{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-5d0dd07ab50dd100", "name": "Possibly dead Python function: ocr_frame_tesseract", "shortDescription": {"text": "Possibly dead Python function: ocr_frame_tesseract"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-969ba432a69a6428", "name": "Possibly dead Python function: process_test_case", "shortDescription": {"text": "Possibly dead Python function: process_test_case"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8a8f3911193495fd", "name": "Possibly dead Python function: compare_prompts", "shortDescription": {"text": "Possibly dead Python function: compare_prompts"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c97bb3685699f81e", "name": "Possibly dead Python function: update_rating", "shortDescription": {"text": "Possibly dead Python function: update_rating"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-09d434b767d746a2", "name": "Possibly dead Python function: ocr_frame_tesseract", "shortDescription": {"text": "Possibly dead Python function: ocr_frame_tesseract"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0d86552c8953d62", "name": "Possibly dead Python function: process_test_case", "shortDescription": {"text": "Possibly dead Python function: process_test_case"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f033a0b165d3e5b", "name": "Possibly dead Python function: compare_prompts", "shortDescription": {"text": "Possibly dead Python function: compare_prompts"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-36d14517e496f982", "name": "Possibly dead Python function: update_rating", "shortDescription": {"text": "Possibly dead Python function: update_rating"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8add6aaefb25a85", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/components/GovernancePanel.tsx:561", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/components/GovernancePanel.tsx:561"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e8495bd68a2796de", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/components/WebPreviewPanel.tsx:256", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/components/WebPreviewPanel.tsx:256"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c5e37d15584875f6", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/proof-levels/ProofLevelsExplorer.tsx:115", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/proof-levels/ProofLevelsExplorer.tsx:115"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-263e5db1ee76b507", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/ai-lab/AiLabClient.tsx:335", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/ai-lab/AiLabClient.tsx:335"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d5e777c336bb32c1", "name": "React Flow edge with `label=` but no project-wide edge-label CSS override \u2014 front/web/app/v2/operations/OperationReplayC", "shortDescription": {"text": "React Flow edge with `label=` but no project-wide edge-label CSS override \u2014 front/web/app/v2/operations/OperationReplayClient.tsx:89"}, "fullDescription": {"text": "React Flow edge labels render with a white rectangle behind the text by default, which scatters bright boxes across a dark canvas. Either drop the label, or override `.react-flow__edge-textbg` and `.react-flow__edge-text` in your stylesheet.\n\nWhy: P-H in CHECKLIST.md \u2014 vendor edge labels bleed white through a dark canvas.\nRule id: fq.edge-label.no-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ccea5bec740d628a", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/policy/PolicyClient.tsx:267", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/policy/PolicyClient.tsx:267"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ea793c2712384c86", "name": "React Flow <Controls> without dark theming \u2014 front/web/app/v2/liens/LinksClient.tsx:253", "shortDescription": {"text": "React Flow <Controls> without dark theming \u2014 front/web/app/v2/liens/LinksClient.tsx:253"}, "fullDescription": {"text": "`<Controls>` ships with white buttons. Override `.react-flow__controls` and `.react-flow__controls-button` in your stylesheet or pass a styled wrapper.\n\nWhy: P1 in CHECKLIST.md \u2014 vendor defaults bleed light through.\nRule id: fq.controls.no-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-153bcc1bf27a7a32", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/code/CodeClient.tsx:704", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/code/CodeClient.tsx:704"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d5043c4dc7c941cc", "name": "React Flow <Controls> without dark theming \u2014 front/web/app/v2/dag/DagClient.tsx:222", "shortDescription": {"text": "React Flow <Controls> without dark theming \u2014 front/web/app/v2/dag/DagClient.tsx:222"}, "fullDescription": {"text": "`<Controls>` ships with white buttons. Override `.react-flow__controls` and `.react-flow__controls-button` in your stylesheet or pass a styled wrapper.\n\nWhy: P1 in CHECKLIST.md \u2014 vendor defaults bleed light through.\nRule id: fq.controls.no-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0367991a83c8c3a8", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/why/WhyClient.tsx:302", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/why/WhyClient.tsx:302"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8d0f21ed1c2aaa5e", "name": "React Flow edge with `label=` but no project-wide edge-label CSS override \u2014 front/web/app/v2/workflows/WorkflowClient.ts", "shortDescription": {"text": "React Flow edge with `label=` but no project-wide edge-label CSS override \u2014 front/web/app/v2/workflows/WorkflowClient.tsx:78"}, "fullDescription": {"text": "React Flow edge labels render with a white rectangle behind the text by default, which scatters bright boxes across a dark canvas. Either drop the label, or override `.react-flow__edge-textbg` and `.react-flow__edge-text` in your stylesheet.\n\nWhy: P-H in CHECKLIST.md \u2014 vendor edge labels bleed white through a dark canvas.\nRule id: fq.edge-label.no-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-21a524485af9fb91", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/kernels/KernelTreeClient.tsx:157", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/kernels/KernelTreeClient.tsx:157"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fa3d99c3f6541c01", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/deploy/DeployPanel.tsx:374", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/deploy/DeployPanel.tsx:374"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8f49dc1cefa4bc68", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 front/web/app/collab/page.tsx:89", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 front/web/app/collab/page.tsx:89"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5499fc74db6ceb82", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/Palette.tsx:153", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/Palette.tsx:153"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-53fc35cf077bc46c", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/V3Nav.tsx:76", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/V3Nav.tsx:76"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c3a81ad3359a5058", "name": "React Flow <MiniMap> without dark background \u2014 front/web/app/v3/parcours/ParcoursClient.tsx:298", "shortDescription": {"text": "React Flow <MiniMap> without dark background \u2014 front/web/app/v3/parcours/ParcoursClient.tsx:298"}, "fullDescription": {"text": "A bare <MiniMap> renders with the vendor's white default in dark themes. Wrap the canvas in a class that overrides `.react-flow__minimap` background, or pass an explicit `style`/`maskColor`/`bgColor`.\n\nWhy: P1 in CHECKLIST.md \u2014 vendor defaults bleed light through.\nRule id: fq.minimap.no-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-82ef92459db8b93e", "name": "React Flow <Controls> without dark theming \u2014 front/web/app/v3/parcours/ParcoursClient.tsx:297", "shortDescription": {"text": "React Flow <Controls> without dark theming \u2014 front/web/app/v3/parcours/ParcoursClient.tsx:297"}, "fullDescription": {"text": "`<Controls>` ships with white buttons. Override `.react-flow__controls` and `.react-flow__controls-button` in your stylesheet or pass a styled wrapper.\n\nWhy: P1 in CHECKLIST.md \u2014 vendor defaults bleed light through.\nRule id: fq.controls.no-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ca13fc8701b699b", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/parcours/ParcoursClient.tsx:81", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/parcours/ParcoursClient.tsx:81"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bbad984129fecde9", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/environnements/EnvsClient.tsx:764", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/environnements/EnvsClient.tsx:764"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bb6cf452545ee294", "name": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/lab/PreviewPane.tsx:196", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/lab/PreviewPane.tsx:196"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-32e0d7bb79c84423", "name": "Stray `console.log` in TS/JS \u2014 front/web/lib/v2/code-extract.test.ts:35", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 front/web/lib/v2/code-extract.test.ts:35"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8467d6cc03b6e6f", "name": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:85", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:85"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-180cf6bbc82174d9", "name": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/superpowers/tests/brainstorm-server/ws-protocol.test.js:38", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/superpowers/tests/brainstorm-server/ws-protocol.test.js:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e59f3de2f9302ce9", "name": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js:124", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js:124"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1edc036fe3dd9629", "name": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-serve", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:85"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-51f95f90bafad32f", "name": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-serve", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/ws-protocol.test.js:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d0aab3ad8c975081", "name": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/writing-skills/", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js:124"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-639bb254e460958f", "name": "TODO/FIXME marker in shipping code \u2014 .claude/marketplaces/cdesign-expo/sample-output/sereine-expo/app/index.tsx:55", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 .claude/marketplaces/cdesign-expo/sample-output/sereine-expo/app/index.tsx:55"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ca35b6da69466377", "name": "TODO/FIXME marker in shipping code \u2014 .claude/marketplaces/cdesign-expo/src/index.ts:9", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 .claude/marketplaces/cdesign-expo/src/index.ts:9"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-161a1f657c9a0b91", "name": "Stray `console.log` in TS/JS \u2014 infra/dev-preview/server.js:197", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 infra/dev-preview/server.js:197"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-517f60eec8ebc89a", "name": "Dockerfile runs as root: back/cmd/aidosinterpreter/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: back/cmd/aidosinterpreter/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ef7536b2b80b0b2", "name": "Docker base image is tag-pinned but not digest-pinned: golang:1.25-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.25-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-09c929a0f9c5ddb8", "name": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-17c5189be3e94986", "name": "Insecure pattern 'node_child_process' in front/web/app/v2/deploy/actions.ts:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in front/web/app/v2/deploy/actions.ts:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d55a77f7ad8334b0", "name": "Insecure pattern 'node_child_process' in front/web/app/v2/builder/actions.ts:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in front/web/app/v2/builder/actions.ts:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf13ffadc77c76fe", "name": "Insecure pattern 'node_child_process' in front/web/app/ai-lab/actions.ts:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in front/web/app/ai-lab/actions.ts:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-872b50aacaaa89b1", "name": "Possible secret in front/web/app/ops-observability/OpsObservabilityPanel.tsx", "shortDescription": {"text": "Possible secret in front/web/app/ops-observability/OpsObservabilityPanel.tsx"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-399dc6487143ec7f", "name": "Insecure pattern 'node_child_process' in front/web/app/deploy/actions.ts:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in front/web/app/deploy/actions.ts:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-313f463cacbb3031", "name": "Insecure pattern 'node_child_process' in front/web/app/app-docs/actions.ts:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in front/web/app/app-docs/actions.ts:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38ddc5838bdb84ea", "name": "Insecure pattern 'dangerous_innerhtml' in front/web/app/collab/page.tsx:89", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in front/web/app/collab/page.tsx:89"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d091c48746256193", "name": "Insecure pattern 'node_child_process' in front/web/app/substrate/actions.ts:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in front/web/app/substrate/actions.ts:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c333bed37b33b0e7", "name": "Insecure pattern 'node_child_process' in front/web/app/v3/actions.ts:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in front/web/app/v3/actions.ts:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-423dd69a9ceb58a3", "name": "Insecure pattern 'node_child_process' in front/web/app/v3/instance/actions.ts:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in front/web/app/v3/instance/actions.ts:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a108f7f0ab23716b", "name": "Insecure pattern 'exec_used' in front/web/lib/governance.ts:61", "shortDescription": {"text": "Insecure pattern 'exec_used' in front/web/lib/governance.ts:61"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a5d513c0f64bedcd", "name": "Insecure pattern 'exec_used' in front/web/messages/fr.json:2826", "shortDescription": {"text": "Insecure pattern 'exec_used' in front/web/messages/fr.json:2826"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c87dbea9829abbf0", "name": "Insecure pattern 'exec_used' in front/web/messages/en.json:2826", "shortDescription": {"text": "Insecure pattern 'exec_used' in front/web/messages/en.json:2826"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c4d683d019aa2593", "name": "Insecure pattern 'direct_innerhtml_assignment' in .claude/skills/superpowers__brainstorming/scripts/helper.js:57", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in .claude/skills/superpowers__brainstorming/scripts/helper.js:57"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c46c26ab34c5665", "name": "Insecure pattern 'direct_innerhtml_assignment' in .claude/marketplaces/superpowers/skills/brainstorming/scripts/helper.j", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in .claude/marketplaces/superpowers/skills/brainstorming/scripts/helper.js:57"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbcb744fc56caa9c", "name": "Insecure pattern 'node_child_process' in .claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5a2da7e211b0d133", "name": "Insecure pattern 'direct_innerhtml_assignment' in .claude/marketplaces/cdesign-expo/.claude/skills/superpowers__brainsto", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in .claude/marketplaces/cdesign-expo/.claude/skills/superpowers__brainstorming/scripts/helper.js:57"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-15b226a22b135135", "name": "Insecure pattern 'direct_innerhtml_assignment' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/ski", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/brainstorming/scripts/helper.js:57"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-956910e396011635", "name": "Insecure pattern 'node_child_process' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/writi", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d8d27328f8ff7cb7", "name": "Possible secret in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/e", "shortDescription": {"text": "Possible secret in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/e2e-testing-patterns/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-5555ec47e3f792e9", "name": "Insecure pattern 'eval_used' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essent", "shortDescription": {"text": "Insecure pattern 'eval_used' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/code-review-excellence/SKILL.md:422"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-107c7f80bc3b79bf", "name": "Insecure pattern 'private_key_in_repo' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubern", "shortDescription": {"text": "Insecure pattern 'private_key_in_repo' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md:222"}, "fullDescription": {"text": "Found a known-risky pattern (private_key_in_repo). