktree-stdout-explorer.html:83"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cdb9e7a8ee77f84c", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--claude-design-bet-a/playground.html:571", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--claude-design-bet-a/playground.html:571"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9503323167e39a0", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m125-lane-b-dev-stack-expect-aria/lane-b.html:304", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m125-lane-b-dev-stack-expect-aria/lane-b.html:304"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e0659729e1c89fa1", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-145-142-adoption/cc-145-142-adoption.html:64", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-145-142-adoption/cc-145-142-adoption.html:64"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d0a9b87cb261d52", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feature--visual-style-rule/visual-style.html:178", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feature--visual-style-rule/visual-style.html:178"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cfd253dbd7bbcf59", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--yonyon-brand-keying-orank-discovery/yonyon-brand-keying.htm", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--yonyon-brand-keying-orank-discovery/yonyon-brand-keying.html:172"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-64257c222c4b05f0", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--staleness-key-design/key-design.html:79", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--staleness-key-design/key-design.html:79"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b57be4046fded7c3", "name": "Insecure pattern 'insert_adjacent_html' in docs/fix--staleness-key-design/key-design.html:71", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in docs/fix--staleness-key-design/key-design.html:71"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-92bff399fd0cc713", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--drift-cleanup-goal-emitter/goal-emitter-cleanup-playground.", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--drift-cleanup-goal-emitter/goal-emitter-cleanup-playground.html:110"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-61c3f5f7b426b859", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--skill-tool-schema-drift/skill-tool-schema-drift.html:84", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--skill-tool-schema-drift/skill-tool-schema-drift.html:84"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-076925476334e3cd", "name": "Insecure pattern 'eval_used' in docs/feat--119-usage-hygiene-pre-compact-warn/m119-usage-hygiene.html:545", "shortDescription": {"text": "Insecure pattern 'eval_used' in docs/feat--119-usage-hygiene-pre-compact-warn/m119-usage-hygiene.html:545"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-709c6953ea00c91f", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--119-usage-hygiene-pre-compact-warn/m119-usage-hygiene.html:", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--119-usage-hygiene-pre-compact-warn/m119-usage-hygiene.html:394"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d73f844a6211d75e", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--specialist-delegation-fixes/delegation-fixes-playground.htm", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--specialist-delegation-fixes/delegation-fixes-playground.html:134"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d6f2850b0f3934bd", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1796-mcp-server-drift/mcp-deps-staleness-playground.html:102", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1796-mcp-server-drift/mcp-deps-staleness-playground.html:102"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b1420f902034e07f", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--scorecard-alerts/github-app-token-flow.html:483", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--scorecard-alerts/github-app-token-flow.html:483"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9621e02d1c34b981", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--orank-csp-json404/gap-explorer.html:141", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--orank-csp-json404/gap-explorer.html:141"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3eba8948870ebc36", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2264-cleanup-gc/playground.html:295", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2264-cleanup-gc/playground.html:295"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d8f90a6f17179bb3", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--docs-hook-count-drift/count-drift.html:303", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--docs-hook-count-drift/count-drift.html:303"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0ebcfca0cdf95550", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2.1.145-adoption/playground.html:141", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2.1.145-adoption/playground.html:141"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eec7715cc798aac5", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2000-visualize-plan-format-front-door/playground.html:158", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2000-visualize-plan-format-front-door/playground.html:158"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36cbc11da447c860", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m128-cc-122-126-adoption/cc-122-126-otel-and-purge.html:345", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m128-cc-122-126-adoption/cc-122-126-otel-and-purge.html:345"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-55f14e63e02ec45b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-160-161-adoption/cc-160-161-adoption.html:131", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-160-161-adoption/cc-160-161-adoption.html:131"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b58dce01ad711175", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-catchup-174-175/feature-hint-tester.html:110", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-catchup-174-175/feature-hint-tester.html:110"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-652f60ea942bbc62", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--lib-currency-lane2-3/lane2-3.html:80", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--lib-currency-lane2-3/lane2-3.html:80"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4acc1bc4e3a658fe", "name": "Insecure pattern 'dangerous_innerhtml' in docs/site/components/changelog-timeline.tsx:83", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in docs/site/components/changelog-timeline.tsx:83"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-091a290373728929", "name": "Insecure pattern 'dangerous_innerhtml' in docs/site/components/structured-data.tsx:27", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in docs/site/components/structured-data.tsx:27"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d9e3e6b82ea4181", "name": "Insecure pattern 'dangerous_innerhtml' in docs/site/app/docs/[[...slug]]/page.tsx:81", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in docs/site/app/docs/[[...slug]]/page.tsx:81"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea05974a0a1d4278", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/site/lib/mcp-ui.ts:50", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/site/lib/mcp-ui.ts:50"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c4fe1185879529f", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m126-ultrareview-and-fork-subagent/explainer.html:346", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m126-ultrareview-and-fork-subagent/explainer.html:346"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-05e6fe948a2c13c8", "name": "Insecure pattern 'debug_true' in docs/feat--m126-ultrareview-and-fork-subagent/explainer.html:293", "shortDescription": {"text": "Insecure pattern 'debug_true' in docs/feat--m126-ultrareview-and-fork-subagent/explainer.html:293"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d3c6225bb720e13c", "name": "Insecure pattern 'eval_used' in docs/feat--1478-coverage-hardening/m119-usage-hygiene.html:545", "shortDescription": {"text": "Insecure pattern 'eval_used' in docs/feat--1478-coverage-hardening/m119-usage-hygiene.html:545"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4678719ab5ffe523", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--1478-coverage-hardening/m119-usage-hygiene.html:394", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--1478-coverage-hardening/m119-usage-hygiene.html:394"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d0f0db67c2c72cd", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1978-envelope-cleanup-root-sweep/playground.html:85", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1978-envelope-cleanup-root-sweep/playground.html:85"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e793bcca4d9d14f4", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--discovery-crawlability-flywheel/orank-levers-playground.htm", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--discovery-crawlability-flywheel/orank-levers-playground.html:133"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-912a4bed2c72efc5", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--readme-yonyon-canonical/readme-canonical-playground.html:6", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--readme-yonyon-canonical/readme-canonical-playground.html:64"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a63b93c26634b47e", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--skill-channel-telemetry/skill-channel-telemetry.html:209", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--skill-channel-telemetry/skill-channel-telemetry.html:209"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1cf83753d86bab66", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--drift-register-correction/drift-reaudit-playground.html:125", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--drift-register-correction/drift-reaudit-playground.html:125"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c92939428a86703a", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--dependency-confusion-claude-pkg/dependency-confusion-playgro", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--dependency-confusion-claude-pkg/dependency-confusion-playground.html:149"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-09d5fd9fe9f44e19", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-floor-2.1.170/cc-2-1-170-adoption-playground.html:68", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-floor-2.1.170/cc-2-1-170-adoption-playground.html:68"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-376446361b03b302", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1914-m168-phase4-worktree-overrides/playground.html:220", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1914-m168-phase4-worktree-overrides/playground.html:220"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df8744cc48ccf2f4", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--session-title-branch-pin/session-title-pin-playground.html:1", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--session-title-branch-pin/session-title-pin-playground.html:114"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97e4b6780b548e51", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--skill-compat-floor-check-1963/playground.html:80", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--skill-compat-floor-check-1963/playground.html:80"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-627823e81ae3c48e", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--hook-json-path-leak/explorer.html:187", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--hook-json-path-leak/explorer.html:187"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-386300243371b4bb", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--askuserquestion-schema-conformance/askuserquestion-schema-va", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--askuserquestion-schema-conformance/askuserquestion-schema-validator.html:241"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85d4451223251b46", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--governance-floor/engine-floor-playground.html:49", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--governance-floor/engine-floor-playground.html:49"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2719bbef0f2d032b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--clarify-global-hook-count/gap-explorer.html:141", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--clarify-global-hook-count/gap-explorer.html:141"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e766b0cf187b63ba", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-native-first-rule/cc-2.1.165-adoption-playground.html:15", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-native-first-rule/cc-2.1.165-adoption-playground.html:155"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25a293c41de0a271", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-triage-tokenfree-reconcile/cc-adoption-before-after-playg", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-triage-tokenfree-reconcile/cc-adoption-before-after-playground.html:208"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d217ad98889ff351", "name": "Insecure pattern 'cors_wildcard' in docs/fix--cors-restrict-origin/cors-fix.html:10", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in docs/fix--cors-restrict-origin/cors-fix.html:10"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f498221f9deb8a4", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--delegation-verify-followups/verify-followups-playground.html", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--delegation-verify-followups/verify-followups-playground.html:143"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08c559283711a106", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2282-facet-counts/facet-stability.html:51", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2282-facet-counts/facet-stability.html:51"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b0e5ecf456ef64c", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m119-closeout/m119-closeout.html:140", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m119-closeout/m119-closeout.html:140"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b009ee627304d7d1", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-watch-native-binary-install/cc-cli-install-playground.htm", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-watch-native-binary-install/cc-cli-install-playground.html:162"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-842b72ee018cedcc", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m170-skill-auto-eval-spec/playground.html:79", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m170-skill-auto-eval-spec/playground.html:79"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-42f89b4018b6580c", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--groom-2176-noise/verdicts.html:62", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--groom-2176-noise/verdicts.html:62"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f33875f4e7e6d29f", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--fable-spend-consent/fable5-adoption-playground.html:319", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--fable-spend-consent/fable5-adoption-playground.html:319"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f407dfd5bffb1de", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-debt-eval-case/ork-debt-ledger-playground.html:188", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-debt-eval-case/ork-debt-ledger-playground.html:188"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6972e629d0932210", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--m130-pipeline-hotfix/bug-walkthrough.html:307", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--m130-pipeline-hotfix/bug-walkthrough.html:307"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a97833cfd71effa3", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--agent-readiness-orank/agent-readiness-explorer.html:144", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--agent-readiness-orank/agent-readiness-explorer.html:144"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a96a3ed5e38f9205", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2.1.172-173-adoption/cc-adoption-explorer.html:127", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2.1.172-173-adoption/cc-adoption-explorer.html:127"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e073285ef873e613", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2264-wire-reversible/playground.html:295", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2264-wire-reversible/playground.html:295"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ceaa8c0b2adb6415", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--fable5-model-vocab/fable5-adoption-playground.html:319", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--fable5-model-vocab/fable5-adoption-playground.html:319"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-14d2c29b046a0d6a", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2162-2163-backlog/cc-2162-2163-verdicts-playground.html:", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2162-2163-backlog/cc-2162-2163-verdicts-playground.html:97"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc09f4956f427941", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--mcp-core-consumers/mcp-core-consumers.html:183", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--mcp-core-consumers/mcp-core-consumers.html:183"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d98efd38b8094940", "name": "Insecure pattern 'cors_wildcard' in docs/feat--agent-readiness-cors/cors-agent-access.html:45", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in docs/feat--agent-readiness-cors/cors-agent-access.html:45"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5fcc2f095ba6b5de", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--configure-2176-settings/settings-catalog.html:46", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--configure-2176-settings/settings-catalog.html:46"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7aa12c49c98a496b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--adversarial-verify-review-audit/adversarial-refutation-roll", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--adversarial-verify-review-audit/adversarial-refutation-rollout-playground.html:128"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a7dc343fee06823", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--adversarial-verify-skills/adversarial-verify-playground.htm", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--adversarial-verify-skills/adversarial-verify-playground.html:92"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be34a3a1f204e338", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-watch-carry-triaged-gaps/gaps-carry-forward-playground.ht", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-watch-carry-triaged-gaps/gaps-carry-forward-playground.html:153"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e3004ea76629f95", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-adoption-zero-out/verdicts.html:73", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-adoption-zero-out/verdicts.html:73"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80837e902acc0330", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/test--perf-bench-split/playground.html:218", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/test--perf-bench-split/playground.html:218"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c18a038a8d3658bb", "name": "Insecure pattern 'insert_adjacent_html' in docs/test--perf-bench-split/playground.html:224", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in docs/test--perf-bench-split/playground.html:224"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d032321856f4985", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2-1-128-adoption/cc-feature-window-playground.html:126", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2-1-128-adoption/cc-feature-window-playground.html:126"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84463810bb240d6d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--esbuild-0281-bundle/why-dep-bumps-drift.html:71", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--esbuild-0281-bundle/why-dep-bumps-drift.html:71"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c6174db4351eb186", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-rolling-milestone/cc-milestone-consolidation.html:151", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-rolling-milestone/cc-milestone-consolidation.html:151"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6cc057def8ebf819", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m119-dogfood-cluster/m119-zones.html:281", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m119-dogfood-cluster/m119-zones.html:281"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9173f087ac8c2e99", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--mcp-core-consumers-round-2/round-2-consumers.html:185", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--mcp-core-consumers-round-2/round-2-consumers.html:185"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a99450a7ecbb0aa", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m129-otel-fixtures-and-path-decode/lossy-decode-and-fixtur", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m129-otel-fixtures-and-path-decode/lossy-decode-and-fixtures.html:199"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d4713741cb360e0b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--json-error-content-type/gap-explorer.html:141", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--json-error-content-type/gap-explorer.html:141"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7100e71b5cc3db88", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--session-title-override/playground.html:341", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--session-title-override/playground.html:341"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be76bd4b54e44972", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--docs-orchestkit-yonyon-domain/domain-cutover-playground.htm", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--docs-orchestkit-yonyon-domain/domain-cutover-playground.html:161"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-547132a1bbd574f6", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--2267-cc-triage-featureless/cc-triage-featureless-playground.", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--2267-cc-triage-featureless/cc-triage-featureless-playground.html:131"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749e77f65459c1dc", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--session-title-language/lang-title.html:58", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--session-title-language/lang-title.html:58"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-992c0f82f75e88f7", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--smithery-sameas/gap-explorer.html:141", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--smithery-sameas/gap-explorer.html:141"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-664bed3522261454", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--scorecard-pinned-deps/scorecard-pinned-deps-triage.html:183", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--scorecard-pinned-deps/scorecard-pinned-deps-triage.html:183"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b0a38b81e0ab6250", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--orank-layers-2-3-4/gap-explorer.html:141", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--orank-layers-2-3-4/gap-explorer.html:141"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3dce71dfa02911c9", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2010-skill-invocation/playground.html:210", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2010-skill-invocation/playground.html:210"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1c3b044cb3a6091d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--mcp-registry-version-automation/registry-sync-playground.h", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--mcp-registry-version-automation/registry-sync-playground.html:92"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-92ac3c20b6b3b39e", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--2017-sqlite-cleanup/playground.html:90", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--2017-sqlite-cleanup/playground.html:90"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-52015b1ae5a60400", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m128-bundle-x-monitor-quickwins/monitor-debounce-explorer.h", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m128-bundle-x-monitor-quickwins/monitor-debounce-explorer.html:183"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a8fcadde4da5c3a", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--unified-orama-search/search-redesign-playground.html:226", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--unified-orama-search/search-redesign-playground.html:226"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d5e9c922d6a6b24b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-triage-retry-recovery/gaps-carry-forward.html:83", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-triage-retry-recovery/gaps-carry-forward.html:83"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f736056a6032f237", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--dwp-ork-framing-clarifier/workflow-patterns-playground.html", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--dwp-ork-framing-clarifier/workflow-patterns-playground.html:93"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b0150bc554d9d1c3", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-2158-staleness-sweep/staleness-audit-2026-05-30.html:13", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-2158-staleness-sweep/staleness-audit-2026-05-30.html:132"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84826d0ae9898ef6", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--askuserq-preview-strip/skills-hygiene-playground.html:64", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--askuserq-preview-strip/skills-hygiene-playground.html:64"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0db8c569ae122805", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-2.1.139-adoption/index.html:131", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-2.1.139-adoption/index.html:131"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-647cbdecf1b47640", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--compare-jsonld-geo/gap-explorer.html:141", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--compare-jsonld-geo/gap-explorer.html:141"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ced9df13a0ab9eaa", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-adoption-ws3-ws4/adoption-board.html:81", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-adoption-ws3-ws4/adoption-board.html:81"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bdf524259a1e472b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2153-2154-adoption-sweep/cc-2153-sweep-explorer.html:90", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2153-2154-adoption-sweep/cc-2153-sweep-explorer.html:90"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fd8944212329d040", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1917-fix-test-isolation/playground.html:747", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1917-fix-test-isolation/playground.html:747"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-46206fd6d00dbab4", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1913-m168-phase3-events-jsonl/playground.html:747", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1913-m168-phase3-events-jsonl/playground.html:747"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-00cc8ef3ba409cfc", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m117-closeout/m117-closeout.html:92", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m117-closeout/m117-closeout.html:92"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38e0feaae95d11fe", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--cc-2152-umbrella-tail/cc-2152-tail-explorer.html:80", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--cc-2152-umbrella-tail/cc-2152-tail-explorer.html:80"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b00852d35199001", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-backlog-clearout/cc-backlog-clearout.html:86", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-backlog-clearout/cc-backlog-clearout.html:86"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d43fe36429b6846", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-watch-double-dash-normalize/double-dash-normalizer-playgr", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-watch-double-dash-normalize/double-dash-normalizer-playground.html:109"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b4dcfe5268abd3b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1527-json-render-dashboards/lane-c.html:324", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1527-json-render-dashboards/lane-c.html:324"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-35ce593bc751b11b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--assess-followups/tag-routing.html:62", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--assess-followups/tag-routing.html:62"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d53a76795adb17ee", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--adoption-sweep-skill-compat/playground.html:97", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--adoption-sweep-skill-compat/playground.html:97"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c48c9ea3ea06ef9", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m126-secret-handler-hook/explainer.html:195", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m126-secret-handler-hook/explainer.html:195"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b0eb6843e34cf67", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--1945-bump-cc-floor-2.1.148/playground.html:108", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--1945-bump-cc-floor-2.1.148/playground.html:108"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8dcb653fee18204d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--1964-cc-triage-skill-gap/playground.html:160", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--1964-cc-triage-skill-gap/playground.html:160"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ae78796f7c300e9b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m126-count-sync-followup/count-sync-explorer.html:137", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m126-count-sync-followup/count-sync-explorer.html:137"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-299e37b4ae303d90", "name": "Insecure pattern 'eval_used' in docs/feat--1478-token-estimator/m119-usage-hygiene.html:545", "shortDescription": {"text": "Insecure pattern 'eval_used' in docs/feat--1478-token-estimator/m119-usage-hygiene.html:545"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7333f6d120db2bca", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--1478-token-estimator/m119-usage-hygiene.html:394", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--1478-token-estimator/m119-usage-hygiene.html:394"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc775a1497856268", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-pipeline-hardening/pipeline-resilience.html:87", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-pipeline-hardening/pipeline-resilience.html:87"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b60ba7eef6312451", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--peer-session-awareness/peer-session-awareness.html:121", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--peer-session-awareness/peer-session-awareness.html:121"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1abca9d5630ec7c3", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-stale-and-dist-rebuild/label-ensure-resilience.html:63", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-stale-and-dist-rebuild/label-ensure-resilience.html:63"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a7092d09f59648c", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-2154-stragglers/stragglers-explorer.html:47", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-2154-stragglers/stragglers-explorer.html:47"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d8efcfe9b9f5755", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-swarm-migrate/index.html:225", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-swarm-migrate/index.html:225"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d6455f380bc7297", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1985-cc-watch-parse-failed-blackhole/playground.html:154", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1985-cc-watch-parse-failed-blackhole/playground.html:154"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c38a594868024870", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-floor-2.1.168/cc-support-window.html:82", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-floor-2.1.168/cc-support-window.html:82"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9e082d52df106fd", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-debt-ext-fix/ork-debt-ledger-playground.html:188", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-debt-ext-fix/ork-debt-ledger-playground.html:188"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-99534e997c7baee9", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2154-adoption/cc-2154-adoption-explorer.html:75", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2154-adoption/cc-2154-adoption-explorer.html:75"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8269e617ceda756", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--sessionstart-hookeventname/index.html:223", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--sessionstart-hookeventname/index.html:223"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c95f914540e28a2b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--cc-adopt-2152-quickwins/cc-2152-adoption-explorer.html:120", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--cc-adopt-2152-quickwins/cc-2152-adoption-explorer.html:120"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-302b9c8772433f1f", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/vercel-labs-2026-04-29-adoption-ideas.html:316", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/vercel-labs-2026-04-29-adoption-ideas.html:316"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5903d32ed0b2cf4", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/superpowers-learnings.html:323", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/superpowers-learnings.html:323"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7388d835acba063", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/lib-currency-audit-2026-05-31.html:444", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/lib-currency-audit-2026-05-31.html:444"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b1d6c55857517bd", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/vercel-labs-integration.html:389", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/vercel-labs-integration.html:389"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2748f503e6c901ea", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/m126-bundle-b-explainer.html:346", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/m126-bundle-b-explainer.html:346"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2597690e37d92baf", "name": "Insecure pattern 'debug_true' in docs/playgrounds/m126-bundle-b-explainer.html:293", "shortDescription": {"text": "Insecure pattern 'debug_true' in docs/playgrounds/m126-bundle-b-explainer.html:293"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae33ab6c8f75e037", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--worktree-create-path-contract/fable5-adoption-playground.htm", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--worktree-create-path-contract/fable5-adoption-playground.html:319"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df45efdfb9e21baf", "name": "Insecure pattern 'eval_used' in scripts/generate-docs-data.js:1055", "shortDescription": {"text": "Insecure pattern 'eval_used' in scripts/generate-docs-data.js:1055"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ebf14e934f511e26", "name": "Insecure pattern 'node_child_process' in scripts/cc-triage.mjs:40", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/cc-triage.mjs:40"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-838df1b39f5e6360", "name": "Insecure pattern 'node_child_process' in scripts/validate-handoff-bundle.mjs:26", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/validate-handoff-bundle.mjs:26"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b0227ba0757e1d22", "name": "Insecure pattern 'node_child_process' in scripts/cc-release-watch.mjs:22", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/cc-release-watch.mjs:22"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8bdb487809dc5f98", "name": "Insecure pattern 'node_child_process' in scripts/generate-ci-report.ts:30", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/generate-ci-report.ts:30"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5a19ea7f4db8daa", "name": "Insecure pattern 'node_child_process' in scripts/check-labs-versions.mjs:11", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/check-labs-versions.mjs:11"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-192a23b4e585fb3e", "name": "Insecure pattern 'eval_used' in scripts/eval/static-analysis.sh:268", "shortDescription": {"text": "Insecure pattern 'eval_used' in scripts/eval/static-analysis.sh:268"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-565b0ff862783fd8", "name": "Insecure pattern 'subprocess_shell_true' in scripts/eval/static-analysis.sh:272", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in scripts/eval/static-analysis.sh:272"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f8963f69fe57f9b", "name": "Insecure pattern 'document_write' in scripts/eval/static-analysis.sh:270", "shortDescription": {"text": "Insecure pattern 'document_write' in scripts/eval/static-analysis.sh:270"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f8ced00fc2270db5", "name": "Insecure pattern 'direct_innerhtml_assignment' in orchestkit-demos/coverage/prettify.js:2", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestkit-demos/coverage/prettify.js:2"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76d4da6ae532a7b5", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/quality-gate-hooks.test.ts:89", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/quality-gate-hooks.test.ts:89"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-649166814367a94e", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/notification/desktop-spawn.test.ts:58", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/notification/desktop-spawn.test.ts:58"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94c17e98727913b0", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/notification/desktop.test.ts:56", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/notification/desktop.test.ts:56"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8dd801014ccf7e0", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/notification/sound.test.ts:52", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/notification/sound.test.ts:52"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3595d2ba52ee568e", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/integration/agent-attribution-pipeline.test.ts:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/integration/agent-attribution-pipeline.test.ts:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4dc74dd1971cf276", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/integration/hook-runner.test.ts:17", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/integration/hook-runner.test.ts:17"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9238c8bd0ee47632", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/integration/worktree-create-stdout.test.ts:22", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/integration/worktree-create-stdout.test.ts:22"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7033e259e61025d", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/permission-denied/denial-notification.test.ts:49", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/permission-denied/denial-notification.test.ts:49"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69f268b3b869120c", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/subagent-start/issue-context-injector.test.ts:31", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/subagent-start/issue-context-injector.test.ts:31"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4fc6411bee39c7c", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lib/git.test.ts:35", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lib/git.test.ts:35"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb9369f967e2974e", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lib/user-identity.test.ts:20", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lib/user-identity.test.ts:20"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f20fb55079f37e44", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lib/session-id-generator.test.ts:45", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lib/session-id-generator.test.ts:45"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a27766814f4cfbc1", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/session-env-setup.test.ts:26", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/session-env-setup.test.ts:26"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ca476a95b98efd7", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/session-tracking.test.ts:29", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/session-tracking.test.ts:29"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5dff8d466ec88d19", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/pre-compact-task-done-prompt.test.ts:37", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/pre-compact-task-done-prompt.test.ts:37"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c551186856f71e93", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/sweep-stale-worktrees.test.ts:22", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/sweep-stale-worktrees.test.ts:22"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-29bbe4feab239e7f", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/plugins-drift.test.ts:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/plugins-drift.test.ts:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed2935dbc3701cf0", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/task-created/task-context-injector.test.ts:27", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/task-created/task-context-injector.test.ts:27"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-54b9620132d45d26", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/git-validator-worktree.test.ts:41", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/git-validator-worktree.test.ts:41"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe03a0816b146240", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/commit-atomicity-checker.test.ts:22", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/commit-atomicity-checker.test.ts:22"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-82f0bb864e3e3b11", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/conflict-predictor.test.ts:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/conflict-predictor.test.ts:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad5d7abee71abd6f", "name": "Insecure