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-471558e4bc4829f9", "name": "Insecure pattern 'eval_used' in .claude/marketplaces/wshobson/plugins/developer-essentials/skills/code-review-excellence", "shortDescription": {"text": "Insecure pattern 'eval_used' in .claude/marketplaces/wshobson/plugins/developer-essentials/skills/code-review-excellence/SKILL.md:422"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d245ea4247bac659", "name": "Insecure pattern 'exec_used' in back/runtime/governance/owasp.go:144", "shortDescription": {"text": "Insecure pattern 'exec_used' in back/runtime/governance/owasp.go:144"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e1060a0c329f137d", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "astral-sh/setup-uv@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-22fae5ba89b72953", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "astral-sh/setup-uv@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-95648a4f952ce6c5", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ebe12b508d9c4b1", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2aa972b96980e74f", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1049721192da393", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "astral-sh/setup-uv@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c79505d5c8470190", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa48c7d910242858", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ef960d2dc4024bc", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb639d9a10a47b23", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0200618877e61194", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2931de17fb6c2ad4", "name": "Very large file: tests/e2e/agents.spec.ts (1966 lines)", "shortDescription": {"text": "Very large file: tests/e2e/agents.spec.ts (1966 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5bbc5d231bf33754", "name": "Very large file: front/web/components/AgentsPanel.tsx (4868 lines)", "shortDescription": {"text": "Very large file: front/web/components/AgentsPanel.tsx (4868 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d3f5cd599f5e3135", "name": "Very large file: front/web/app/connectors/ConnectorsPanel.tsx (1983 lines)", "shortDescription": {"text": "Very large file: front/web/app/connectors/ConnectorsPanel.tsx (1983 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2ab4c1f96422a202", "name": "Very large file: front/web/app/deploy/DeployPanel.tsx (2396 lines)", "shortDescription": {"text": "Very large file: front/web/app/deploy/DeployPanel.tsx (2396 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b41a357be225acd9", "name": "Very large file: front/web/lib/agentlayer.ts (1543 lines)", "shortDescription": {"text": "Very large file: front/web/lib/agentlayer.ts (1543 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30f59a115daef8f7", "name": "Very large file: front/web/lib/agentlayer.test.ts (1944 lines)", "shortDescription": {"text": "Very large file: front/web/lib/agentlayer.test.ts (1944 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12682c96f818158c", "name": "Very large file: front/web/lib/governance.ts (1506 lines)", "shortDescription": {"text": "Very large file: front/web/lib/governance.ts (1506 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c7fd9743fe90bf69", "name": "Very large file: .claude/marketplaces/wshobson/tools/tests/test_adapters.py (1204 lines)", "shortDescription": {"text": "Very large file: .claude/marketplaces/wshobson/tools/tests/test_adapters.py (1204 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c82de2e0e56ea489", "name": "Very large file: back/runtime/blockreason/blockreason.go (1461 lines)", "shortDescription": {"text": "Very large file: back/runtime/blockreason/blockreason.go (1461 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9cc8788a17c1527e", "name": "Node manifest has dependencies but no lockfile: front/web/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: front/web/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 202 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 415 placeholder/mock markers across 138 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: ci, lockfile. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing ci, lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cc55229a7a3c078d", "name": "Agent authority lacks a verifier contract: .mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a824e1dcd7df45f9", "name": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_fn06_functional_graph.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_fn06_functional_graph.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80547953de465dfd", "name": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_hr05_perrun_economy.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_hr05_perrun_economy.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-055bc4d79a3b9371", "name": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_ba28_replay_redact.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_ba28_replay_redact.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ad0e569bf734049", "name": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_gv05_policy_compiler.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_gv05_policy_compiler.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9111142913986455", "name": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_fn02_functional_mandate.", "shortDescription": {"text": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_fn02_functional_mandate.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-122f91b7f2906dc4", "name": "Agent authority lacks a verifier contract: .claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5fdd011e421df658", "name": "Agent authority lacks a verifier contract: .claude/stack.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/stack.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9429d588dc82fb5a", "name": "Agent authority lacks a verifier contract: .claude/agents/step-executor.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/step-executor.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-19f18bdc1ea8040d", "name": "Agent authority lacks a verifier contract: .claude/agents/security-auditor.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/security-auditor.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f517f5dadd6c8a2e", "name": "Agent instruction/config may expose a secret: .claude/agent-memory/step-verifier/project_fk11_ai_lab.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agent-memory/step-verifier/project_fk11_ai_lab.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f0e6f1f57da69469", "name": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_el02_grammar.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_el02_grammar.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5370fc240e83acb", "name": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_s00_pattern.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_s00_pattern.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-29be53a5c5f44918", "name": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_ba27_economicsloop.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_ba27_economicsloop.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c57f2a3e450a2321", "name": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_wb2_21_emetteurs.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_wb2_21_emetteurs.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c8b494ebf65af93", "name": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_wb2_15_ai_lab.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_wb2_15_ai_lab.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea0b8a46bacac079", "name": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_ba20_scheduler.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_ba20_scheduler.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11418f8e92b4f17a", "name": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_s12_completeness_stop.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_s12_completeness_stop.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f80db7feea3d7b2b", "name": "Agent instruction/config may expose a secret: .claude/agent-memory/step-verifier/MEMORY.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agent-memory/step-verifier/MEMORY.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-520e9ab7459f7c2c", "name": "Agent authority lacks a verifier contract: .claude/skills/compound-besoin/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/compound-besoin/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e61b809052ae4ea0", "name": "Agent authority lacks a verifier contract: .claude/skills/besoin-invariant/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/besoin-invariant/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e6b88d43ddd5bb9", "name": "Agent authority lacks a verifier contract: .claude/skills/trim/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/trim/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef8cc0f79889ec84", "name": "Agent authority lacks a verifier contract: .claude/skills/pocock__domain-model/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/pocock__domain-model/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62a4060617c6766e", "name": "Agent authority lacks a verifier contract: .claude/skills/view/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/view/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2db2b264c688f767", "name": "Agent authority lacks a verifier contract: .claude/skills/pocock__qa/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/pocock__qa/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf7a9f06bcd0ffc8", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/.version-bump.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/.version-bump.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-baaffba15107b35e", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/CODE_OF_CONDUCT.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/CODE_OF_CONDUCT.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6df5e9fe6dccde61", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/tests/subagent-driven-dev/svelte-todo/design", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/tests/subagent-driven-dev/svelte-todo/design.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8e74b20bf2629ae", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/tests/subagent-driven-dev/go-fractals/design", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/tests/subagent-driven-dev/go-fractals/design.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4af09166c73dd31c", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/hooks/hooks.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/hooks/hooks.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8d8f860c7eff3c6", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/hooks/hooks-cursor.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/hooks/hooks-cursor.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94b8274407d78c15", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/skills/using-superpowers/references/gemini-t", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/skills/using-superpowers/references/gemini-tools.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2127a0edb29cae9", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/skills/using-superpowers/references/copilot-", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/skills/using-superpowers/references/copilot-tools.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-801d29bf41a926f7", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/skills/using-superpowers/references/codex-to", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/skills/using-superpowers/references/codex-tools.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4ed159ff57464d2a", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/superpowers/skills/writing-skills/anthropic-best-prac", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/superpowers/skills/writing-skills/anthropic-best-practices.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-429e8b987da1411c", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/.github/ISSUE_TEMPLATE/bug_report.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/.github/ISSUE_TEMPLATE/bug_report.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-42fb7ea8f02b1f7f", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d472f1ab69d5d09c", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-70f1d34aeb8681cf", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/agents/security-auditor.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/agents/security-auditor.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-04a34eef5d3ab0b7", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/skills/octo-issue-tracker/SKILL.", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/skills/octo-issue-tracker/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6613b74d14203717", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/skills/pocock__qa/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/skills/pocock__qa/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18575619f3380a56", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/.version-b", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/.version-bump.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-396386738cffda43", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/CODE_OF_CO", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/CODE_OF_CONDUCT.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d5097615342fe2d6", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/suba", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/subagent-driven-dev/svelte-todo/design.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7294a0eab0f5ee8", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/suba", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/subagent-driven-dev/go-fractals/design.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ad5259b377c9f7d", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/hooks/hook", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/hooks/hooks.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-57e3b853b0a29f5e", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/hooks/hook", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/hooks/hooks-cursor.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cbbd91f9c6387e1b", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/usi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/using-superpowers/references/gemini-tools.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-870797ba4332a478", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/usi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/using-superpowers/references/copilot-tools.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c9317aab5151c6de", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/usi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/using-superpowers/references/codex-tools.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-74c27e415a1a38fb", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/writing-skills/anthropic-best-practices.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8d86c829a555ac3e", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/.github/IS", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/.github/ISSUE_TEMPLATE/bug_report.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8e48914439b08c0d", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/docs/agent", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/docs/agent-skills.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fea7fb8ae75ccc3e", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/ISSUE", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/new_subagent.yml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-66224a394ab9dba8", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/workf", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/workflows/eval-report.yml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5e65094a3e6bb87", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/co", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/code-refactoring/commands/context-restore.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a811bc58e8c8be6f", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/error", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/error-debugging/commands/error-trace.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e102520eb59f28ad", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-de", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e8030e311e7bd28", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/mobile-android-design/references/compose-components.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cddaefa0015a3e10", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/web-component-design/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a86972cf41504369", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/design-tokens.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7f6744e19d13bc8b", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/component-architecture.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8013e95af860b6ac", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-de", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/react-native-design/references/navigation-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2ac8fa68c9329b7", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/docum", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-standards/skills/hads/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d369b45f6000f77", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ll", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/commands/ai-assistant.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-30dbbc3effebd774", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ll", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/embedding-strategies/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c1f3c6584faece31", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ll", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/hybrid-search-implementation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6a3b7961115964b3", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ll", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-engineering-patterns/references/few-shot-learning.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b05f52ecc9258c47", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-a", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/similarity-search-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-beb00e6c81f2ecc1", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ship-", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ship-mate/commands/ship.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-865263d9f1734d69", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ship-", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ship-mate/stories/_template.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c96601de10e37a8", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/syste", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/systems-programming/agents/c-pro.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dfdf8a5ab1187e82", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/sy", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-86df708bf7234fde", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/syste", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d26bc1cddf56f3d5", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/se", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-compliance/commands/compliance-check.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f119d25b7cd6f10f", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/game-", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c2d82faed856b8d", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/game-", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/references/advanced-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-efc44217a8a07d05", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/commands/certify.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f9ec9e77c98acef9", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/commands/compare.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa53c8316bbe808d", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/commands/eval.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-13e720151692091c", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/agents/eval-orchestrator.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5dfdff870f19fdd5", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plug", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/code-documentation/commands/doc-generate.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-715b57e675981d66", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ob", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/observability-monitoring/commands/monitor-setup.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-38b64f3bba17b6e7", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ob", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/observability-monitoring/skills/prometheus-configuration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ffaa7f2f1383aa29", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/fr", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/frontend-mobile-development/skills/react-state-management/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c1cf413137526e24", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/bl", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/blockchain-web3/skills/nft-standards/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bfa199a259bc0117", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/py", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/commands/python-scaffold.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b4dc36e2ca26cad6", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plug", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/uv-package-manager/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d04db1869e4f66b", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/py", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5e24614c3b15ad71", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/pytho", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18608c52ff9841dc", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/py", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-56ccfa099fe78e29", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/py", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/references/advanced-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4ce735c1319a40ac", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/co", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/context-management/commands/context-restore.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8373f9d8f8c78448", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/re", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/reverse-engineering/agents/firmware-analyst.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2a85ccbd324e2d27", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/re", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/reverse-engineering/skills/protocol-reverse-engineering/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2b135511996f46d0", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/datab", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/database-design/skills/postgresql/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce8ccadf92ad4ee2", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/me", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/meigen-ai-design/README.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-42f2134f523e331f", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/meige", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/meigen-ai-design/commands/gen.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0ca9e2454ca63b7b", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/pr", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-429f975a977121b9", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/prote", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef3adfab8a094850", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/de", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/auth-implementation-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a0aa32d5f877d0a5", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/devel", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/sql-optimization-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d49e97ec0eb3777", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/busin", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/business-analytics/skills/kpi-dashboard-design/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-421d01675f8aa12a", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ku", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4edabf010e463c0f", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ku", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a0b59008fced508c", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kuber", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-34aff4e5803bccee", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kuber", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-09e1399fbd27b461", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kuber", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/references/rbac-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1342f0ac2b4e098", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ku", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-93f4943cc681bf0e", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ku", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/references/deployment-spec.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a33dcb3a9c80cafd", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kuber", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/deployment-template.yaml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d3a6b5b8778d652", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kuber", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/configmap-template.yaml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf66428b98eecc7c", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/revie", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/review-agent-governance/commands/approve-review.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7fd67ada3b9fc68f", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/re", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-080bc4bf5f69e809", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/revie", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df815a9f452da57c", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/pe", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/performance-testing-review/commands/ai-review.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f518bd07cad070e2", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/front", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/frontend-mobile-security/commands/xss-scan.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-214189e0d975a662", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/web-s", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/web-scripting/agents/ruby-pro.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c5bbf8a3e8f55a61", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/datab", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/database-migrations/commands/migration-observability.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1bd0b932553c74c7", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/qu", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-metrics-calculation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5ac69a113cc0c7fb", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/pa", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/payment-processing/skills/pci-compliance/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f84d3734398bd11a", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/pa", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/payment-processing/skills/paypal-integration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-459aee76129bcfb6", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/da", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/database-cloud-optimization/commands/cost-optimize.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-88528dced40f4d72", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/error", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/error-diagnostics/commands/error-trace.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b92e3deea2718e2", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ja", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-92855b526cd3f7d5", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plug", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f903baf1abaf6546", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ja", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/javascript-testing-patterns/references/advanced-testing-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f426acf2bbba88db", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ja", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8efe8794b2707a58", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ja", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/references/advanced-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-760d1c3e7424831c", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ja", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/modern-javascript-patterns/references/advanced-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3175f27d92aaadca", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backe", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/agents/security-auditor.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-130af51186591d42", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backe", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/event-store-design/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-647c46418dd92c20", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ba", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/references/rest-best-practices.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cd89f2cff4f44adc", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ba", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8897c4d85f690762", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ba", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d936ae533afa673", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backe", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-26f6a84fc69c7250", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ba", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f2f63925237d3d7a", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backe", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b46e8a81068de40d", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plug", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cicd-automation/commands/workflow-automate.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0fcce26dfe626700", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ci", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cicd-automation/skills/secrets-management/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a8a99673632c23fb", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ci", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cicd-automation/skills/deployment-pipeline-design/references/advanced-strategies.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-347ffb271c223d80", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/condu", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/conductor/templates/code_styleguides/csharp.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3fccb006728f0b4d", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plug", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-generation/commands/doc-generate.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbf4d51b9558ebfc", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/docum", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-615ca0b0a84b9667", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plug", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/references/code-first-and-tooling.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d28673dbc0b2369", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cl", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/mtls-configuration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e71a4123e9cd1e6", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/multi-cloud-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-09e371dc4dafcec4", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/service-comparison.