pattern 'eval_used' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:130", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:130"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d142f5ec5ce0807a", "name": "Insecure pattern 'exec_used' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:132", "shortDescription": {"text": "Insecure pattern 'exec_used' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:132"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-48d09cdd063a3760", "name": "Insecure pattern 'subprocess_shell_true' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:158", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:158"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81a41d1a78dad4bd", "name": "Insecure pattern 'dangerous_innerhtml' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:190", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:190"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80603b8e71812e32", "name": "Insecure pattern 'direct_innerhtml_assignment' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:188", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:188"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-147afd3f6943ceea", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/pre-commit-quality-runner.test.ts:32", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/pre-commit-quality-runner.test.ts:32"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed7dc68eb93da4a4", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/changelog-generator.test.ts:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/changelog-generator.test.ts:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a214296a0832ad4", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/affected-tests-finder.test.ts:27", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/affected-tests-finder.test.ts:27"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-331054b1a54a41b7", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/worktree/worktree-provisioner.test.ts:16", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/worktree/worktree-provisioner.test.ts:16"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be62753178256261", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/merge-conflict-predictor.test.ts:39", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/merge-conflict-predictor.test.ts:39"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8521127e7d5ee97", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/decision-processor.test.ts:36", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/decision-processor.test.ts:36"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bfe26adfecb7fa85", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/test-runner.test.ts:32", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/test-runner.test.ts:32"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f589f80f4b0c943", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/merge-readiness-checker.test.ts:39", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/merge-readiness-checker.test.ts:39"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b493cd3355e16c2", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/migration-validator.test.ts:32", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/migration-validator.test.ts:32"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbc9735d74ba49e1", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/setup/setup-check.test.ts:41", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/setup/setup-check.test.ts:41"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-328146315cc558a0", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/async/dispatcher-e2e.test.ts:20", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/async/dispatcher-e2e.test.ts:20"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f576a34554eb466", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/stop/stop-uncommitted-check.test.ts:12", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/stop/stop-uncommitted-check.test.ts:12"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24babfdd07a56f4a", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/stop/full-test-suite.test.ts:31", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/stop/full-test-suite.test.ts:31"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c6faee232cec2a6", "name": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/stop/issue-work-summary.test.ts:33", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/stop/issue-work-summary.test.ts:33"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a0f328082fe20bf", "name": "Insecure pattern 'node_child_process' in src/hooks/src/notification/desktop.ts:11", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/notification/desktop.ts:11"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4f3efd727cace7f7", "name": "Insecure pattern 'node_child_process' in src/hooks/src/notification/sound.ts:11", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/notification/sound.ts:11"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e18a7e938f8e5001", "name": "Insecure pattern 'node_child_process' in src/hooks/src/permission-denied/denial-notification.ts:20", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/permission-denied/denial-notification.ts:20"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbbe0185248efde1", "name": "Insecure pattern 'node_child_process' in src/hooks/src/subagent-start/issue-context-injector.ts:20", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/subagent-start/issue-context-injector.ts:20"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f9a9bfd81bed8fcd", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lib/user-identity.ts:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lib/user-identity.ts:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f820086e8ea323f", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lib/git.ts:6", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lib/git.ts:6"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-83b8802c12c0870e", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lib/env.ts:8", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lib/env.ts:8"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6071badd27476c70", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lib/session-identity.ts:23", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lib/session-identity.ts:23"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d67df4522ce59f3d", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lib/session-id-generator.ts:17", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lib/session-id-generator.ts:17"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3821a433d7c6d18b", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/type-error-indexer.ts:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/type-error-indexer.ts:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e763bfab68a425e1", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/pre-compact-saver.ts:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/pre-compact-saver.ts:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d144f1574bc6444a", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/pre-compact-task-done-prompt.ts:22", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/pre-compact-task-done-prompt.ts:22"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d0336762548bf78", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-tracking.ts:12", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-tracking.ts:12"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36271f46a09b4be7", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/sweep-stale-worktrees.ts:38", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/sweep-stale-worktrees.ts:38"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef1565cac7bd7f96", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-handoff-generator.ts:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-handoff-generator.ts:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4713b7e3e3fc01a5", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-registrar.ts:28", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-registrar.ts:28"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-624bb3cb64af4a36", "name": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-env-setup.ts:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-env-setup.ts:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f63d2e703473921", "name": "Insecure pattern 'node_child_process' in src/hooks/src/task-created/task-context-injector.ts:16", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/task-created/task-context-injector.ts:16"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8aebecc109743c27", "name": "Insecure pattern 'subprocess_shell_true' in src/hooks/src/pretool/Write/security-pattern-validator.ts:47", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in src/hooks/src/pretool/Write/security-pattern-validator.ts:47"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47f58a2c014d68c5", "name": "Insecure pattern 'dangerous_innerhtml' in src/hooks/src/pretool/Write/security-pattern-validator.ts:53", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in src/hooks/src/pretool/Write/security-pattern-validator.ts:53"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8dee9a007a298fb", "name": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/worktree-merge-verifier.ts:19", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/worktree-merge-verifier.ts:19"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e2b60fca3642e581", "name": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/pre-commit-test-gate.ts:26", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/pre-commit-test-gate.ts:26"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51312ca8da0b1fe5", "name": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/commit-atomicity-checker.ts:17", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/commit-atomicity-checker.ts:17"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-abaadb7a062181f5", "name": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/agent-browser-safety.ts:30", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/agent-browser-safety.ts:30"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69a404d7180e9f76", "name": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/delete-branch-stacked-pr-guard.ts:21", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/delete-branch-stacked-pr-guard.ts:21"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a74c3ed35ca589e0", "name": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/changelog-generator.ts:12", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/changelog-generator.ts:12"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-099a54d93f7e143b", "name": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/affected-tests-finder.ts:12", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/affected-tests-finder.ts:12"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-627cb9c3a6ebaf2b", "name": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/playground-presence-warner.ts:24", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/playground-presence-warner.ts:24"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e35f165d82e5ea2", "name": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/pre-commit-quality-runner.ts:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/pre-commit-quality-runner.ts:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d7df6812e976447", "name": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/conflict-predictor.ts:12", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/conflict-predictor.ts:12"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4fc4fe33500a8dbd", "name": "Insecure pattern 'node_child_process' in src/hooks/src/worktree/worktree-provisioner.ts:40", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/worktree/worktree-provisioner.ts:40"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-95c2a4068915c515", "name": "Insecure pattern 'node_child_process' in src/hooks/src/skill/coverage-check.ts:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/coverage-check.ts:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc2bb20a2e5f5d52", "name": "Insecure pattern 'node_child_process' in src/hooks/src/skill/merge-readiness-checker.ts:8", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/merge-readiness-checker.ts:8"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-653141e7e4317b77", "name": "Insecure pattern 'node_child_process' in src/hooks/src/skill/test-runner.ts:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/test-runner.ts:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e31bec5f2f1efa09", "name": "Insecure pattern 'node_child_process' in src/hooks/src/skill/decision-processor.ts:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/decision-processor.ts:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4001765004f31c56", "name": "Insecure pattern 'node_child_process' in src/hooks/src/skill/migration-validator.ts:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/migration-validator.ts:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0619d2e2e779a448", "name": "Insecure pattern 'node_child_process' in src/hooks/src/skill/context-loader-utils.ts:10", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/context-loader-utils.ts:10"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4fa5ebefd929c373", "name": "Insecure pattern 'node_child_process' in src/hooks/src/skill/merge-conflict-predictor.ts:8", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/merge-conflict-predictor.ts:8"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a6c7028642405ff", "name": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/auto-lint.ts:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/auto-lint.ts:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30f57e0b21c311b6", "name": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/check-plugins-drift.ts:26", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/check-plugins-drift.ts:26"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e67392334f233d2", "name": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/expect/snapshot-recorder.ts:20", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/expect/snapshot-recorder.ts:20"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f643c30e8c5aae69", "name": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/expect/fingerprint-saver.ts:17", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/expect/fingerprint-saver.ts:17"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08f9310ddefd6d91", "name": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/write/coverage-predictor.ts:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/write/coverage-predictor.ts:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1cbadd7c50683b8", "name": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/write/stale-import-detector.ts:30", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/write/stale-import-detector.ts:30"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-087bc8d0571646b1", "name": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/bash/issue-subtask-updater.ts:13", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/bash/issue-subtask-updater.ts:13"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb766ababb99f9f8", "name": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/bash/issue-progress-commenter.ts:13", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/bash/issue-progress-commenter.ts:13"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7e22bcf8560bab0c", "name": "Insecure pattern 'node_child_process' in src/hooks/src/setup/setup-check.ts:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/setup/setup-check.ts:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-adf81edf958dc378", "name": "Insecure pattern 'node_child_process' in src/hooks/src/setup/setup-maintenance.ts:27", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/setup/setup-maintenance.ts:27"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de30f6b19c86066c", "name": "Insecure pattern 'node_child_process' in src/hooks/src/setup/first-run-setup.ts:16", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/setup/first-run-setup.ts:16"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-29c5ea96a3de6e33", "name": "Insecure pattern 'node_child_process' in src/hooks/src/instructions-loaded/debt-surfacer.ts:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/instructions-loaded/debt-surfacer.ts:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b6d3666ac959f2cc", "name": "Insecure pattern 'node_child_process' in src/hooks/src/stop/full-test-suite.ts:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/stop/full-test-suite.ts:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50823afe0fe36064", "name": "Insecure pattern 'node_child_process' in src/hooks/src/stop/stop-failure-handler.ts:23", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/stop/stop-failure-handler.ts:23"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51cd5635b922959c", "name": "Insecure pattern 'node_child_process' in src/hooks/src/stop/security-scan-aggregator.ts:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/stop/security-scan-aggregator.ts:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2cedde5abf097dd3", "name": "Insecure pattern 'node_child_process' in src/hooks/src/stop/handoff-writer.ts:20", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/stop/handoff-writer.ts:20"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-45ee430c77126a57", "name": "Insecure pattern 'node_child_process' in src/hooks/src/stop/issue-work-summary.ts:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/stop/issue-work-summary.ts:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe88c54bddbc3342", "name": "Insecure pattern 'eval_used' in src/skills/bare-eval/SKILL.md:150", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/skills/bare-eval/SKILL.md:150"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9aad45d23376628e", "name": "Insecure pattern 'node_child_process' in src/skills/memory/scripts/graph-utils.mjs:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/skills/memory/scripts/graph-utils.mjs:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e006d3033c97559", "name": "Insecure pattern 'dangerous_innerhtml' in src/skills/i18n-date-patterns/test-cases.json:26", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in src/skills/i18n-date-patterns/test-cases.json:26"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0abeeb24419583e6", "name": "Insecure pattern 'eval_used' in src/skills/code-review-playbook/scripts/run-pr-checks.py:88", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/skills/code-review-playbook/scripts/run-pr-checks.py:88"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-72651b3de84f3415", "name": "Insecure pattern 'exec_used' in src/skills/code-review-playbook/scripts/run-pr-checks.py:89", "shortDescription": {"text": "Insecure pattern 'exec_used' in src/skills/code-review-playbook/scripts/run-pr-checks.py:89"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1a57a5ed727e61ce", "name": "Insecure pattern 'dangerous_innerhtml' in src/skills/code-review-playbook/scripts/run-pr-checks.py:96", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in src/skills/code-review-playbook/scripts/run-pr-checks.py:96"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf4fc438c30d7f2a", "name": "Insecure pattern 'new_function_used' in plugins/ork/mcp-server/server.mjs:7", "shortDescription": {"text": "Insecure pattern 'new_function_used' in plugins/ork/mcp-server/server.mjs:7"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-af8b9bf568de7f97", "name": "Insecure pattern 'eval_used' in plugins/ork/skills/bare-eval/SKILL.md:150", "shortDescription": {"text": "Insecure pattern 'eval_used' in plugins/ork/skills/bare-eval/SKILL.md:150"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e07534146b2cf9e", "name": "Insecure pattern 'node_child_process' in plugins/ork/skills/memory/scripts/graph-utils.mjs:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in plugins/ork/skills/memory/scripts/graph-utils.mjs:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d502f5eefdb25c5", "name": "Insecure pattern 'dangerous_innerhtml' in plugins/ork/skills/i18n-date-patterns/test-cases.json:26", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in plugins/ork/skills/i18n-date-patterns/test-cases.json:26"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-04ddb78b9205c9f9", "name": "Insecure pattern 'eval_used' in plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py:88", "shortDescription": {"text": "Insecure pattern 'eval_used' in plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py:88"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8a4128db310b1462", "name": "Insecure pattern 'exec_used' in plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py:89", "shortDescription": {"text": "Insecure pattern 'exec_used' in plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py:89"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-31f400b6bdf459fd", "name": "Insecure pattern 'dangerous_innerhtml' in plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py:96", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py:96"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ae320408e79b14d3", "name": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-11/skills-health-dashboard.html:441", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-11/skills-health-dashboard.html:441"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-117245661751bb95", "name": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-02-19/hook-architecture-explorer.html:839", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-02-19/hook-architecture-explorer.html:839"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a3afdcd0bff1774", "name": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-16/cc-adoption-roadmap.html:429", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-16/cc-adoption-roadmap.html:429"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-09a8b162a8326c75", "name": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-02-25/skills-health-dashboard.html:399", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-02-25/skills-health-dashboard.html:399"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6de1a91a67a7b2db", "name": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-18/docs-strategy.html:732", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-18/docs-strategy.html:732"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7638068fc01ec808", "name": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-21/stripe-mpp-commerce-brainstorm.html:1202", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-21/stripe-mpp-commerce-brainstorm.html:1202"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-75f64385771afc94", "name": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-21/orchestkit-dashboard.html:478", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-21/orchestkit-dashboard.html:478"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-848f1f9552d53ddd", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-822b91f5a247a5e2", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-db90be7a2d385afb", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65a716a27d2be993", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa34ea400e21db85", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6716cf880458d5b5", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f99cf7ab712cb8bd", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1838a141491ce38c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-063997d8d14f8d5c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb639d9a10a47b23", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d368fcb3ff7b5cc", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6bf406a4f375ebc3", "name": "Very large file: docs/site/lib/generated/skills-data.ts (5671 lines)", "shortDescription": {"text": "Very large file: docs/site/lib/generated/skills-data.ts (5671 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dd64822b88ce93a0", "name": "Very large file: scripts/_build-docs-generate.py (1443 lines)", "shortDescription": {"text": "Very large file: scripts/_build-docs-generate.py (1443 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f5fb6c0f86fc91c", "name": "Very large file: orchestkit-demos/src/components/SkillPhaseDemo.tsx (2074 lines)", "shortDescription": {"text": "Very large file: orchestkit-demos/src/components/SkillPhaseDemo.tsx (2074 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2bc0ddd11b5b01d0", "name": "59 TODO/FIXME markers", "shortDescription": {"text": "59 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed7d4a01debea06d", "name": "Node manifest has dependencies but no lockfile: tests/evals/scaffolds/typescript-nextjs/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: tests/evals/scaffolds/typescript-nextjs/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-01768c4c1a9b5aef", "name": "Node manifest has dependencies but no lockfile: packages/hook-contract/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/hook-contract/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e5df1c91b0deae44", "name": "Node manifest has dependencies but no lockfile: plugins/ork/hooks/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: plugins/ork/hooks/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 1527 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 171 placeholder/mock markers across 61 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-69a743a522bb0811", "name": "Agent instruction/config may expose a secret: docs/site/.claude/agent-memory/ork-web-research-analyst/reference_rtk_tool", "shortDescription": {"text": "Agent instruction/config may expose a secret: docs/site/.claude/agent-memory/ork-web-research-analyst/reference_rtk_tool.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c9eb71daf39269ce", "name": "Agent instruction contains unpinned remote install: docs/site/.claude/agent-memory/ork-web-research-analyst/reference_rt", "shortDescription": {"text": "Agent instruction contains unpinned remote install: docs/site/.claude/agent-memory/ork-web-research-analyst/reference_rtk_tool.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d649596d500b0abc", "name": "Agent authority lacks a verifier contract: .claude/rules/rules-meta.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/rules/rules-meta.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d22919762cd3b487", "name": "Agent authority lacks a verifier contract: .claude/rules/error_rules.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/rules/error_rules.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c5ac0975275feb53", "name": "Agent authority lacks a verifier contract: .claude/templates/mcp-enabled.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/templates/mcp-enabled.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-699f108ea7b3fa62", "name": "Agent instruction contains unpinned remote install: .claude/templates/mcp-enabled.json", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/templates/mcp-enabled.json"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e467ba55f9c211d", "name": "Agent authority lacks a verifier contract: .claude/templates/mcp-disabled.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/templates/mcp-disabled.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f1dc0aa7bde82f1", "name": "Agent instruction contains unpinned remote install: .claude/templates/mcp-disabled.json", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/templates/mcp-disabled.json"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-506551f03c69e1c1", "name": "Agent authority lacks a verifier contract: .claude/permissions/profiles/enterprise.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/permissions/profiles/enterprise.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-77e4fe7f33d1a8c2", "name": "Agent instruction contains unpinned remote install: .claude/permissions/profiles/team.json", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/permissions/profiles/team.json"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-828029d8115aeff5", "name": "Agent authority lacks a verifier contract: .claude/schemas/hook-output.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/schemas/hook-output.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f44ab809939c75b", "name": "Agent authority lacks a verifier contract: .claude/schemas/memory-fabric.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/schemas/memory-fabric.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9f215a59b81ab67", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-17691861520", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186152097.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c3e587a5d46e301b", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-17691862620", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186262002.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7d8f5b04284a3590", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-17691865830", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186583008.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d670530ff8cbf8f7", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-17691863014", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186301481.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6da8cc370d60753d", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-17691862729", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186272974.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-19e1518079d224d2", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-undefined.json", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-undefined.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-367198a4b8463282", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-17691863335", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186333551.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1c8fb8878c2171db", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-17691862373", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186237386.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-220fd638b6f7d2dd", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-17691865772", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186577280.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-91ad82dbc2a98870", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-17691862889", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186288925.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ce8528320d880244", "name": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-17691863098", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186309894.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-29e1071cf4e4400c", "name": "Agent authority lacks a verifier contract: src/skills/multimodal-llm/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/skills/multimodal-llm/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3601719e0f8158ae", "name": "Agent instruction/config may expose a secret: src/skills/task-dependency-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/skills/task-dependency-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-def469cdb3f3816b", "name": "Agent instruction contains unpinned remote install: src/skills/react-server-components-framework/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: src/skills/react-server-components-framework/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b34d65ae0e1ac12c", "name": "Agent authority lacks a verifier contract: src/skills/architecture-decision-record/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/skills/architecture-decision-record/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3fddb4a01a5357c5", "name": "Agent authority lacks a verifier contract: src/skills/remember/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/skills/remember/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-83b054e004367e14", "name": "Agent authority lacks a verifier contract: src/skills/portless/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/skills/portless/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6415dfef1c87c2b3", "name": "Agent instruction/config may expose a secret: src/skills/create-pr/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/skills/create-pr/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2580c1b95e1cf081", "name": "Agent authority lacks a verifier contract: src/skills/analytics/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/skills/analytics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-325bb51ab3e74618", "name": "Agent instruction contains unpinned remote install: src/skills/expect/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: src/skills/expect/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed39c9d06feb45de", "name": "Agent instruction/config may expose a secret: src/skills/llm-integration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/skills/llm-integration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-01105bcd98ca4c47", "name": "Agent authority lacks a verifier contract: src/skills/llm-integration/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/skills/llm-integration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b2b4587b066ff7b0", "name": "Agent authority lacks a verifier contract: src/skills/memory-fabric/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/skills/memory-fabric/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49ae6fd650d3009f", "name": "Agent instruction/config may expose a secret: src/skills/emulate-seed/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/skills/emulate-seed/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-31880ff15d2e7a2a", "name": "Agent instruction/config may expose a secret: src/skills/brainstorm/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/skills/brainstorm/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-63c926f91ab75f6e", "name": "Agent instruction/config may expose a secret: src/skills/fix-issue/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/skills/fix-issue/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d8c082163960612f", "name": "Agent authority lacks a verifier contract: src/skills/python-backend/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/skills/python-backend/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cbd5123dea345e0e", "name": "Agent authority lacks a verifier contract: src/skills/web-research-workflow/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/skills/web-research-workflow/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2dfcb0515d06b096", "name": "Agent instruction/config may expose a secret: src/skills/review-pr/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/skills/review-pr/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7429274c9124a127", "name": "Agent instruction/config may expose a secret: src/skills/agent-orchestration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/skills/agent-orchestration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b421194845e6fab7", "name": "Agent instruction/config may expose a secret: src/skills/i18n-date-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/skills/i18n-date-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-354a3592c94e4808", "name": "Agent instruction/config may expose a secret: src/skills/visualize-plan/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: src/skills/visualize-plan/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fa4108bd9943ecf2", "name": "Agent authority lacks a verifier contract: src/skills/feedback/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/skills/feedback/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c97e9689cfab6fe4", "name": "Agent authority lacks a verifier contract: plugins/ork/skills/multimodal-llm/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/multimodal-llm/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f6387bdf0e2cd82f", "name": "Agent instruction/config may expose a secret: plugins/ork/skills/task-dependency-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/task-dependency-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-31600a72302f03c7", "name": "Agent instruction contains unpinned remote install: plugins/ork/skills/react-server-components-framework/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: plugins/ork/skills/react-server-components-framework/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85874f01f6deea9f", "name": "Agent authority lacks a verifier contract: plugins/ork/skills/architecture-decision-record/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/architecture-decision-record/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b0a1a96ee4ed0e4", "name": "Agent authority lacks a verifier contract: plugins/ork/skills/remember/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/remember/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25fe3b3919e2267d", "name": "Agent authority lacks a verifier contract: plugins/ork/skills/portless/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/portless/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a4fd93e4b8b35de", "name": "Agent instruction/config may expose a secret: plugins/ork/skills/create-pr/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/create-pr/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-23ef529a36a122c0", "name": "Agent authority lacks a verifier contract: plugins/ork/skills/analytics/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/analytics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7a508646d523f5a", "name": "Agent instruction contains unpinned remote install: plugins/ork/skills/expect/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: plugins/ork/skills/expect/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1329671186cd86fd", "name": "Agent instruction/config may expose a secret: plugins/ork/skills/llm-integration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/llm-integration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bbc13cb710c22287", "name": "Agent authority lacks a verifier contract: plugins/ork/skills/llm-integration/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/llm-integration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-01416be8e4d29c8b", "name": "Agent authority lacks a verifier contract: plugins/ork/skills/memory-fabric/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/memory-fabric/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bc36b019252fbe1e", "name": "Agent instruction/config may expose a secret: plugins/ork/skills/emulate-seed/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/emulate-seed/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a2c823a7be270474", "name": "Agent instruction/config may expose a secret: plugins/ork/skills/brainstorm/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/brainstorm/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e0e9bb7d1aed944e", "name": "Agent instruction/config may expose a secret: plugins/ork/skills/fix-issue/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/fix-issue/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8f294c22f1eb7135", "name": "Agent authority lacks a verifier contract: plugins/ork/skills/python-backend/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/python-backend/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8cbc0e0894a913e4", "name": "Agent authority lacks a verifier contract: plugins/ork/skills/web-research-workflow/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/web-research-workflow/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ba355105f60f607", "name": "Agent instruction/config may expose a secret: plugins/ork/skills/review-pr/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/review-pr/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7d7bbda3fb2f4508", "name": "Agent instruction/config may expose a secret: plugins/ork/skills/agent-orchestration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/agent-orchestration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-87fc1c7b522db940", "name": "Agent instruction/config may expose a secret: plugins/ork/skills/i18n-date-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/i18n-date-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c824a92419fa3afd", "name": "Agent instruction/config may expose a secret: plugins/ork/skills/visualize-plan/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/visualize-plan/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-88d85e29071f90d4", "name": "Agent authority lacks a verifier contract: plugins/ork/skills/feedback/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/feedback/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-31e0debeee85a84c", "name": "Commented-code block (8 lines) in tests/manifests/test-skill-activation-channels.mjs:2", "shortDescription": {"text": "Commented-code block (8 lines) in tests/manifests/test-skill-activation-channels.mjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1598f961b6a3980c", "name": "Commented-code block (6 lines) in docs/site/middleware.ts:9", "shortDescription": {"text": "Commented-code block (6 lines) in docs/site/middleware.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-66c2508dc4f36163", "name": "Commented-code block (5 lines) in docs/site/__tests__/contextual-skill-sidebar.test.tsx:129", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/__tests__/contextual-skill-sidebar.test.tsx:129"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-78ec1a7087f4adbc", "name": "Commented-code block (8 lines) in docs/site/__tests__/search-indexes.test.ts:6", "shortDescription": {"text": "Commented-code block (8 lines) in docs/site/__tests__/search-indexes.test.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5d542cb12624e097", "name": "Commented-code block (5 lines) in docs/site/__tests__/sitemap.test.ts:9", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/__tests__/sitemap.test.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-648e4ef630322461", "name": "`fetch()` without try/.catch or AbortSignal \u2014 docs/site/components/webmcp-provider.tsx:53", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/site/components/webmcp-provider.tsx:53"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0defb610041a5b94", "name": "Commented-code block (5 lines) in docs/site/components/agent-readiness-section.tsx:4", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/components/agent-readiness-section.tsx:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c149eb0726e2f949", "name": "Commented-code block (5 lines) in docs/site/components/content-page.tsx:9", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/components/content-page.tsx:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-727115a24e3ae537", "name": "Commented-code block (6 lines) in docs/site/components/structured-data.tsx:3", "shortDescription": {"text": "Commented-code block (6 lines) in docs/site/components/structured-data.tsx:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ac87f52944b9916d", "name": "Commented-code block (6 lines) in docs/site/app/robots.txt/route.ts:3", "shortDescription": {"text": "Commented-code block (6 lines) in docs/site/app/robots.txt/route.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f8baa837d1a5e64b", "name": "Commented-code block (5 lines) in docs/site/app/api/route.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/app/api/route.