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8db68516acc5a61c", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/service-mesh-observability/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c0dc3a44b29d6e4", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plug", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b5b972a0ce18caf", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1597fde18a094d1", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ag", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/README.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6d2080a04bf22004", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/commands/team-delegate.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b5a7093a114407e", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/skills/parallel-feature-development/references/file-ownership.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-357a74f00ea38846", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/skills/team-composition-patterns/references/agent-type-selection.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-caf7d1a3fea3defc", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ag", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/skills/task-coordination-strategies/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-db037dd2f5003675", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/start", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/startup-business-analyst/commands/business-case.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0789b9d8ee72b680", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/se", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d2e771f147d4311", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plug", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-61c997c1c5c74249", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plug", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-scanning/commands/security-dependencies.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-14b50c13afa343d9", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ap", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/application-performance/commands/performance-optimization.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c30efc26d7f43416", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/de", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/deployment-validation/commands/config-validate.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d052f148b48bded", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/te", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/team-collaboration/commands/issue.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f6c89a71190a3b13", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/c4-ar", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-container.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a476610cf89ca2b", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/c4-ar", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-component.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-adbdbebccd21fcd1", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f97c31ba4ce330a", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/qa/SKILL", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/qa/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-255a0c57c75c51cd", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/domain-m", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/domain-model/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c18995463b768b8b", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/obsidian", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/obsidian-vault/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a15ddd7433ea4b5f", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/github-t", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/github-triage/AGENT-BRIEF.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-99e933c08f2a4881", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/.github/workflo", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-572afeaabb9fef17", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/docs/agent-skills.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/docs/agent-skills.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-076c2f899d90b6a9", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/docs/harnesses.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/docs/harnesses.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5a1ca9702593d940", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/tools/adapters/cursor_rules/010-python-tooling.", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/tools/adapters/cursor_rules/010-python-tooling.mdc"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d33d94a4f9882e4c", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/tools/adapters/cursor_rules/020-agent-skill-aut", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/tools/adapters/cursor_rules/020-agent-skill-authoring.mdc"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-133eacb4fb7ec5e0", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/new_subagent.yml", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/new_subagent.yml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ded387d3445b7229", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/bug_report.yml", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/bug_report.yml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-005ab8dfa378bea2", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.github/workflows/eval-report.yml", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.github/workflows/eval-report.yml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cfeff09930260678", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/.github/workflows/validate.yml", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/.github/workflows/validate.yml"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a4ae6a14de00fbec", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/.github/workflows/validate.yml", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/.github/workflows/validate.yml"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd9ebaa4a20a4d3d", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.cursor/rules/010-python-tooling.mdc", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.cursor/rules/010-python-tooling.mdc"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1510cab197f38908", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.cursor/rules/020-agent-skill-authoring.mdc", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.cursor/rules/020-agent-skill-authoring.mdc"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8ecbefb2c54caeb", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/code-refactoring/commands/context-re", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/code-refactoring/commands/context-restore.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6b2d97c92e8f4715", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/error-debugging/commands/error-trace.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/error-debugging/commands/error-trace.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a32710537ca85f7a", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ui-design/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ui-design/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d58c200644d83475", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/mobile-android-desi", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/mobile-android-design/references/compose-components.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5dc679f480b988fe", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/web-component-desig", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/web-component-design/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9b91efcbb16788fc", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patte", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/design-tokens.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0f08a9854e0812b5", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patte", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/component-architecture.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8f1f21cda18ab398", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ui-design/skills/react-native-design/re", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ui-design/skills/react-native-design/references/navigation-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49066b89ffc4b8b0", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/documentation-standards/skills/hads/SKI", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/documentation-standards/skills/hads/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17d2f31b8bb5876a", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/commands/ai-assi", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/commands/ai-assistant.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9c4b3a3f6718e0c3", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/embedding", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/embedding-strategies/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0dca501ca9f0fd26", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/hybrid-se", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/hybrid-search-implementation/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3e9557d5ebd9765d", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-en", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-engineering-patterns/references/few-shot-learning.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b4e346dc62c37c34", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/similarity-s", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/similarity-search-patterns/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb24f22bb1f2a66e", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ship-mate/commands/ship.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ship-mate/commands/ship.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5fb57840402757aa", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ship-mate/stories/_template.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ship-mate/stories/_template.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b32f64b80b3640d1", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/systems-programming/agents/c-pro.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/systems-programming/agents/c-pro.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e415bd1e8093cbbd", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-asyn", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d545369e1b1e30c6", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-p", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d77e7fe52b6dcd3a", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/security-compliance/commands/complia", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/security-compliance/commands/compliance-check.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c0e2dac4690f1135", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/references/advanced-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-af1197b00598bc78", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62214f2ad515895d", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/commands/certify.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/commands/certify.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-15ba2c7a2330a0c4", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/commands/compare.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/commands/compare.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c64f7a1206d22ad5", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/commands/eval.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/commands/eval.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-552bd02a0a1c8892", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/agents/eval-orchestrator.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/agents/eval-orchestrator.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a10f0f11fa2f9247", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/code-documentation/commands/do", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/code-documentation/commands/doc-generate.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aced0143cfb6b85d", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/observability-monitoring/commands/mo", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/observability-monitoring/commands/monitor-setup.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-41552d4e502fa482", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/observability-monitoring/skills/distrib", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/observability-monitoring/skills/distributed-tracing/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72f1f31d835a3188", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/observability-monitoring/skills/prom", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/observability-monitoring/skills/prometheus-configuration/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b6c6027da67fb90c", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/frontend-mobile-development/skills/r", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/frontend-mobile-development/skills/react-state-management/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7fe81b3b91b3ed2b", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/blockchain-web3/skills/nft-standards", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/blockchain-web3/skills/nft-standards/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-49d2b818f9e8a07a", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/commands/python-s", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/commands/python-scaffold.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f6e807b04cb2216d", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/python-development/skills/uv-p", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/python-development/skills/uv-package-manager/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a0630d85e86a03e0", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-con", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f2427d3879c467c1", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-config", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dbda152e41d319b4", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-con", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a71e2725f5355128", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-config", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb3395cef4629bcc", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-tes", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-500b75d595bc6f62", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-tes", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/references/advanced-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3651a9e21f02dfbc", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-type-s", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-type-safety/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-178f32c317d73a68", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-backgr", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-background-jobs/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e586bc30dc706cd8", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/context-management/commands/context-", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/context-management/commands/context-restore.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cc4cc4791f10e831", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/reverse-engineering/agents/firmware-", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/reverse-engineering/agents/firmware-analyst.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-88befa66bda63b60", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/reverse-engineering/skills/memory-foren", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/reverse-engineering/skills/memory-forensics/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3287b2d999f85b3c", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/reverse-engineering/skills/protocol-", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/reverse-engineering/skills/protocol-reverse-engineering/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5e8bd7faf75e54fe", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/database-design/skills/postgresql/SKILL", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/database-design/skills/postgresql/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-704b3eb3e6aca227", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/meigen-ai-design/README.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/meigen-ai-design/README.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6d47dbd243495008", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/meigen-ai-design/commands/gen.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/meigen-ai-design/commands/gen.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8a2e8db0c87ac18f", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9f2227b8cf7ba790", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d533812d3f9eab9", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/developer-essentials/skills/auth-imp", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/developer-essentials/skills/auth-implementation-patterns/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ad732fd82db63fac", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/developer-essentials/skills/sql-optimiz", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/developer-essentials/skills/sql-optimization-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5442a875442e1d9", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/business-analytics/skills/kpi-dashboard", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/business-analytics/skills/kpi-dashboard-design/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-119107ad041bdda6", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-675935e87534cb12", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0b81198c7205b0f4", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-wor", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cdb45f7b517a91e5", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-securi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cbff1f0407d5aa75", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-securi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/references/rbac-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c24b0c06ca7dd6a5", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-man", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/references/deployment-spec.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-338696023d7052c1", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-man", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f9146dd58e50854a", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manife", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/deployment-template.yaml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08e6021af25d84fc", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manife", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/configmap-template.yaml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ecb34b957780be64", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/review-agent-governance/commands/approv", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/review-agent-governance/commands/approve-review.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a2eb8326883b4161", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c1edf57ff302c143", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.jso", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62f05173af0866d6", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/performance-testing-review/commands/", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/performance-testing-review/commands/ai-review.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1f88e1b77404588c", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/frontend-mobile-security/commands/xss-s", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/frontend-mobile-security/commands/xss-scan.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a26c806356cb9f7", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/hr-legal-compliance/skills/gdpr-data-ha", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/hr-legal-compliance/skills/gdpr-data-handling/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d7b0e29d595e0a3", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/shell-scripting/skills/shellcheck-confi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/shell-scripting/skills/shellcheck-configuration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8e330e45d37bcc3", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/web-scripting/agents/ruby-pro.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/web-scripting/agents/ruby-pro.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c3932afdfee0405", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/database-migrations/commands/migration-", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/database-migrations/commands/migration-observability.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-231d964c11690e69", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-met", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-metrics-calculation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6b8050553684a857", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-met", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-metrics-calculation/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a475c863bf305768", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/payment-processing/skills/pci-compli", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/payment-processing/skills/pci-compliance/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8172d7b5910f824e", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/payment-processing/skills/paypal-int", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/payment-processing/skills/paypal-integration/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-139f45c0eaf812fe", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/database-cloud-optimization/commands", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/database-cloud-optimization/commands/cost-optimize.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-adb58146573c2640", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/error-diagnostics/commands/error-trace.", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/error-diagnostics/commands/error-trace.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f8462039a7b1c65", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/commands/types", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-954d92b57e82e793", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/javascript-typescript/commands", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb0edb2e5996ca04", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/javascr", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/javascript-testing-patterns/references/advanced-testing-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5e677585ec92c0c4", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/references/advanced-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8f708c14928b9fc2", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-34e678f0e4bdc4bb", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/modern-", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/modern-javascript-patterns/references/advanced-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-69e34d053dbb462f", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/agents/security-aud", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/agents/security-auditor.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4f108d4fd18f757f", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/event-store-", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/event-store-design/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97b2ceed54d0670f", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/api-desig", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/references/rest-best-practices.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e5d2d2ecfd0dc077", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orch", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-94f2c638262d0e5a", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchest", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6333d09eb228ab95", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orch", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-178319ac4f4a08ad", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchest", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8fde0702df472ff", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/workflow-orc", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/workflow-orchestration-patterns/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aee005d55dcae1a2", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/microserv", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cd43282fc4a97ed4", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/microservice", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3664dc7febac8a9f", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/projection-p", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/projection-patterns/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94ff9b1d9d4b9d66", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/cqrs-impleme", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/cqrs-implementation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4cd5ca3155577288", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/cicd-automation/commands/workf", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/cicd-automation/commands/workflow-automate.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ffd1dd3b568df1f", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/cicd-automation/skills/secrets-manag", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/cicd-automation/skills/secrets-management/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5dcdd1bf58ddcfff", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/cicd-automation/skills/deployment-pi", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/cicd-automation/skills/deployment-pipeline-design/references/advanced-strategies.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6eb10ec36de2ee55", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/framework-migration/skills/angular-migr", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/framework-migration/skills/angular-migration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1dd813c4553cf1c4", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/framework-migration/skills/react-modern", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/framework-migration/skills/react-modernization/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a2fc02ad15ba912a", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/conductor/templates/code_styleguides/cs", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/conductor/templates/code_styleguides/csharp.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0043fba7bf8c703d", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/conductor/skills/context-driven-develop", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/conductor/skills/context-driven-development/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c754eda7114a28f5", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/documentation-generation/comma", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/documentation-generation/commands/doc-generate.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-89828ee2d6738800", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-64ca26c8a5571933", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/documentation-generation/skill", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/references/code-first-and-tooling.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d315a7a024566aad", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/documentation-generation/skills/changel", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/documentation-generation/skills/changelog-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50567f8c2e7490e1", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/mtls-con", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/mtls-configuration/references/details.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c48504adf4f52987", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/multi-cloud-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c55b84ee915fd22", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/service-comparison.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5dd3c50299b46639", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/service-mes", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/service-mesh-observability/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-43162ee9da76d61d", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/li", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0ec2332db4b54bb0", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/hybrid-clou", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cfb5bc87158100fb", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/agent-teams/README.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/agent-teams/README.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-49d225e140eae172", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/agent-teams/commands/team-delegate.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/agent-teams/commands/team-delegate.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2092dcc43df77633", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/agent-teams/skills/parallel-feature-dev", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/agent-teams/skills/parallel-feature-development/references/file-ownership.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-00c30837211adeb7", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/agent-teams/skills/team-composition-pat", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/agent-teams/skills/team-composition-patterns/references/agent-type-selection.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-787860bb3ed26652", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/agent-teams/skills/task-coordination", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/agent-teams/skills/task-coordination-strategies/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3706482cbf21f4aa", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/startup-business-analyst/commands/busin", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/startup-business-analyst/commands/business-case.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-929350c281892aac", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/startup-business-analyst/skills/team-co", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/startup-business-analyst/skills/team-composition-analysis/references/details.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-caaaac97be2516df", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/security-scanning/commands/security-", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-430c59b8b5ab807a", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/security-scanning/commands/sec", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b0bab34e800aee69", "name": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/security-scanning/commands/sec", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/security-scanning/commands/security-dependencies.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0dfd66da0886d9fa", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/application-performance/commands/per", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/application-performance/commands/performance-optimization.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-411b61a641d8a1be", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/deployment-validation/commands/confi", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/deployment-validation/commands/config-validate.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e3f19a988ca5e0dc", "name": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/team-collaboration/commands/issue.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/team-collaboration/commands/issue.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4b786487a8833d26", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-container.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-container.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d49b58d800f21964", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-component.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-component.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a0fd1ce15c5b1800", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3fdc941537a545cc", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/qa/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/qa/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a6401be4fa1848c", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/domain-model/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/domain-model/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e4f4b3bfa5e8913", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/obsidian-vault/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/obsidian-vault/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f330ce42c962b3b2", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/github-triage/AGENT-BRIEF.