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2e65cf6d9eadec74", "name": "Commented-code block (6 lines) in docs/site/app/api/md/[[...slug]]/route.ts:8", "shortDescription": {"text": "Commented-code block (6 lines) in docs/site/app/api/md/[[...slug]]/route.ts:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b06b74dfc18ab56e", "name": "Commented-code block (5 lines) in docs/site/app/api/mcp/route.ts:5", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/app/api/mcp/route.ts:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2ae9420f09bb97a3", "name": "Commented-code block (7 lines) in docs/site/app/api/ask/route.ts:9", "shortDescription": {"text": "Commented-code block (7 lines) in docs/site/app/api/ask/route.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ce1d915eb135cc4e", "name": "Commented-code block (7 lines) in docs/site/app/api/search/route.ts:9", "shortDescription": {"text": "Commented-code block (7 lines) in docs/site/app/api/search/route.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6d255b3cb54b2b4c", "name": "Commented-code block (5 lines) in docs/site/app/api/well-known/agent-card/route.ts:28", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/app/api/well-known/agent-card/route.ts:28"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8774d769c7d6bcc2", "name": "Commented-code block (6 lines) in docs/site/app/api/well-known/agent-skills/route.ts:7", "shortDescription": {"text": "Commented-code block (6 lines) in docs/site/app/api/well-known/agent-skills/route.ts:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-53754af4590666a9", "name": "Commented-code block (7 lines) in docs/site/app/api/well-known/oauth-protected-resource/route.ts:9", "shortDescription": {"text": "Commented-code block (7 lines) in docs/site/app/api/well-known/oauth-protected-resource/route.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-720df63ebef61db5", "name": "Commented-code block (6 lines) in docs/site/app/api/llms.txt/route.ts:3", "shortDescription": {"text": "Commented-code block (6 lines) in docs/site/app/api/llms.txt/route.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ac8cfcbc6566dd68", "name": "Commented-code block (6 lines) in docs/site/app/api/jobs/[token]/route.ts:10", "shortDescription": {"text": "Commented-code block (6 lines) in docs/site/app/api/jobs/[token]/route.ts:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8e72c8fdea7a4551", "name": "Commented-code block (5 lines) in docs/site/app/llms-full.txt/route.ts:7", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/app/llms-full.txt/route.ts:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a45021d3a46fe769", "name": "Commented-code block (5 lines) in docs/site/app/docs/llms.txt/route.ts:7", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/app/docs/llms.txt/route.ts:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a48c4d440eca519e", "name": "Commented-code block (5 lines) in docs/site/app/auth.md/route.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/app/auth.md/route.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eb985d630035a8da", "name": "Commented-code block (5 lines) in docs/site/lib/orama-browser.ts:6", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/lib/orama-browser.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7ad687cad690cc87", "name": "Commented-code block (11 lines) in docs/site/lib/mcp-ui.ts:11", "shortDescription": {"text": "Commented-code block (11 lines) in docs/site/lib/mcp-ui.ts:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-21146c037c7897e7", "name": "Commented-code block (6 lines) in docs/site/lib/static-pages.ts:4", "shortDescription": {"text": "Commented-code block (6 lines) in docs/site/lib/static-pages.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d15c4c47aaa3a345", "name": "Commented-code block (5 lines) in docs/site/lib/agent-404.ts:9", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/lib/agent-404.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-51f3f211451a1ce8", "name": "Commented-code block (5 lines) in docs/site/lib/constants.ts:24", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/lib/constants.ts:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ee27d1b7102afc04", "name": "Commented-code block (6 lines) in docs/site/lib/rate-limit.ts:4", "shortDescription": {"text": "Commented-code block (6 lines) in docs/site/lib/rate-limit.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cada61ff54807f9f", "name": "Commented-code block (6 lines) in docs/site/lib/problem.ts:4", "shortDescription": {"text": "Commented-code block (6 lines) in docs/site/lib/problem.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b41a060390bf4e2a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 docs/site/lib/generated/skill-content-data.ts:323", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/site/lib/generated/skill-content-data.ts:323"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a7e3363b11f7c6c", "name": "Commented-code block (5 lines) in docs/site/lib/openapi/paths.ts:5", "shortDescription": {"text": "Commented-code block (5 lines) in docs/site/lib/openapi/paths.ts:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-54f30d14b4352f10", "name": "Commented-code block (5 lines) in scripts/cc-triage.mjs:164", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/cc-triage.mjs:164"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0c9e4bd9e6f71f28", "name": "Commented-code block (6 lines) in scripts/migrate-tests-to-ctx.mjs:255", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/migrate-tests-to-ctx.mjs:255"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-935c8681aa11df8d", "name": "Commented-code block (5 lines) in scripts/wire-testctx.mjs:226", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/wire-testctx.mjs:226"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-62a1751e7164923d", "name": "Commented-code block (6 lines) in scripts/cc-release-watch.mjs:86", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/cc-release-watch.mjs:86"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f8df08da29e73391", "name": "Commented-code block (7 lines) in scripts/migrate-hooks-to-ctx.mjs:139", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/migrate-hooks-to-ctx.mjs:139"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0db2abe1d4f5b7e9", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/parity-check.py:67", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/parity-check.py:67"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9310c7c179c7eb7e", "name": "Commented-code block (5 lines) in scripts/migrate-common-mocks.mjs:37", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/migrate-common-mocks.mjs:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8d69de5134bdf33a", "name": "Commented-code block (5 lines) in scripts/changelog-to-props.mjs:44", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/changelog-to-props.mjs:44"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-78a8a590b96bdc43", "name": "Commented-code block (5 lines) in scripts/eval/conformance-check.mjs:131", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/eval/conformance-check.mjs:131"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-722f00d6196cb24b", "name": "Legacy-named symbol `headerOld` in packages/hook-contract/tests/signing.test.ts:139", "shortDescription": {"text": "Legacy-named symbol `headerOld` in packages/hook-contract/tests/signing.test.ts:139"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-087760e7948d0504", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/hook-contract/src/signing.ts:80", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/hook-contract/src/signing.ts:80"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-54d913ca0009b811", "name": "Legacy-named symbol `header_old` in packages/hook-contract-py/tests/test_signing.py:149", "shortDescription": {"text": "Legacy-named symbol `header_old` in packages/hook-contract-py/tests/test_signing.py:149"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8924b5cf9238fd7b", "name": "Network/subprocess call without timeout or try/except \u2014 packages/hook-contract-py/src/orchestkit_hook_contract/signing.p", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/hook-contract-py/src/orchestkit_hook_contract/signing.py:99"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9dd0ff885fbaf72b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 orchestkit-demos/src/lib/heygen.ts:81", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 orchestkit-demos/src/lib/heygen.ts:81"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e808cfd1cb1a35c9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/mcp-server/src/tools/docs.ts:19", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/mcp-server/src/tools/docs.ts:19"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03d179a221da4d05", "name": "Commented-code block (5 lines) in src/hooks/esbuild.config.mjs:43", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/esbuild.config.mjs:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-23af8cb1f22299b1", "name": "Commented-code block (5 lines) in src/hooks/scripts/validate-registry.mjs:89", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/scripts/validate-registry.mjs:89"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-afca3488dd50f5d1", "name": "Commented-code block (5 lines) in src/hooks/src/__tests__/hooks.test.ts:561", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/hooks.test.ts:561"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7edf7e344dd89900", "name": "Commented-code block (6 lines) in src/hooks/src/__tests__/lifecycle-output-protocol.test.ts:242", "shortDescription": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/lifecycle-output-protocol.test.ts:242"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2271dc14cfb6eaa3", "name": "Commented-code block (112 lines) in src/hooks/src/__tests__/split-bundles.test.ts:287", "shortDescription": {"text": "Commented-code block (112 lines) in src/hooks/src/__tests__/split-bundles.test.ts:287"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0ddbc9f76fafde57", "name": "Commented-code block (5 lines) in src/hooks/src/__tests__/webhook-forwarder-coverage.test.ts:37", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/webhook-forwarder-coverage.test.ts:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a8554bf4df9d7481", "name": "Commented-code block (5 lines) in src/hooks/src/__tests__/subagent-stop/watchdog.test.ts:143", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/subagent-stop/watchdog.test.ts:143"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-15863a2640e8d5c1", "name": "Commented-code block (9 lines) in src/hooks/src/__tests__/subagent-stop/unified-dispatcher.test.ts:663", "shortDescription": {"text": "Commented-code block (9 lines) in src/hooks/src/__tests__/subagent-stop/unified-dispatcher.test.ts:663"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dca80dc414a1efae", "name": "Commented-code block (6 lines) in src/hooks/src/__tests__/prompt/antipattern-detector.test.ts:15", "shortDescription": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/prompt/antipattern-detector.test.ts:15"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-67958ec54d59c966", "name": "Commented-code block (6 lines) in src/hooks/src/__tests__/subagent-start/model-cost-advisor.test.ts:234", "shortDescription": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/subagent-start/model-cost-advisor.test.ts:234"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8ae30b4c3093ded4", "name": "Commented-code block (5 lines) in src/hooks/src/__tests__/lib/home-environment.test.ts:19", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/lib/home-environment.test.ts:19"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-65bc7139b7b161a1", "name": "Commented-code block (6 lines) in src/hooks/src/__tests__/lib/paths.test.ts:121", "shortDescription": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/lib/paths.test.ts:121"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b536355847390941", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/lib/token-estimator.test.ts:224", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/lib/token-estimator.test.ts:224"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a53d2b3ceb903d6a", "name": "Commented-code block (7 lines) in src/hooks/src/__tests__/lib/session-id-generator.test.ts:398", "shortDescription": {"text": "Commented-code block (7 lines) in src/hooks/src/__tests__/lib/session-id-generator.test.ts:398"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e4aea329727d89b5", "name": "Commented-code block (6 lines) in src/hooks/src/__tests__/lib/session-registry.test.ts:157", "shortDescription": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/lib/session-registry.test.ts:157"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1ec64a0e1a276360", "name": "Legacy-named symbol `branch_v1` in src/hooks/src/__tests__/lifecycle/session-tracking.test.ts:495", "shortDescription": {"text": "Legacy-named symbol `branch_v1` in src/hooks/src/__tests__/lifecycle/session-tracking.test.ts:495"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-55a94beed59a0e9a", "name": "Commented-code block (5 lines) in src/hooks/src/__tests__/lifecycle/cc-version-check.test.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/lifecycle/cc-version-check.test.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-75545ee7b6e59846", "name": "Commented-code block (5 lines) in src/hooks/src/__tests__/lifecycle/sweep-stale-worktrees.test.ts:183", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/lifecycle/sweep-stale-worktrees.test.ts:183"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-61aa5a9641cc3a71", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:267", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:267"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c3e9d783535b6da", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/skill/duplicate-code-detector.test.ts:427", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/skill/duplicate-code-detector.test.ts:427"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3e16f6c60ad96b43", "name": "Commented-code block (6 lines) in src/hooks/src/__tests__/skill/decision-processor.test.ts:725", "shortDescription": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/skill/decision-processor.test.ts:725"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7615bb61f85b2d91", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/skill/pattern-consistency-enforcer.test.ts:410", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/skill/pattern-consistency-enforcer.test.ts:410"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0329da7031b3d337", "name": "Commented-code block (7 lines) in src/hooks/src/__tests__/posttool/secret-handler.test.ts:238", "shortDescription": {"text": "Commented-code block (7 lines) in src/hooks/src/__tests__/posttool/secret-handler.test.ts:238"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c5dd3f6e03195895", "name": "Commented-code block (7 lines) in src/hooks/src/__tests__/async/dispatcher-e2e.test.ts:58", "shortDescription": {"text": "Commented-code block (7 lines) in src/hooks/src/__tests__/async/dispatcher-e2e.test.ts:58"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dd86442be21c9f1c", "name": "Commented-code block (9 lines) in src/hooks/src/__tests__/async/async-registry.test.ts:44", "shortDescription": {"text": "Commented-code block (9 lines) in src/hooks/src/__tests__/async/async-registry.test.ts:44"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b5f25b8c27f55cfc", "name": "Commented-code block (7 lines) in src/hooks/src/__tests__/e2e/dispatcher-registry-wiring.test.ts:65", "shortDescription": {"text": "Commented-code block (7 lines) in src/hooks/src/__tests__/e2e/dispatcher-registry-wiring.test.ts:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7562bb9386d0790f", "name": "Commented-code block (5 lines) in src/hooks/src/__tests__/e2e/hooks-json-wiring.test.ts:131", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/e2e/hooks-json-wiring.test.ts:131"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-99bacb465aa26b0a", "name": "Commented-code block (5 lines) in src/hooks/src/subagent-stop/watchdog.ts:23", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/subagent-stop/watchdog.ts:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-836c37a5337fa7a3", "name": "Commented-code block (7 lines) in src/hooks/src/prompt/unified-dispatcher.ts:394", "shortDescription": {"text": "Commented-code block (7 lines) in src/hooks/src/prompt/unified-dispatcher.ts:394"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d2cec8de2a49a76b", "name": "Commented-code block (5 lines) in src/hooks/src/subagent-start/subagent-context-stager.ts:311", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/subagent-start/subagent-context-stager.ts:311"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7475db9fead7acbb", "name": "Commented-code block (5 lines) in src/hooks/src/subagent-start/model-cost-advisor.ts:23", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/subagent-start/model-cost-advisor.ts:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-20e4372e979ad569", "name": "Commented-code block (5 lines) in src/hooks/src/cli/generate-http-hooks.ts:174", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/cli/generate-http-hooks.ts:174"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9e7e98d74f2d1bda", "name": "Commented-code block (8 lines) in src/hooks/src/lib/telemetry-schemas.ts:103", "shortDescription": {"text": "Commented-code block (8 lines) in src/hooks/src/lib/telemetry-schemas.ts:103"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c4d696fa7d2501ec", "name": "Commented-code block (5 lines) in src/hooks/src/lib/token-estimator.ts:103", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/lib/token-estimator.ts:103"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d7e725f551456b73", "name": "Commented-code block (5 lines) in src/hooks/src/lib/decision-flow-tracker.ts:535", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/lib/decision-flow-tracker.ts:535"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6974b0173461ccbd", "name": "Commented-code block (5 lines) in src/hooks/src/lib/context.ts:33", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/lib/context.ts:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0911f21103dc0d3a", "name": "Commented-code block (13 lines) in src/hooks/src/lib/retry-manager.ts:21", "shortDescription": {"text": "Commented-code block (13 lines) in src/hooks/src/lib/retry-manager.ts:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ade430407a4bc586", "name": "Commented-code block (10 lines) in src/hooks/src/lib/bash-patterns.ts:27", "shortDescription": {"text": "Commented-code block (10 lines) in src/hooks/src/lib/bash-patterns.ts:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ebc455bdbd0a9f94", "name": "Commented-code block (7 lines) in src/hooks/src/lib/session-tracker.ts:608", "shortDescription": {"text": "Commented-code block (7 lines) in src/hooks/src/lib/session-tracker.ts:608"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ec46ad4d969aa762", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/lib/decision-history.ts:814", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/lib/decision-history.ts:814"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b5f3c1fa4cc7372", "name": "Commented-code block (7 lines) in src/hooks/src/lib/http-sink.ts:27", "shortDescription": {"text": "Commented-code block (7 lines) in src/hooks/src/lib/http-sink.ts:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bd5eff4c4d15e814", "name": "Commented-code block (7 lines) in src/hooks/src/lib/tool-invocation-rules.ts:80", "shortDescription": {"text": "Commented-code block (7 lines) in src/hooks/src/lib/tool-invocation-rules.ts:80"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ad95894899deb0aa", "name": "Commented-code block (5 lines) in src/hooks/src/lifecycle/cwd-changed.ts:186", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/lifecycle/cwd-changed.ts:186"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6eb5810ead406466", "name": "Commented-code block (5 lines) in src/hooks/src/lifecycle/cleanup-envelope-corruption.ts:100", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/lifecycle/cleanup-envelope-corruption.ts:100"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-07b10bc5dd512aad", "name": "Commented-code block (5 lines) in src/hooks/src/lifecycle/webhook-forwarder.ts:26", "shortDescription": {"text": "Commented-code block (5 lines) in src/hooks/src/lifecycle/webhook-forwarder.ts:26"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4ef46f2997aa9ba6", "name": "Commented-code block (7 lines) in src/hooks/src/lifecycle/sweep-stale-worktrees.ts:102", "shortDescription": {"text": "Commented-code block (7 lines) in src/hooks/src/lifecycle/sweep-stale-worktrees.ts:102"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-53f9d074f80108ee", "name": "Commented-code block (6 lines) in src/hooks/src/pretool/task/sync-task-dispatcher.ts:47", "shortDescription": {"text": "Commented-code block (6 lines) in src/hooks/src/pretool/task/sync-task-dispatcher.ts:47"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-59b236166406a728", "name": "Commented-code block (6 lines) in src/hooks/src/pretool/write-edit/dependency-confusion-scanner.ts:27", "shortDescription": {"text": "Commented-code block (6 lines) in src/hooks/src/pretool/write-edit/dependency-confusion-scanner.ts:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-95de6d2fce2f4d71", "name": "Commented-code block (6 lines) in src/hooks/src/pretool/bash/dangerous-command-blocker.ts:64", "shortDescription": {"text": "Commented-code block (6 lines) in src/hooks/src/pretool/bash/dangerous-command-blocker.ts:64"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f4a8ad379e947be5", "name": "Commented-code block (6 lines) in src/hooks/src/pretool/bash/git-validator.ts:229", "shortDescription": {"text": "Commented-code block (6 lines) in src/hooks/src/pretool/bash/git-validator.ts:229"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5f24c4b4df0bd98b", "name": "Legacy-named symbol `daysOld` in src/hooks/src/posttool/write/readme-sync.ts:202", "shortDescription": {"text": "Legacy-named symbol `daysOld` in src/hooks/src/posttool/write/readme-sync.ts:202"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-84dbb9e8f06b96b2", "name": "Commented-code block (8 lines) in src/hooks/src/posttool/write/stale-import-detector.ts:220", "shortDescription": {"text": "Commented-code block (8 lines) in src/hooks/src/posttool/write/stale-import-detector.ts:220"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e266aa6ced6be2e3", "name": "Commented-code block (7 lines) in src/hooks/src/posttool/secret-handler/patterns.ts:60", "shortDescription": {"text": "Commented-code block (7 lines) in src/hooks/src/posttool/secret-handler/patterns.ts:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b9291609c0e43c0f", "name": "Commented-code block (5 lines) in src/skills/monitoring-observability/scripts/observe-decorator.py:190", "shortDescription": {"text": "Commented-code block (5 lines) in src/skills/monitoring-observability/scripts/observe-decorator.py:190"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9fb25df1c758a6dd", "name": "Commented-code block (8 lines) in src/skills/monitoring-observability/scripts/callback-handler.py:276", "shortDescription": {"text": "Commented-code block (8 lines) in src/skills/monitoring-observability/scripts/callback-handler.py:276"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f39d3d0ffd315771", "name": "Legacy-named symbol `golden_dataset_backup` in src/skills/golden-dataset/scripts/backup-script.py:36", "shortDescription": {"text": "Legacy-named symbol `golden_dataset_backup` in src/skills/golden-dataset/scripts/backup-script.py:36"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d8f06c1e17243c8", "name": "Commented-code block (10 lines) in src/skills/performance/scripts/performance-monitoring.ts:703", "shortDescription": {"text": "Commented-code block (10 lines) in src/skills/performance/scripts/performance-monitoring.ts:703"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9505614b63b3e8ce", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/skills/performance/scripts/optimized-context.tsx:155", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/skills/performance/scripts/optimized-context.tsx:155"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08d5007c20331454", "name": "Commented-code block (6 lines) in src/skills/audit-full/workflows/audit-full-mapreduce.mjs:3", "shortDescription": {"text": "Commented-code block (6 lines) in src/skills/audit-full/workflows/audit-full-mapreduce.mjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a6bfe5f8b9229b4c", "name": "Legacy-named symbol `get_user_v1` in src/skills/api-design/scripts/fastapi-versioned-router.py:187", "shortDescription": {"text": "Legacy-named symbol `get_user_v1` in src/skills/api-design/scripts/fastapi-versioned-router.py:187"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-35cbddb718f1dbd1", "name": "Commented-code block (5 lines) in src/skills/security-patterns/scripts/auth-middleware-template.py:105", "shortDescription": {"text": "Commented-code block (5 lines) in src/skills/security-patterns/scripts/auth-middleware-template.py:105"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b98815eb197ed8c3", "name": "Commented-code block (5 lines) in src/skills/distributed-systems/scripts/bulkhead.py:83", "shortDescription": {"text": "Commented-code block (5 lines) in src/skills/distributed-systems/scripts/bulkhead.py:83"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3ade3609249943e2", "name": "Commented-code block (7 lines) in src/skills/bare-eval/workflows/skill-fitness.mjs:3", "shortDescription": {"text": "Commented-code block (7 lines) in src/skills/bare-eval/workflows/skill-fitness.mjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c60b37cdf9e2ce28", "name": "Commented-code block (6 lines) in src/skills/database-patterns/scripts/migration-template.py:53", "shortDescription": {"text": "Commented-code block (6 lines) in src/skills/database-patterns/scripts/migration-template.py:53"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-349972d5b5371b80", "name": "Commented-code block (6 lines) in src/skills/python-backend/scripts/pool-setup-template.py:102", "shortDescription": {"text": "Commented-code block (6 lines) in src/skills/python-backend/scripts/pool-setup-template.py:102"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7856e8eaea8bab92", "name": "Commented-code block (15 lines) in src/skills/accessibility/scripts/accessible-component-template.tsx:133", "shortDescription": {"text": "Commented-code block (15 lines) in src/skills/accessibility/scripts/accessible-component-template.tsx:133"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-df8ff513597dbd21", "name": "Commented-code block (5 lines) in plugins/ork/hooks/esbuild.config.mjs:43", "shortDescription": {"text": "Commented-code block (5 lines) in plugins/ork/hooks/esbuild.config.mjs:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fd541a04ce67e2be", "name": "Commented-code block (5 lines) in plugins/ork/hooks/scripts/validate-registry.mjs:89", "shortDescription": {"text": "Commented-code block (5 lines) in plugins/ork/hooks/scripts/validate-registry.mjs:89"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4ee0925bbfcb4b8e", "name": "Commented-code block (5 lines) in plugins/ork/skills/monitoring-observability/scripts/observe-decorator.py:190", "shortDescription": {"text": "Commented-code block (5 lines) in plugins/ork/skills/monitoring-observability/scripts/observe-decorator.py:190"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-972cd0cc9fe10b16", "name": "Commented-code block (8 lines) in plugins/ork/skills/monitoring-observability/scripts/callback-handler.py:276", "shortDescription": {"text": "Commented-code block (8 lines) in plugins/ork/skills/monitoring-observability/scripts/callback-handler.py:276"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-64bde9f156f95192", "name": "Legacy-named symbol `golden_dataset_backup` in plugins/ork/skills/golden-dataset/scripts/backup-script.py:36", "shortDescription": {"text": "Legacy-named symbol `golden_dataset_backup` in plugins/ork/skills/golden-dataset/scripts/backup-script.py:36"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-025d485f959185db", "name": "Commented-code block (10 lines) in plugins/ork/skills/performance/scripts/performance-monitoring.ts:703", "shortDescription": {"text": "Commented-code block (10 lines) in plugins/ork/skills/performance/scripts/performance-monitoring.ts:703"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b3d14418b25121b9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 plugins/ork/skills/performance/scripts/optimized-context.tsx:155", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 plugins/ork/skills/performance/scripts/optimized-context.tsx:155"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c2a0c2b3ae979cc", "name": "Commented-code block (6 lines) in plugins/ork/skills/audit-full/workflows/audit-full-mapreduce.mjs:3", "shortDescription": {"text": "Commented-code block (6 lines) in plugins/ork/skills/audit-full/workflows/audit-full-mapreduce.mjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3bfbeb7a7b0e6d4e", "name": "Legacy-named symbol `get_user_v1` in plugins/ork/skills/api-design/scripts/fastapi-versioned-router.py:187", "shortDescription": {"text": "Legacy-named symbol `get_user_v1` in plugins/ork/skills/api-design/scripts/fastapi-versioned-router.py:187"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44c833f70e586f1a", "name": "Commented-code block (5 lines) in plugins/ork/skills/security-patterns/scripts/auth-middleware-template.py:105", "shortDescription": {"text": "Commented-code block (5 lines) in plugins/ork/skills/security-patterns/scripts/auth-middleware-template.py:105"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5ac63b8cb075fc63", "name": "Commented-code block (5 lines) in plugins/ork/skills/distributed-systems/scripts/bulkhead.py:83", "shortDescription": {"text": "Commented-code block (5 lines) in plugins/ork/skills/distributed-systems/scripts/bulkhead.py:83"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ca858180bdb429f2", "name": "Commented-code block (7 lines) in plugins/ork/skills/bare-eval/workflows/skill-fitness.mjs:3", "shortDescription": {"text": "Commented-code block (7 lines) in plugins/ork/skills/bare-eval/workflows/skill-fitness.mjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-454f0d1c68063385", "name": "Commented-code block (6 lines) in plugins/ork/skills/database-patterns/scripts/migration-template.py:53", "shortDescription": {"text": "Commented-code block (6 lines) in plugins/ork/skills/database-patterns/scripts/migration-template.py:53"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b9269545e347e596", "name": "Commented-code block (6 lines) in plugins/ork/skills/python-backend/scripts/pool-setup-template.py:102", "shortDescription": {"text": "Commented-code block (6 lines) in plugins/ork/skills/python-backend/scripts/pool-setup-template.py:102"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8c2c1066b6255393", "name": "Commented-code block (15 lines) in plugins/ork/skills/accessibility/scripts/accessible-component-template.tsx:133", "shortDescription": {"text": "Commented-code block (15 lines) in plugins/ork/skills/accessibility/scripts/accessible-component-template.tsx:133"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3740c311984e6362", "name": "174 env vars used in code but missing from .env.example", "shortDescription": {"text": "174 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `AGENT_BROWSER_BURST_LIMIT`, `AGENT_BROWSER_IGNORE_ROBOTS`, `AGENT_BROWSER_NATIVE_CONFIRM`, `AGENT_BROWSER_RATE_LIMIT_PER_HOUR`, `AGENT_BROWSER_RATE_LIMIT_PER_MIN`, `AGENT_BROWSER_ROBOTS_CACHE_TTL`, `AGENT_TYPE`, `API_KEY` + 166 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/skills/task-dependency-patterns/scripts/task-tree-visualizer.py:status_icon, plugins/ork/skills/task-dependency-patterns/scripts/task-tree-visualizer.py:status_icon\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd2429a271dfa487", "name": "FastAPI POST `create_user` without auth dependency \u2014 src/skills/api-design/scripts/problem-detail-exceptions.py:389", "shortDescription": {"text": "FastAPI POST `create_user` without auth dependency \u2014 src/skills/api-design/scripts/problem-detail-exceptions.py:389"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7ae99b618074b59a", "name": "FastAPI POST `search_chunks` without auth dependency \u2014 src/skills/rag-retrieval/scripts/search-service.py:180", "shortDescription": {"text": "FastAPI POST `search_chunks` without auth dependency \u2014 src/skills/rag-retrieval/scripts/search-service.py:180"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-af204e0fa9667100", "name": "FastAPI POST `create_user` without auth dependency \u2014 plugins/ork/skills/api-design/scripts/problem-detail-exceptions.py:", "shortDescription": {"text": "FastAPI POST `create_user` without auth dependency \u2014 plugins/ork/skills/api-design/scripts/problem-detail-exceptions.py:389"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-40b9cb613488bf82", "name": "FastAPI POST `search_chunks` without auth dependency \u2014 plugins/ork/skills/rag-retrieval/scripts/search-service.py:180", "shortDescription": {"text": "FastAPI POST `search_chunks` without auth dependency \u2014 plugins/ork/skills/rag-retrieval/scripts/search-service.py:180"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6860cffddaa16526", "name": "Dangling fetch: GET /api/search?${params.toString()} (docs/site/components/webmcp-provider.tsx:53)", "shortDescription": {"text": "Dangling fetch: GET /api/search?${params.toString()} (docs/site/components/webmcp-provider.tsx:53)"}, "fullDescription": {"text": "`docs/site/components/webmcp-provider.tsx:53` calls `GET /api/search?${params.toString()}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/search`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ab5f49eeb250f1a2", "name": "Dangling fetch: GET /.well-known/agent-skills/index.json (docs/site/components/webmcp-provider.tsx:64)", "shortDescription": {"text": "Dangling fetch: GET /.well-known/agent-skills/index.json (docs/site/components/webmcp-provider.tsx:64)"}, "fullDescription": {"text": "`docs/site/components/webmcp-provider.tsx:64` calls `GET /.well-known/agent-skills/index.json` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/.well-known/agent-skills/index.json`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-08a2f5c2a2d164c9", "name": "Dangling fetch: GET /docs/reference/skills/${name} (docs/site/components/webmcp-provider.tsx:93)", "shortDescription": {"text": "Dangling fetch: GET /docs/reference/skills/${name} (docs/site/components/webmcp-provider.tsx:93)"}, "fullDescription": {"text": "`docs/site/components/webmcp-provider.tsx:93` calls `GET /docs/reference/skills/${name}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/docs/reference/skills/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0e45c9678d7eca44", "name": "Dangling fetch: GET https://api.github.com/repos/yonatangross/orchestkit (docs/site/app/(home)/page.tsx:12)", "shortDescription": {"text": "Dangling fetch: GET https://api.github.com/repos/yonatangross/orchestkit (docs/site/app/(home)/page.tsx:12)"}, "fullDescription": {"text": "`docs/site/app/(home)/page.tsx:12` calls `GET https://api.github.com/repos/yonatangross/orchestkit` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.github.com/repos/yonatangross/orchestkit`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6176bed9341419a6", "name": "Dangling fetch: GET http://api.example.com/data (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:267)", "shortDescription": {"text": "Dangling fetch: GET http://api.example.com/data (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:267)"}, "fullDescription": {"text": "`src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:267` calls `GET http://api.example.com/data` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/api.example.com/data`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a03e97abbf2f69b2", "name": "Dangling fetch: GET http://localhost:3000/api (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:282)", "shortDescription": {"text": "Dangling fetch: GET http://localhost:3000/api (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:282)"}, "fullDescription": {"text": "`src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:282` calls `GET http://localhost:3000/api` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:3000/api`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1aa93edc41f419e3", "name": "Dangling fetch: GET https://api.example.com/data (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:294", "shortDescription": {"text": "Dangling fetch: GET https://api.example.com/data (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:294)"}, "fullDescription": {"text": "`src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:294` calls `GET https://api.example.com/data` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.example.com/data`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-81937cdeeeb308de", "name": "Dangling fetch: GET http://external.com/api (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:268)", "shortDescription": {"text": "Dangling fetch: GET http://external.com/api (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:268)"}, "fullDescription": {"text": "`src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:268` calls `GET http://external.com/api` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/http:/external.com/api`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d2fbc06d2baaa7cb", "name": "Dangling fetch: GET http://127.0.0.1:8080/data (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:283)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:8080/data (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:283)"}, "fullDescription": {"text": "`src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:283` calls `GET http://127.0.0.1:8080/data` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/http:/127.0.0.1:8080/data`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6d43a81d76a5b875", "name": "Dangling fetch: GET /api/products (src/hooks/src/__tests__/skill/duplicate-code-detector.test.ts:430)", "shortDescription": {"text": "Dangling fetch: GET /api/products (src/hooks/src/__tests__/skill/duplicate-code-detector.test.ts:430)"}, "fullDescription": {"text": "`src/hooks/src/__tests__/skill/duplicate-code-detector.test.ts:430` calls `GET /api/products` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/products`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c2eba298b8c2c5a7", "name": "Dangling fetch: GET https://mermaid.ink/svg/${base64} (src/hooks/src/lib/decision-history.ts:814)", "shortDescription": {"text": "Dangling fetch: GET https://mermaid.ink/svg/${base64} (src/hooks/src/lib/decision-history.ts:814)"}, "fullDescription": {"text": "`src/hooks/src/lib/decision-history.ts:814` calls `GET https://mermaid.ink/svg/${base64}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/mermaid.ink/svg/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-acce0b8dea7808a9", "name": "Dangling fetch: GET /api/data (src/skills/react-server-components-framework/scripts/client-component-template.tsx:41)", "shortDescription": {"text": "Dangling fetch: GET /api/data (src/skills/react-server-components-framework/scripts/client-component-template.tsx:41)"}, "fullDescription": {"text": "`src/skills/react-server-components-framework/scripts/client-component-template.tsx:41` calls `GET /api/data` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/data`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-95832991067547b5", "name": "Dangling fetch: POST /api/login (src/skills/performance/scripts/optimized-context.tsx:155)", "shortDescription": {"text": "Dangling fetch: POST /api/login (src/skills/performance/scripts/optimized-context.tsx:155)"}, "fullDescription": {"text": "`src/skills/performance/scripts/optimized-context.tsx:155` calls `POST /api/login` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/login`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6e556f0a7ce753d9", "name": "Dangling fetch: GET /api/data (plugins/ork/skills/react-server-components-framework/scripts/client-component-template.ts", "shortDescription": {"text": "Dangling fetch: GET /api/data (plugins/ork/skills/react-server-components-framework/scripts/client-component-template.tsx:41)"}, "fullDescription": {"text": "`plugins/ork/skills/react-server-components-framework/scripts/client-component-template.tsx:41` calls `GET /api/data` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/data`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-997816df2c5db0a1", "name": "Dangling fetch: POST /api/login (plugins/ork/skills/performance/scripts/optimized-context.tsx:155)", "shortDescription": {"text": "Dangling fetch: POST /api/login (plugins/ork/skills/performance/scripts/optimized-context.tsx:155)"}, "fullDescription": {"text": "`plugins/ork/skills/performance/scripts/optimized-context.tsx:155` calls `POST /api/login` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/login`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d18411a066b7e2c1", "name": "Unused endpoint: GET /users/{user_id}", "shortDescription": {"text": "Unused endpoint: GET /users/{user_id}"}, "fullDescription": {"text": "`src/skills/api-design/scripts/problem-detail-exceptions.py` declares `GET /users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1bca8100a44f7f25", "name": "Unused endpoint: POST /users", "shortDescription": {"text": "Unused endpoint: POST /users"}, "fullDescription": {"text": "`src/skills/api-design/scripts/problem-detail-exceptions.py` declares `POST /users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a009b1a56794f45", "name": "Unused endpoint: POST /", "shortDescription": {"text": "Unused endpoint: POST /"}, "fullDescription": {"text": "`src/skills/rag-retrieval/scripts/search-service.py` declares `POST /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b9bd99d6bbe8b8d", "name": "Unused endpoint: GET /example", "shortDescription": {"text": "Unused endpoint: GET /example"}, "fullDescription": {"text": "`src/skills/python-backend/scripts/pool-setup-template.py` declares `GET /example` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5baa8971ebe192a1", "name": "Unused endpoint: GET /", "shortDescription": {"text": "Unused endpoint: GET /"}, "fullDescription": {"text": "`src/skills/python-backend/assets/fastapi-app-template.py` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e2aebb8dfde31c6", "name": "Unused endpoint: POST /items", "shortDescription": {"text": "Unused endpoint: POST /items"}, "fullDescription": {"text": "`src/skills/python-backend/assets/fastapi-app-template.py` declares `POST /items` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24839830176a6b46", "name": "Unused endpoint: GET /items/{item_id}", "shortDescription": {"text": "Unused endpoint: GET /items/{item_id}"}, "fullDescription": {"text": "`src/skills/python-backend/assets/fastapi-app-template.py` declares `GET /items/{item_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c236625afb6a8cb", "name": "Unused endpoint: GET /ready", "shortDescription": {"text": "Unused endpoint: GET /ready"}, "fullDescription": {"text": "`src/skills/monitoring-observability/scripts/health-checks.ts` declares `GET /ready` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bb11627a6939eb06", "name": "Unused endpoint: GET /startup", "shortDescription": {"text": "Unused endpoint: GET /startup"}, "fullDescription": {"text": "`src/skills/monitoring-observability/scripts/health-checks.ts` declares `GET /startup` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b0219e339ade7e00", "name": "Unused endpoint: GET /api/data/:id", "shortDescription": {"text": "Unused endpoint: GET /api/data/:id"}, "fullDescription": {"text": "`src/skills/performance/scripts/api-optimization.ts` declares `GET /api/data/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-812760b081b9ff1a", "name": "Unused endpoint: GET /api/users/:id", "shortDescription": {"text": "Unused endpoint: GET /api/users/:id"}, "fullDescription": {"text": "`src/skills/performance/scripts/api-optimization.ts` declares `GET /api/users/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49546f6900fb04c5", "name": "Unused endpoint: POST /api/users", "shortDescription": {"text": "Unused endpoint: POST /api/users"}, "fullDescription": {"text": "`src/skills/security-patterns/scripts/validation-schemas.ts` declares `POST /api/users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23390"}, "properties": {"repository": "yonatangross/orchestkit", "repoUrl": "https://github.com/yonatangross/orchestkit", "branch": "main"}, "results": [{"ruleId": "scanner-5c0103798f47dfea", "level": "note", "message": {"text": "Possibly dead Python function: escape_angle"}, "properties": {"repobilityId": "e5c3231e49094afc", "scanner": "scanner-primary", "fingerprint": "5c0103798f47dfea", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/_build-docs-generate.py:191"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a3232a9a64113a95", "level": "note", "message": {"text": "Possibly dead Python function: run_langgraph_workflow"}, "properties": {"repobilityId": "2f61170258823d57", "scanner": "scanner-primary", "fingerprint": "a3232a9a64113a95", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/monitoring-observability/scripts/callback-handler.py:88"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f4dbbb5468a6b87", "level": "note", "message": {"text": "Possibly dead Python function: security_node"}, "properties": {"repobilityId": "02d2b4ee483d7c33", "scanner": "scanner-primary", "fingerprint": "0f4dbbb5468a6b87", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/monitoring-observability/scripts/callback-handler.py:102"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e1fad807a1860ea", "level": "note", "message": {"text": "Possibly dead Python function: tech_node"}, "properties": {"repobilityId": "e304d9c66d11ecc4", "scanner": "scanner-primary", "fingerprint": "2e1fad807a1860ea", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/monitoring-observability/scripts/callback-handler.py:110"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d9c113105dc0cbb", "level": "note", "message": {"text": "Possibly dead Python function: stream_analysis_with_tracing"}, "properties": {"repobilityId": "cc4edeb00ba3f7e4", "scanner": "scanner-primary", "fingerprint": "1d9c113105dc0cbb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/monitoring-observability/scripts/callback-handler.py:134"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5cafc5529bc3aeba", "level": "note", "message": {"text": "Possibly dead Python function: batch_analyze_with_tracing"}, "properties": {"repobilityId": "12f4351ce66b48fe", "scanner": "scanner-primary", "fingerprint": "5cafc5529bc3aeba", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/monitoring-observability/scripts/callback-handler.py:166"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71d1b28839176723", "level": "note", "message": {"text": "Possibly dead Python function: multi_context_analysis"}, "properties": {"repobilityId": "57b15b2aa87633b7", "scanner": "scanner-primary", "fingerprint": "71d1b28839176723", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/monitoring-observability/scripts/callback-handler.py:198"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd5287755e9d4cb9", "level": "note", "message": {"text": "Possibly dead Python function: high_throughput_analysis"}, "properties": {"repobilityId": "3ddbff293cb6ab20", "scanner": "scanner-primary", "fingerprint": "dd5287755e9d4cb9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/monitoring-observability/scripts/callback-handler.py:238"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e69664a31463dbe9", "level": "note", "message": {"text": "Possibly dead Python function: generate_embeddings_batch"}, "properties": {"repobilityId": "c3d8ac6f1e79cac8", "scanner": "scanner-primary", "fingerprint": "e69664a31463dbe9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/llm-integration/scripts/ollama-provider-template.py:260"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49289b2cdd7da687", "level": "note", "message": {"text": "Possibly dead Python function: prewarm_models"}, "properties": {"repobilityId": "546e78325ddaa8ff", "scanner": "scanner-primary", "fingerprint": "49289b2cdd7da687", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/llm-integration/scripts/ollama-provider-template.py:365"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf34978dce0a910e", "level": "note", "message": {"text": "Possibly dead Python function: deprecation_warning"}, "properties": {"repobilityId": "ff28c028e4088103", "scanner": "scanner-primary", "fingerprint": "cf34978dce0a910e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/api-design/scripts/fastapi-versioned-router.py:105"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-880464a755089909", "level": "note", "message": {"text": "Possibly dead Python function: hash_password"}, "properties": {"repobilityId": "5e7a4e912954a416", "scanner": "scanner-primary", "fingerprint": "880464a755089909", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/security-patterns/scripts/auth-middleware-template.py:31"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-40700ec7cdebe554", "level": "note", "message": {"text": "Possibly dead Python function: verify_password"}, "properties": {"repobilityId": "db0091ab19f6dc78", "scanner": "scanner-primary", "fingerprint": "40700ec7cdebe554", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/security-patterns/scripts/auth-middleware-template.py:36"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-35e526ddee8669c7", "level": "note", "message": {"text": "Possibly dead Python function: create_access_token"}, "properties": {"repobilityId": "818e723fe8ea9504", "scanner": "scanner-primary", "fingerprint": "35e526ddee8669c7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/security-patterns/scripts/auth-middleware-template.py:49"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2048a59f1e8286bb", "level": "note", "message": {"text": "Possibly dead Python function: verify_access_token"}, "properties": {"repobilityId": "582af860afc30b10", "scanner": "scanner-primary", "fingerprint": "2048a59f1e8286bb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/security-patterns/scripts/auth-middleware-template.py:69"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ec2fdc45b3ef1c1a", "level": "note", "message": {"text": "Possibly dead Python function: create_rate_limiter"}, "properties": {"repobilityId": "b4fdbad305955068", "scanner": "scanner-primary", "fingerprint": "ec2fdc45b3ef1c1a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/security-patterns/scripts/auth-middleware-template.py:184"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8887ea730f1be46b", "level": "note", "message": {"text": "Possibly dead Python function: check_rate_limit"}, "properties": {"repobilityId": "6069ae1c618678f4", "scanner": "scanner-primary", "fingerprint": "8887ea730f1be46b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/security-patterns/scripts/auth-middleware-template.py:186"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-32eb72078af2cf96", "level": "note", "message": {"text": "Possibly dead Python function: safe_analyze"}, "properties": {"repobilityId": "8448d69cc638eea5", "scanner": "scanner-primary", "fingerprint": "32eb72078af2cf96", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/security-patterns/scripts/safe_llm_call.py:318"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-02903984d647e300", "level": "note", "message": {"text": "Possibly dead Python function: add_raw"}, "properties": {"repobilityId": "e2450da5c8a030ae", "scanner": "scanner-primary", "fingerprint": "02903984d647e300", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/security-patterns/scripts/prompt_builder.py:160"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79e6d18abca8ff2b", "level": "note", "message": {"text": "Possibly dead Python function: build_analysis_prompt"}, "properties": {"repobilityId": "bea55b0a9842c1ef", "scanner": "scanner-primary", "fingerprint": "79e6d18abca8ff2b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/security-patterns/scripts/prompt_builder.py:217"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c48ac73952d3df16", "level": "note", "message": {"text": "Possibly dead Python function: build_qa_prompt"}, "properties": {"repobilityId": "73dc66530c0d059f", "scanner": "scanner-primary", "fingerprint": "c48ac73952d3df16", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/security-patterns/scripts/prompt_builder.py:238"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e3ced75399a14e0", "level": "note", "message": {"text": "Possibly dead Python function: route_after_action"}, "properties": {"repobilityId": "1ff6fced6cdd4c19", "scanner": "scanner-primary", "fingerprint": "4e3ced75399a14e0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/rag-retrieval/scripts/scripts/crag-workflow.py:429"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a9ac6f235cb89b3a", "level": "note", "message": {"text": "Possibly dead Python function: crag_query"}, "properties": {"repobilityId": "568d4d135cc280e7", "scanner": "scanner-primary", "fingerprint": "a9ac6f235cb89b3a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/rag-retrieval/scripts/scripts/crag-workflow.py:498"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df61312558f9a10f", "level": "note", "message": {"text": "Possibly dead Python function: archive"}, "properties": {"repobilityId": "93ee71a07ba10c03", "scanner": "scanner-primary", "fingerprint": "df61312558f9a10f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/architecture-patterns/scripts/domain-entity-template.py:175"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dbed407fbee270e3", "level": "note", "message": {"text": "Possibly dead Python function: update_description"}, "properties": {"repobilityId": "1beae77888f13506", "scanner": "scanner-primary", "fingerprint": "dbed407fbee270e3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/architecture-patterns/scripts/domain-entity-template.py:210"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-af9ef9f11b1a4cd9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/unit/test-json-validity.js:56"}, "properties": {"repobilityId": "6b12bc8128a55bb9", "scanner": "scanner-primary", "fingerprint": "af9ef9f11b1a4cd9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b022fc9d39959593", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/components/changelog-timeline.tsx:83"}, "properties": {"repobilityId": "8083a825909afa91", "scanner": "scanner-primary", "fingerprint": "b022fc9d39959593", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-491a69f23310f265", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/components/search-highlight.tsx:11"}, "properties": {"repobilityId": "388821d3f3322341", "scanner": "scanner-primary", "fingerprint": "491a69f23310f265", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-74dcadab0031dea4", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/components/structured-data.tsx:27"}, "properties": {"repobilityId": "7565b0faf1b18844", "scanner": "scanner-primary", "fingerprint": "74dcadab0031dea4", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-f5506dec2978334d", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 docs/site/components/skill-recommender.tsx:219"}, "properties": {"repobilityId": "494563bfe16f2830", "scanner": "scanner-primary", "fingerprint": "f5506dec2978334d", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-a77e41624c52a82d", "level": "note", "message": {"text": "React Flow <MiniMap> without dark background \u2014 docs/site/components/skill-dependency-graph.tsx:204"}, "properties": {"repobilityId": "531efd83521dc11a", "scanner": "scanner-primary", "fingerprint": "a77e41624c52a82d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.minimap.no-bg"]}}, {"ruleId": "scanner-34e39f6088669502", "level": "note", "message": {"text": "React Flow <Controls> without dark theming \u2014 docs/site/components/skill-dependency-graph.tsx:203"}, "properties": {"repobilityId": "6ee8d26eeaa4e276", "scanner": "scanner-primary", "fingerprint": "34e39f6088669502", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.controls.no-bg"]}}, {"ruleId": "scanner-4ab1f83023517a21", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 docs/site/components/component-dna.tsx:126"}, "properties": {"repobilityId": "658eb161ef881114", "scanner": "scanner-primary", "fingerprint": "4ab1f83023517a21", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-7b291713f6b05a5f", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 docs/site/components/analytics/ranked-table.tsx:12"}, "properties": {"repobilityId": "5c1d4d6d9cbba283", "scanner": "scanner-primary", "fingerprint": "7b291713f6b05a5f", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-005a12e6c9ddeaf4", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/site/app/docs/[[...slug]]/page.tsx:81"}, "properties": {"repobilityId": "11da195cf8bedf39", "scanner": "scanner-primary", "fingerprint": "005a12e6c9ddeaf4", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-234cf0e59e8187f5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-indexes.js:252"}, "properties": {"repobilityId": "b55d5fe190ef69aa", "scanner": "scanner-primary", "fingerprint": "234cf0e59e8187f5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-26b3462ce505e9ce", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-changelog-data.js:123"}, "properties": {"repobilityId": "fca0109100ed5b23", "scanner": "scanner-primary", "fingerprint": "26b3462ce505e9ce", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e288a443520492a7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-docs-data.js:76"}, "properties": {"repobilityId": "d084812f6d342398", "scanner": "scanner-primary", "fingerprint": "e288a443520492a7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2d9991595abf7cf9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-imports.js:147"}, "properties": {"repobilityId": "d583bfaf87c7dc7a", "scanner": "scanner-primary", "fingerprint": "2d9991595abf7cf9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6216869288b6f58b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-ci-report.ts:794"}, "properties": {"repobilityId": "131177d5076c7a37", "scanner": "scanner-primary", "fingerprint": "6216869288b6f58b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-05de4c483e01760a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/test-heygen.ts:14"}, "properties": {"repobilityId": "67a2e0b83d908afe", "scanner": "scanner-primary", "fingerprint": "05de4c483e01760a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0235f690c6d6d789", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/check-status.ts:15"}, "properties": {"repobilityId": "f959896369789f27", "scanner": "scanner-primary", "fingerprint": "0235f690c6d6d789", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-999f0a15adbcb5b6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/generate-install-avatar.ts:39"}, "properties": {"repobilityId": "00db499f5745a19c", "scanner": "scanner-primary", "fingerprint": "999f0a15adbcb5b6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ba4df8e699dea817", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/scripts/generate-avatar.ts:37"}, "properties": {"repobilityId": "7d86e24ecbfb3af8", "scanner": "scanner-primary", "fingerprint": "ba4df8e699dea817", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d468572260874a67", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/coverage/prettify.js:2"}, "properties": {"repobilityId": "605d823d86c51c3e", "scanner": "scanner-primary", "fingerprint": "d468572260874a67", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6d41f0fa2c790013", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 orchestkit-demos/src/components/shared/__tests__/CodePreview.test.tsx:33"}, "properties": {"repobilityId": "112bb583453091e3", "scanner": "scanner-primary", "fingerprint": "6d41f0fa2c790013", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c4d7358a85d8bbf9", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 src/hooks/src/__tests__/lib/debt-markers.test.ts:55"}, "properties": {"repobilityId": "7c5d67d8bb86e6aa", "scanner": "scanner-primary", "fingerprint": "c4d7358a85d8bbf9", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-0b3ad687345d28c6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/pretool/file-guard.test.ts:262"}, "properties": {"repobilityId": "321e319a59e3b360", "scanner": "scanner-primary", "fingerprint": "0b3ad687345d28c6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-89bc232ac3f47858", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:131"}, "properties": {"repobilityId": "eaa7289570a49c79", "scanner": "scanner-primary", "fingerprint": "89bc232ac3f47858", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9c2a6cdeadfacd9e", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:190"}, "properties": {"repobilityId": "56a1efb008be636b", "scanner": "scanner-primary", "fingerprint": "9c2a6cdeadfacd9e", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-c3b5c3883c9c1ff6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/pretool/code-quality-gate.test.ts:61"}, "properties": {"repobilityId": "89264cfb2c565fa5", "scanner": "scanner-primary", "fingerprint": "c3b5c3883c9c1ff6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-15c5b0ebc6c8ff43", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 src/hooks/src/__tests__/skill/test-pattern-validator.test.ts:539"}, "properties": {"repobilityId": "f73b5b3eba389f22", "scanner": "scanner-primary", "fingerprint": "15c5b0ebc6c8ff43", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-139f55d60ff221f7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/src/__tests__/skill/test-pattern-validator.test.ts:171"}, "properties": {"repobilityId": "91dfdd0961bd3178", "scanner": "scanner-primary", "fingerprint": "139f55d60ff221f7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-dc9f717b8008853e", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 src/hooks/src/__tests__/posttool/stale-import-detector.test.ts:46"}, "properties": {"repobilityId": "b6f53e2b737c2c47", "scanner": "scanner-primary", "fingerprint": "dc9f717b8008853e", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-0006ffec330bc3cc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/src/cli/generate-http-hooks.ts:133"}, "properties": {"repobilityId": "94f728a98f3f3d21", "scanner": "scanner-primary", "fingerprint": "0006ffec330bc3cc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f712ada07a90b7d7", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/hooks/src/pretool/Write/security-pattern-validator.ts:53"}, "properties": {"repobilityId": "8909d0e23ff9f763", "scanner": "scanner-primary", "fingerprint": "f712ada07a90b7d7", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-cdff7d4fbd774ba9", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/skills/react-server-components-framework/examples/blog-app-example.tsx:291"}, "properties": {"repobilityId": "a64f3af5928d5828", "scanner": "scanner-primary", "fingerprint": "cdff7d4fbd774ba9", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-984cb853ba4656e8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/monitoring-observability/scripts/opentelemetry-tracing.ts:42"}, "properties": {"repobilityId": "7105dcd5582fa862", "scanner": "scanner-primary", "fingerprint": "984cb853ba4656e8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3cd66e7bd9b268d6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/performance/scripts/performance-monitoring.ts:257"}, "properties": {"repobilityId": "22d7241641a9c47d", "scanner": "scanner-primary", "fingerprint": "3cd66e7bd9b268d6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-21680cdab97e3a5d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/performance/scripts/frontend-optimization.tsx:53"}, "properties": {"repobilityId": "e8bba9aaff2d0b49", "scanner": "scanner-primary", "fingerprint": "21680cdab97e3a5d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f801ff40b4377a1b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/rag-retrieval/scripts/rag-pipeline-template.ts:80"}, "properties": {"repobilityId": "7a9e27054df28be2", "scanner": "scanner-primary", "fingerprint": "f801ff40b4377a1b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-79d9b93c8f779ec4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/vite-advanced/scripts/custom-plugin.ts:41"}, "properties": {"repobilityId": "6b4be815812c848d", "scanner": "scanner-primary", "fingerprint": "79d9b93c8f779ec4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-845eadbeb60af4e4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/agent-orchestration/scripts/agent-workflow-template.ts:172"}, "properties": {"repobilityId": "d246c41bf0ee0424", "scanner": "scanner-primary", "fingerprint": "845eadbeb60af4e4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a66d468ca4890b33", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/accessibility/scripts/accessible-form-template.tsx:115"}, "properties": {"repobilityId": "3e8d97764a4b727b", "scanner": "scanner-primary", "fingerprint": "a66d468ca4890b33", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a70b7553500dfb3e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/skills/accessibility/scripts/accessible-component-template.tsx:68"}, "properties": {"repobilityId": "1dd0a8d7b4f0a132", "scanner": "scanner-primary", "fingerprint": "a70b7553500dfb3e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e728b5078176af1e", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 plugins/ork/skills/react-server-components-framework/examples/blog-app-example.tsx:291"}, "properties": {"repobilityId": "4e32e1a8a5ae625b", "scanner": "scanner-primary", "fingerprint": "e728b5078176af1e", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-469e7fecef0dd47f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/monitoring-observability/scripts/opentelemetry-tracing.ts:42"}, "properties": {"repobilityId": "9004c6881c1fac08", "scanner": "scanner-primary", "fingerprint": "469e7fecef0dd47f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1cb7158e00676910", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/performance/scripts/performance-monitoring.ts:257"}, "properties": {"repobilityId": "8af830f114a1c94c", "scanner": "scanner-primary", "fingerprint": "1cb7158e00676910", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-49ed54d1839180fa", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/performance/scripts/frontend-optimization.tsx:53"}, "properties": {"repobilityId": "1b1f290493244af0", "scanner": "scanner-primary", "fingerprint": "49ed54d1839180fa", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f024320090813dce", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/rag-retrieval/scripts/rag-pipeline-template.ts:80"}, "properties": {"repobilityId": "3d2530885cd81dc3", "scanner": "scanner-primary", "fingerprint": "f024320090813dce", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c0bc63ec035a92cc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/vite-advanced/scripts/custom-plugin.ts:41"}, "properties": {"repobilityId": "8f93c50fbddafdf8", "scanner": "scanner-primary", "fingerprint": "c0bc63ec035a92cc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a0203e4d57060a7b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/agent-orchestration/scripts/agent-workflow-template.ts:172"}, "properties": {"repobilityId": "52ff4aa16c4ffec2", "scanner": "scanner-primary", "fingerprint": "a0203e4d57060a7b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-225543b44eb6253b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/accessibility/scripts/accessible-form-template.tsx:115"}, "properties": {"repobilityId": "ba0fe5140c7a08e7", "scanner": "scanner-primary", "fingerprint": "225543b44eb6253b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d51aa9f27d167933", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 plugins/ork/skills/accessibility/scripts/accessible-component-template.tsx:68"}, "properties": {"repobilityId": "ec9540a3b7bc6d55", "scanner": "scanner-primary", "fingerprint": "d51aa9f27d167933", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-114d0db00d4c3272", "level": "warning", "message": {"text": "Privileged port 256 in use"}, "properties": {"repobilityId": "0ec1f2d0c9e6da94", "scanner": "scanner-primary", "fingerprint": "114d0db00d4c3272", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-84f2b6208960391e", "level": "warning", "message": {"text": "Privileged port 64 in use"}, "properties": {"repobilityId": "be19cd18e8b66910", "scanner": "scanner-primary", "fingerprint": "84f2b6208960391e", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/integration/test-image-paste-pipeline.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7ce0027c11e0927", "level": "warning", "message": {"text": "Privileged port 15 in use"}, "properties": {"repobilityId": "3340f9a170f285cd", "scanner": "scanner-primary", "fingerprint": "b7ce0027c11e0927", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/integration/test-cc-triage.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94e26402befbb784", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "94e26402befbb784", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/integration/test-cc-triage.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c9ec71965a5a8a22", "level": "warning", "message": {"text": "Privileged port 10 in use"}, "properties": {"repobilityId": "735372d6b5594915", "scanner": "scanner-primary", "fingerprint": "c9ec71965a5a8a22", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/unit/test-evolution-engine.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b4531eb8283be3c9", "level": "warning", "message": {"text": "Privileged port 45 in use"}, "properties": {"repobilityId": "73cf64d92574d41c", "scanner": "scanner-primary", "fingerprint": "b4531eb8283be3c9", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/hooks/test-context-injection-budget.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa35eb5698dba4b8", "level": "warning", "message": {"text": "Privileged port 11 in use"}, "properties": {"repobilityId": "5b3038c67fabb4c8", "scanner": "scanner-primary", "fingerprint": "aa35eb5698dba4b8", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/evals/skills/review-pr-rate-limit.eval.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-28dc43becf3a9550", "level": "warning", "message": {"text": "Privileged port 30 in use"}, "properties": {"repobilityId": "54f172e7d16fc662", "scanner": "scanner-primary", "fingerprint": "28dc43becf3a9550", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/evals/skills/product-analytics.eval.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c28a5b480b2c92a0", "level": "warning", "message": {"text": "Privileged port 4 in use"}, "properties": {"repobilityId": "1594bfeff919296e", "scanner": "scanner-primary", "fingerprint": "c28a5b480b2c92a0", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/memory-staleness.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-773d4990a7450312", "level": "warning", "message": {"text": "Privileged port 2 in use"}, "properties": {"repobilityId": "755b04866010e843", "scanner": "scanner-primary", "fingerprint": "773d4990a7450312", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/memory-staleness.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3aa19c1e9eba5b7", "level": "error", "message": {"text": "Runtime dotenv file present in repo: docs/site/.env.tpl"}, "properties": {"repobilityId": "ca20a53b675ca15e", "scanner": "scanner-primary", "fingerprint": "e3aa19c1e9eba5b7", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env", "env_file_with_secret"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/site/.env.tpl"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-098537665cf5c5b7", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in docs/feat--121-observability-consolidation/m121-observability.html:545"}, "properties": {"repobilityId": "71d868f0fb22b450", "scanner": "scanner-primary", "fingerprint": "098537665cf5c5b7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--121-observability-consolidation/m121-observability.html"}, "region": {"startLine": 545}}}]}, {"ruleId": "scanner-f7fe3a14a94b96c2", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--121-observability-consolidation/m121-observability.html:394"}, "properties": {"repobilityId": "863a729409ab9b4f", "scanner": "scanner-primary", "fingerprint": "f7fe3a14a94b96c2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--121-observability-consolidation/m121-observability.html"}, "region": {"startLine": 394}}}]}, {"ruleId": "scanner-226fdafe53e62c36", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1862-ci-sentinel-loop/sentinel-loop-fixes.html:81"}, "properties": {"repobilityId": "2c98eccbf491370f", "scanner": "scanner-primary", "fingerprint": "226fdafe53e62c36", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--1862-ci-sentinel-loop/sentinel-loop-fixes.html"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-009b4c984ece8811", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m141-2-step3-payloads/payload-schemas-explorer.html:129"}, "properties": {"repobilityId": "ac78f19c8873606a", "scanner": "scanner-primary", "fingerprint": "009b4c984ece8811", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m141-2-step3-payloads/payload-schemas-explorer.html"}, "region": {"startLine": 129}}}]}, {"ruleId": "scanner-c648beb2328a91dd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--dynamic-workflow-patterns/dynamic-workflow-patterns-playground.html:59"}, "properties": {"repobilityId": "9120ab9cbe2a3c5d", "scanner": "scanner-primary", "fingerprint": "c648beb2328a91dd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--dynamic-workflow-patterns/dynamic-workflow-patterns-playground.html"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-3d9f833a594bb39c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--scorecard-publish-restriction/scorecard-publish-restriction.html:118"}, "properties": {"repobilityId": "14b1b6a5cfe918b8", "scanner": "scanner-primary", "fingerprint": "3d9f833a594bb39c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--scorecard-publish-restriction/scorecard-publish-restriction.html"}, "region": {"startLine": 118}}}]}, {"ruleId": "scanner-8d3327bbff4e8b43", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-157-adoption/cc-157-adoption.html:75"}, "properties": {"repobilityId": "6c1d567f161a3d4c", "scanner": "scanner-primary", "fingerprint": "8d3327bbff4e8b43", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-157-adoption/cc-157-adoption.html"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-9dbdee50fb96b217", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m141-1-contract-package/hook-contract-explorer.html:252"}, "properties": {"repobilityId": "943c22e568dec66e", "scanner": "scanner-primary", "fingerprint": "9dbdee50fb96b217", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m141-1-contract-package/hook-contract-explorer.html"}, "region": {"startLine": 252}}}]}, {"ruleId": "scanner-57939989a1faead2", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-adoption-ws2-model-resilience/availability-simulator.html:108"}, "properties": {"repobilityId": "1226c97ad6e32cb5", "scanner": "scanner-primary", "fingerprint": "57939989a1faead2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-adoption-ws2-model-resilience/availability-simulator.html"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-b165c9ce9c941d7c", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in docs/fix--cc-adoption-ws2-model-resilience/availability-simulator.html:117"}, "properties": {"repobilityId": "4f1930414fa48158", "scanner": "scanner-primary", "fingerprint": "b165c9ce9c941d7c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-adoption-ws2-model-resilience/availability-simulator.html"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-36e11587e209f2b1", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--issue-reference-checker-worktree-dispatcher/issue-reference-checker.html:222"}, "properties": {"repobilityId": "3072e9f5d4b71125", "scanner": "scanner-primary", "fingerprint": "36e11587e209f2b1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--issue-reference-checker-worktree-dispatcher/issue-reference-checker.html"}, "region": {"startLine": 222}}}]}, {"ruleId": "scanner-57f8639c63d44d2c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--watchdog-session-id-bypass/playground.html:130"}, "properties": {"repobilityId": "78a3870de8111c88", "scanner": "scanner-primary", "fingerprint": "57f8639c63d44d2c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--watchdog-session-id-bypass/playground.html"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-fa845a6b05e757fa", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1826-envelope-input-guard/index.html:146"}, "properties": {"repobilityId": "1f9280d1aa7cb013", "scanner": "scanner-primary", "fingerprint": "fa845a6b05e757fa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--1826-envelope-input-guard/index.html"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-f7f2ea6f2d2969a4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--sessionend-budget-2165/sessionend-budget-playground.html:169"}, "properties": {"repobilityId": "9f98f2877be76f05", "scanner": "scanner-primary", "fingerprint": "f7f2ea6f2d2969a4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--sessionend-budget-2165/sessionend-budget-playground.html"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-82f6335b51da5c1d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--ci-rebuild-hooks-from-src/stale-dist.html:61"}, "properties": {"repobilityId": "bac99ec0f14713f9", "scanner": "scanner-primary", "fingerprint": "82f6335b51da5c1d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--ci-rebuild-hooks-from-src/stale-dist.html"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-8ad626f67f67224a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--docs-agent-ready/agent-readiness-playground.html:165"}, "properties": {"repobilityId": "818e3da94e026482", "scanner": "scanner-primary", "fingerprint": "8ad626f67f67224a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--docs-agent-ready/agent-readiness-playground.html"}, "region": {"startLine": 165}}}]}, {"ruleId": "scanner-24f0034a122e8c19", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--agents-category-recategorize/category-shift.html:187"}, "properties": {"repobilityId": "344a8f16f539fd26", "scanner": "scanner-primary", "fingerprint": "24f0034a122e8c19", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--agents-category-recategorize/category-shift.html"}, "region": {"startLine": 187}}}]}, {"ruleId": "scanner-0419f1da147db677", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--2268-types-cc-ledger-168/hook-protocol-ledger-playground.html:88"}, "properties": {"repobilityId": "c9209759161bc2d5", "scanner": "scanner-primary", "fingerprint": "0419f1da147db677", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--2268-types-cc-ledger-168/hook-protocol-ledger-playground.html"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-f637eca04a68d55b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m122-cc-2.1.118-2.1.119/m122-summary.html:97"}, "properties": {"repobilityId": "6191caa06dc12dd9", "scanner": "scanner-primary", "fingerprint": "f637eca04a68d55b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m122-cc-2.1.118-2.1.119/m122-summary.html"}, "region": {"startLine": 97}}}]}, {"ruleId": "scanner-3bfe3e0556c0660d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--docs-landing-claude-design-1247/playground.html:853"}, "properties": {"repobilityId": "5a2f2a69e982395a", "scanner": "scanner-primary", "fingerprint": "3bfe3e0556c0660d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--docs-landing-claude-design-1247/playground.html"}, "region": {"startLine": 853}}}]}, {"ruleId": "scanner-f452f7b1830ef197", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-dedup-changelog-ref/dedup-key.html:63"}, "properties": {"repobilityId": "509aff15e62827c3", "scanner": "scanner-primary", "fingerprint": "f452f7b1830ef197", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-dedup-changelog-ref/dedup-key.html"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-eb700c8fe65b05e0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--2045-snapshot-anchored-dedup/snap-dedup-explorer.html:66"}, "properties": {"repobilityId": "2efb43e5137803e1", "scanner": "scanner-primary", "fingerprint": "eb700c8fe65b05e0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--2045-snapshot-anchored-dedup/snap-dedup-explorer.html"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-d434c7804f556c7a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-2162-adoption/cc-2162-adoption.html:148"}, "properties": {"repobilityId": "c12a1ceb19a3d19e", "scanner": "scanner-primary", "fingerprint": "d434c7804f556c7a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-2162-adoption/cc-2162-adoption.html"}, "region": {"startLine": 148}}}]}, {"ruleId": "scanner-ba3d9b411ff902bb", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--mcp-registry-published/gap-explorer.html:141"}, "properties": {"repobilityId": "b1d987c284316a37", "scanner": "scanner-primary", "fingerprint": "ba3d9b411ff902bb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--mcp-registry-published/gap-explorer.html"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-429413cd0f83f4e6", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--lib-currency-lane1/lane1-hard-breaks.html:110"}, "properties": {"repobilityId": "42eb7ebf82d49f1d", "scanner": "scanner-primary", "fingerprint": "429413cd0f83f4e6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--lib-currency-lane1/lane1-hard-breaks.html"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-b59ccd75d957f730", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m126-effort-skills-filter/effort-and-filter.html:208"}, "properties": {"repobilityId": "aa313c08db295f74", "scanner": "scanner-primary", "fingerprint": "b59ccd75d957f730", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m126-effort-skills-filter/effort-and-filter.html"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-ea881d1ff0a95ed0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--2012-inline-migrations/playground.html:93"}, "properties": {"repobilityId": "64f8314eeec837e9", "scanner": "scanner-primary", "fingerprint": "ea881d1ff0a95ed0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--2012-inline-migrations/playground.html"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-0e128db4edcf2417", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2163-2166-doc-adoption/cc-doc-adoption-verdicts-playground.html:100"}, "properties": {"repobilityId": "8ae10e5afe99c078", "scanner": "scanner-primary", "fingerprint": "0e128db4edcf2417", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-2163-2166-doc-adoption/cc-doc-adoption-verdicts-playground.html"}, "region": {"startLine": 100}}}]}, {"ruleId": "scanner-eb285fe5d4adf567", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-debt/ork-debt-ledger-playground.html:188"}, "properties": {"repobilityId": "145b1b99bfe1f5dd", "scanner": "scanner-primary", "fingerprint": "eb285fe5d4adf567", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--ork-debt/ork-debt-ledger-playground.html"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-b745dca81e2d689b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m130-cc-auto-adoption/pipeline-trace.html:218"}, "properties": {"repobilityId": "a184b1f6c35184bc", "scanner": "scanner-primary", "fingerprint": "b745dca81e2d689b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m130-cc-auto-adoption/pipeline-trace.html"}, "region": {"startLine": 218}}}]}, {"ruleId": "scanner-a5ac071dc46cb158", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--1554-closes-drift/closes-n-drift-playground.html:95"}, "properties": {"repobilityId": "8ed536c5d958c4ab", "scanner": "scanner-primary", "fingerprint": "a5ac071dc46cb158", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--1554-closes-drift/closes-n-drift-playground.html"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-c0d4bb91ac2cd76d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--nested-delegation-depth/depth-injection.html:87"}, "properties": {"repobilityId": "20e5fa7d1e08bb61", "scanner": "scanner-primary", "fingerprint": "c0d4bb91ac2cd76d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--nested-delegation-depth/depth-injection.html"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-d59fde6e4fed3b13", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1911-m168-phase1-delete-monitors-json/playground.html:747"}, "properties": {"repobilityId": "9f8d4eea0d27a8eb", "scanner": "scanner-primary", "fingerprint": "d59fde6e4fed3b13", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/issue--1911-m168-phase1-delete-monitors-json/playground.html"}, "region": {"startLine": 747}}}]}, {"ruleId": "scanner-1cf4b3880465b4c9", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--brainstorm-skill-headroom/skill-cliff-map.html:102"}, "properties": {"repobilityId": "124a8ca3c46869ad", "scanner": "scanner-primary", "fingerprint": "1cf4b3880465b4c9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--brainstorm-skill-headroom/skill-cliff-map.html"}, "region": {"startLine": 102}}}]}, {"ruleId": "scanner-b5ae0e48fed1f204", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-ladder-docs-batch/playground.html:81"}, "properties": {"repobilityId": "058dd83ed1843f56", "scanner": "scanner-primary", "fingerprint": "b5ae0e48fed1f204", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-ladder-docs-batch/playground.html"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-7f67e8113a20821b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1912-m168-phase2-sqlite-layer-1/playground.html:747"}, "properties": {"repobilityId": "3e03169f368607e4", "scanner": "scanner-primary", "fingerprint": "7f67e8113a20821b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/issue--1912-m168-phase2-sqlite-layer-1/playground.html"}, "region": {"startLine": 747}}}]}, {"ruleId": "scanner-f631b99c7faf076e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--vercel-labs-tool-bumps-apr15/vercel-labs-stack-upgrade.html:400"}, "properties": {"repobilityId": "3db994d3d0f16aae", "scanner": "scanner-primary", "fingerprint": "f631b99c7faf076e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--vercel-labs-tool-bumps-apr15/vercel-labs-stack-upgrade.html"}, "region": {"startLine": 400}}}]}, {"ruleId": "scanner-8905b16e8e79fbac", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--orank-b-to-a/orank-b-to-a-playground.html:65"}, "properties": {"repobilityId": "aed58a7510319505", "scanner": "scanner-primary", "fingerprint": "8905b16e8e79fbac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--orank-b-to-a/orank-b-to-a-playground.html"}, "region": {"startLine": 65}}}]}, {"ruleId": "scanner-00316153c03c8db5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--security-hook-override-ci-divergence/security-hook-override-playground.html:205"}, "properties": {"repobilityId": "1bf7d67470998bbc", "scanner": "scanner-primary", "fingerprint": "00316153c03c8db5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--security-hook-override-ci-divergence/security-hook-override-playground.html"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-6d33aceaf601bae7", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m168-finish-1915-1916-1874/m168-finish-explorer.html:60"}, "properties": {"repobilityId": "3309f1d6ed118374", "scanner": "scanner-primary", "fingerprint": "6d33aceaf601bae7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m168-finish-1915-1916-1874/m168-finish-explorer.html"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-a4f8896d8224edd8", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1990-worktreecreate-envelope/playground.html:112"}, "properties": {"repobilityId": "49d9356af6719e2b", "scanner": "scanner-primary", "fingerprint": "a4f8896d8224edd8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--1990-worktreecreate-envelope/playground.html"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-4b70f8b5f00ed179", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--mcpso-sameas/gap-explorer.html:141"}, "properties": {"repobilityId": "1a58b296acae0d14", "scanner": "scanner-primary", "fingerprint": "4b70f8b5f00ed179", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--mcpso-sameas/gap-explorer.html"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-18e5e71e710f47d7", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--skill-activation-channels/skill-activation-channels.html:210"}, "properties": {"repobilityId": "ba790d3b43ac55c2", "scanner": "scanner-primary", "fingerprint": "18e5e71e710f47d7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--skill-activation-channels/skill-activation-channels.html"}, "region": {"startLine": 