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/github-triage/AGENT-BRIEF.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea262c066a26c528", "name": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/.github/workflows/sync-upstream.yml", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d3be87eacc75c672", "name": "Commented-code block (5 lines) in playwright.config.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in playwright.config.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ea0c30a246bf1bd4", "name": "Commented-code block (6 lines) in tests/e2e/v2-deploy.spec.ts:142", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/v2-deploy.spec.ts:142"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d55cc3d40a8fd146", "name": "Commented-code block (8 lines) in tests/e2e/v3.spec.ts:369", "shortDescription": {"text": "Commented-code block (8 lines) in tests/e2e/v3.spec.ts:369"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-841b0cfb7a9e6a88", "name": "Commented-code block (10 lines) in tests/e2e/agents.spec.ts:288", "shortDescription": {"text": "Commented-code block (10 lines) in tests/e2e/agents.spec.ts:288"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1afffea28efdf551", "name": "Commented-code block (6 lines) in front/web/components/SchedulerSection.tsx:8", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/components/SchedulerSection.tsx:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2f757a1257e8ae41", "name": "Legacy-named symbol `replayModeLegacy` in front/web/components/AgentsPanel.tsx:429", "shortDescription": {"text": "Legacy-named symbol `replayModeLegacy` in front/web/components/AgentsPanel.tsx:429"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-015cf7a66ff33524", "name": "Commented-code block (5 lines) in front/web/components/AgentsPanel.tsx:96", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/components/AgentsPanel.tsx:96"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c548a48adecfabf1", "name": "Commented-code block (7 lines) in front/web/components/GovernancePanel.tsx:30", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/components/GovernancePanel.tsx:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dee4ce285d463dfd", "name": "Commented-code block (8 lines) in front/web/components/ErasurePanel.tsx:15", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/components/ErasurePanel.tsx:15"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1c34dd9b67358aa9", "name": "Commented-code block (5 lines) in front/web/components/CompoundingSection.tsx:3", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/components/CompoundingSection.tsx:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-56d85fbf67417b58", "name": "Commented-code block (7 lines) in front/web/app/governance/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/governance/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6cc9f998684ee396", "name": "Commented-code block (5 lines) in front/web/app/global-invariants/page.tsx:6", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/global-invariants/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-57403b59a130a013", "name": "Commented-code block (5 lines) in front/web/app/sensors/page.tsx:4", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/sensors/page.tsx:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fcdea574b77179dc", "name": "Commented-code block (6 lines) in front/web/app/archive-curation/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/archive-curation/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c259a4cc51a74b42", "name": "Commented-code block (6 lines) in front/web/app/ai-lab/actions.ts:111", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/ai-lab/actions.ts:111"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3b6ac55ad61986ee", "name": "Commented-code block (8 lines) in front/web/app/compound-besoin/page.tsx:10", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/app/compound-besoin/page.tsx:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-87f70f33ba9723da", "name": "Commented-code block (6 lines) in front/web/app/compound-besoin/doc/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/compound-besoin/doc/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bd5d3de0bfb5ce00", "name": "Commented-code block (7 lines) in front/web/app/entity-map/page.tsx:7", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/entity-map/page.tsx:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7d488bec70553ca9", "name": "Commented-code block (5 lines) in front/web/app/authorities/page.tsx:8", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/authorities/page.tsx:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6b5514598ec664ad", "name": "Commented-code block (6 lines) in front/web/app/truth-typing/page.tsx:7", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/truth-typing/page.tsx:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-73b84fae79c470a8", "name": "Commented-code block (11 lines) in front/web/app/web-preview/page.tsx:6", "shortDescription": {"text": "Commented-code block (11 lines) in front/web/app/web-preview/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-df802cf4c4581119", "name": "Commented-code block (6 lines) in front/web/app/web-preview/_generated/checkout-button.tsx:1", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/web-preview/_generated/checkout-button.tsx:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-69efecb696e2bd3b", "name": "Commented-code block (7 lines) in front/web/app/besoin-invariant/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/besoin-invariant/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-19f9c3118ba55a62", "name": "Commented-code block (7 lines) in front/web/app/why-tree/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/why-tree/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-62115e6d88c964a2", "name": "Commented-code block (6 lines) in front/web/app/policy/page.tsx:5", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/policy/page.tsx:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aa8047b32eab6340", "name": "Commented-code block (6 lines) in front/web/app/tech-spec/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/tech-spec/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0e5dae58c0a8080b", "name": "Commented-code block (7 lines) in front/web/app/decision-reuse/page.tsx:7", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/decision-reuse/page.tsx:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-268cfc98975a9572", "name": "Commented-code block (7 lines) in front/web/app/version-dag/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/version-dag/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b75b452e726d5dbb", "name": "Commented-code block (11 lines) in front/web/app/adoption/page.tsx:6", "shortDescription": {"text": "Commented-code block (11 lines) in front/web/app/adoption/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-413c59c2e2b96e31", "name": "Commented-code block (5 lines) in front/web/app/red-propagation/page.tsx:6", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/red-propagation/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fa4ff77c3676215f", "name": "Commented-code block (6 lines) in front/web/app/context-compression/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/context-compression/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-64340d74b7066a51", "name": "Commented-code block (6 lines) in front/web/app/caused-by/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/caused-by/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ea19947fb0167dfe", "name": "Commented-code block (7 lines) in front/web/app/emitters/page.tsx:19", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/emitters/page.tsx:19"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5ea7b3fa97d79944", "name": "Commented-code block (7 lines) in front/web/app/emitted-target/page.tsx:9", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/emitted-target/page.tsx:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a70fdc24359ed4e5", "name": "Commented-code block (7 lines) in front/web/app/compound-besoin-capitalisation/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/compound-besoin-capitalisation/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e500c55f40314b92", "name": "`fetch()` without try/.catch or AbortSignal \u2014 front/web/app/front-emitter/FrontEmitterPanel.tsx:60", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 front/web/app/front-emitter/FrontEmitterPanel.tsx:60"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-45716d9d31165d36", "name": "Commented-code block (6 lines) in front/web/app/expr/page.tsx:4", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/expr/page.tsx:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3536776c82c49c8b", "name": "Commented-code block (6 lines) in front/web/app/semantic-diff/page.tsx:7", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/semantic-diff/page.tsx:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-630a829179526ba2", "name": "Commented-code block (7 lines) in front/web/app/mirrors/page.tsx:4", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/mirrors/page.tsx:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3cd0be54db7e7152", "name": "Commented-code block (7 lines) in front/web/app/exploration/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/exploration/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c6bdad932265d6e0", "name": "Commented-code block (6 lines) in front/web/app/semantic-merge/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/semantic-merge/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-94b17aad82bea665", "name": "Commented-code block (7 lines) in front/web/app/context-pack/page.tsx:7", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/context-pack/page.tsx:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1cc77196487ee698", "name": "Commented-code block (9 lines) in front/web/app/db-projection/page.tsx:6", "shortDescription": {"text": "Commented-code block (9 lines) in front/web/app/db-projection/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c2d63163443d142c", "name": "Commented-code block (10 lines) in front/web/app/evolution-sandbox/page.tsx:6", "shortDescription": {"text": "Commented-code block (10 lines) in front/web/app/evolution-sandbox/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aaa8fac761cce074", "name": "Commented-code block (7 lines) in front/web/app/phase-stable/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/phase-stable/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-48e9b29f828b339c", "name": "Commented-code block (9 lines) in front/web/app/compound-besoin-cascade/page.tsx:6", "shortDescription": {"text": "Commented-code block (9 lines) in front/web/app/compound-besoin-cascade/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2af9b4d593d298dd", "name": "Commented-code block (5 lines) in front/web/app/stack-emit/page.tsx:38", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/stack-emit/page.tsx:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6bf83fca09083297", "name": "Commented-code block (8 lines) in front/web/app/meta/page.tsx:6", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/app/meta/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fc4bb4bbd1d53466", "name": "Commented-code block (7 lines) in front/web/app/memory-backends/page.tsx:7", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/memory-backends/page.tsx:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f544a9df242d8d55", "name": "Commented-code block (8 lines) in front/web/app/compound-besoin-completeness/page.tsx:6", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/app/compound-besoin-completeness/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eabcc81d5b85e7f6", "name": "Commented-code block (6 lines) in front/web/app/compound-besoin-gate/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/compound-besoin-gate/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-900b303afbfea029", "name": "`fetch()` without try/.catch or AbortSignal \u2014 front/web/app/preview/PreviewPanel.tsx:65", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 front/web/app/preview/PreviewPanel.tsx:65"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1fc7a64ce6399e9c", "name": "Commented-code block (10 lines) in front/web/app/billing/page.tsx:6", "shortDescription": {"text": "Commented-code block (10 lines) in front/web/app/billing/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e3385be858ec22e5", "name": "Commented-code block (6 lines) in front/web/app/ingestion/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/ingestion/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a14183e1179063f6", "name": "Commented-code block (6 lines) in front/web/app/emit-ideas/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/emit-ideas/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d5cced48c08cafe2", "name": "Commented-code block (6 lines) in front/web/app/besoin-intake/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/besoin-intake/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d1b857bff570e864", "name": "Commented-code block (7 lines) in front/web/app/compound-besoin-proposes/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/compound-besoin-proposes/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ca186083df685772", "name": "Legacy-named symbol `replayModeLegacy` in front/web/app/agents/page.tsx:284", "shortDescription": {"text": "Legacy-named symbol `replayModeLegacy` in front/web/app/agents/page.tsx:284"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-884801f6fa02b090", "name": "Commented-code block (5 lines) in front/web/app/agents/page.tsx:8", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/agents/page.tsx:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-85ab9d8aa6fd4642", "name": "Commented-code block (5 lines) in front/web/app/scopes/page.tsx:7", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/scopes/page.tsx:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9fabf5757f1233b2", "name": "Commented-code block (6 lines) in front/web/app/compound-besoin-grammar/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/compound-besoin-grammar/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-62a38f18674164ea", "name": "Commented-code block (5 lines) in front/web/app/temporal-invariants/page.tsx:6", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/temporal-invariants/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1825931c6ec024b0", "name": "Commented-code block (6 lines) in front/web/app/app-ops/actions.ts:201", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/app-ops/actions.ts:201"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b4580c9cb7b1e26d", "name": "Commented-code block (5 lines) in front/web/app/link-graph/page.tsx:11", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/link-graph/page.tsx:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03cebd4fc778cfda", "name": "Commented-code block (11 lines) in front/web/app/collab/page.tsx:6", "shortDescription": {"text": "Commented-code block (11 lines) in front/web/app/collab/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-352f6717d8f90ec8", "name": "Commented-code block (7 lines) in front/web/app/compound-besoin-graph/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/compound-besoin-graph/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0b2e5826eff77049", "name": "Commented-code block (6 lines) in front/web/app/mirror-health/page.tsx:4", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/mirror-health/page.tsx:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4fd38af9fb79b9e3", "name": "Commented-code block (6 lines) in front/web/app/compound/page.tsx:9", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/compound/page.tsx:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-235a894020b6df91", "name": "Commented-code block (7 lines) in front/web/app/compound-besoin-candescend/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/compound-besoin-candescend/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-603969de1c4c154a", "name": "Commented-code block (6 lines) in front/web/app/red-backlog/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/red-backlog/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5c5b617b33815218", "name": "Commented-code block (7 lines) in front/web/app/goal/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/goal/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c348a7cb715f5001", "name": "Commented-code block (7 lines) in front/web/app/demo-checkout/DemoCheckoutPanel.tsx:15", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/demo-checkout/DemoCheckoutPanel.tsx:15"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eb928d1cbbe60bc4", "name": "Commented-code block (5 lines) in