210}}}]}, {"ruleId": "scanner-e480be6a9344694d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2285-skills-sh-install/gap-explorer.html:140"}, "properties": {"repobilityId": "c7933343840bc78e", "scanner": "scanner-primary", "fingerprint": "e480be6a9344694d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--2285-skills-sh-install/gap-explorer.html"}, "region": {"startLine": 140}}}]}, {"ruleId": "scanner-2cad9d5da00c9e9f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m125-lane-a-version-watch-emulate-autodiscover/lane-a.html:162"}, "properties": {"repobilityId": "56d117ceefed97bb", "scanner": "scanner-primary", "fingerprint": "2cad9d5da00c9e9f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m125-lane-a-version-watch-emulate-autodiscover/lane-a.html"}, "region": {"startLine": 162}}}]}, {"ruleId": "scanner-6a7a31b128732531", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1910-hook-envelope-hookeventname/hook-envelope-explorer.html:105"}, "properties": {"repobilityId": "f4f7f5ff0bb10805", "scanner": "scanner-primary", "fingerprint": "6a7a31b128732531", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--1910-hook-envelope-hookeventname/hook-envelope-explorer.html"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-cde75834858c9131", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--fable-access-suspended/fable-surface-map.html:67"}, "properties": {"repobilityId": "7ce93ab88f92aa6d", "scanner": "scanner-primary", "fingerprint": "cde75834858c9131", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--fable-access-suspended/fable-surface-map.html"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-5f5caea608eff9e2", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in docs/chore--fable-access-suspended/fable-surface-map.html:71"}, "properties": {"repobilityId": "0d107fbcc80ef4da", "scanner": "scanner-primary", "fingerprint": "5f5caea608eff9e2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--fable-access-suspended/fable-surface-map.html"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-18510f39c81efc03", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2264-secret-skip-stash/playground.html:295"}, "properties": {"repobilityId": "cb6e2d6c0f32b631", "scanner": "scanner-primary", "fingerprint": "18510f39c81efc03", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--2264-secret-skip-stash/playground.html"}, "region": {"startLine": 295}}}]}, {"ruleId": "scanner-1bb7ebd6e27eda50", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-triage-skip-below-floor/below-floor-skip-playground.html:131"}, "properties": {"repobilityId": "161afea5e29302eb", "scanner": "scanner-primary", "fingerprint": "1bb7ebd6e27eda50", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-triage-skip-below-floor/below-floor-skip-playground.html"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-cba1a1cd090a3c1a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/test--worktree-stdout-guard-2016/worktree-stdout-explorer.html:83"}, "properties": {"repobilityId": "69827cb645c44958", "scanner": "scanner-primary", "fingerprint": "cba1a1cd090a3c1a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/test--worktree-stdout-guard-2016/worktree-stdout-explorer.html"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-cdb9e7a8ee77f84c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--claude-design-bet-a/playground.html:571"}, "properties": {"repobilityId": "37b5d8f932be05fa", "scanner": "scanner-primary", "fingerprint": "cdb9e7a8ee77f84c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--claude-design-bet-a/playground.html"}, "region": {"startLine": 571}}}]}, {"ruleId": "scanner-a9503323167e39a0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m125-lane-b-dev-stack-expect-aria/lane-b.html:304"}, "properties": {"repobilityId": "19a3f2200bf2c205", "scanner": "scanner-primary", "fingerprint": "a9503323167e39a0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m125-lane-b-dev-stack-expect-aria/lane-b.html"}, "region": {"startLine": 304}}}]}, {"ruleId": "scanner-e0659729e1c89fa1", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-145-142-adoption/cc-145-142-adoption.html:64"}, "properties": {"repobilityId": "59537da0a67d1f4b", "scanner": "scanner-primary", "fingerprint": "e0659729e1c89fa1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-145-142-adoption/cc-145-142-adoption.html"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-7d0a9b87cb261d52", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feature--visual-style-rule/visual-style.html:178"}, "properties": {"repobilityId": "b036deb4128b341f", "scanner": "scanner-primary", "fingerprint": "7d0a9b87cb261d52", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feature--visual-style-rule/visual-style.html"}, "region": {"startLine": 178}}}]}, {"ruleId": "scanner-cfd253dbd7bbcf59", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--yonyon-brand-keying-orank-discovery/yonyon-brand-keying.html:172"}, "properties": {"repobilityId": "d266ef55469167e7", "scanner": "scanner-primary", "fingerprint": "cfd253dbd7bbcf59", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--yonyon-brand-keying-orank-discovery/yonyon-brand-keying.html"}, "region": {"startLine": 172}}}]}, {"ruleId": "scanner-64257c222c4b05f0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--staleness-key-design/key-design.html:79"}, "properties": {"repobilityId": "7cffd2e3292751cc", "scanner": "scanner-primary", "fingerprint": "64257c222c4b05f0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--staleness-key-design/key-design.html"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-b57be4046fded7c3", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in docs/fix--staleness-key-design/key-design.html:71"}, "properties": {"repobilityId": "ccf61c814c52ede1", "scanner": "scanner-primary", "fingerprint": "b57be4046fded7c3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--staleness-key-design/key-design.html"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-92bff399fd0cc713", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--drift-cleanup-goal-emitter/goal-emitter-cleanup-playground.html:110"}, "properties": {"repobilityId": "5c4e9aff154b0257", "scanner": "scanner-primary", "fingerprint": "92bff399fd0cc713", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--drift-cleanup-goal-emitter/goal-emitter-cleanup-playground.html"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-61c3f5f7b426b859", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--skill-tool-schema-drift/skill-tool-schema-drift.html:84"}, "properties": {"repobilityId": "e606ba4afe9228d0", "scanner": "scanner-primary", "fingerprint": "61c3f5f7b426b859", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--skill-tool-schema-drift/skill-tool-schema-drift.html"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-076925476334e3cd", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in docs/feat--119-usage-hygiene-pre-compact-warn/m119-usage-hygiene.html:545"}, "properties": {"repobilityId": "233cf74ef08d09d1", "scanner": "scanner-primary", "fingerprint": "076925476334e3cd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--119-usage-hygiene-pre-compact-warn/m119-usage-hygiene.html"}, "region": {"startLine": 545}}}]}, {"ruleId": "scanner-709c6953ea00c91f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--119-usage-hygiene-pre-compact-warn/m119-usage-hygiene.html:394"}, "properties": {"repobilityId": "c93e5035ce3881c5", "scanner": "scanner-primary", "fingerprint": "709c6953ea00c91f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--119-usage-hygiene-pre-compact-warn/m119-usage-hygiene.html"}, "region": {"startLine": 394}}}]}, {"ruleId": "scanner-d73f844a6211d75e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--specialist-delegation-fixes/delegation-fixes-playground.html:134"}, "properties": {"repobilityId": "3a10155b90e7249b", "scanner": "scanner-primary", "fingerprint": "d73f844a6211d75e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--specialist-delegation-fixes/delegation-fixes-playground.html"}, "region": {"startLine": 134}}}]}, {"ruleId": "scanner-d6f2850b0f3934bd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1796-mcp-server-drift/mcp-deps-staleness-playground.html:102"}, "properties": {"repobilityId": "dd56f062e89a857e", "scanner": "scanner-primary", "fingerprint": "d6f2850b0f3934bd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--1796-mcp-server-drift/mcp-deps-staleness-playground.html"}, "region": {"startLine": 102}}}]}, {"ruleId": "scanner-b1420f902034e07f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--scorecard-alerts/github-app-token-flow.html:483"}, "properties": {"repobilityId": "478c5febde564d65", "scanner": "scanner-primary", "fingerprint": "b1420f902034e07f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--scorecard-alerts/github-app-token-flow.html"}, "region": {"startLine": 483}}}]}, {"ruleId": "scanner-9621e02d1c34b981", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--orank-csp-json404/gap-explorer.html:141"}, "properties": {"repobilityId": "45c8dd1ddd8ce067", "scanner": "scanner-primary", "fingerprint": "9621e02d1c34b981", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--orank-csp-json404/gap-explorer.html"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-3eba8948870ebc36", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2264-cleanup-gc/playground.html:295"}, "properties": {"repobilityId": "45fa9d9cd179d157", "scanner": "scanner-primary", "fingerprint": "3eba8948870ebc36", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--2264-cleanup-gc/playground.html"}, "region": {"startLine": 295}}}]}, {"ruleId": "scanner-d8f90a6f17179bb3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--docs-hook-count-drift/count-drift.html:303"}, "properties": {"repobilityId": "03aaf913a9a229da", "scanner": "scanner-primary", "fingerprint": "d8f90a6f17179bb3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--docs-hook-count-drift/count-drift.html"}, "region": {"startLine": 303}}}]}, {"ruleId": "scanner-0ebcfca0cdf95550", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2.1.145-adoption/playground.html:141"}, "properties": {"repobilityId": "a0521b66f9469294", "scanner": "scanner-primary", "fingerprint": "0ebcfca0cdf95550", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-2.1.145-adoption/playground.html"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-eec7715cc798aac5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2000-visualize-plan-format-front-door/playground.html:158"}, "properties": {"repobilityId": "f67e4700aaeaa0fb", "scanner": "scanner-primary", "fingerprint": "eec7715cc798aac5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--2000-visualize-plan-format-front-door/playground.html"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-36cbc11da447c860", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m128-cc-122-126-adoption/cc-122-126-otel-and-purge.html:345"}, "properties": {"repobilityId": "da6d6f7cb56ab4f0", "scanner": "scanner-primary", "fingerprint": "36cbc11da447c860", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m128-cc-122-126-adoption/cc-122-126-otel-and-purge.html"}, "region": {"startLine": 345}}}]}, {"ruleId": "scanner-55f14e63e02ec45b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-160-161-adoption/cc-160-161-adoption.html:131"}, "properties": {"repobilityId": "2c82fc6389b49474", "scanner": "scanner-primary", "fingerprint": "55f14e63e02ec45b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-160-161-adoption/cc-160-161-adoption.html"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-b58dce01ad711175", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-catchup-174-175/feature-hint-tester.html:110"}, "properties": {"repobilityId": "a303b295cdf417f2", "scanner": "scanner-primary", "fingerprint": "b58dce01ad711175", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-catchup-174-175/feature-hint-tester.html"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-652f60ea942bbc62", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--lib-currency-lane2-3/lane2-3.html:80"}, "properties": {"repobilityId": "4d0a106db2e8d0d4", "scanner": "scanner-primary", "fingerprint": "652f60ea942bbc62", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--lib-currency-lane2-3/lane2-3.html"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-4acc1bc4e3a658fe", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in docs/site/components/changelog-timeline.tsx:83"}, "properties": {"repobilityId": "74cf55bc9f3ee963", "scanner": "scanner-primary", "fingerprint": "4acc1bc4e3a658fe", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/site/components/changelog-timeline.tsx"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-091a290373728929", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in docs/site/components/structured-data.tsx:27"}, "properties": {"repobilityId": "43080672f635df94", "scanner": "scanner-primary", "fingerprint": "091a290373728929", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/site/components/structured-data.tsx"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-6d9e3e6b82ea4181", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in docs/site/app/docs/[[...slug]]/page.tsx:81"}, "properties": {"repobilityId": "93fd2f942e295d97", "scanner": "scanner-primary", "fingerprint": "6d9e3e6b82ea4181", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/site/app/docs/[[...slug]]/page.tsx"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-ea05974a0a1d4278", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/site/lib/mcp-ui.ts:50"}, "properties": {"repobilityId": "3d0e1727d5fa134b", "scanner": "scanner-primary", "fingerprint": "ea05974a0a1d4278", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/site/lib/mcp-ui.ts"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-3c4fe1185879529f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m126-ultrareview-and-fork-subagent/explainer.html:346"}, "properties": {"repobilityId": "efc0cde40ce74dbc", "scanner": "scanner-primary", "fingerprint": "3c4fe1185879529f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m126-ultrareview-and-fork-subagent/explainer.html"}, "region": {"startLine": 346}}}]}, {"ruleId": "scanner-05e6fe948a2c13c8", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in docs/feat--m126-ultrareview-and-fork-subagent/explainer.html:293"}, "properties": {"repobilityId": "a60359a8652ca8c0", "scanner": "scanner-primary", "fingerprint": "05e6fe948a2c13c8", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m126-ultrareview-and-fork-subagent/explainer.html"}, "region": {"startLine": 293}}}]}, {"ruleId": "scanner-d3c6225bb720e13c", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in docs/feat--1478-coverage-hardening/m119-usage-hygiene.html:545"}, "properties": {"repobilityId": "36380d00725161d9", "scanner": "scanner-primary", "fingerprint": "d3c6225bb720e13c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--1478-coverage-hardening/m119-usage-hygiene.html"}, "region": {"startLine": 545}}}]}, {"ruleId": "scanner-4678719ab5ffe523", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--1478-coverage-hardening/m119-usage-hygiene.html:394"}, "properties": {"repobilityId": "e84016ca92fd7769", "scanner": "scanner-primary", "fingerprint": "4678719ab5ffe523", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--1478-coverage-hardening/m119-usage-hygiene.html"}, "region": {"startLine": 394}}}]}, {"ruleId": "scanner-1d0f0db67c2c72cd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1978-envelope-cleanup-root-sweep/playground.html:85"}, "properties": {"repobilityId": "333a3dbb75cf1adc", "scanner": "scanner-primary", "fingerprint": "1d0f0db67c2c72cd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--1978-envelope-cleanup-root-sweep/playground.html"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-e793bcca4d9d14f4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--discovery-crawlability-flywheel/orank-levers-playground.html:133"}, "properties": {"repobilityId": "183263b10fd6e5cb", "scanner": "scanner-primary", "fingerprint": "e793bcca4d9d14f4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--discovery-crawlability-flywheel/orank-levers-playground.html"}, "region": {"startLine": 133}}}]}, {"ruleId": "scanner-912a4bed2c72efc5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--readme-yonyon-canonical/readme-canonical-playground.html:64"}, "properties": {"repobilityId": "be035e5c14a4cd0a", "scanner": "scanner-primary", "fingerprint": "912a4bed2c72efc5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--readme-yonyon-canonical/readme-canonical-playground.html"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-a63b93c26634b47e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--skill-channel-telemetry/skill-channel-telemetry.html:209"}, "properties": {"repobilityId": "246dfa4fa08280b2", "scanner": "scanner-primary", "fingerprint": "a63b93c26634b47e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--skill-channel-telemetry/skill-channel-telemetry.html"}, "region": {"startLine": 209}}}]}, {"ruleId": "scanner-1cf83753d86bab66", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--drift-register-correction/drift-reaudit-playground.html:125"}, "properties": {"repobilityId": "ef3af910c562ba3b", "scanner": "scanner-primary", "fingerprint": "1cf83753d86bab66", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/docs--drift-register-correction/drift-reaudit-playground.html"}, "region": {"startLine": 125}}}]}, {"ruleId": "scanner-c92939428a86703a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--dependency-confusion-claude-pkg/dependency-confusion-playground.html:149"}, "properties": {"repobilityId": "2a444051777b7dd2", "scanner": "scanner-primary", "fingerprint": "c92939428a86703a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--dependency-confusion-claude-pkg/dependency-confusion-playground.html"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-09d5fd9fe9f44e19", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-floor-2.1.170/cc-2-1-170-adoption-playground.html:68"}, "properties": {"repobilityId": "f4875655fda24082", "scanner": "scanner-primary", "fingerprint": "09d5fd9fe9f44e19", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-floor-2.1.170/cc-2-1-170-adoption-playground.html"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-376446361b03b302", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1914-m168-phase4-worktree-overrides/playground.html:220"}, "properties": {"repobilityId": "5da6e57603911520", "scanner": "scanner-primary", "fingerprint": "376446361b03b302", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/issue--1914-m168-phase4-worktree-overrides/playground.html"}, "region": {"startLine": 220}}}]}, {"ruleId": "scanner-df8744cc48ccf2f4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--session-title-branch-pin/session-title-pin-playground.html:114"}, "properties": {"repobilityId": "f28a2044fe5d87b4", "scanner": "scanner-primary", "fingerprint": "df8744cc48ccf2f4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--session-title-branch-pin/session-title-pin-playground.html"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-97e4b6780b548e51", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--skill-compat-floor-check-1963/playground.html:80"}, "properties": {"repobilityId": "c2dd1a2207ac147d", "scanner": "scanner-primary", "fingerprint": "97e4b6780b548e51", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--skill-compat-floor-check-1963/playground.html"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-627823e81ae3c48e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--hook-json-path-leak/explorer.html:187"}, "properties": {"repobilityId": "a14e899c92570fea", "scanner": "scanner-primary", "fingerprint": "627823e81ae3c48e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--hook-json-path-leak/explorer.html"}, "region": {"startLine": 187}}}]}, {"ruleId": "scanner-386300243371b4bb", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--askuserquestion-schema-conformance/askuserquestion-schema-validator.html:241"}, "properties": {"repobilityId": "84f035832146d9c2", "scanner": "scanner-primary", "fingerprint": "386300243371b4bb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--askuserquestion-schema-conformance/askuserquestion-schema-validator.html"}, "region": {"startLine": 241}}}]}, {"ruleId": "scanner-85d4451223251b46", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--governance-floor/engine-floor-playground.html:49"}, "properties": {"repobilityId": "63e12741576116ae", "scanner": "scanner-primary", "fingerprint": "85d4451223251b46", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--governance-floor/engine-floor-playground.html"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-2719bbef0f2d032b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--clarify-global-hook-count/gap-explorer.html:141"}, "properties": {"repobilityId": "cae3e50b93865709", "scanner": "scanner-primary", "fingerprint": "2719bbef0f2d032b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/docs--clarify-global-hook-count/gap-explorer.html"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-e766b0cf187b63ba", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-native-first-rule/cc-2.1.165-adoption-playground.html:155"}, "properties": {"repobilityId": "4992993fd96ff81c", "scanner": "scanner-primary", "fingerprint": "e766b0cf187b63ba", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-native-first-rule/cc-2.1.165-adoption-playground.html"}, "region": {"startLine": 155}}}]}, {"ruleId": "scanner-25a293c41de0a271", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-triage-tokenfree-reconcile/cc-adoption-before-after-playground.html:208"}, "properties": {"repobilityId": "e2a2227720e352d5", "scanner": "scanner-primary", "fingerprint": "25a293c41de0a271", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-triage-tokenfree-reconcile/cc-adoption-before-after-playground.html"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-d217ad98889ff351", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in docs/fix--cors-restrict-origin/cors-fix.html:10"}, "properties": {"repobilityId": "6ac2f08b3e1b868d", "scanner": "scanner-primary", "fingerprint": "d217ad98889ff351", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cors-restrict-origin/cors-fix.html"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-1f498221f9deb8a4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--delegation-verify-followups/verify-followups-playground.html:143"}, "properties": {"repobilityId": "b7d2d4c8ca82e571", "scanner": "scanner-primary", "fingerprint": "1f498221f9deb8a4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--delegation-verify-followups/verify-followups-playground.html"}, "region": {"startLine": 143}}}]}, {"ruleId": "scanner-08c559283711a106", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2282-facet-counts/facet-stability.html:51"}, "properties": {"repobilityId": "d766efee1a334819", "scanner": "scanner-primary", "fingerprint": "08c559283711a106", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--2282-facet-counts/facet-stability.html"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-7b0e5ecf456ef64c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m119-closeout/m119-closeout.html:140"}, "properties": {"repobilityId": "ad9bcedd935dad09", "scanner": "scanner-primary", "fingerprint": "7b0e5ecf456ef64c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--m119-closeout/m119-closeout.html"}, "region": {"startLine": 140}}}]}, {"ruleId": "scanner-b009ee627304d7d1", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-watch-native-binary-install/cc-cli-install-playground.html:162"}, "properties": {"repobilityId": "19e0dc2e4f58cec6", "scanner": "scanner-primary", "fingerprint": "b009ee627304d7d1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-watch-native-binary-install/cc-cli-install-playground.html"}, "region": {"startLine": 162}}}]}, {"ruleId": "scanner-842b72ee018cedcc", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m170-skill-auto-eval-spec/playground.html:79"}, "properties": {"repobilityId": "e322549ae6dd6999", "scanner": "scanner-primary", "fingerprint": "842b72ee018cedcc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m170-skill-auto-eval-spec/playground.html"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-42f89b4018b6580c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--groom-2176-noise/verdicts.html:62"}, "properties": {"repobilityId": "50abd205eef50c0c", "scanner": "scanner-primary", "fingerprint": "42f89b4018b6580c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--groom-2176-noise/verdicts.html"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-f33875f4e7e6d29f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--fable-spend-consent/fable5-adoption-playground.html:319"}, "properties": {"repobilityId": "39d2f5b2ca19640c", "scanner": "scanner-primary", "fingerprint": "f33875f4e7e6d29f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--fable-spend-consent/fable5-adoption-playground.html"}, "region": {"startLine": 319}}}]}, {"ruleId": "scanner-3f407dfd5bffb1de", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-debt-eval-case/ork-debt-ledger-playground.html:188"}, "properties": {"repobilityId": "45e2dceb98d9f0f7", "scanner": "scanner-primary", "fingerprint": "3f407dfd5bffb1de", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--ork-debt-eval-case/ork-debt-ledger-playground.html"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-6972e629d0932210", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--m130-pipeline-hotfix/bug-walkthrough.html:307"}, "properties": {"repobilityId": "cd1d3487003e1944", "scanner": "scanner-primary", "fingerprint": "6972e629d0932210", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--m130-pipeline-hotfix/bug-walkthrough.html"}, "region": {"startLine": 307}}}]}, {"ruleId": "scanner-a97833cfd71effa3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--agent-readiness-orank/agent-readiness-explorer.html:144"}, "properties": {"repobilityId": "4ce427edce775cb5", "scanner": "scanner-primary", "fingerprint": "a97833cfd71effa3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--agent-readiness-orank/agent-readiness-explorer.html"}, "region": {"startLine": 144}}}]}, {"ruleId": "scanner-a96a3ed5e38f9205", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2.1.172-173-adoption/cc-adoption-explorer.html:127"}, "properties": {"repobilityId": "0bffd82ad6d2a008", "scanner": "scanner-primary", "fingerprint": "a96a3ed5e38f9205", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-2.1.172-173-adoption/cc-adoption-explorer.html"}, "region": {"startLine": 127}}}]}, {"ruleId": "scanner-e073285ef873e613", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2264-wire-reversible/playground.html:295"}, "properties": {"repobilityId": "bd3ea9eec9a725d5", "scanner": "scanner-primary", "fingerprint": "e073285ef873e613", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--2264-wire-reversible/playground.html"}, "region": {"startLine": 295}}}]}, {"ruleId": "scanner-ceaa8c0b2adb6415", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--fable5-model-vocab/fable5-adoption-playground.html:319"}, "properties": {"repobilityId": "f91c38f67935dfe3", "scanner": "scanner-primary", "fingerprint": "ceaa8c0b2adb6415", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--fable5-model-vocab/fable5-adoption-playground.html"}, "region": {"startLine": 319}}}]}, {"ruleId": "scanner-14d2c29b046a0d6a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2162-2163-backlog/cc-2162-2163-verdicts-playground.html:97"}, "properties": {"repobilityId": "06ee12c5c4ace4bf", "scanner": "scanner-primary", "fingerprint": "14d2c29b046a0d6a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-2162-2163-backlog/cc-2162-2163-verdicts-playground.html"}, "region": {"startLine": 97}}}]}, {"ruleId": "scanner-fc09f4956f427941", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--mcp-core-consumers/mcp-core-consumers.html:183"}, "properties": {"repobilityId": "c31d80703f16c782", "scanner": "scanner-primary", "fingerprint": "fc09f4956f427941", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--mcp-core-consumers/mcp-core-consumers.html"}, "region": {"startLine": 183}}}]}, {"ruleId": "scanner-d98efd38b8094940", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in docs/feat--agent-readiness-cors/cors-agent-access.html:45"}, "properties": {"repobilityId": "e16b90e002bfc8bf", "scanner": "scanner-primary", "fingerprint": "d98efd38b8094940", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--agent-readiness-cors/cors-agent-access.html"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-5fcc2f095ba6b5de", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--configure-2176-settings/settings-catalog.html:46"}, "properties": {"repobilityId": "8c38dac36d59dd58", "scanner": "scanner-primary", "fingerprint": "5fcc2f095ba6b5de", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--configure-2176-settings/settings-catalog.html"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-7aa12c49c98a496b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--adversarial-verify-review-audit/adversarial-refutation-rollout-playground.html:128"}, "properties": {"repobilityId": "571ff2c39b0dc2b3", "scanner": "scanner-primary", "fingerprint": "7aa12c49c98a496b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--adversarial-verify-review-audit/adversarial-refutation-rollout-playground.html"}, "region": {"startLine": 128}}}]}, {"ruleId": "scanner-3a7dc343fee06823", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--adversarial-verify-skills/adversarial-verify-playground.html:92"}, "properties": {"repobilityId": "e05fab508180c4ed", "scanner": "scanner-primary", "fingerprint": "3a7dc343fee06823", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--adversarial-verify-skills/adversarial-verify-playground.html"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-be34a3a1f204e338", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-watch-carry-triaged-gaps/gaps-carry-forward-playground.html:153"}, "properties": {"repobilityId": "520aa794571f3755", "scanner": "scanner-primary", "fingerprint": "be34a3a1f204e338", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-watch-carry-triaged-gaps/gaps-carry-forward-playground.html"}, "region": {"startLine": 153}}}]}, {"ruleId": "scanner-9e3004ea76629f95", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-adoption-zero-out/verdicts.html:73"}, "properties": {"repobilityId": "42eadf83dca87776", "scanner": "scanner-primary", "fingerprint": "9e3004ea76629f95", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-adoption-zero-out/verdicts.html"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-80837e902acc0330", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/test--perf-bench-split/playground.html:218"}, "properties": {"repobilityId": "db19e03e0b2b5de0", "scanner": "scanner-primary", "fingerprint": "80837e902acc0330", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/test--perf-bench-split/playground.html"}, "region": {"startLine": 218}}}]}, {"ruleId": "scanner-c18a038a8d3658bb", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in docs/test--perf-bench-split/playground.html:224"}, "properties": {"repobilityId": "4ff7d94c62e2b83b", "scanner": "scanner-primary", "fingerprint": "c18a038a8d3658bb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/test--perf-bench-split/playground.html"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-5d032321856f4985", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2-1-128-adoption/cc-feature-window-playground.html:126"}, "properties": {"repobilityId": "977da703f8af1b1c", "scanner": "scanner-primary", "fingerprint": "5d032321856f4985", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-2-1-128-adoption/cc-feature-window-playground.html"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-84463810bb240d6d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--esbuild-0281-bundle/why-dep-bumps-drift.html:71"}, "properties": {"repobilityId": "ceec931982f03c24", "scanner": "scanner-primary", "fingerprint": "84463810bb240d6d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--esbuild-0281-bundle/why-dep-bumps-drift.html"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-c6174db4351eb186", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-rolling-milestone/cc-milestone-consolidation.html:151"}, "properties": {"repobilityId": "e70fc68c9a2335da", "scanner": "scanner-primary", "fingerprint": "c6174db4351eb186", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-rolling-milestone/cc-milestone-consolidation.html"}, "region": {"startLine": 151}}}]}, {"ruleId": "scanner-6cc057def8ebf819", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m119-dogfood-cluster/m119-zones.html:281"}, "properties": {"repobilityId": "64ef3dfae27854a6", "scanner": "scanner-primary", "fingerprint": "6cc057def8ebf819", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m119-dogfood-cluster/m119-zones.html"}, "region": {"startLine": 281}}}]}, {"ruleId": "scanner-9173f087ac8c2e99", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--mcp-core-consumers-round-2/round-2-consumers.html:185"}, "properties": {"repobilityId": "9ef598b60cec2640", "scanner": "scanner-primary", "fingerprint": "9173f087ac8c2e99", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--mcp-core-consumers-round-2/round-2-consumers.html"}, "region": {"startLine": 185}}}]}, {"ruleId": "scanner-9a99450a7ecbb0aa", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m129-otel-fixtures-and-path-decode/lossy-decode-and-fixtures.html:199"}, "properties": {"repobilityId": "be545fd5c8b32b2a", "scanner": "scanner-primary", "fingerprint": "9a99450a7ecbb0aa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--m129-otel-fixtures-and-path-decode/lossy-decode-and-fixtures.html"}, "region": {"startLine": 199}}}]}, {"ruleId": "scanner-d4713741cb360e0b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--json-error-content-type/gap-explorer.html:141"}, "properties": {"repobilityId": "c757e6b40ce73474", "scanner": "scanner-primary", "fingerprint": "d4713741cb360e0b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--json-error-content-type/gap-explorer.html"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-7100e71b5cc3db88", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--session-title-override/playground.html:341"}, "properties": {"repobilityId": "a24396f4c07b2082", "scanner": "scanner-primary", "fingerprint": "7100e71b5cc3db88", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--session-title-override/playground.html"}, "region": {"startLine": 341}}}]}, {"ruleId": "scanner-be76bd4b54e44972", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--docs-orchestkit-yonyon-domain/domain-cutover-playground.html:161"}, "properties": {"repobilityId": "732cc153ac8d4ade", "scanner": "scanner-primary", "fingerprint": "be76bd4b54e44972", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--docs-orchestkit-yonyon-domain/domain-cutover-playground.html"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-547132a1bbd574f6", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--2267-cc-triage-featureless/cc-triage-featureless-playground.html:131"}, "properties": {"repobilityId": "cb7cf2ec3df01aff", "scanner": "scanner-primary", "fingerprint": "547132a1bbd574f6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--2267-cc-triage-featureless/cc-triage-featureless-playground.html"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-749e77f65459c1dc", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--session-title-language/lang-title.html:58"}, "properties": {"repobilityId": "22936095327d317a", "scanner": "scanner-primary", "fingerprint": "749e77f65459c1dc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--session-title-language/lang-title.html"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-992c0f82f75e88f7", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--smithery-sameas/gap-explorer.html:141"}, "properties": {"repobilityId": "663c4d13f40ff0fe", "scanner": "scanner-primary", "fingerprint": "992c0f82f75e88f7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--smithery-sameas/gap-explorer.html"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-664bed3522261454", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--scorecard-pinned-deps/scorecard-pinned-deps-triage.html:183"}, "properties": {"repobilityId": "b40551cb9150169c", "scanner": "scanner-primary", "fingerprint": "664bed3522261454", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--scorecard-pinned-deps/scorecard-pinned-deps-triage.html"}, "region": {"startLine": 183}}}]}, {"ruleId": "scanner-b0a38b81e0ab6250", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--orank-layers-2-3-4/gap-explorer.html:141"}, "properties": {"repobilityId": "45121511e58a33ec", "scanner": "scanner-primary", "fingerprint": "b0a38b81e0ab6250", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--orank-layers-2-3-4/gap-explorer.html"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-3dce71dfa02911c9", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--2010-skill-invocation/playground.html:210"}, "properties": {"repobilityId": "53440450ce5264e2", "scanner": "scanner-primary", "fingerprint": "3dce71dfa02911c9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--2010-skill-invocation/playground.html"}, "region": {"startLine": 210}}}]}, {"ruleId": "scanner-1c3b044cb3a6091d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--mcp-registry-version-automation/registry-sync-playground.html:92"}, "properties": {"repobilityId": "e344f192b624effa", "scanner": "scanner-primary", "fingerprint": "1c3b044cb3a6091d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--mcp-registry-version-automation/registry-sync-playground.html"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-92ac3c20b6b3b39e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--2017-sqlite-cleanup/playground.html:90"}, "properties": {"repobilityId": "060b86b4b019b695", "scanner": "scanner-primary", "fingerprint": "92ac3c20b6b3b39e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--2017-sqlite-cleanup/playground.html"}, "region": {"startLine": 90}}}]}, {"ruleId": "scanner-52015b1ae5a60400", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m128-bundle-x-monitor-quickwins/monitor-debounce-explorer.html:183"}, "properties": {"repobilityId": "69e2a3590c9e5c79", "scanner": "scanner-primary", "fingerprint": "52015b1ae5a60400", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m128-bundle-x-monitor-quickwins/monitor-debounce-explorer.html"}, "region": {"startLine": 183}}}]}, {"ruleId": "scanner-4a8fcadde4da5c3a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--unified-orama-search/search-redesign-playground.html:226"}, "properties": {"repobilityId": "1242f01ce923fc24", "scanner": "scanner-primary", "fingerprint": "4a8fcadde4da5c3a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--unified-orama-search/search-redesign-playground.html"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-d5e9c922d6a6b24b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-triage-retry-recovery/gaps-carry-forward.html:83"}, "properties": {"repobilityId": "94e9435d45bd866b", "scanner": "scanner-primary", "fingerprint": "d5e9c922d6a6b24b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-triage-retry-recovery/gaps-carry-forward.html"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-f736056a6032f237", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--dwp-ork-framing-clarifier/workflow-patterns-playground.html:93"}, "properties": {"repobilityId": "90dfe2cf408b51ad", "scanner": "scanner-primary", "fingerprint": "f736056a6032f237", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/docs--dwp-ork-framing-clarifier/workflow-patterns-playground.html"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-b0150bc554d9d1c3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-2158-staleness-sweep/staleness-audit-2026-05-30.html:132"}, "properties": {"repobilityId": "87f9ad4596be76c8", "scanner": "scanner-primary", "fingerprint": "b0150bc554d9d1c3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-2158-staleness-sweep/staleness-audit-2026-05-30.html"}, "region": {"startLine": 132}}}]}, {"ruleId": "scanner-84826d0ae9898ef6", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--askuserq-preview-strip/skills-hygiene-playground.html:64"}, "properties": {"repobilityId": "985b0c14bbb47c1f", "scanner": "scanner-primary", "fingerprint": "84826d0ae9898ef6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--askuserq-preview-strip/skills-hygiene-playground.html"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-0db8c569ae122805", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-2.1.139-adoption/index.html:131"}, "properties": {"repobilityId": "317a90da9ca813a0", "scanner": "scanner-primary", "fingerprint": "0db8c569ae122805", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-2.1.139-adoption/index.html"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-647cbdecf1b47640", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--compare-jsonld-geo/gap-explorer.html:141"}, "properties": {"repobilityId": "d662d10a4ff8320f", "scanner": "scanner-primary", "fingerprint": "647cbdecf1b47640", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--compare-jsonld-geo/gap-explorer.html"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-ced9df13a0ab9eaa", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-adoption-ws3-ws4/adoption-board.html:81"}, "properties": {"repobilityId": "73466416ed5db335", "scanner": "scanner-primary", "fingerprint": "ced9df13a0ab9eaa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-adoption-ws3-ws4/adoption-board.html"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-bdf524259a1e472b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2153-2154-adoption-sweep/cc-2153-sweep-explorer.html:90"}, "properties": {"repobilityId": "acd7363205299541", "scanner": "scanner-primary", "fingerprint": "bdf524259a1e472b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-2153-2154-adoption-sweep/cc-2153-sweep-explorer.html"}, "region": {"startLine": 90}}}]}, {"ruleId": "scanner-fd8944212329d040", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1917-fix-test-isolation/playground.html:747"}, "properties": {"repobilityId": "3acf12f3e0e80e6b", "scanner": "scanner-primary", "fingerprint": "fd8944212329d040", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/issue--1917-fix-test-isolation/playground.html"}, "region": {"startLine": 747}}}]}, {"ruleId": "scanner-46206fd6d00dbab4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/issue--1913-m168-phase3-events-jsonl/playground.html:747"}, "properties": {"repobilityId": "4deda659616c41ac", "scanner": "scanner-primary", "fingerprint": "46206fd6d00dbab4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/issue--1913-m168-phase3-events-jsonl/playground.html"}, "region": {"startLine": 747}}}]}, {"ruleId": "scanner-00cc8ef3ba409cfc", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m117-closeout/m117-closeout.html:92"}, "properties": {"repobilityId": "51461154d65e2c6b", "scanner": "scanner-primary", "fingerprint": "00cc8ef3ba409cfc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--m117-closeout/m117-closeout.html"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-38e0feaae95d11fe", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--cc-2152-umbrella-tail/cc-2152-tail-explorer.html:80"}, "properties": {"repobilityId": "92419afa05ee3f62", "scanner": "scanner-primary", "fingerprint": "38e0feaae95d11fe", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/docs--cc-2152-umbrella-tail/cc-2152-tail-explorer.html"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-6b00852d35199001", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-backlog-clearout/cc-backlog-clearout.html:86"}, "properties": {"repobilityId": "8324588641ef3a19", "scanner": "scanner-primary", "fingerprint": "6b00852d35199001", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-backlog-clearout/cc-backlog-clearout.html"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-5d43fe36429b6846", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-watch-double-dash-normalize/double-dash-normalizer-playground.html:109"}, "properties": {"repobilityId": "e43d2644a59204f7", "scanner": "scanner-primary", "fingerprint": "5d43fe36429b6846", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-watch-double-dash-normalize/double-dash-normalizer-playground.html"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-3b4dcfe5268abd3b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1527-json-render-dashboards/lane-c.html:324"}, "properties": {"repobilityId": "e57cb037ed983d32", "scanner": "scanner-primary", "fingerprint": "3b4dcfe5268abd3b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--1527-json-render-dashboards/lane-c.html"}, "region": {"startLine": 324}}}]}, {"ruleId": "scanner-35ce593bc751b11b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--assess-followups/tag-routing.html:62"}, "properties": {"repobilityId": "46341274885e04a5", "scanner": "scanner-primary", "fingerprint": "35ce593bc751b11b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--assess-followups/tag-routing.html"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-d53a76795adb17ee", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--adoption-sweep-skill-compat/playground.html:97"}, "properties": {"repobilityId": "efcb5ec71268a1d4", "scanner": "scanner-primary", "fingerprint": "d53a76795adb17ee", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--adoption-sweep-skill-compat/playground.html"}, "region": {"startLine": 97}}}]}, {"ruleId": "scanner-7c48c9ea3ea06ef9", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--m126-secret-handler-hook/explainer.html:195"}, "properties": {"repobilityId": "3153b42c12c6c3c8", "scanner": "scanner-primary", "fingerprint": "7c48c9ea3ea06ef9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--m126-secret-handler-hook/explainer.html"}, "region": {"startLine": 195}}}]}, {"ruleId": "scanner-6b0eb6843e34cf67", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--1945-bump-cc-floor-2.1.148/playground.html:108"}, "properties": {"repobilityId": "8af23f1f4acb79e7", "scanner": "scanner-primary", "fingerprint": "6b0eb6843e34cf67", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--1945-bump-cc-floor-2.1.148/playground.html"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-8dcb653fee18204d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--1964-cc-triage-skill-gap/playground.html:160"}, "properties": {"repobilityId": "0c32e00537b1aba6", "scanner": "scanner-primary", "fingerprint": "8dcb653fee18204d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--1964-cc-triage-skill-gap/playground.html"}, "region": {"startLine": 160}}}]}, {"ruleId": "scanner-ae78796f7c300e9b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--m126-count-sync-followup/count-sync-explorer.html:137"}, "properties": {"repobilityId": "74ba9f9aa2806fee", "scanner": "scanner-primary", "fingerprint": "ae78796f7c300e9b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--m126-count-sync-followup/count-sync-explorer.html"}, "region": {"startLine": 137}}}]}, {"ruleId": "scanner-299e37b4ae303d90", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in docs/feat--1478-token-estimator/m119-usage-hygiene.html:545"}, "properties": {"repobilityId": "0f8baeb3635e60ce", "scanner": "scanner-primary", "fingerprint": "299e37b4ae303d90", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--1478-token-estimator/m119-usage-hygiene.html"}, "region": {"startLine": 545}}}]}, {"ruleId": "scanner-7333f6d120db2bca", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--1478-token-estimator/m119-usage-hygiene.html:394"}, "properties": {"repobilityId": "a486d0bca7b69e6c", "scanner": "scanner-primary", "fingerprint": "7333f6d120db2bca", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--1478-token-estimator/m119-usage-hygiene.html"}, "region": {"startLine": 394}}}]}, {"ruleId": "scanner-fc775a1497856268", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-pipeline-hardening/pipeline-resilience.html:87"}, "properties": {"repobilityId": "be9393825408c974", "scanner": "scanner-primary", "fingerprint": "fc775a1497856268", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-pipeline-hardening/pipeline-resilience.html"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-b60ba7eef6312451", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--peer-session-awareness/peer-session-awareness.html:121"}, "properties": {"repobilityId": "c06e27ae839a44a1", "scanner": "scanner-primary", "fingerprint": "b60ba7eef6312451", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--peer-session-awareness/peer-session-awareness.html"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-1abca9d5630ec7c3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-stale-and-dist-rebuild/label-ensure-resilience.html:63"}, "properties": {"repobilityId": "6b6f4ebffe7f5b3a", "scanner": "scanner-primary", "fingerprint": "1abca9d5630ec7c3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-stale-and-dist-rebuild/label-ensure-resilience.html"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-1a7092d09f59648c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--cc-2154-stragglers/stragglers-explorer.html:47"}, "properties": {"repobilityId": "94540db26b5b9cf2", "scanner": "scanner-primary", "fingerprint": "1a7092d09f59648c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--cc-2154-stragglers/stragglers-explorer.html"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-5d8efcfe9b9f5755", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-swarm-migrate/index.html:225"}, "properties": {"repobilityId": "2a9ed10f009d30bb", "scanner": "scanner-primary", "fingerprint": "5d8efcfe9b9f5755", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--ork-swarm-migrate/index.html"}, "region": {"startLine": 225}}}]}, {"ruleId": "scanner-0d6455f380bc7297", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--1985-cc-watch-parse-failed-blackhole/playground.html:154"}, "properties": {"repobilityId": "2cfe513ac92c92aa", "scanner": "scanner-primary", "fingerprint": "0d6455f380bc7297", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--1985-cc-watch-parse-failed-blackhole/playground.html"}, "region": {"startLine": 154}}}]}, {"ruleId": "scanner-c38a594868024870", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/chore--cc-floor-2.1.168/cc-support-window.html:82"}, "properties": {"repobilityId": "22e12dae5534ba47", "scanner": "scanner-primary", "fingerprint": "c38a594868024870", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/chore--cc-floor-2.1.168/cc-support-window.html"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-b9e082d52df106fd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--ork-debt-ext-fix/ork-debt-ledger-playground.html:188"}, "properties": {"repobilityId": "f2541867df545ff5", "scanner": "scanner-primary", "fingerprint": "b9e082d52df106fd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--ork-debt-ext-fix/ork-debt-ledger-playground.html"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-99534e997c7baee9", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/feat--cc-2154-adoption/cc-2154-adoption-explorer.html:75"}, "properties": {"repobilityId": "4b82cfd476777acb", "scanner": "scanner-primary", "fingerprint": "99534e997c7baee9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/feat--cc-2154-adoption/cc-2154-adoption-explorer.html"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-e8269e617ceda756", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--sessionstart-hookeventname/index.html:223"}, "properties": {"repobilityId": "ec136af8ace7bb0e", "scanner": "scanner-primary", "fingerprint": "e8269e617ceda756", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--sessionstart-hookeventname/index.html"}, "region": {"startLine": 223}}}]}, {"ruleId": "scanner-c95f914540e28a2b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/docs--cc-adopt-2152-quickwins/cc-2152-adoption-explorer.html:120"}, "properties": {"repobilityId": "d8b7a06f7212aa5a", "scanner": "scanner-primary", "fingerprint": "c95f914540e28a2b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/docs--cc-adopt-2152-quickwins/cc-2152-adoption-explorer.html"}, "region": {"startLine": 120}}}]}, {"ruleId": "scanner-302b9c8772433f1f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/vercel-labs-2026-04-29-adoption-ideas.html:316"}, "properties": {"repobilityId": "ced3e703e0ca98ac", "scanner": "scanner-primary", "fingerprint": "302b9c8772433f1f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/playgrounds/vercel-labs-2026-04-29-adoption-ideas.html"}, "region": {"startLine": 316}}}]}, {"ruleId": "scanner-a5903d32ed0b2cf4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/superpowers-learnings.html:323"}, "properties": {"repobilityId": "2e62c274fe12986f", "scanner": "scanner-primary", "fingerprint": "a5903d32ed0b2cf4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/playgrounds/superpowers-learnings.html"}, "region": {"startLine": 323}}}]}, {"ruleId": "scanner-a7388d835acba063", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/lib-currency-audit-2026-05-31.html:444"}, "properties": {"repobilityId": "eae58849aa89b6f7", "scanner": "scanner-primary", "fingerprint": "a7388d835acba063", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/playgrounds/lib-currency-audit-2026-05-31.html"}, "region": {"startLine": 444}}}]}, {"ruleId": "scanner-9b1d6c55857517bd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/vercel-labs-integration.html:389"}, "properties": {"repobilityId": "6460f3bcacfbf0ea", "scanner": "scanner-primary", "fingerprint": "9b1d6c55857517bd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/playgrounds/vercel-labs-integration.html"}, "region": {"startLine": 389}}}]}, {"ruleId": "scanner-2748f503e6c901ea", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/playgrounds/m126-bundle-b-explainer.html:346"}, "properties": {"repobilityId": "1e22ce562607299b", "scanner": "scanner-primary", "fingerprint": "2748f503e6c901ea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/playgrounds/m126-bundle-b-explainer.html"}, "region": {"startLine": 346}}}]}, {"ruleId": "scanner-2597690e37d92baf", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in docs/playgrounds/m126-bundle-b-explainer.html:293"}, "properties": {"repobilityId": "7bcfc064da2efccf", "scanner": "scanner-primary", "fingerprint": "2597690e37d92baf", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/playgrounds/m126-bundle-b-explainer.html"}, "region": {"startLine": 293}}}]}, {"ruleId": "scanner-ae33ab6c8f75e037", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/fix--worktree-create-path-contract/fable5-adoption-playground.html:319"}, "properties": {"repobilityId": "37c0c2903b0acc7c", "scanner": "scanner-primary", "fingerprint": "ae33ab6c8f75e037", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/fix--worktree-create-path-contract/fable5-adoption-playground.html"}, "region": {"startLine": 319}}}]}, {"ruleId": "scanner-df45efdfb9e21baf", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in scripts/generate-docs-data.js:1055"}, "properties": {"repobilityId": "90af8afc31f8a1e4", "scanner": "scanner-primary", "fingerprint": "df45efdfb9e21baf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/generate-docs-data.js"}, "region": {"startLine": 1055}}}]}, {"ruleId": "scanner-ebf14e934f511e26", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/cc-triage.mjs:40"}, "properties": {"repobilityId": "77d367819eacb1ed", "scanner": "scanner-primary", "fingerprint": "ebf14e934f511e26", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/cc-triage.mjs"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-838df1b39f5e6360", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/validate-handoff-bundle.mjs:26"}, "properties": {"repobilityId": "3d5c5889936a5894", "scanner": "scanner-primary", "fingerprint": "838df1b39f5e6360", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/validate-handoff-bundle.mjs"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-b0227ba0757e1d22", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/cc-release-watch.mjs:22"}, "properties": {"repobilityId": "f8d1d3d918bef181", "scanner": "scanner-primary", "fingerprint": "b0227ba0757e1d22", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/cc-release-watch.mjs"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-8bdb487809dc5f98", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/generate-ci-report.ts:30"}, "properties": {"repobilityId": "c67a5261bbe9b2ad", "scanner": "scanner-primary", "fingerprint": "8bdb487809dc5f98", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/generate-ci-report.ts"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-a5a19ea7f4db8daa", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/check-labs-versions.mjs:11"}, "properties": {"repobilityId": "b0ad76e995883dad", "scanner": "scanner-primary", "fingerprint": "a5a19ea7f4db8daa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/check-labs-versions.mjs"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-192a23b4e585fb3e", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in scripts/eval/static-analysis.sh:268"}, "properties": {"repobilityId": "b4f89cd890930e0c", "scanner": "scanner-primary", "fingerprint": "192a23b4e585fb3e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/eval/static-analysis.sh"}, "region": {"startLine": 268}}}]}, {"ruleId": "scanner-565b0ff862783fd8", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in scripts/eval/static-analysis.sh:272"}, "properties": {"repobilityId": "fe9a06a6b0bd210b", "scanner": "scanner-primary", "fingerprint": "565b0ff862783fd8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/eval/static-analysis.sh"}, "region": {"startLine": 272}}}]}, {"ruleId": "scanner-9f8963f69fe57f9b", "level": "note", "message": {"text": "Insecure pattern 'document_write' in scripts/eval/static-analysis.sh:270"}, "properties": {"repobilityId": "125ea0fece71524c", "scanner": "scanner-primary", "fingerprint": "9f8963f69fe57f9b", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/eval/static-analysis.sh"}, "region": {"startLine": 270}}}]}, {"ruleId": "scanner-f8ced00fc2270db5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestkit-demos/coverage/prettify.js:2"}, "properties": {"repobilityId": "71d68e11423f5521", "scanner": "scanner-primary", "fingerprint": "f8ced00fc2270db5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestkit-demos/coverage/prettify.js"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-76d4da6ae532a7b5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/quality-gate-hooks.test.ts:89"}, "properties": {"repobilityId": "a9001c130b900b6a", "scanner": "scanner-primary", "fingerprint": "76d4da6ae532a7b5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/quality-gate-hooks.test.ts"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-649166814367a94e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/notification/desktop-spawn.test.ts:58"}, "properties": {"repobilityId": "c928b125ae965391", "scanner": "scanner-primary", "fingerprint": "649166814367a94e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/notification/desktop-spawn.test.ts"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-94c17e98727913b0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/notification/desktop.test.ts:56"}, "properties": {"repobilityId": "349875804aa4861e", "scanner": "scanner-primary", "fingerprint": "94c17e98727913b0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/notification/desktop.test.ts"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-a8dd801014ccf7e0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/notification/sound.test.ts:52"}, "properties": {"repobilityId": "aef2be2407a6b949", "scanner": "scanner-primary", "fingerprint": "a8dd801014ccf7e0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/notification/sound.test.ts"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-3595d2ba52ee568e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/integration/agent-attribution-pipeline.test.ts:15"}, "properties": {"repobilityId": "0afb7d8a4c39ed74", "scanner": "scanner-primary", "fingerprint": "3595d2ba52ee568e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/integration/agent-attribution-pipeline.test.ts"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-4dc74dd1971cf276", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/integration/hook-runner.test.ts:17"}, "properties": {"repobilityId": "90d75ec7e13c20fa", "scanner": "scanner-primary", "fingerprint": "4dc74dd1971cf276", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/integration/hook-runner.test.ts"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-9238c8bd0ee47632", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/integration/worktree-create-stdout.test.ts:22"}, "properties": {"repobilityId": "87bffb4f585358fd", "scanner": "scanner-primary", "fingerprint": "9238c8bd0ee47632", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/integration/worktree-create-stdout.test.ts"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-f7033e259e61025d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/permission-denied/denial-notification.test.ts:49"}, "properties": {"repobilityId": "f74166c174250b75", "scanner": "scanner-primary", "fingerprint": "f7033e259e61025d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/permission-denied/denial-notification.test.ts"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-69f268b3b869120c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/subagent-start/issue-context-injector.test.ts:31"}, "properties": {"repobilityId": "0e11b5d85b2cd3f4", "scanner": "scanner-primary", "fingerprint": "69f268b3b869120c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/subagent-start/issue-context-injector.test.ts"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-a4fc6411bee39c7c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lib/git.test.ts:35"}, "properties": {"repobilityId": "bb32a0beff0dcb94", "scanner": "scanner-primary", "fingerprint": "a4fc6411bee39c7c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/lib/git.test.ts"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-cb9369f967e2974e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lib/user-identity.test.ts:20"}, "properties": {"repobilityId": "ce7f2b322bdb9ff1", "scanner": "scanner-primary", "fingerprint": "cb9369f967e2974e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/lib/user-identity.test.ts"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-f20fb55079f37e44", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lib/session-id-generator.test.ts:45"}, "properties": {"repobilityId": "c88bb24e57ffab3e", "scanner": "scanner-primary", "fingerprint": "f20fb55079f37e44", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/lib/session-id-generator.test.ts"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-a27766814f4cfbc1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/session-env-setup.test.ts:26"}, "properties": {"repobilityId": "417cffd7a95eb9b2", "scanner": "scanner-primary", "fingerprint": "a27766814f4cfbc1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/lifecycle/session-env-setup.test.ts"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-3ca476a95b98efd7", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/session-tracking.test.ts:29"}, "properties": {"repobilityId": "b59390f9d2efeb14", "scanner": "scanner-primary", "fingerprint": "3ca476a95b98efd7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/lifecycle/session-tracking.test.ts"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-5dff8d466ec88d19", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/pre-compact-task-done-prompt.test.ts:37"}, "properties": {"repobilityId": "b28045ba7aa382ee", "scanner": "scanner-primary", "fingerprint": "5dff8d466ec88d19", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/lifecycle/pre-compact-task-done-prompt.test.ts"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-c551186856f71e93", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/sweep-stale-worktrees.test.ts:22"}, "properties": {"repobilityId": "26c896d5d6078b54", "scanner": "scanner-primary", "fingerprint": "c551186856f71e93", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/lifecycle/sweep-stale-worktrees.test.ts"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-29bbe4feab239e7f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/lifecycle/plugins-drift.test.ts:14"}, "properties": {"repobilityId": "de99e2ffcbc6fb10", "scanner": "scanner-primary", "fingerprint": "29bbe4feab239e7f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/lifecycle/plugins-drift.test.ts"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-ed2935dbc3701cf0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/task-created/task-context-injector.test.ts:27"}, "properties": {"repobilityId": "0574055257a29fdc", "scanner": "scanner-primary", "fingerprint": "ed2935dbc3701cf0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/task-created/task-context-injector.test.ts"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-54b9620132d45d26", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/git-validator-worktree.test.ts:41"}, "properties": {"repobilityId": "5932f10265fc75a0", "scanner": "scanner-primary", "fingerprint": "54b9620132d45d26", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/git-validator-worktree.test.ts"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-fe03a0816b146240", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/commit-atomicity-checker.test.ts:22"}, "properties": {"repobilityId": "37b0933a7824255b", "scanner": "scanner-primary", "fingerprint": "fe03a0816b146240", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/commit-atomicity-checker.test.ts"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-82f0bb864e3e3b11", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/conflict-predictor.test.ts:18"}, "properties": {"repobilityId": "d72951742bfb09cf", "scanner": "scanner-primary", "fingerprint": "82f0bb864e3e3b11", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/conflict-predictor.test.ts"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-ad5d7abee71abd6f", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:130"}, "properties": {"repobilityId": "5517de4bb814728c", "scanner": "scanner-primary", "fingerprint": "ad5d7abee71abd6f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-d142f5ec5ce0807a", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:132"}, "properties": {"repobilityId": "e02d217325ca7cfa", "scanner": "scanner-primary", "fingerprint": "d142f5ec5ce0807a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts"}, "region": {"startLine": 132}}}]}, {"ruleId": "scanner-48d09cdd063a3760", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:158"}, "properties": {"repobilityId": "0a7f46d8112a8250", "scanner": "scanner-primary", "fingerprint": "48d09cdd063a3760", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-81a41d1a78dad4bd", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:190"}, "properties": {"repobilityId": "9476a5fe4f07fcbc", "scanner": "scanner-primary", "fingerprint": "81a41d1a78dad4bd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-80603b8e71812e32", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:188"}, "properties": {"repobilityId": "37ff52f28d3dc84c", "scanner": "scanner-primary", "fingerprint": "80603b8e71812e32", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-147afd3f6943ceea", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/pre-commit-quality-runner.test.ts:32"}, "properties": {"repobilityId": "6627642863389dce", "scanner": "scanner-primary", "fingerprint": "147afd3f6943ceea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/pre-commit-quality-runner.test.ts"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-ed7dc68eb93da4a4", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/changelog-generator.test.ts:18"}, "properties": {"repobilityId": "e054e2c8c0a618ee", "scanner": "scanner-primary", "fingerprint": "ed7dc68eb93da4a4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/changelog-generator.test.ts"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-7a214296a0832ad4", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/pretool/affected-tests-finder.test.ts:27"}, "properties": {"repobilityId": "e5a5431bdfb6fb55", "scanner": "scanner-primary", "fingerprint": "7a214296a0832ad4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/pretool/affected-tests-finder.test.ts"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-331054b1a54a41b7", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/worktree/worktree-provisioner.test.ts:16"}, "properties": {"repobilityId": "746d583bd7790d31", "scanner": "scanner-primary", "fingerprint": "331054b1a54a41b7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/worktree/worktree-provisioner.test.ts"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-be62753178256261", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/merge-conflict-predictor.test.ts:39"}, "properties": {"repobilityId": "239c686495f4f7b1", "scanner": "scanner-primary", "fingerprint": "be62753178256261", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/skill/merge-conflict-predictor.test.ts"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-b8521127e7d5ee97", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/decision-processor.test.ts:36"}, "properties": {"repobilityId": "d0c2cc4160f606c0", "scanner": "scanner-primary", "fingerprint": "b8521127e7d5ee97", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/skill/decision-processor.test.ts"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-bfe26adfecb7fa85", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/test-runner.test.ts:32"}, "properties": {"repobilityId": "7b720ed04361fe90", "scanner": "scanner-primary", "fingerprint": "bfe26adfecb7fa85", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/skill/test-runner.test.ts"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-1f589f80f4b0c943", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/merge-readiness-checker.test.ts:39"}, "properties": {"repobilityId": "d16b98e94f1301d5", "scanner": "scanner-primary", "fingerprint": "1f589f80f4b0c943", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/skill/merge-readiness-checker.test.ts"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-1b493cd3355e16c2", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/skill/migration-validator.test.ts:32"}, "properties": {"repobilityId": "f53da7f21c31e3f9", "scanner": "scanner-primary", "fingerprint": "1b493cd3355e16c2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/skill/migration-validator.test.ts"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-bbc9735d74ba49e1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/setup/setup-check.test.ts:41"}, "properties": {"repobilityId": "7fae69e63e86f8d5", "scanner": "scanner-primary", "fingerprint": "bbc9735d74ba49e1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/setup/setup-check.test.ts"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-328146315cc558a0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/async/dispatcher-e2e.test.ts:20"}, "properties": {"repobilityId": "e3a34f3d5a70e1ee", "scanner": "scanner-primary", "fingerprint": "328146315cc558a0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/async/dispatcher-e2e.test.ts"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-7f576a34554eb466", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/stop/stop-uncommitted-check.test.ts:12"}, "properties": {"repobilityId": "1ad0b6f0fad055ec", "scanner": "scanner-primary", "fingerprint": "7f576a34554eb466", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/stop/stop-uncommitted-check.test.ts"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-24babfdd07a56f4a", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/stop/full-test-suite.test.ts:31"}, "properties": {"repobilityId": "06f70f4a6422e68e", "scanner": "scanner-primary", "fingerprint": "24babfdd07a56f4a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/stop/full-test-suite.test.ts"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-8c6faee232cec2a6", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/__tests__/stop/issue-work-summary.test.ts:33"}, "properties": {"repobilityId": "da784f88517522d4", "scanner": "scanner-primary", "fingerprint": "8c6faee232cec2a6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/__tests__/stop/issue-work-summary.test.ts"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-4a0f328082fe20bf", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/notification/desktop.ts:11"}, "properties": {"repobilityId": "27c45f1538bd0e10", "scanner": "scanner-primary", "fingerprint": "4a0f328082fe20bf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/notification/desktop.ts"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-4f3efd727cace7f7", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/notification/sound.ts:11"}, "properties": {"repobilityId": "3db5aef9e51f08e7", "scanner": "scanner-primary", "fingerprint": "4f3efd727cace7f7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/notification/sound.ts"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-e18a7e938f8e5001", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/permission-denied/denial-notification.ts:20"}, "properties": {"repobilityId": "b361d6cc1988340e", "scanner": "scanner-primary", "fingerprint": "e18a7e938f8e5001", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/permission-denied/denial-notification.ts"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-bbbe0185248efde1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/subagent-start/issue-context-injector.ts:20"}, "properties": {"repobilityId": "89418a988a6dc03a", "scanner": "scanner-primary", "fingerprint": "bbbe0185248efde1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/subagent-start/issue-context-injector.ts"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-f9a9bfd81bed8fcd", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lib/user-identity.ts:18"}, "properties": {"repobilityId": "227e733bbb220ae6", "scanner": "scanner-primary", "fingerprint": "f9a9bfd81bed8fcd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lib/user-identity.ts"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-1f820086e8ea323f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lib/git.ts:6"}, "properties": {"repobilityId": "223060fe5de4991b", "scanner": "scanner-primary", "fingerprint": "1f820086e8ea323f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lib/git.ts"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-83b8802c12c0870e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lib/env.ts:8"}, "properties": {"repobilityId": "1780866e96a8cf6a", "scanner": "scanner-primary", "fingerprint": "83b8802c12c0870e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lib/env.ts"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-6071badd27476c70", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lib/session-identity.ts:23"}, "properties": {"repobilityId": "a38eb8a849e7eb2d", "scanner": "scanner-primary", "fingerprint": "6071badd27476c70", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lib/session-identity.ts"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-d67df4522ce59f3d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lib/session-id-generator.ts:17"}, "properties": {"repobilityId": "1676487ee4fc6fb9", "scanner": "scanner-primary", "fingerprint": "d67df4522ce59f3d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lib/session-id-generator.ts"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-3821a433d7c6d18b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/type-error-indexer.ts:15"}, "properties": {"repobilityId": "ee8bd9bbc59871cd", "scanner": "scanner-primary", "fingerprint": "3821a433d7c6d18b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lifecycle/type-error-indexer.ts"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-e763bfab68a425e1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/pre-compact-saver.ts:15"}, "properties": {"repobilityId": "7beadd79304831c2", "scanner": "scanner-primary", "fingerprint": "e763bfab68a425e1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lifecycle/pre-compact-saver.ts"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-d144f1574bc6444a", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/pre-compact-task-done-prompt.ts:22"}, "properties": {"repobilityId": "71791ecfcf093676", "scanner": "scanner-primary", "fingerprint": "d144f1574bc6444a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lifecycle/pre-compact-task-done-prompt.ts"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-6d0336762548bf78", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-tracking.ts:12"}, "properties": {"repobilityId": "3459854f25b921c1", "scanner": "scanner-primary", "fingerprint": "6d0336762548bf78", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lifecycle/session-tracking.ts"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-36271f46a09b4be7", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/sweep-stale-worktrees.ts:38"}, "properties": {"repobilityId": "dc5a1fcbc1d20f24", "scanner": "scanner-primary", "fingerprint": "36271f46a09b4be7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lifecycle/sweep-stale-worktrees.ts"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-ef1565cac7bd7f96", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-handoff-generator.ts:18"}, "properties": {"repobilityId": "8ef61afdffc580bb", "scanner": "scanner-primary", "fingerprint": "ef1565cac7bd7f96", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lifecycle/session-handoff-generator.ts"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-4713b7e3e3fc01a5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-registrar.ts:28"}, "properties": {"repobilityId": "3c1ec602dcb84969", "scanner": "scanner-primary", "fingerprint": "4713b7e3e3fc01a5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lifecycle/session-registrar.ts"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-624bb3cb64af4a36", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/lifecycle/session-env-setup.ts:9"}, "properties": {"repobilityId": "4d427cb3183bb48d", "scanner": "scanner-primary", "fingerprint": "624bb3cb64af4a36", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/lifecycle/session-env-setup.ts"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-2f63d2e703473921", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/task-created/task-context-injector.ts:16"}, "properties": {"repobilityId": "4d46f733b5c3fb98", "scanner": "scanner-primary", "fingerprint": "2f63d2e703473921", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/task-created/task-context-injector.ts"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-8aebecc109743c27", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in src/hooks/src/pretool/Write/security-pattern-validator.ts:47"}, "properties": {"repobilityId": "726a121e685a16ca", "scanner": "scanner-primary", "fingerprint": "8aebecc109743c27", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/Write/security-pattern-validator.ts"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-47f58a2c014d68c5", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in src/hooks/src/pretool/Write/security-pattern-validator.ts:53"}, "properties": {"repobilityId": "e8ee851622cede4c", "scanner": "scanner-primary", "fingerprint": "47f58a2c014d68c5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/Write/security-pattern-validator.ts"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-a8dee9a007a298fb", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/worktree-merge-verifier.ts:19"}, "properties": {"repobilityId": "8b8b2f192cc6421e", "scanner": "scanner-primary", "fingerprint": "a8dee9a007a298fb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/bash/worktree-merge-verifier.ts"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-e2b60fca3642e581", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/pre-commit-test-gate.ts:26"}, "properties": {"repobilityId": "c4235cc76adff6bd", "scanner": "scanner-primary", "fingerprint": "e2b60fca3642e581", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/bash/pre-commit-test-gate.ts"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-51312ca8da0b1fe5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/commit-atomicity-checker.ts:17"}, "properties": {"repobilityId": "ea76103197781c42", "scanner": "scanner-primary", "fingerprint": "51312ca8da0b1fe5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/bash/commit-atomicity-checker.ts"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-abaadb7a062181f5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/agent-browser-safety.ts:30"}, "properties": {"repobilityId": "c615a3d9f1b77679", "scanner": "scanner-primary", "fingerprint": "abaadb7a062181f5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/bash/agent-browser-safety.ts"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-69a404d7180e9f76", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/delete-branch-stacked-pr-guard.ts:21"}, "properties": {"repobilityId": "924f8b253058c3d3", "scanner": "scanner-primary", "fingerprint": "69a404d7180e9f76", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/bash/delete-branch-stacked-pr-guard.ts"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-a74c3ed35ca589e0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/changelog-generator.ts:12"}, "properties": {"repobilityId": "72207f3822986f90", "scanner": "scanner-primary", "fingerprint": "a74c3ed35ca589e0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/bash/changelog-generator.ts"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-099a54d93f7e143b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/affected-tests-finder.ts:12"}, "properties": {"repobilityId": "7fd9b0f695c04f43", "scanner": "scanner-primary", "fingerprint": "099a54d93f7e143b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/bash/affected-tests-finder.ts"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-627cb9c3a6ebaf2b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/playground-presence-warner.ts:24"}, "properties": {"repobilityId": "6865a67c752eb9c7", "scanner": "scanner-primary", "fingerprint": "627cb9c3a6ebaf2b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/bash/playground-presence-warner.ts"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-0e35f165d82e5ea2", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/pre-commit-quality-runner.ts:18"}, "properties": {"repobilityId": "88c53b1b4493906f", "scanner": "scanner-primary", "fingerprint": "0e35f165d82e5ea2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/bash/pre-commit-quality-runner.ts"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-1d7df6812e976447", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/pretool/bash/conflict-predictor.ts:12"}, "properties": {"repobilityId": "e0c9c4a8e4b91eaf", "scanner": "scanner-primary", "fingerprint": "1d7df6812e976447", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/pretool/bash/conflict-predictor.ts"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-4fc4fe33500a8dbd", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/worktree/worktree-provisioner.ts:40"}, "properties": {"repobilityId": "78184239310772c9", "scanner": "scanner-primary", "fingerprint": "4fc4fe33500a8dbd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/worktree/worktree-provisioner.ts"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-95c2a4068915c515", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/coverage-check.ts:9"}, "properties": {"repobilityId": "35db1b4a7a9345a7", "scanner": "scanner-primary", "fingerprint": "95c2a4068915c515", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/skill/coverage-check.ts"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-cc2bb20a2e5f5d52", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/merge-readiness-checker.ts:8"}, "properties": {"repobilityId": "33ef34ea7aeb5d93", "scanner": "scanner-primary", "fingerprint": "cc2bb20a2e5f5d52", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/skill/merge-readiness-checker.ts"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-653141e7e4317b77", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/test-runner.ts:9"}, "properties": {"repobilityId": "d99a51845388e962", "scanner": "scanner-primary", "fingerprint": "653141e7e4317b77", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/skill/test-runner.ts"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-e31bec5f2f1efa09", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/decision-processor.ts:18"}, "properties": {"repobilityId": "f357238628751b4b", "scanner": "scanner-primary", "fingerprint": "e31bec5f2f1efa09", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/skill/decision-processor.ts"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-4001765004f31c56", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/migration-validator.ts:9"}, "properties": {"repobilityId": "a94783a68385ab65", "scanner": "scanner-primary", "fingerprint": "4001765004f31c56", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/skill/migration-validator.ts"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-0619d2e2e779a448", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/context-loader-utils.ts:10"}, "properties": {"repobilityId": "cb023d1f910fac11", "scanner": "scanner-primary", "fingerprint": "0619d2e2e779a448", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/skill/context-loader-utils.ts"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-4fa5ebefd929c373", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/skill/merge-conflict-predictor.ts:8"}, "properties": {"repobilityId": "f344ac96c1c03562", "scanner": "scanner-primary", "fingerprint": "4fa5ebefd929c373", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/skill/merge-conflict-predictor.ts"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-2a6c7028642405ff", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/auto-lint.ts:14"}, "properties": {"repobilityId": "6498f75b80cede72", "scanner": "scanner-primary", "fingerprint": "2a6c7028642405ff", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/posttool/auto-lint.ts"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-30f57e0b21c311b6", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/check-plugins-drift.ts:26"}, "properties": {"repobilityId": "378c14006b90b385", "scanner": "scanner-primary", "fingerprint": "30f57e0b21c311b6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/posttool/check-plugins-drift.ts"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-9e67392334f233d2", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/expect/snapshot-recorder.ts:20"}, "properties": {"repobilityId": "ea39809325e6a3a2", "scanner": "scanner-primary", "fingerprint": "9e67392334f233d2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/posttool/expect/snapshot-recorder.ts"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-f643c30e8c5aae69", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/expect/fingerprint-saver.ts:17"}, "properties": {"repobilityId": "c11f170bd5f0a698", "scanner": "scanner-primary", "fingerprint": "f643c30e8c5aae69", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/posttool/expect/fingerprint-saver.ts"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-08f9310ddefd6d91", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/write/coverage-predictor.ts:9"}, "properties": {"repobilityId": "ddf1a7f1e1b62d55", "scanner": "scanner-primary", "fingerprint": "08f9310ddefd6d91", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/posttool/write/coverage-predictor.ts"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-f1cbadd7c50683b8", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/write/stale-import-detector.ts:30"}, "properties": {"repobilityId": "3d4941fcdd4ff094", "scanner": "scanner-primary", "fingerprint": "f1cbadd7c50683b8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/posttool/write/stale-import-detector.ts"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-087bc8d0571646b1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/bash/issue-subtask-updater.ts:13"}, "properties": {"repobilityId": "057be3da69b5bb76", "scanner": "scanner-primary", "fingerprint": "087bc8d0571646b1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/posttool/bash/issue-subtask-updater.ts"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-eb766ababb99f9f8", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/posttool/bash/issue-progress-commenter.ts:13"}, "properties": {"repobilityId": "ca0227303bcc02e6", "scanner": "scanner-primary", "fingerprint": "eb766ababb99f9f8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/posttool/bash/issue-progress-commenter.ts"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-7e22bcf8560bab0c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/setup/setup-check.ts:14"}, "properties": {"repobilityId": "b70e6338017f6cfb", "scanner": "scanner-primary", "fingerprint": "7e22bcf8560bab0c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/setup/setup-check.ts"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-adf81edf958dc378", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/setup/setup-maintenance.ts:27"}, "properties": {"repobilityId": "c99bc9b09ad88532", "scanner": "scanner-primary", "fingerprint": "adf81edf958dc378", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/setup/setup-maintenance.ts"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-de30f6b19c86066c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/setup/first-run-setup.ts:16"}, "properties": {"repobilityId": "5ce9ebd8bee86534", "scanner": "scanner-primary", "fingerprint": "de30f6b19c86066c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/setup/first-run-setup.ts"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-29c5ea96a3de6e33", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/instructions-loaded/debt-surfacer.ts:18"}, "properties": {"repobilityId": "4031b229f254b73d", "scanner": "scanner-primary", "fingerprint": "29c5ea96a3de6e33", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/instructions-loaded/debt-surfacer.ts"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-b6d3666ac959f2cc", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/stop/full-test-suite.ts:9"}, "properties": {"repobilityId": "5ea2e8107a96a37c", "scanner": "scanner-primary", "fingerprint": "b6d3666ac959f2cc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/stop/full-test-suite.ts"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-50823afe0fe36064", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/stop/stop-failure-handler.ts:23"}, "properties": {"repobilityId": "43ca05e76f6a6613", "scanner": "scanner-primary", "fingerprint": "50823afe0fe36064", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/stop/stop-failure-handler.ts"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-51cd5635b922959c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/stop/security-scan-aggregator.ts:9"}, "properties": {"repobilityId": "5d9c15a46f21211b", "scanner": "scanner-primary", "fingerprint": "51cd5635b922959c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/stop/security-scan-aggregator.ts"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-2cedde5abf097dd3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/stop/handoff-writer.ts:20"}, "properties": {"repobilityId": "b84a27a387a9e28e", "scanner": "scanner-primary", "fingerprint": "2cedde5abf097dd3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/stop/handoff-writer.ts"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-45ee430c77126a57", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/src/stop/issue-work-summary.ts:9"}, "properties": {"repobilityId": "7a8ae61eac13f7dd", "scanner": "scanner-primary", "fingerprint": "45ee430c77126a57", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/src/stop/issue-work-summary.ts"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-fe88c54bddbc3342", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/skills/bare-eval/SKILL.md:150"}, "properties": {"repobilityId": "19fd5d25eaa3a981", "scanner": "scanner-primary", "fingerprint": "fe88c54bddbc3342", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/bare-eval/SKILL.md"}, "region": {"startLine": 