front/web/app/harness-economics/page.tsx:6", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/harness-economics/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-60b0f8e1551225d3", "name": "Commented-code block (8 lines) in front/web/app/mutation-score/page.tsx:6", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/app/mutation-score/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f67270ef9184db8f", "name": "Commented-code block (5 lines) in front/web/app/truth-tree/page.tsx:6", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/truth-tree/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e997d82a9fa6ab72", "name": "Commented-code block (13 lines) in front/web/app/gdpr-erasure/page.tsx:6", "shortDescription": {"text": "Commented-code block (13 lines) in front/web/app/gdpr-erasure/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e0b27ecfe4660f26", "name": "Commented-code block (9 lines) in front/web/app/api-projection/page.tsx:7", "shortDescription": {"text": "Commented-code block (9 lines) in front/web/app/api-projection/page.tsx:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1fd9fe11d6c502ad", "name": "Commented-code block (5 lines) in front/web/app/changeset/page.tsx:6", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/changeset/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-53a685a31d82de41", "name": "Commented-code block (9 lines) in front/web/app/compound-besoin-thresholds/page.tsx:6", "shortDescription": {"text": "Commented-code block (9 lines) in front/web/app/compound-besoin-thresholds/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-670b6c8f1eee554b", "name": "Commented-code block (6 lines) in front/web/app/operation/page.tsx:4", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/operation/page.tsx:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-84e1c959060b34f2", "name": "Commented-code block (6 lines) in front/web/app/completeness/page.tsx:4", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/completeness/page.tsx:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b7102a479603cf39", "name": "Commented-code block (7 lines) in front/web/app/check/CheckPanel.tsx:13", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/check/CheckPanel.tsx:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5af7dd9b57617bdb", "name": "Commented-code block (9 lines) in front/web/app/compound-besoin-branchtree/page.tsx:6", "shortDescription": {"text": "Commented-code block (9 lines) in front/web/app/compound-besoin-branchtree/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2be627aa5b916794", "name": "Commented-code block (6 lines) in front/web/app/compound-besoin-mirrorform/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/compound-besoin-mirrorform/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-90e72df4acbe0aad", "name": "Commented-code block (7 lines) in front/web/app/tool-projection/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/tool-projection/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7fcfc77283395c6b", "name": "Commented-code block (8 lines) in front/web/app/incidents-to-ideas/page.tsx:6", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/app/incidents-to-ideas/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6f22b8302c62c32a", "name": "Commented-code block (6 lines) in front/web/app/contract/page.tsx:43", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/contract/page.tsx:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-537fc5781fcaa313", "name": "Commented-code block (6 lines) in front/web/app/lexicon/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/lexicon/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-809b97b19a2470c7", "name": "Commented-code block (7 lines) in front/web/app/memory-firewall/page.tsx:6", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/app/memory-firewall/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-02c03f7496aa2956", "name": "Commented-code block (6 lines) in front/web/app/besoin-necessity/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/besoin-necessity/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-33f5b6dd98e3e8d7", "name": "Commented-code block (6 lines) in front/web/app/why-blocked/page.tsx:5", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/why-blocked/page.tsx:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-408e069c2beae572", "name": "Commented-code block (6 lines) in front/web/app/red-wave/page.tsx:7", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/red-wave/page.tsx:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-871b47e409b5545b", "name": "Commented-code block (5 lines) in front/web/app/control/page.tsx:4", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/app/control/page.tsx:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b4db93bc190b2e17", "name": "Commented-code block (9 lines) in front/web/app/kernel-debt/page.tsx:6", "shortDescription": {"text": "Commented-code block (9 lines) in front/web/app/kernel-debt/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5e95434b0620d5cc", "name": "Commented-code block (6 lines) in front/web/app/ideas/page.tsx:6", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/app/ideas/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-31b4c147ab0f5a98", "name": "Commented-code block (8 lines) in front/web/app/compound-besoin-metadata/page.tsx:6", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/app/compound-besoin-metadata/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a79a349228b89124", "name": "Commented-code block (10 lines) in front/web/app/account-release/page.tsx:6", "shortDescription": {"text": "Commented-code block (10 lines) in front/web/app/account-release/page.tsx:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-02821999ff2ac6ac", "name": "Commented-code block (6 lines) in front/web/lib/mutation-data.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/mutation-data.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2fce7ffbc74fb6a2", "name": "Commented-code block (6 lines) in front/web/lib/project-evolve.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/project-evolve.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f4970fb315c9de0f", "name": "Commented-code block (5 lines) in front/web/lib/adoption-data.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/adoption-data.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b62005b53b79a1d3", "name": "Commented-code block (6 lines) in front/web/lib/meta-data.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/meta-data.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8b191845dc1cc3a7", "name": "Commented-code block (6 lines) in front/web/lib/mutation.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/mutation.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fbba4ed685c158e2", "name": "Commented-code block (5 lines) in front/web/lib/erasure.test.ts:202", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/erasure.test.ts:202"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-71bd0bbcde75546f", "name": "Commented-code block (5 lines) in front/web/lib/endpoint-fitness.ts:284", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/endpoint-fitness.ts:284"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d22f3c734d0eec0b", "name": "Commented-code block (6 lines) in front/web/lib/deploy.ts:527", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/deploy.ts:527"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-56ea79cf8dad7b36", "name": "Commented-code block (5 lines) in front/web/lib/agentlayer.ts:350", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/agentlayer.ts:350"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e42f7051608c861e", "name": "Commented-code block (7 lines) in front/web/lib/kernel-garden.ts:1", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/lib/kernel-garden.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-655b33d0ad5097cf", "name": "Commented-code block (5 lines) in front/web/lib/evolution-sandbox.test.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/evolution-sandbox.test.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-31e8ad0d902b8834", "name": "Commented-code block (5 lines) in front/web/lib/besoin-gate.ts:6", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/besoin-gate.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03425b36915976a7", "name": "Commented-code block (5 lines) in front/web/lib/kernel-debt-data.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/kernel-debt-data.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1dafd0b0b1f78a77", "name": "Commented-code block (6 lines) in front/web/lib/kernel-debt.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/kernel-debt.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6e1f37e12de41750", "name": "Commented-code block (6 lines) in front/web/lib/context-compressor.ts:156", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/context-compressor.ts:156"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e3f82a751f3df229", "name": "Commented-code block (6 lines) in front/web/lib/adoption.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/adoption.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e0d36ae26ab1eb6c", "name": "Commented-code block (6 lines) in front/web/lib/sensors.test.ts:13", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/sensors.test.ts:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c19a20aa52ea8c68", "name": "Commented-code block (6 lines) in front/web/lib/env-rollback.ts:274", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/env-rollback.ts:274"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-82561b5e9b1ca541", "name": "Commented-code block (5 lines) in front/web/lib/strangler.test.ts:17", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/strangler.test.ts:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8628cc96d126aeee", "name": "Commented-code block (5 lines) in front/web/lib/evolution-sandbox-data.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/evolution-sandbox-data.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f26b379d28a6e519", "name": "Commented-code block (8 lines) in front/web/lib/ideas.test.ts:16", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/lib/ideas.test.ts:16"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-37920f2f6eb1cd4c", "name": "Commented-code block (9 lines) in front/web/lib/account-release.ts:1", "shortDescription": {"text": "Commented-code block (9 lines) in front/web/lib/account-release.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2e409d94b11937de", "name": "Commented-code block (5 lines) in front/web/lib/besoin-interview.ts:99", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/besoin-interview.ts:99"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ce03b2e57f2bdf37", "name": "Commented-code block (5 lines) in front/web/lib/wall.test.ts:11", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/wall.test.ts:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2bf70f963eea153b", "name": "Commented-code block (9 lines) in front/web/lib/exploration.test.ts:17", "shortDescription": {"text": "Commented-code block (9 lines) in front/web/lib/exploration.test.ts:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8a0cd6651f1363f4", "name": "Commented-code block (6 lines) in front/web/lib/law-coverage.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/law-coverage.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e7e3e6593e0d0c3", "name": "Commented-code block (5 lines) in front/web/lib/agentrun-redact.test.ts:14", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/agentrun-redact.test.ts:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-72e2b6935ffa0c4c", "name": "Commented-code block (8 lines) in front/web/lib/compound.ts:216", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/lib/compound.ts:216"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a66ce2ac06c58186", "name": "Commented-code block (6 lines) in front/web/lib/evolution-sandbox.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/evolution-sandbox.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fea5ce136aff1896", "name": "Commented-code block (5 lines) in front/web/lib/agentrun.ts:65", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/agentrun.ts:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3eac57b43ce364b9", "name": "Commented-code block (5 lines) in front/web/lib/ai-lab.ts:429", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/ai-lab.ts:429"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2e1abc52262fc296", "name": "Commented-code block (5 lines) in front/web/lib/kernel-garden.test.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/kernel-garden.test.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c16b9f274fe35dfb", "name": "Commented-code block (6 lines) in front/web/lib/meta.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/meta.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-166f63f9db13b896", "name": "Commented-code block (8 lines) in front/web/lib/adoption.test.ts:1", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/lib/adoption.test.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dd9444bff3fd1ef7", "name": "Commented-code block (5 lines) in front/web/lib/projectDag.test.ts:33", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/projectDag.test.ts:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-31e35b19dc927a1e", "name": "Commented-code block (5 lines) in front/web/lib/account-release-data.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/account-release-data.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-38a6846c4e33b293", "name": "Commented-code block (5 lines) in front/web/lib/contract.ts:40", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/contract.ts:40"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-805d70ac466c25eb", "name": "Commented-code block (7 lines) in front/web/lib/governance.ts:358", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/lib/governance.ts:358"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-52855da469ac7c36", "name": "Commented-code block (6 lines) in front/web/lib/v2/deploy.ts:316", "shortDescription": {"text": "Commented-code block (6 lines) in front/web/lib/v2/deploy.ts:316"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03679e9911ebb168", "name": "Commented-code block (5 lines) in front/web/lib/v2/builder.ts:282", "shortDescription": {"text": "Commented-code block (5 lines) in front/web/lib/v2/builder.ts:282"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-15a0f6ecc4ab8f2e", "name": "Commented-code block (7 lines) in front/web/lib/v2/ai-lab.ts:364", "shortDescription": {"text": "Commented-code block (7 lines) in front/web/lib/v2/ai-lab.ts:364"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d1b6261513a38cb3", "name": "Commented-code block (8 lines) in front/web/lib/v2/ai-lab.test.ts:571", "shortDescription": {"text": "Commented-code block (8 lines) in front/web/lib/v2/ai-lab.test.ts:571"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ecccce35e9ef3a41", "name": "Commented-code block (12 lines) in .claude/workflows/long-run-dp.js:1", "shortDescription": {"text": "Commented-code block (12 lines) in .claude/workflows/long-run-dp.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8aa4ed4727126f0d", "name": "Commented-code block (8 lines) in .claude/workflows/long-run-builder.js:1", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/workflows/long-run-builder.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-561d90debe6f574d", "name": "Commented-code block (8 lines) in .claude/skills/superpowers__systematic-debugging/condition-based-waiting-example.ts:14", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/skills/superpowers__systematic-debugging/condition-based-waiting-example.ts:140"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e6fca449d0182aea", "name": "Commented-code block (8 lines) in .claude/marketplaces/superpowers/skills/systematic-debugging/condition-based-waiting-e", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/marketplaces/superpowers/skills/systematic-debugging/condition-based-waiting-example.ts:140"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-515b264f31fdc086", "name": "Commented-code block (8 lines) in .claude/marketplaces/cdesign-expo/.claude/skills/superpowers__systematic-debugging/con", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/marketplaces/cdesign-expo/.claude/skills/superpowers__systematic-debugging/condition-based-waiting-example.ts:140"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-acb097cbec0048c4", "name": "Commented-code block (8 lines) in .