150}}}]}, {"ruleId": "scanner-9aad45d23376628e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/skills/memory/scripts/graph-utils.mjs:9"}, "properties": {"repobilityId": "ded400d0d1d12401", "scanner": "scanner-primary", "fingerprint": "9aad45d23376628e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/memory/scripts/graph-utils.mjs"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-0e006d3033c97559", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in src/skills/i18n-date-patterns/test-cases.json:26"}, "properties": {"repobilityId": "214a055e7e26f621", "scanner": "scanner-primary", "fingerprint": "0e006d3033c97559", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/i18n-date-patterns/test-cases.json"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-0abeeb24419583e6", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/skills/code-review-playbook/scripts/run-pr-checks.py:88"}, "properties": {"repobilityId": "be391e4bdbaea394", "scanner": "scanner-primary", "fingerprint": "0abeeb24419583e6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/code-review-playbook/scripts/run-pr-checks.py"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-72651b3de84f3415", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in src/skills/code-review-playbook/scripts/run-pr-checks.py:89"}, "properties": {"repobilityId": "f846ca71134c2798", "scanner": "scanner-primary", "fingerprint": "72651b3de84f3415", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/code-review-playbook/scripts/run-pr-checks.py"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-1a57a5ed727e61ce", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in src/skills/code-review-playbook/scripts/run-pr-checks.py:96"}, "properties": {"repobilityId": "9839a048d16f383f", "scanner": "scanner-primary", "fingerprint": "1a57a5ed727e61ce", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/code-review-playbook/scripts/run-pr-checks.py"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-bf4fc438c30d7f2a", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in plugins/ork/mcp-server/server.mjs:7"}, "properties": {"repobilityId": "474f2c69da4d098d", "scanner": "scanner-primary", "fingerprint": "bf4fc438c30d7f2a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/mcp-server/server.mjs"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-af8b9bf568de7f97", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in plugins/ork/skills/bare-eval/SKILL.md:150"}, "properties": {"repobilityId": "dbd5854384e928ec", "scanner": "scanner-primary", "fingerprint": "af8b9bf568de7f97", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/bare-eval/SKILL.md"}, "region": {"startLine": 150}}}]}, {"ruleId": "scanner-7e07534146b2cf9e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in plugins/ork/skills/memory/scripts/graph-utils.mjs:9"}, "properties": {"repobilityId": "85628d4594a56a1d", "scanner": "scanner-primary", "fingerprint": "7e07534146b2cf9e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/memory/scripts/graph-utils.mjs"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-0d502f5eefdb25c5", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in plugins/ork/skills/i18n-date-patterns/test-cases.json:26"}, "properties": {"repobilityId": "9622bc907ab43362", "scanner": "scanner-primary", "fingerprint": "0d502f5eefdb25c5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/i18n-date-patterns/test-cases.json"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-04ddb78b9205c9f9", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py:88"}, "properties": {"repobilityId": "a15c059bebda51ed", "scanner": "scanner-primary", "fingerprint": "04ddb78b9205c9f9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-8a4128db310b1462", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py:89"}, "properties": {"repobilityId": "40c0bc47e783c3e4", "scanner": "scanner-primary", "fingerprint": "8a4128db310b1462", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-31f400b6bdf459fd", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py:96"}, "properties": {"repobilityId": "d7c6a7b7ad06849d", "scanner": "scanner-primary", "fingerprint": "31f400b6bdf459fd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/code-review-playbook/scripts/run-pr-checks.py"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-ae320408e79b14d3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-11/skills-health-dashboard.html:441"}, "properties": {"repobilityId": "36fa6ad8b08ad10a", "scanner": "scanner-primary", "fingerprint": "ae320408e79b14d3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "playgrounds/2026-03-11/skills-health-dashboard.html"}, "region": {"startLine": 441}}}]}, {"ruleId": "scanner-117245661751bb95", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-02-19/hook-architecture-explorer.html:839"}, "properties": {"repobilityId": "505c4a267db75536", "scanner": "scanner-primary", "fingerprint": "117245661751bb95", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "playgrounds/2026-02-19/hook-architecture-explorer.html"}, "region": {"startLine": 839}}}]}, {"ruleId": "scanner-0a3afdcd0bff1774", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-16/cc-adoption-roadmap.html:429"}, "properties": {"repobilityId": "26078f124b1a66ab", "scanner": "scanner-primary", "fingerprint": "0a3afdcd0bff1774", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "playgrounds/2026-03-16/cc-adoption-roadmap.html"}, "region": {"startLine": 429}}}]}, {"ruleId": "scanner-09a8b162a8326c75", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-02-25/skills-health-dashboard.html:399"}, "properties": {"repobilityId": "95e2a92314be1e18", "scanner": "scanner-primary", "fingerprint": "09a8b162a8326c75", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "playgrounds/2026-02-25/skills-health-dashboard.html"}, "region": {"startLine": 399}}}]}, {"ruleId": "scanner-6de1a91a67a7b2db", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-18/docs-strategy.html:732"}, "properties": {"repobilityId": "0b7ca237671c5296", "scanner": "scanner-primary", "fingerprint": "6de1a91a67a7b2db", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "playgrounds/2026-03-18/docs-strategy.html"}, "region": {"startLine": 732}}}]}, {"ruleId": "scanner-7638068fc01ec808", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-21/stripe-mpp-commerce-brainstorm.html:1202"}, "properties": {"repobilityId": "7a59003582bd189c", "scanner": "scanner-primary", "fingerprint": "7638068fc01ec808", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "playgrounds/2026-03-21/stripe-mpp-commerce-brainstorm.html"}, "region": {"startLine": 1202}}}]}, {"ruleId": "scanner-75f64385771afc94", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in playgrounds/2026-03-21/orchestkit-dashboard.html:478"}, "properties": {"repobilityId": "903dc90a6e4705e7", "scanner": "scanner-primary", "fingerprint": "75f64385771afc94", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "playgrounds/2026-03-21/orchestkit-dashboard.html"}, "region": {"startLine": 478}}}]}, {"ruleId": "scanner-848f1f9552d53ddd", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "d38ba9df84690d64", "scanner": "scanner-primary", "fingerprint": "848f1f9552d53ddd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish-hook-contract-py.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-822b91f5a247a5e2", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "c4a52d21639fac3c", "scanner": "scanner-primary", "fingerprint": "822b91f5a247a5e2", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish-hook-contract-npm.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-db90be7a2d385afb", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b761c428113f715f", "scanner": "scanner-primary", "fingerprint": "db90be7a2d385afb", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/labs-version-watch.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65a716a27d2be993", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "3133a88ce98acc76", "scanner": "scanner-primary", "fingerprint": "65a716a27d2be993", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/scorecard.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa34ea400e21db85", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "6ab645eb18e7c002", "scanner": "scanner-primary", "fingerprint": "aa34ea400e21db85", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cc-support-window-bump.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6716cf880458d5b5", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "8a49b55a76f91cfc", "scanner": "scanner-primary", "fingerprint": "6716cf880458d5b5", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-release-watch.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f99cf7ab712cb8bd", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "08c187c588b63403", "scanner": "scanner-primary", "fingerprint": "f99cf7ab712cb8bd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-triage.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1838a141491ce38c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b8fd4f5048f96576", "scanner": "scanner-primary", "fingerprint": "1838a141491ce38c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-063997d8d14f8d5c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b268301d4ba9d1b9", "scanner": "scanner-primary", "fingerprint": "063997d8d14f8d5c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-review.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "b86179956da3a4a8", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5d368fcb3ff7b5cc", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "61df94fc5a9d6f23", "scanner": "scanner-primary", "fingerprint": "5d368fcb3ff7b5cc", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/site/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6bf406a4f375ebc3", "level": "note", "message": {"text": "Very large file: docs/site/lib/generated/skills-data.ts (5671 lines)"}, "properties": {"repobilityId": "aa7beeed8dc11ba2", "scanner": "scanner-primary", "fingerprint": "6bf406a4f375ebc3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-dd64822b88ce93a0", "level": "note", "message": {"text": "Very large file: scripts/_build-docs-generate.py (1443 lines)"}, "properties": {"repobilityId": "507957c6092d193c", "scanner": "scanner-primary", "fingerprint": "dd64822b88ce93a0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1f5fb6c0f86fc91c", "level": "note", "message": {"text": "Very large file: orchestkit-demos/src/components/SkillPhaseDemo.tsx (2074 lines)"}, "properties": {"repobilityId": "c57be9fd606e073f", "scanner": "scanner-primary", "fingerprint": "1f5fb6c0f86fc91c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2bc0ddd11b5b01d0", "level": "note", "message": {"text": "59 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "2bc0ddd11b5b01d0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-ed7d4a01debea06d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: tests/evals/scaffolds/typescript-nextjs/package.json"}, "properties": {"repobilityId": "e0ad161987e7a841", "scanner": "scanner-primary", "fingerprint": "ed7d4a01debea06d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/evals/scaffolds/typescript-nextjs/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-01768c4c1a9b5aef", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/hook-contract/package.json"}, "properties": {"repobilityId": "52e2d5f3e66e5858", "scanner": "scanner-primary", "fingerprint": "01768c4c1a9b5aef", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/hook-contract/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e5df1c91b0deae44", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: plugins/ork/hooks/package.json"}, "properties": {"repobilityId": "9b5c43291be650d5", "scanner": "scanner-primary", "fingerprint": "e5df1c91b0deae44", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/hooks/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "3cacf1a6d314284b", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "8c810207dba78769", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "04acbbb36bc7258a", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "e488260ac20a5682", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "feaf4faffe7a7e39", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "0edcd9ccd062eae8", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-69a743a522bb0811", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: docs/site/.claude/agent-memory/ork-web-research-analyst/reference_rtk_tool.md"}, "properties": {"repobilityId": "87f815d3d31a64e1", "scanner": "scanner-primary", "fingerprint": "69a743a522bb0811", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/site/.claude/agent-memory/ork-web-research-analyst/reference_rtk_tool.md"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-c9eb71daf39269ce", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: docs/site/.claude/agent-memory/ork-web-research-analyst/reference_rtk_tool.md"}, "properties": {"repobilityId": "13b2e83195cd3155", "scanner": "scanner-primary", "fingerprint": "c9eb71daf39269ce", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/site/.claude/agent-memory/ork-web-research-analyst/reference_rtk_tool.md"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-d649596d500b0abc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/rules/rules-meta.md"}, "properties": {"repobilityId": "2e5cfd4a015f6cbf", "scanner": "scanner-primary", "fingerprint": "d649596d500b0abc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/rules-meta.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d22919762cd3b487", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/rules/error_rules.json"}, "properties": {"repobilityId": "bc462e7ba96a3e43", "scanner": "scanner-primary", "fingerprint": "d22919762cd3b487", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/error_rules.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c5ac0975275feb53", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/templates/mcp-enabled.json"}, "properties": {"repobilityId": "34ceb966eb2d7d6d", "scanner": "scanner-primary", "fingerprint": "c5ac0975275feb53", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/templates/mcp-enabled.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-699f108ea7b3fa62", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/templates/mcp-enabled.json"}, "properties": {"repobilityId": "6755131967344224", "scanner": "scanner-primary", "fingerprint": "699f108ea7b3fa62", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/templates/mcp-enabled.json"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-0e467ba55f9c211d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/templates/mcp-disabled.json"}, "properties": {"repobilityId": "727e5486da551ffb", "scanner": "scanner-primary", "fingerprint": "0e467ba55f9c211d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/templates/mcp-disabled.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6f1dc0aa7bde82f1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/templates/mcp-disabled.json"}, "properties": {"repobilityId": "df872bb065ba17ba", "scanner": "scanner-primary", "fingerprint": "6f1dc0aa7bde82f1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/templates/mcp-disabled.json"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-506551f03c69e1c1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/permissions/profiles/enterprise.json"}, "properties": {"repobilityId": "8e0badfcedd025bc", "scanner": "scanner-primary", "fingerprint": "506551f03c69e1c1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/permissions/profiles/enterprise.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-77e4fe7f33d1a8c2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/permissions/profiles/team.json"}, "properties": {"repobilityId": "e4f3c815e7e2ce1b", "scanner": "scanner-primary", "fingerprint": "77e4fe7f33d1a8c2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/permissions/profiles/team.json"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-828029d8115aeff5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/schemas/hook-output.schema.json"}, "properties": {"repobilityId": "abba1bd6798c1e4f", "scanner": "scanner-primary", "fingerprint": "828029d8115aeff5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/schemas/hook-output.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f44ab809939c75b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/schemas/memory-fabric.schema.json"}, "properties": {"repobilityId": "81d04cca33e8cb8f", "scanner": "scanner-primary", "fingerprint": "3f44ab809939c75b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/schemas/memory-fabric.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a9f215a59b81ab67", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186152097.json"}, "properties": {"repobilityId": "b6b8129d808bc793", "scanner": "scanner-primary", "fingerprint": "a9f215a59b81ab67", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-integration-test-1769186152097.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-c3e587a5d46e301b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186262002.json"}, "properties": {"repobilityId": "8308c23e299eaebb", "scanner": "scanner-primary", "fingerprint": "c3e587a5d46e301b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-integration-test-1769186262002.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-7d8f5b04284a3590", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186583008.json"}, "properties": {"repobilityId": "5c1876bf1582e2b0", "scanner": "scanner-primary", "fingerprint": "7d8f5b04284a3590", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-integration-test-1769186583008.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-d670530ff8cbf8f7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186301481.json"}, "properties": {"repobilityId": "980024692d134e8a", "scanner": "scanner-primary", "fingerprint": "d670530ff8cbf8f7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-integration-test-1769186301481.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-6da8cc370d60753d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186272974.json"}, "properties": {"repobilityId": "7290aed02de8061e", "scanner": "scanner-primary", "fingerprint": "6da8cc370d60753d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-integration-test-1769186272974.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-19e1518079d224d2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-undefined.json"}, "properties": {"repobilityId": "e6f29e382794c06a", "scanner": "scanner-primary", "fingerprint": "19e1518079d224d2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-undefined.json"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-367198a4b8463282", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186333551.json"}, "properties": {"repobilityId": "54165c898da51dac", "scanner": "scanner-primary", "fingerprint": "367198a4b8463282", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-integration-test-1769186333551.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-1c8fb8878c2171db", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186237386.json"}, "properties": {"repobilityId": "b4b460de756ac6d3", "scanner": "scanner-primary", "fingerprint": "1c8fb8878c2171db", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-integration-test-1769186237386.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-220fd638b6f7d2dd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186577280.json"}, "properties": {"repobilityId": "21b671727811b5be", "scanner": "scanner-primary", "fingerprint": "220fd638b6f7d2dd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-integration-test-1769186577280.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-91ad82dbc2a98870", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186288925.json"}, "properties": {"repobilityId": "87873f338a646bfa", "scanner": "scanner-primary", "fingerprint": "91ad82dbc2a98870", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-integration-test-1769186288925.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-ce8528320d880244", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/hooks/.claude/orchestration/task-registry-integration-test-1769186309894.json"}, "properties": {"repobilityId": "9a8e6a604e1bccb1", "scanner": "scanner-primary", "fingerprint": "ce8528320d880244", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/.claude/orchestration/task-registry-integration-test-1769186309894.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-29e1071cf4e4400c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/skills/multimodal-llm/SKILL.md"}, "properties": {"repobilityId": "38dcd16b99d725ca", "scanner": "scanner-primary", "fingerprint": "29e1071cf4e4400c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/multimodal-llm/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3601719e0f8158ae", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/skills/task-dependency-patterns/SKILL.md"}, "properties": {"repobilityId": "8c4f0ecfd10502e7", "scanner": "scanner-primary", "fingerprint": "3601719e0f8158ae", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/task-dependency-patterns/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-def469cdb3f3816b", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: src/skills/react-server-components-framework/SKILL.md"}, "properties": {"repobilityId": "0f8bf6066b739732", "scanner": "scanner-primary", "fingerprint": "def469cdb3f3816b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/react-server-components-framework/SKILL.md"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-b34d65ae0e1ac12c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/skills/architecture-decision-record/SKILL.md"}, "properties": {"repobilityId": "44611007bae90a2e", "scanner": "scanner-primary", "fingerprint": "b34d65ae0e1ac12c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/architecture-decision-record/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3fddb4a01a5357c5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/skills/remember/SKILL.md"}, "properties": {"repobilityId": "b05cb20d871f154c", "scanner": "scanner-primary", "fingerprint": "3fddb4a01a5357c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/remember/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-83b054e004367e14", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/skills/portless/SKILL.md"}, "properties": {"repobilityId": "aaddf811b7d2e3b3", "scanner": "scanner-primary", "fingerprint": "83b054e004367e14", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/portless/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6415dfef1c87c2b3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/skills/create-pr/SKILL.md"}, "properties": {"repobilityId": "8890f359e91c1728", "scanner": "scanner-primary", "fingerprint": "6415dfef1c87c2b3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/create-pr/SKILL.md"}, "region": {"startLine": 356}}}]}, {"ruleId": "scanner-2580c1b95e1cf081", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/skills/analytics/SKILL.md"}, "properties": {"repobilityId": "9a94aa3eb3214628", "scanner": "scanner-primary", "fingerprint": "2580c1b95e1cf081", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/analytics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-325bb51ab3e74618", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: src/skills/expect/SKILL.md"}, "properties": {"repobilityId": "1a0ec3ed0c665d2c", "scanner": "scanner-primary", "fingerprint": "325bb51ab3e74618", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/expect/SKILL.md"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-ed39c9d06feb45de", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/skills/llm-integration/SKILL.md"}, "properties": {"repobilityId": "564a9c09ca3451c2", "scanner": "scanner-primary", "fingerprint": "ed39c9d06feb45de", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/llm-integration/SKILL.md"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-01105bcd98ca4c47", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/skills/llm-integration/SKILL.md"}, "properties": {"repobilityId": "c153eda0a4aefa69", "scanner": "scanner-primary", "fingerprint": "01105bcd98ca4c47", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/llm-integration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b2b4587b066ff7b0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/skills/memory-fabric/SKILL.md"}, "properties": {"repobilityId": "f803cb9c0a14b477", "scanner": "scanner-primary", "fingerprint": "b2b4587b066ff7b0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/memory-fabric/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49ae6fd650d3009f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/skills/emulate-seed/SKILL.md"}, "properties": {"repobilityId": "9c2a4a1c84cd2065", "scanner": "scanner-primary", "fingerprint": "49ae6fd650d3009f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/emulate-seed/SKILL.md"}, "region": {"startLine": 266}}}]}, {"ruleId": "scanner-31880ff15d2e7a2a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/skills/brainstorm/SKILL.md"}, "properties": {"repobilityId": "bff4782d2d8648cf", "scanner": "scanner-primary", "fingerprint": "31880ff15d2e7a2a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/brainstorm/SKILL.md"}, "region": {"startLine": 465}}}]}, {"ruleId": "scanner-63c926f91ab75f6e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/skills/fix-issue/SKILL.md"}, "properties": {"repobilityId": "5d6f90431e042ee8", "scanner": "scanner-primary", "fingerprint": "63c926f91ab75f6e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/fix-issue/SKILL.md"}, "region": {"startLine": 447}}}]}, {"ruleId": "scanner-d8c082163960612f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/skills/python-backend/SKILL.md"}, "properties": {"repobilityId": "699b1718d39a667a", "scanner": "scanner-primary", "fingerprint": "d8c082163960612f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/python-backend/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cbd5123dea345e0e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/skills/web-research-workflow/SKILL.md"}, "properties": {"repobilityId": "352f490788730463", "scanner": "scanner-primary", "fingerprint": "cbd5123dea345e0e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/web-research-workflow/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2dfcb0515d06b096", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/skills/review-pr/SKILL.md"}, "properties": {"repobilityId": "26eeffce38835cdc", "scanner": "scanner-primary", "fingerprint": "2dfcb0515d06b096", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/review-pr/SKILL.md"}, "region": {"startLine": 408}}}]}, {"ruleId": "scanner-7429274c9124a127", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/skills/agent-orchestration/SKILL.md"}, "properties": {"repobilityId": "1dcd4733789ec064", "scanner": "scanner-primary", "fingerprint": "7429274c9124a127", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/agent-orchestration/SKILL.md"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-b421194845e6fab7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/skills/i18n-date-patterns/SKILL.md"}, "properties": {"repobilityId": "ad34e90b4e5c0932", "scanner": "scanner-primary", "fingerprint": "b421194845e6fab7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/i18n-date-patterns/SKILL.md"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-354a3592c94e4808", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: src/skills/visualize-plan/SKILL.md"}, "properties": {"repobilityId": "f35643df51acc1ae", "scanner": "scanner-primary", "fingerprint": "354a3592c94e4808", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/visualize-plan/SKILL.md"}, "region": {"startLine": 229}}}]}, {"ruleId": "scanner-fa4108bd9943ecf2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/skills/feedback/SKILL.md"}, "properties": {"repobilityId": "98301784141bef11", "scanner": "scanner-primary", "fingerprint": "fa4108bd9943ecf2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/feedback/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c97e9689cfab6fe4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/multimodal-llm/SKILL.md"}, "properties": {"repobilityId": "c51449bb8718591a", "scanner": "scanner-primary", "fingerprint": "c97e9689cfab6fe4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/multimodal-llm/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f6387bdf0e2cd82f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/task-dependency-patterns/SKILL.md"}, "properties": {"repobilityId": "659fd108095e5a0b", "scanner": "scanner-primary", "fingerprint": "f6387bdf0e2cd82f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/task-dependency-patterns/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-31600a72302f03c7", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: plugins/ork/skills/react-server-components-framework/SKILL.md"}, "properties": {"repobilityId": "dfe0dc644f2b9e3c", "scanner": "scanner-primary", "fingerprint": "31600a72302f03c7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/react-server-components-framework/SKILL.md"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-85874f01f6deea9f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/architecture-decision-record/SKILL.md"}, "properties": {"repobilityId": "cc9ae5ca0c8cbed8", "scanner": "scanner-primary", "fingerprint": "85874f01f6deea9f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/architecture-decision-record/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b0a1a96ee4ed0e4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/remember/SKILL.md"}, "properties": {"repobilityId": "55afda22373d2a2c", "scanner": "scanner-primary", "fingerprint": "1b0a1a96ee4ed0e4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/remember/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-25fe3b3919e2267d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/portless/SKILL.md"}, "properties": {"repobilityId": "1caf0a37b26e052c", "scanner": "scanner-primary", "fingerprint": "25fe3b3919e2267d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/portless/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a4fd93e4b8b35de", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/create-pr/SKILL.md"}, "properties": {"repobilityId": "d035078a0c6a3bf8", "scanner": "scanner-primary", "fingerprint": "4a4fd93e4b8b35de", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/create-pr/SKILL.md"}, "region": {"startLine": 356}}}]}, {"ruleId": "scanner-23ef529a36a122c0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/analytics/SKILL.md"}, "properties": {"repobilityId": "736780fcea7b9b8e", "scanner": "scanner-primary", "fingerprint": "23ef529a36a122c0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/analytics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7a508646d523f5a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: plugins/ork/skills/expect/SKILL.md"}, "properties": {"repobilityId": "07c339b59fdad530", "scanner": "scanner-primary", "fingerprint": "b7a508646d523f5a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/expect/SKILL.md"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-1329671186cd86fd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/llm-integration/SKILL.md"}, "properties": {"repobilityId": "c60110a791109da2", "scanner": "scanner-primary", "fingerprint": "1329671186cd86fd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/llm-integration/SKILL.md"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-bbc13cb710c22287", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/llm-integration/SKILL.md"}, "properties": {"repobilityId": "17545b8d0e2c4045", "scanner": "scanner-primary", "fingerprint": "bbc13cb710c22287", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/llm-integration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-01416be8e4d29c8b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/memory-fabric/SKILL.md"}, "properties": {"repobilityId": "eb1339e83e27372d", "scanner": "scanner-primary", "fingerprint": "01416be8e4d29c8b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/memory-fabric/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bc36b019252fbe1e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/emulate-seed/SKILL.md"}, "properties": {"repobilityId": "eb5aec7b8cb94745", "scanner": "scanner-primary", "fingerprint": "bc36b019252fbe1e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/emulate-seed/SKILL.md"}, "region": {"startLine": 266}}}]}, {"ruleId": "scanner-a2c823a7be270474", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/brainstorm/SKILL.md"}, "properties": {"repobilityId": "8406b08ddc185e94", "scanner": "scanner-primary", "fingerprint": "a2c823a7be270474", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/brainstorm/SKILL.md"}, "region": {"startLine": 465}}}]}, {"ruleId": "scanner-e0e9bb7d1aed944e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/fix-issue/SKILL.md"}, "properties": {"repobilityId": "725b7396c639d52d", "scanner": "scanner-primary", "fingerprint": "e0e9bb7d1aed944e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/fix-issue/SKILL.md"}, "region": {"startLine": 447}}}]}, {"ruleId": "scanner-8f294c22f1eb7135", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/python-backend/SKILL.md"}, "properties": {"repobilityId": "cc9f69723b3de2c5", "scanner": "scanner-primary", "fingerprint": "8f294c22f1eb7135", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/python-backend/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8cbc0e0894a913e4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/web-research-workflow/SKILL.md"}, "properties": {"repobilityId": "9eac0ff4751ecea0", "scanner": "scanner-primary", "fingerprint": "8cbc0e0894a913e4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/web-research-workflow/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7ba355105f60f607", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/review-pr/SKILL.md"}, "properties": {"repobilityId": "258308e76ea99786", "scanner": "scanner-primary", "fingerprint": "7ba355105f60f607", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/review-pr/SKILL.md"}, "region": {"startLine": 408}}}]}, {"ruleId": "scanner-7d7bbda3fb2f4508", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/agent-orchestration/SKILL.md"}, "properties": {"repobilityId": "62cfad92f2d7fa0b", "scanner": "scanner-primary", "fingerprint": "7d7bbda3fb2f4508", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/agent-orchestration/SKILL.md"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-87fc1c7b522db940", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/i18n-date-patterns/SKILL.md"}, "properties": {"repobilityId": "b86ce99c3e2b446d", "scanner": "scanner-primary", "fingerprint": "87fc1c7b522db940", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/i18n-date-patterns/SKILL.md"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-c824a92419fa3afd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ork/skills/visualize-plan/SKILL.md"}, "properties": {"repobilityId": "f4ebb5916d8d76fb", "scanner": "scanner-primary", "fingerprint": "c824a92419fa3afd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/visualize-plan/SKILL.md"}, "region": {"startLine": 229}}}]}, {"ruleId": "scanner-88d85e29071f90d4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/ork/skills/feedback/SKILL.md"}, "properties": {"repobilityId": "a519a18d42cf1489", "scanner": "scanner-primary", "fingerprint": "88d85e29071f90d4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/feedback/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-31e0debeee85a84c", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/manifests/test-skill-activation-channels.mjs:2"}, "properties": {"repobilityId": "0bbbbfa684ea4080", "scanner": "scanner-primary", "fingerprint": "31e0debeee85a84c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1598f961b6a3980c", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/site/middleware.ts:9"}, "properties": {"repobilityId": "26ed7bfa2169fde5", "scanner": "scanner-primary", "fingerprint": "1598f961b6a3980c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-66c2508dc4f36163", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/__tests__/contextual-skill-sidebar.test.tsx:129"}, "properties": {"repobilityId": "92b5370f3a9ba502", "scanner": "scanner-primary", "fingerprint": "66c2508dc4f36163", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-78ec1a7087f4adbc", "level": "none", "message": {"text": "Commented-code block (8 lines) in docs/site/__tests__/search-indexes.test.ts:6"}, "properties": {"repobilityId": "c0cae2ecc88fc45c", "scanner": "scanner-primary", "fingerprint": "78ec1a7087f4adbc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5d542cb12624e097", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/__tests__/sitemap.test.ts:9"}, "properties": {"repobilityId": "c6af631dc34940a6", "scanner": "scanner-primary", "fingerprint": "5d542cb12624e097", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-648e4ef630322461", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/site/components/webmcp-provider.tsx:53"}, "properties": {"repobilityId": "02704c146652cfa1", "scanner": "scanner-primary", "fingerprint": "648e4ef630322461", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0defb610041a5b94", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/components/agent-readiness-section.tsx:4"}, "properties": {"repobilityId": "e92c5324ed140713", "scanner": "scanner-primary", "fingerprint": "0defb610041a5b94", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c149eb0726e2f949", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/components/content-page.tsx:9"}, "properties": {"repobilityId": "af08fd374b62a632", "scanner": "scanner-primary", "fingerprint": "c149eb0726e2f949", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-727115a24e3ae537", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/site/components/structured-data.tsx:3"}, "properties": {"repobilityId": "76197277739b8e6e", "scanner": "scanner-primary", "fingerprint": "727115a24e3ae537", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ac87f52944b9916d", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/site/app/robots.txt/route.ts:3"}, "properties": {"repobilityId": "8d1c9bc0fed71e8e", "scanner": "scanner-primary", "fingerprint": "ac87f52944b9916d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f8baa837d1a5e64b", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/app/api/route.ts:3"}, "properties": {"repobilityId": "312ce6db40b9465b", "scanner": "scanner-primary", "fingerprint": "f8baa837d1a5e64b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2e65cf6d9eadec74", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/site/app/api/md/[[...slug]]/route.ts:8"}, "properties": {"repobilityId": "0976f59763307bfa", "scanner": "scanner-primary", "fingerprint": "2e65cf6d9eadec74", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b06b74dfc18ab56e", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/app/api/mcp/route.ts:5"}, "properties": {"repobilityId": "eb3480c6ea889177", "scanner": "scanner-primary", "fingerprint": "b06b74dfc18ab56e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2ae9420f09bb97a3", "level": "none", "message": {"text": "Commented-code block (7 lines) in docs/site/app/api/ask/route.ts:9"}, "properties": {"repobilityId": "953ba0a6c05eab96", "scanner": "scanner-primary", "fingerprint": "2ae9420f09bb97a3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ce1d915eb135cc4e", "level": "none", "message": {"text": "Commented-code block (7 lines) in docs/site/app/api/search/route.ts:9"}, "properties": {"repobilityId": "f19e2155de04f27e", "scanner": "scanner-primary", "fingerprint": "ce1d915eb135cc4e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6d255b3cb54b2b4c", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/app/api/well-known/agent-card/route.ts:28"}, "properties": {"repobilityId": "47b7d78818c88966", "scanner": "scanner-primary", "fingerprint": "6d255b3cb54b2b4c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8774d769c7d6bcc2", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/site/app/api/well-known/agent-skills/route.ts:7"}, "properties": {"repobilityId": "f669fdfe5a1a75d6", "scanner": "scanner-primary", "fingerprint": "8774d769c7d6bcc2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-53754af4590666a9", "level": "none", "message": {"text": "Commented-code block (7 lines) in docs/site/app/api/well-known/oauth-protected-resource/route.ts:9"}, "properties": {"repobilityId": "726929aacbd26c26", "scanner": "scanner-primary", "fingerprint": "53754af4590666a9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-720df63ebef61db5", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/site/app/api/llms.txt/route.ts:3"}, "properties": {"repobilityId": "6ab8c311702f1837", "scanner": "scanner-primary", "fingerprint": "720df63ebef61db5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ac8cfcbc6566dd68", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/site/app/api/jobs/[token]/route.ts:10"}, "properties": {"repobilityId": "69a83caefe8d2e5c", "scanner": "scanner-primary", "fingerprint": "ac8cfcbc6566dd68", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8e72c8fdea7a4551", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/app/llms-full.txt/route.ts:7"}, "properties": {"repobilityId": "2b10f8d81cf1061b", "scanner": "scanner-primary", "fingerprint": "8e72c8fdea7a4551", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a45021d3a46fe769", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/app/docs/llms.txt/route.ts:7"}, "properties": {"repobilityId": "661eaf8c0287b422", "scanner": "scanner-primary", "fingerprint": "a45021d3a46fe769", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a48c4d440eca519e", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/app/auth.md/route.ts:3"}, "properties": {"repobilityId": "57bf42e6fcc1008e", "scanner": "scanner-primary", "fingerprint": "a48c4d440eca519e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eb985d630035a8da", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/lib/orama-browser.ts:6"}, "properties": {"repobilityId": "41764d10a5a00656", "scanner": "scanner-primary", "fingerprint": "eb985d630035a8da", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7ad687cad690cc87", "level": "none", "message": {"text": "Commented-code block (11 lines) in docs/site/lib/mcp-ui.ts:11"}, "properties": {"repobilityId": "5f27b79fd4ee625b", "scanner": "scanner-primary", "fingerprint": "7ad687cad690cc87", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-21146c037c7897e7", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/site/lib/static-pages.ts:4"}, "properties": {"repobilityId": "49192980369815b5", "scanner": "scanner-primary", "fingerprint": "21146c037c7897e7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d15c4c47aaa3a345", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/lib/agent-404.ts:9"}, "properties": {"repobilityId": "7d6bc98c995f44ca", "scanner": "scanner-primary", "fingerprint": "d15c4c47aaa3a345", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-51f3f211451a1ce8", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/lib/constants.ts:24"}, "properties": {"repobilityId": "89433a202c396a48", "scanner": "scanner-primary", "fingerprint": "51f3f211451a1ce8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ee27d1b7102afc04", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/site/lib/rate-limit.ts:4"}, "properties": {"repobilityId": "39dfd7d1b0ab1de8", "scanner": "scanner-primary", "fingerprint": "ee27d1b7102afc04", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cada61ff54807f9f", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/site/lib/problem.ts:4"}, "properties": {"repobilityId": "cbda9994fd1c7818", "scanner": "scanner-primary", "fingerprint": "cada61ff54807f9f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b41a060390bf4e2a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/site/lib/generated/skill-content-data.ts:323"}, "properties": {"repobilityId": "9f1cb3b2a23a8f69", "scanner": "scanner-primary", "fingerprint": "b41a060390bf4e2a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3a7e3363b11f7c6c", "level": "none", "message": {"text": "Commented-code block (5 lines) in docs/site/lib/openapi/paths.ts:5"}, "properties": {"repobilityId": "dbf6528f293f7777", "scanner": "scanner-primary", "fingerprint": "3a7e3363b11f7c6c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-54f30d14b4352f10", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/cc-triage.mjs:164"}, "properties": {"repobilityId": "e2a0ab012efdc4f2", "scanner": "scanner-primary", "fingerprint": "54f30d14b4352f10", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0c9e4bd9e6f71f28", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/migrate-tests-to-ctx.mjs:255"}, "properties": {"repobilityId": "ac932db944155a4c", "scanner": "scanner-primary", "fingerprint": "0c9e4bd9e6f71f28", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-935c8681aa11df8d", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/wire-testctx.mjs:226"}, "properties": {"repobilityId": "cf140b9e3a8d822e", "scanner": "scanner-primary", "fingerprint": "935c8681aa11df8d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-62a1751e7164923d", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/cc-release-watch.mjs:86"}, "properties": {"repobilityId": "ec8ccf48114717c2", "scanner": "scanner-primary", "fingerprint": "62a1751e7164923d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f8df08da29e73391", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/migrate-hooks-to-ctx.mjs:139"}, "properties": {"repobilityId": "1c6a2498d9f47a3b", "scanner": "scanner-primary", "fingerprint": "f8df08da29e73391", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0db2abe1d4f5b7e9", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/parity-check.py:67"}, "properties": {"repobilityId": "75e51f58ab43f078", "scanner": "scanner-primary", "fingerprint": "0db2abe1d4f5b7e9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9310c7c179c7eb7e", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/migrate-common-mocks.mjs:37"}, "properties": {"repobilityId": "8cf651b74fc66ae9", "scanner": "scanner-primary", "fingerprint": "9310c7c179c7eb7e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8d69de5134bdf33a", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/changelog-to-props.mjs:44"}, "properties": {"repobilityId": "6e893bd3664ef157", "scanner": "scanner-primary", "fingerprint": "8d69de5134bdf33a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-78a8a590b96bdc43", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/eval/conformance-check.mjs:131"}, "properties": {"repobilityId": "00d233d8fd963200", "scanner": "scanner-primary", "fingerprint": "78a8a590b96bdc43", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-722f00d6196cb24b", "level": "note", "message": {"text": "Legacy-named symbol `headerOld` in packages/hook-contract/tests/signing.test.ts:139"}, "properties": {"repobilityId": "a3e5afb166ff0eff", "scanner": "scanner-primary", "fingerprint": "722f00d6196cb24b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-087760e7948d0504", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/hook-contract/src/signing.ts:80"}, "properties": {"repobilityId": "79ad8cc29010df8b", "scanner": "scanner-primary", "fingerprint": "087760e7948d0504", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-54d913ca0009b811", "level": "note", "message": {"text": "Legacy-named symbol `header_old` in packages/hook-contract-py/tests/test_signing.py:149"}, "properties": {"repobilityId": "35d70b36863d7371", "scanner": "scanner-primary", "fingerprint": "54d913ca0009b811", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8924b5cf9238fd7b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/hook-contract-py/src/orchestkit_hook_contract/signing.py:99"}, "properties": {"repobilityId": "e89758ac51020628", "scanner": "scanner-primary", "fingerprint": "8924b5cf9238fd7b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9dd0ff885fbaf72b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 orchestkit-demos/src/lib/heygen.ts:81"}, "properties": {"repobilityId": "feff95b2f9e59030", "scanner": "scanner-primary", "fingerprint": "9dd0ff885fbaf72b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e808cfd1cb1a35c9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/mcp-server/src/tools/docs.ts:19"}, "properties": {"repobilityId": "8cd8f6e57e071605", "scanner": "scanner-primary", "fingerprint": "e808cfd1cb1a35c9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-03d179a221da4d05", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/esbuild.config.mjs:43"}, "properties": {"repobilityId": "a8d76007795103f3", "scanner": "scanner-primary", "fingerprint": "03d179a221da4d05", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-23af8cb1f22299b1", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/scripts/validate-registry.mjs:89"}, "properties": {"repobilityId": "ed89038b49d45b4b", "scanner": "scanner-primary", "fingerprint": "23af8cb1f22299b1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-afca3488dd50f5d1", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/hooks.test.ts:561"}, "properties": {"repobilityId": "b58648776f8b5c45", "scanner": "scanner-primary", "fingerprint": "afca3488dd50f5d1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7edf7e344dd89900", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/lifecycle-output-protocol.test.ts:242"}, "properties": {"repobilityId": "903fde77a6c953f7", "scanner": "scanner-primary", "fingerprint": "7edf7e344dd89900", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2271dc14cfb6eaa3", "level": "none", "message": {"text": "Commented-code block (112 lines) in src/hooks/src/__tests__/split-bundles.test.ts:287"}, "properties": {"repobilityId": "068b790d7f61bf80", "scanner": "scanner-primary", "fingerprint": "2271dc14cfb6eaa3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0ddbc9f76fafde57", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/webhook-forwarder-coverage.test.ts:37"}, "properties": {"repobilityId": "a00d05d0e99d9ce3", "scanner": "scanner-primary", "fingerprint": "0ddbc9f76fafde57", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a8554bf4df9d7481", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/subagent-stop/watchdog.test.ts:143"}, "properties": {"repobilityId": "094a206ff2953c15", "scanner": "scanner-primary", "fingerprint": "a8554bf4df9d7481", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-15863a2640e8d5c1", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/hooks/src/__tests__/subagent-stop/unified-dispatcher.test.ts:663"}, "properties": {"repobilityId": "55e8f55c67f30246", "scanner": "scanner-primary", "fingerprint": "15863a2640e8d5c1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dca80dc414a1efae", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/prompt/antipattern-detector.test.ts:15"}, "properties": {"repobilityId": "458a15457654c2ef", "scanner": "scanner-primary", "fingerprint": "dca80dc414a1efae", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-67958ec54d59c966", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/subagent-start/model-cost-advisor.test.ts:234"}, "properties": {"repobilityId": "92a8f5a9b4b5e8e1", "scanner": "scanner-primary", "fingerprint": "67958ec54d59c966", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8ae30b4c3093ded4", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/lib/home-environment.test.ts:19"}, "properties": {"repobilityId": "b074a17a64a2f8d1", "scanner": "scanner-primary", "fingerprint": "8ae30b4c3093ded4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-65bc7139b7b161a1", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/lib/paths.test.ts:121"}, "properties": {"repobilityId": "ecf16b61dae8e997", "scanner": "scanner-primary", "fingerprint": "65bc7139b7b161a1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b536355847390941", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/lib/token-estimator.test.ts:224"}, "properties": {"repobilityId": "114dc7ff26c2c736", "scanner": "scanner-primary", "fingerprint": "b536355847390941", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a53d2b3ceb903d6a", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/hooks/src/__tests__/lib/session-id-generator.test.ts:398"}, "properties": {"repobilityId": "67f06ae5b989d3d3", "scanner": "scanner-primary", "fingerprint": "a53d2b3ceb903d6a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e4aea329727d89b5", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/lib/session-registry.test.ts:157"}, "properties": {"repobilityId": "91616f56d3fa4606", "scanner": "scanner-primary", "fingerprint": "e4aea329727d89b5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1ec64a0e1a276360", "level": "note", "message": {"text": "Legacy-named symbol `branch_v1` in src/hooks/src/__tests__/lifecycle/session-tracking.test.ts:495"}, "properties": {"repobilityId": "0dade13639a92961", "scanner": "scanner-primary", "fingerprint": "1ec64a0e1a276360", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-55a94beed59a0e9a", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/lifecycle/cc-version-check.test.ts:3"}, "properties": {"repobilityId": "145e52d594b412bc", "scanner": "scanner-primary", "fingerprint": "55a94beed59a0e9a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-75545ee7b6e59846", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/lifecycle/sweep-stale-worktrees.test.ts:183"}, "properties": {"repobilityId": "0db238ae9b875e93", "scanner": "scanner-primary", "fingerprint": "75545ee7b6e59846", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-61aa5a9641cc3a71", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:267"}, "properties": {"repobilityId": "7c21660c048030c9", "scanner": "scanner-primary", "fingerprint": "61aa5a9641cc3a71", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4c3e9d783535b6da", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/skill/duplicate-code-detector.test.ts:427"}, "properties": {"repobilityId": "8fcf85a019170585", "scanner": "scanner-primary", "fingerprint": "4c3e9d783535b6da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3e16f6c60ad96b43", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/hooks/src/__tests__/skill/decision-processor.test.ts:725"}, "properties": {"repobilityId": "1bda042c3b7e3be8", "scanner": "scanner-primary", "fingerprint": "3e16f6c60ad96b43", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7615bb61f85b2d91", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/__tests__/skill/pattern-consistency-enforcer.test.ts:410"}, "properties": {"repobilityId": "08d4b0da6737ee92", "scanner": "scanner-primary", "fingerprint": "7615bb61f85b2d91", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0329da7031b3d337", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/hooks/src/__tests__/posttool/secret-handler.test.ts:238"}, "properties": {"repobilityId": "71de6dcef9c1d33a", "scanner": "scanner-primary", "fingerprint": "0329da7031b3d337", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c5dd3f6e03195895", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/hooks/src/__tests__/async/dispatcher-e2e.test.ts:58"}, "properties": {"repobilityId": "675e0192d36ba298", "scanner": "scanner-primary", "fingerprint": "c5dd3f6e03195895", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dd86442be21c9f1c", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/hooks/src/__tests__/async/async-registry.test.ts:44"}, "properties": {"repobilityId": "936482e82353fa5d", "scanner": "scanner-primary", "fingerprint": "dd86442be21c9f1c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b5f25b8c27f55cfc", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/hooks/src/__tests__/e2e/dispatcher-registry-wiring.test.ts:65"}, "properties": {"repobilityId": "e41494d9e42ef592", "scanner": "scanner-primary", "fingerprint": "b5f25b8c27f55cfc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7562bb9386d0790f", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/__tests__/e2e/hooks-json-wiring.test.ts:131"}, "properties": {"repobilityId": "cb2db417f8d47adf", "scanner": "scanner-primary", "fingerprint": "7562bb9386d0790f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-99bacb465aa26b0a", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/subagent-stop/watchdog.ts:23"}, "properties": {"repobilityId": "608278c2005803f1", "scanner": "scanner-primary", "fingerprint": "99bacb465aa26b0a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-836c37a5337fa7a3", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/hooks/src/prompt/unified-dispatcher.ts:394"}, "properties": {"repobilityId": "724482652a7a348d", "scanner": "scanner-primary", "fingerprint": "836c37a5337fa7a3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d2cec8de2a49a76b", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/subagent-start/subagent-context-stager.ts:311"}, "properties": {"repobilityId": "8efbe858e720ea4c", "scanner": "scanner-primary", "fingerprint": "d2cec8de2a49a76b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7475db9fead7acbb", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/subagent-start/model-cost-advisor.ts:23"}, "properties": {"repobilityId": "d303c5e2c68a1e73", "scanner": "scanner-primary", "fingerprint": "7475db9fead7acbb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-20e4372e979ad569", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/cli/generate-http-hooks.ts:174"}, "properties": {"repobilityId": "699186b0058f0f3e", "scanner": "scanner-primary", "fingerprint": "20e4372e979ad569", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9e7e98d74f2d1bda", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/hooks/src/lib/telemetry-schemas.ts:103"}, "properties": {"repobilityId": "540e341b544ac006", "scanner": "scanner-primary", "fingerprint": "9e7e98d74f2d1bda", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c4d696fa7d2501ec", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/lib/token-estimator.ts:103"}, "properties": {"repobilityId": "c51e7e8405ad5c92", "scanner": "scanner-primary", "fingerprint": "c4d696fa7d2501ec", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d7e725f551456b73", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/lib/decision-flow-tracker.ts:535"}, "properties": {"repobilityId": "b0c6761361d521e5", "scanner": "scanner-primary", "fingerprint": "d7e725f551456b73", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6974b0173461ccbd", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/lib/context.ts:33"}, "properties": {"repobilityId": "f2326b5895627e4b", "scanner": "scanner-primary", "fingerprint": "6974b0173461ccbd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0911f21103dc0d3a", "level": "none", "message": {"text": "Commented-code block (13 lines) in src/hooks/src/lib/retry-manager.ts:21"}, "properties": {"repobilityId": "9ad35b93f1a5ab89", "scanner": "scanner-primary", "fingerprint": "0911f21103dc0d3a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ade430407a4bc586", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/hooks/src/lib/bash-patterns.ts:27"}, "properties": {"repobilityId": "c6d4765301a243fb", "scanner": "scanner-primary", "fingerprint": "ade430407a4bc586", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ebc455bdbd0a9f94", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/hooks/src/lib/session-tracker.ts:608"}, "properties": {"repobilityId": "f3db7b4e82a4e15e", "scanner": "scanner-primary", "fingerprint": "ebc455bdbd0a9f94", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ec46ad4d969aa762", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/hooks/src/lib/decision-history.ts:814"}, "properties": {"repobilityId": "4c63afff01e68440", "scanner": "scanner-primary", "fingerprint": "ec46ad4d969aa762", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1b5f3c1fa4cc7372", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/hooks/src/lib/http-sink.ts:27"}, "properties": {"repobilityId": "5a634d48b4de0dd1", "scanner": "scanner-primary", "fingerprint": "1b5f3c1fa4cc7372", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bd5eff4c4d15e814", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/hooks/src/lib/tool-invocation-rules.ts:80"}, "properties": {"repobilityId": "2e368daac0560b92", "scanner": "scanner-primary", "fingerprint": "bd5eff4c4d15e814", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ad95894899deb0aa", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/lifecycle/cwd-changed.ts:186"}, "properties": {"repobilityId": "c890a364747cb75a", "scanner": "scanner-primary", "fingerprint": "ad95894899deb0aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6eb5810ead406466", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/lifecycle/cleanup-envelope-corruption.ts:100"}, "properties": {"repobilityId": "88221add1edc24c0", "scanner": "scanner-primary", "fingerprint": "6eb5810ead406466", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-07b10bc5dd512aad", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/hooks/src/lifecycle/webhook-forwarder.ts:26"}, "properties": {"repobilityId": "48cdb381d201d205", "scanner": "scanner-primary", "fingerprint": "07b10bc5dd512aad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4ef46f2997aa9ba6", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/hooks/src/lifecycle/sweep-stale-worktrees.ts:102"}, "properties": {"repobilityId": "0c6fd311945570ff", "scanner": "scanner-primary", "fingerprint": "4ef46f2997aa9ba6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-53f9d074f80108ee", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/hooks/src/pretool/task/sync-task-dispatcher.ts:47"}, "properties": {"repobilityId": "5b0c4ac20e5d8181", "scanner": "scanner-primary", "fingerprint": "53f9d074f80108ee", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-59b236166406a728", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/hooks/src/pretool/write-edit/dependency-confusion-scanner.ts:27"}, "properties": {"repobilityId": "a3b21b50408e8239", "scanner": "scanner-primary", "fingerprint": "59b236166406a728", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-95de6d2fce2f4d71", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/hooks/src/pretool/bash/dangerous-command-blocker.ts:64"}, "properties": {"repobilityId": "4d0362ea2fca0975", "scanner": "scanner-primary", "fingerprint": "95de6d2fce2f4d71", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f4a8ad379e947be5", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/hooks/src/pretool/bash/git-validator.ts:229"}, "properties": {"repobilityId": "28b070cb78eb84ed", "scanner": "scanner-primary", "fingerprint": "f4a8ad379e947be5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5f24c4b4df0bd98b", "level": "note", "message": {"text": "Legacy-named symbol `daysOld` in src/hooks/src/posttool/write/readme-sync.ts:202"}, "properties": {"repobilityId": "a89b1a439099abf0", "scanner": "scanner-primary", "fingerprint": "5f24c4b4df0bd98b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-84dbb9e8f06b96b2", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/hooks/src/posttool/write/stale-import-detector.ts:220"}, "properties": {"repobilityId": "ed33f3e1f166b88b", "scanner": "scanner-primary", "fingerprint": "84dbb9e8f06b96b2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e266aa6ced6be2e3", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/hooks/src/posttool/secret-handler/patterns.ts:60"}, "properties": {"repobilityId": "05b2d5aa2b43df79", "scanner": "scanner-primary", "fingerprint": "e266aa6ced6be2e3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b9291609c0e43c0f", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/skills/monitoring-observability/scripts/observe-decorator.py:190"}, "properties": {"repobilityId": "ea49af393c0fd413", "scanner": "scanner-primary", "fingerprint": "b9291609c0e43c0f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9fb25df1c758a6dd", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/skills/monitoring-observability/scripts/callback-handler.py:276"}, "properties": {"repobilityId": "a4c353eb5c035d1e", "scanner": "scanner-primary", "fingerprint": "9fb25df1c758a6dd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f39d3d0ffd315771", "level": "note", "message": {"text": "Legacy-named symbol `golden_dataset_backup` in src/skills/golden-dataset/scripts/backup-script.py:36"}, "properties": {"repobilityId": "6303b7ed2bdc02ef", "scanner": "scanner-primary", "fingerprint": "f39d3d0ffd315771", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4d8f06c1e17243c8", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/skills/performance/scripts/performance-monitoring.ts:703"}, "properties": {"repobilityId": "e3e1e22f64e471a0", "scanner": "scanner-primary", "fingerprint": "4d8f06c1e17243c8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9505614b63b3e8ce", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/skills/performance/scripts/optimized-context.tsx:155"}, "properties": {"repobilityId": "d2e18b8cf923e5a6", "scanner": "scanner-primary", "fingerprint": "9505614b63b3e8ce", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-08d5007c20331454", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/skills/audit-full/workflows/audit-full-mapreduce.mjs:3"}, "properties": {"repobilityId": "c30a7d78eb32d32e", "scanner": "scanner-primary", "fingerprint": "08d5007c20331454", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a6bfe5f8b9229b4c", "level": "note", "message": {"text": "Legacy-named symbol `get_user_v1` in src/skills/api-design/scripts/fastapi-versioned-router.py:187"}, "properties": {"repobilityId": "c3d18794b51da776", "scanner": "scanner-primary", "fingerprint": "a6bfe5f8b9229b4c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-35cbddb718f1dbd1", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/skills/security-patterns/scripts/auth-middleware-template.py:105"}, "properties": {"repobilityId": "c21e01f769dfd86f", "scanner": "scanner-primary", "fingerprint": "35cbddb718f1dbd1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b98815eb197ed8c3", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/skills/distributed-systems/scripts/bulkhead.py:83"}, "properties": {"repobilityId": "389b28bd3fc94609", "scanner": "scanner-primary", "fingerprint": "b98815eb197ed8c3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3ade3609249943e2", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/skills/bare-eval/workflows/skill-fitness.mjs:3"}, "properties": {"repobilityId": "18c9fc42a08a1135", "scanner": "scanner-primary", "fingerprint": "3ade3609249943e2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c60b37cdf9e2ce28", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/skills/database-patterns/scripts/migration-template.py:53"}, "properties": {"repobilityId": "2de027a8fe2a3a9a", "scanner": "scanner-primary", "fingerprint": "c60b37cdf9e2ce28", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-349972d5b5371b80", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/skills/python-backend/scripts/pool-setup-template.py:102"}, "properties": {"repobilityId": "14715c751f14a28c", "scanner": "scanner-primary", "fingerprint": "349972d5b5371b80", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7856e8eaea8bab92", "level": "none", "message": {"text": "Commented-code block (15 lines) in src/skills/accessibility/scripts/accessible-component-template.tsx:133"}, "properties": {"repobilityId": "feae014e74f50623", "scanner": "scanner-primary", "fingerprint": "7856e8eaea8bab92", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-df8ff513597dbd21", "level": "none", "message": {"text": "Commented-code block (5 lines) in plugins/ork/hooks/esbuild.config.mjs:43"}, "properties": {"repobilityId": "af11038e151c2603", "scanner": "scanner-primary", "fingerprint": "df8ff513597dbd21", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fd541a04ce67e2be", "level": "none", "message": {"text": "Commented-code block (5 lines) in plugins/ork/hooks/scripts/validate-registry.mjs:89"}, "properties": {"repobilityId": "ef4127d7e1f2d6d3", "scanner": "scanner-primary", "fingerprint": "fd541a04ce67e2be", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4ee0925bbfcb4b8e", "level": "none", "message": {"text": "Commented-code block (5 lines) in plugins/ork/skills/monitoring-observability/scripts/observe-decorator.py:190"}, "properties": {"repobilityId": "dc25887408cd3a09", "scanner": "scanner-primary", "fingerprint": "4ee0925bbfcb4b8e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-972cd0cc9fe10b16", "level": "none", "message": {"text": "Commented-code block (8 lines) in plugins/ork/skills/monitoring-observability/scripts/callback-handler.py:276"}, "properties": {"repobilityId": "a54a4a5433c79e5d", "scanner": "scanner-primary", "fingerprint": "972cd0cc9fe10b16", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-64bde9f156f95192", "level": "note", "message": {"text": "Legacy-named symbol `golden_dataset_backup` in plugins/ork/skills/golden-dataset/scripts/backup-script.py:36"}, "properties": {"repobilityId": "7a9c1788edd7d62a", "scanner": "scanner-primary", "fingerprint": "64bde9f156f95192", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-025d485f959185db", "level": "none", "message": {"text": "Commented-code block (10 lines) in plugins/ork/skills/performance/scripts/performance-monitoring.ts:703"}, "properties": {"repobilityId": "57522f6980e171b0", "scanner": "scanner-primary", "fingerprint": "025d485f959185db", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b3d14418b25121b9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 plugins/ork/skills/performance/scripts/optimized-context.tsx:155"}, "properties": {"repobilityId": "9f92701213dfe2a8", "scanner": "scanner-primary", "fingerprint": "b3d14418b25121b9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3c2a0c2b3ae979cc", "level": "none", "message": {"text": "Commented-code block (6 lines) in plugins/ork/skills/audit-full/workflows/audit-full-mapreduce.mjs:3"}, "properties": {"repobilityId": "c3e322edbc2c1a09", "scanner": "scanner-primary", "fingerprint": "3c2a0c2b3ae979cc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3bfbeb7a7b0e6d4e", "level": "note", "message": {"text": "Legacy-named symbol `get_user_v1` in plugins/ork/skills/api-design/scripts/fastapi-versioned-router.py:187"}, "properties": {"repobilityId": "17e8870ce7130c1a", "scanner": "scanner-primary", "fingerprint": "3bfbeb7a7b0e6d4e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-44c833f70e586f1a", "level": "none", "message": {"text": "Commented-code block (5 lines) in plugins/ork/skills/security-patterns/scripts/auth-middleware-template.py:105"}, "properties": {"repobilityId": "6ff68e9e9af42946", "scanner": "scanner-primary", "fingerprint": "44c833f70e586f1a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5ac63b8cb075fc63", "level": "none", "message": {"text": "Commented-code block (5 lines) in plugins/ork/skills/distributed-systems/scripts/bulkhead.py:83"}, "properties": {"repobilityId": "51aae69fb6090d43", "scanner": "scanner-primary", "fingerprint": "5ac63b8cb075fc63", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ca858180bdb429f2", "level": "none", "message": {"text": "Commented-code block (7 lines) in plugins/ork/skills/bare-eval/workflows/skill-fitness.mjs:3"}, "properties": {"repobilityId": "6dd549aa87215d8d", "scanner": "scanner-primary", "fingerprint": "ca858180bdb429f2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-454f0d1c68063385", "level": "none", "message": {"text": "Commented-code block (6 lines) in plugins/ork/skills/database-patterns/scripts/migration-template.py:53"}, "properties": {"repobilityId": "81c7d2a5ac3ef1e3", "scanner": "scanner-primary", "fingerprint": "454f0d1c68063385", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b9269545e347e596", "level": "none", "message": {"text": "Commented-code block (6 lines) in plugins/ork/skills/python-backend/scripts/pool-setup-template.py:102"}, "properties": {"repobilityId": "37bfc37fdbd5071a", "scanner": "scanner-primary", "fingerprint": "b9269545e347e596", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8c2c1066b6255393", "level": "none", "message": {"text": "Commented-code block (15 lines) in plugins/ork/skills/accessibility/scripts/accessible-component-template.tsx:133"}, "properties": {"repobilityId": "bd68e809e2d2cf40", "scanner": "scanner-primary", "fingerprint": "8c2c1066b6255393", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3740c311984e6362", "level": "note", "message": {"text": "174 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "0ee142e07e46d813", "scanner": "scanner-primary", "fingerprint": "3740c311984e6362", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b90d88183990464f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7307531a04623b02", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c6b7090cb6ddb8ec", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bf2fce1e0c64e2a7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c411f2167bf9bfad", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "40f10259bf98cca1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f37ffd5d1cbcfcb0", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "921f35dc7c5a30d3", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "30cd5df03f6aafb1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ca183f5c7e0162cd", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6d7c29df10a3e71f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8a3deafea655f671", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "093bd4afe94f9922", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9651e5d6edf09c1c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0ffda2bfbebaf58a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7392e269c143b669", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "71388745a3f35896", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bb6206de540f2bae", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a0a25e9d302b3700", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3ab92d6d40cf3e35", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-bd2429a271dfa487", "level": "error", "message": {"text": "FastAPI POST `create_user` without auth dependency \u2014 src/skills/api-design/scripts/problem-detail-exceptions.py:389"}, "properties": {"repobilityId": "9a4da261f9fc0e9a", "scanner": "scanner-primary", "fingerprint": "bd2429a271dfa487", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/api-design/scripts/problem-detail-exceptions.py"}, "region": {"startLine": 389}}}]}, {"ruleId": "scanner-7ae99b618074b59a", "level": "error", "message": {"text": "FastAPI POST `search_chunks` without auth dependency \u2014 src/skills/rag-retrieval/scripts/search-service.py:180"}, "properties": {"repobilityId": "2b78d95114a79d83", "scanner": "scanner-primary", "fingerprint": "7ae99b618074b59a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/skills/rag-retrieval/scripts/search-service.py"}, "region": {"startLine": 180}}}]}, {"ruleId": "scanner-af204e0fa9667100", "level": "error", "message": {"text": "FastAPI POST `create_user` without auth dependency \u2014 plugins/ork/skills/api-design/scripts/problem-detail-exceptions.py:389"}, "properties": {"repobilityId": "d297fb4e490298b8", "scanner": "scanner-primary", "fingerprint": "af204e0fa9667100", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/api-design/scripts/problem-detail-exceptions.py"}, "region": {"startLine": 389}}}]}, {"ruleId": "scanner-40b9cb613488bf82", "level": "error", "message": {"text": "FastAPI POST `search_chunks` without auth dependency \u2014 plugins/ork/skills/rag-retrieval/scripts/search-service.py:180"}, "properties": {"repobilityId": "22a0b23edc7a8157", "scanner": "scanner-primary", "fingerprint": "40b9cb613488bf82", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ork/skills/rag-retrieval/scripts/search-service.py"}, "region": {"startLine": 180}}}]}, {"ruleId": "scanner-6860cffddaa16526", "level": "error", "message": {"text": "Dangling fetch: GET /api/search?${params.toString()} (docs/site/components/webmcp-provider.tsx:53)"}, "properties": {"repobilityId": "ba5dab5f1dc9737d", "scanner": "scanner-primary", "fingerprint": "6860cffddaa16526", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-ab5f49eeb250f1a2", "level": "error", "message": {"text": "Dangling fetch: GET /.well-known/agent-skills/index.json (docs/site/components/webmcp-provider.tsx:64)"}, "properties": {"repobilityId": "9d81f804b6435137", "scanner": "scanner-primary", "fingerprint": "ab5f49eeb250f1a2", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-08a2f5c2a2d164c9", "level": "error", "message": {"text": "Dangling fetch: GET /docs/reference/skills/${name} (docs/site/components/webmcp-provider.tsx:93)"}, "properties": {"repobilityId": "6e88a5fc9a03cb0a", "scanner": "scanner-primary", "fingerprint": "08a2f5c2a2d164c9", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0e45c9678d7eca44", "level": "error", "message": {"text": "Dangling fetch: GET https://api.github.com/repos/yonatangross/orchestkit (docs/site/app/(home)/page.tsx:12)"}, "properties": {"repobilityId": "21805f7b592c5f58", "scanner": "scanner-primary", "fingerprint": "0e45c9678d7eca44", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-6176bed9341419a6", "level": "error", "message": {"text": "Dangling fetch: GET http://api.example.com/data (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:267)"}, "properties": {"repobilityId": "f3108e0c8627ebba", "scanner": "scanner-primary", "fingerprint": "6176bed9341419a6", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-a03e97abbf2f69b2", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:3000/api (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:282)"}, "properties": {"repobilityId": "d066d164723a8663", "scanner": "scanner-primary", "fingerprint": "a03e97abbf2f69b2", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-1aa93edc41f419e3", "level": "error", "message": {"text": "Dangling fetch: GET https://api.example.com/data (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:294)"}, "properties": {"repobilityId": "1a36046eca8bf525", "scanner": "scanner-primary", "fingerprint": "1aa93edc41f419e3", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-81937cdeeeb308de", "level": "error", "message": {"text": "Dangling fetch: GET http://external.com/api (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:268)"}, "properties": {"repobilityId": "80eba697e3121a06", "scanner": "scanner-primary", "fingerprint": "81937cdeeeb308de", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-d2fbc06d2baaa7cb", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:8080/data (src/hooks/src/__tests__/pretool/security-pattern-validator.test.ts:283)"}, "properties": {"repobilityId": "d133aa24df0b7513", "scanner": "scanner-primary", "fingerprint": "d2fbc06d2baaa7cb", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-6d43a81d76a5b875", "level": "error", "message": {"text": "Dangling fetch: GET /api/products (src/hooks/src/__tests__/skill/duplicate-code-detector.test.ts:430)"}, "properties": {"repobilityId": "88c87ec7735f74dd", "scanner": "scanner-primary", "fingerprint": "6d43a81d76a5b875", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c2eba298b8c2c5a7", "level": "error", "message": {"text": "Dangling fetch: GET https://mermaid.ink/svg/${base64} (src/hooks/src/lib/decision-history.ts:814)"}, "properties": {"repobilityId": "144b61058c667f34", "scanner": "scanner-primary", "fingerprint": "c2eba298b8c2c5a7", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-acce0b8dea7808a9", "level": "error", "message": {"text": "Dangling fetch: GET /api/data (src/skills/react-server-components-framework/scripts/client-component-template.tsx:41)"}, "properties": {"repobilityId": "e95632e23f2ace60", "scanner": "scanner-primary", "fingerprint": "acce0b8dea7808a9", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-95832991067547b5", "level": "error", "message": {"text": "Dangling fetch: POST /api/login (src/skills/performance/scripts/optimized-context.tsx:155)"}, "properties": {"repobilityId": "02d25173f1995c4e", "scanner": "scanner-primary", "fingerprint": "95832991067547b5", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-6e556f0a7ce753d9", "level": "error", "message": {"text": "Dangling fetch: GET /api/data (plugins/ork/skills/react-server-components-framework/scripts/client-component-template.tsx:41)"}, "properties": {"repobilityId": "009ddf7e48f11f5c", "scanner": "scanner-primary", "fingerprint": "6e556f0a7ce753d9", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-997816df2c5db0a1", "level": "error", "message": {"text": "Dangling fetch: POST /api/login (plugins/ork/skills/performance/scripts/optimized-context.tsx:155)"}, "properties": {"repobilityId": "09c184050d86a298", "scanner": "scanner-primary", "fingerprint": "997816df2c5db0a1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d18411a066b7e2c1", "level": "note", "message": {"text": "Unused endpoint: GET /users/{user_id}"}, "properties": {"repobilityId": "c0caf7e9b0cefc5d", "scanner": "scanner-primary", "fingerprint": "d18411a066b7e2c1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1bca8100a44f7f25", "level": "note", "message": {"text": "Unused endpoint: POST /users"}, "properties": {"repobilityId": "b6429816389a5f18", "scanner": "scanner-primary", "fingerprint": "1bca8100a44f7f25", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7a009b1a56794f45", "level": "note", "message": {"text": "Unused endpoint: POST /"}, "properties": {"repobilityId": "52b94cd89ce8b842", "scanner": "scanner-primary", "fingerprint": "7a009b1a56794f45", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7b9bd99d6bbe8b8d", "level": "note", "message": {"text": "Unused endpoint: GET /example"}, "properties": {"repobilityId": "de286f78aef69be6", "scanner": "scanner-primary", "fingerprint": "7b9bd99d6bbe8b8d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5baa8971ebe192a1", "level": "note", "message": {"text": "Unused endpoint: GET /"}, "properties": {"repobilityId": "4a3daf2645466edc", "scanner": "scanner-primary", "fingerprint": "5baa8971ebe192a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7e2aebb8dfde31c6", "level": "note", "message": {"text": "Unused endpoint: POST /items"}, "properties": {"repobilityId": "cdfbc5c893edd6d6", "scanner": "scanner-primary", "fingerprint": "7e2aebb8dfde31c6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-24839830176a6b46", "level": "note", "message": {"text": "Unused endpoint: GET /items/{item_id}"}, "properties": {"repobilityId": "a70313286140c07e", "scanner": "scanner-primary", "fingerprint": "24839830176a6b46", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8c236625afb6a8cb", "level": "note", "message": {"text": "Unused endpoint: GET /ready"}, "properties": {"repobilityId": "2de81af4888a0910", "scanner": "scanner-primary", "fingerprint": "8c236625afb6a8cb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-bb11627a6939eb06", "level": "note", "message": {"text": "Unused endpoint: GET /startup"}, "properties": {"repobilityId": "6e4562a00b1d5e6b", "scanner": "scanner-primary", "fingerprint": "bb11627a6939eb06", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b0219e339ade7e00", "level": "note", "message": {"text": "Unused endpoint: GET /api/data/:id"}, "properties": {"repobilityId": "714afd35ba6beb49", "scanner": "scanner-primary", "fingerprint": "b0219e339ade7e00", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-812760b081b9ff1a", "level": "note", "message": {"text": "Unused endpoint: GET /api/users/:id"}, "properties": {"repobilityId": "6c0d80cb47af85fc", "scanner": "scanner-primary", "fingerprint": "812760b081b9ff1a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-49546f6900fb04c5", "level": "note", "message": {"text": "Unused endpoint: POST /api/users"}, "properties": {"repobilityId": "65ace5f22a687cb9", "scanner": "scanner-primary", "fingerprint": "49546f6900fb04c5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}