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/systematic-d", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/systematic-debugging/condition-based-waiting-example.ts:140"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1b37fe362a191d2a", "name": "Commented-code block (10 lines) in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/s", "shortDescription": {"text": "Commented-code block (10 lines) in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/src/plugin_eval/layers/static.py:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bcb78a3c334d2f0f", "name": "Commented-code block (7 lines) in .claude/marketplaces/wshobson/tools/doc_gardener.py:100", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/marketplaces/wshobson/tools/doc_gardener.py:100"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8c1f492aa3dcc266", "name": "Commented-code block (5 lines) in .claude/marketplaces/wshobson/tools/adapters/codex.py:427", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/marketplaces/wshobson/tools/adapters/codex.py:427"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2f763889f5f65bd3", "name": "Commented-code block (5 lines) in .claude/marketplaces/wshobson/plugins/plugin-eval/src/plugin_eval/layers/harness_porta", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/marketplaces/wshobson/plugins/plugin-eval/src/plugin_eval/layers/harness_portability.py:39"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b614157d6d3a791d", "name": "Commented-code block (10 lines) in .claude/marketplaces/wshobson/plugins/plugin-eval/src/plugin_eval/layers/static.py:53", "shortDescription": {"text": "Commented-code block (10 lines) in .claude/marketplaces/wshobson/plugins/plugin-eval/src/plugin_eval/layers/static.py:53"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-abeeb7abd5d51a78", "name": "Commented-code block (5 lines) in infra/dev-preview/server.js:3", "shortDescription": {"text": "Commented-code block (5 lines) in infra/dev-preview/server.js:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n.claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/tools/yt-design-extractor.py:extract_video_id, .claude/marketplaces/wshobson/tools/yt-design-extractor/yt-design-extractor.py:extract_video_id\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-162f633d351217e1", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:122)"}, "fullDescription": {"text": "`.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:122` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-79d53150c361743b", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:128)"}, "fullDescription": {"text": "`.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:128` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c661c94f01a2636a", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:135)"}, "fullDescription": {"text": "`.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:135` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-60bff8085b55e138", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:144)"}, "fullDescription": {"text": "`.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:144` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fbb53cad8a323c3b", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:155)"}, "fullDescription": {"text": "`.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:155` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a98e946785b057df", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:168)"}, "fullDescription": {"text": "`.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:168` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b279bbce74d274de", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:177)"}, "fullDescription": {"text": "`.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:177` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-800b7b6813fa834d", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/other (.claude/marketplaces/superpowers/tests/brainstorm-server/server", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/other (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:183)"}, "fullDescription": {"text": "`.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:183` calls `GET http://localhost:${TEST_PORT}/other` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>/other`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0ba1cc883af6584b", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:293)"}, "fullDescription": {"text": "`.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:293` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-19d12c2e8a68b188", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/t", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:122)"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:122` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e70ec6f05bfc4c04", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/t", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:128)"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:128` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b6857d653228c6e7", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/t", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:135)"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:135` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2556ef2f3c299a6e", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/t", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:144)"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:144` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-43721338031027cd", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/t", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:155)"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:155` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ced394c70ed4a7f1", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/t", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:168)"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:168` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6caea87f43c22691", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/t", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:177)"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:177` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c505e4ede681bbb9", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/other (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpow", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/other (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:183)"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:183` calls `GET http://localhost:${TEST_PORT}/other` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>/other`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cf5233ae41c8b033", "name": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/t", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:293)"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:293` calls `GET http://localhost:${TEST_PORT}/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8ed3fac9c6b90819", "name": "Dangling fetch: POST /api/emitted-submit (front/web/app/front-emitter/FrontEmitterPanel.tsx:60)", "shortDescription": {"text": "Dangling fetch: POST /api/emitted-submit (front/web/app/front-emitter/FrontEmitterPanel.tsx:60)"}, "fullDescription": {"text": "`front/web/app/front-emitter/FrontEmitterPanel.tsx:60` calls `POST /api/emitted-submit` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/emitted-submit`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2cac4cba7e28cf4c", "name": "Dangling fetch: POST /api/emitted-submit (front/web/app/preview/PreviewPanel.tsx:65)", "shortDescription": {"text": "Dangling fetch: POST /api/emitted-submit (front/web/app/preview/PreviewPanel.tsx:65)"}, "fullDescription": {"text": "`front/web/app/preview/PreviewPanel.tsx:65` calls `POST /api/emitted-submit` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/emitted-submit`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a3c45156489b020", "name": "Unused endpoint: GET /api/users", "shortDescription": {"text": "Unused endpoint: GET /api/users"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/assets/rest-api-template.py` declares `GET /api/users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49546f6900fb04c5", "name": "Unused endpoint: POST /api/users", "shortDescription": {"text": "Unused endpoint: POST /api/users"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/assets/rest-api-template.py` declares `POST /api/users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ffef5a07597afc9", "name": "Unused endpoint: GET /api/users/{user_id}", "shortDescription": {"text": "Unused endpoint: GET /api/users/{user_id}"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/assets/rest-api-template.py` declares `GET /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-887c385438b11bc5", "name": "Unused endpoint: PATCH /api/users/{user_id}", "shortDescription": {"text": "Unused endpoint: PATCH /api/users/{user_id}"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/assets/rest-api-template.py` declares `PATCH /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c3fb176c336b8818", "name": "Unused endpoint: DELETE /api/users/{user_id}", "shortDescription": {"text": "Unused endpoint: DELETE /api/users/{user_id}"}, "fullDescription": {"text": "`.claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/assets/rest-api-template.py` declares `DELETE /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/20355"}, "properties": {"repository": "steph-frtech/aidos", "repoUrl": "https://github.com/steph-frtech/aidos", "branch": "main"}, "results": [{"ruleId": "scanner-5d0dd07ab50dd100", "level": "note", "message": {"text": "Possibly dead Python function: ocr_frame_tesseract"}, "properties": {"repobilityId": "cf3166150a4f09f5", "scanner": "scanner-primary", "fingerprint": "5d0dd07ab50dd100", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/tools/yt-design-extractor.py:275"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-969ba432a69a6428", "level": "note", "message": {"text": "Possibly dead Python function: process_test_case"}, "properties": {"repobilityId": "24e22cda162ee799", "scanner": "scanner-primary", "fingerprint": "969ba432a69a6428", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-engineering-patterns/scripts/optimize-prompt.py:46"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a8f3911193495fd", "level": "note", "message": {"text": "Possibly dead Python function: compare_prompts"}, "properties": {"repobilityId": "0ab3a0d5144d53fd", "scanner": "scanner-primary", "fingerprint": "8a8f3911193495fd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-engineering-patterns/scripts/optimize-prompt.py:212"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c97bb3685699f81e", "level": "note", "message": {"text": "Possibly dead Python function: update_rating"}, "properties": {"repobilityId": "08dd6bceb9a7b825", "scanner": "scanner-primary", "fingerprint": "c97bb3685699f81e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/src/plugin_eval/corpus.py:99"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09d434b767d746a2", "level": "note", "message": {"text": "Possibly dead Python function: ocr_frame_tesseract"}, "properties": {"repobilityId": "cf3166150a4f09f5", "scanner": "scanner-primary", "fingerprint": "09d434b767d746a2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/tools/yt-design-extractor/yt-design-extractor.py:267"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0d86552c8953d62", "level": "note", "message": {"text": "Possibly dead Python function: process_test_case"}, "properties": {"repobilityId": "24e22cda162ee799", "scanner": "scanner-primary", "fingerprint": "a0d86552c8953d62", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-engineering-patterns/scripts/optimize-prompt.py:46"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f033a0b165d3e5b", "level": "note", "message": {"text": "Possibly dead Python function: compare_prompts"}, "properties": {"repobilityId": "0ab3a0d5144d53fd", "scanner": "scanner-primary", "fingerprint": "2f033a0b165d3e5b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-engineering-patterns/scripts/optimize-prompt.py:212"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-36d14517e496f982", "level": "note", "message": {"text": "Possibly dead Python function: update_rating"}, "properties": {"repobilityId": "08dd6bceb9a7b825", "scanner": "scanner-primary", "fingerprint": "36d14517e496f982", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/plugin-eval/src/plugin_eval/corpus.py:99"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8add6aaefb25a85", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/components/GovernancePanel.tsx:561"}, "properties": {"repobilityId": "6044f025d4abee97", "scanner": "scanner-primary", "fingerprint": "e8add6aaefb25a85", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-e8495bd68a2796de", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/components/WebPreviewPanel.tsx:256"}, "properties": {"repobilityId": "f8bd6be42957bf1d", "scanner": "scanner-primary", "fingerprint": "e8495bd68a2796de", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c5e37d15584875f6", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/proof-levels/ProofLevelsExplorer.tsx:115"}, "properties": {"repobilityId": "3140d7e5a799156d", "scanner": "scanner-primary", "fingerprint": "c5e37d15584875f6", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-263e5db1ee76b507", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/ai-lab/AiLabClient.tsx:335"}, "properties": {"repobilityId": "abb80b1c074b2ffe", "scanner": "scanner-primary", "fingerprint": "263e5db1ee76b507", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d5e777c336bb32c1", "level": "note", "message": {"text": "React Flow edge with `label=` but no project-wide edge-label CSS override \u2014 front/web/app/v2/operations/OperationReplayClient.tsx:89"}, "properties": {"repobilityId": "20128f4fe0716541", "scanner": "scanner-primary", "fingerprint": "d5e777c336bb32c1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.edge-label.no-bg"]}}, {"ruleId": "scanner-ccea5bec740d628a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/policy/PolicyClient.tsx:267"}, "properties": {"repobilityId": "e4aa6843d87f81d3", "scanner": "scanner-primary", "fingerprint": "ccea5bec740d628a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-ea793c2712384c86", "level": "note", "message": {"text": "React Flow <Controls> without dark theming \u2014 front/web/app/v2/liens/LinksClient.tsx:253"}, "properties": {"repobilityId": "0c849775c01ff4ba", "scanner": "scanner-primary", "fingerprint": "ea793c2712384c86", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.controls.no-bg"]}}, {"ruleId": "scanner-153bcc1bf27a7a32", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/code/CodeClient.tsx:704"}, "properties": {"repobilityId": "80399a4732f5c822", "scanner": "scanner-primary", "fingerprint": "153bcc1bf27a7a32", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d5043c4dc7c941cc", "level": "note", "message": {"text": "React Flow <Controls> without dark theming \u2014 front/web/app/v2/dag/DagClient.tsx:222"}, "properties": {"repobilityId": "aceabb63d0579ff6", "scanner": "scanner-primary", "fingerprint": "d5043c4dc7c941cc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.controls.no-bg"]}}, {"ruleId": "scanner-0367991a83c8c3a8", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/why/WhyClient.tsx:302"}, "properties": {"repobilityId": "93717a67ecc28c9a", "scanner": "scanner-primary", "fingerprint": "0367991a83c8c3a8", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-8d0f21ed1c2aaa5e", "level": "note", "message": {"text": "React Flow edge with `label=` but no project-wide edge-label CSS override \u2014 front/web/app/v2/workflows/WorkflowClient.tsx:78"}, "properties": {"repobilityId": "832d68a8adc3f1ea", "scanner": "scanner-primary", "fingerprint": "8d0f21ed1c2aaa5e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.edge-label.no-bg"]}}, {"ruleId": "scanner-21a524485af9fb91", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v2/kernels/KernelTreeClient.tsx:157"}, "properties": {"repobilityId": "0357bfbfec0179c0", "scanner": "scanner-primary", "fingerprint": "21a524485af9fb91", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-fa3d99c3f6541c01", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/deploy/DeployPanel.tsx:374"}, "properties": {"repobilityId": "f5ce8abbf6139955", "scanner": "scanner-primary", "fingerprint": "fa3d99c3f6541c01", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-8f49dc1cefa4bc68", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 front/web/app/collab/page.tsx:89"}, "properties": {"repobilityId": "8ae7db40d874d2e9", "scanner": "scanner-primary", "fingerprint": "8f49dc1cefa4bc68", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-5499fc74db6ceb82", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/Palette.tsx:153"}, "properties": {"repobilityId": "9aa92a256b70f174", "scanner": "scanner-primary", "fingerprint": "5499fc74db6ceb82", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-53fc35cf077bc46c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/V3Nav.tsx:76"}, "properties": {"repobilityId": "e31911abd65f2821", "scanner": "scanner-primary", "fingerprint": "53fc35cf077bc46c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c3a81ad3359a5058", "level": "note", "message": {"text": "React Flow <MiniMap> without dark background \u2014 front/web/app/v3/parcours/ParcoursClient.tsx:298"}, "properties": {"repobilityId": "3a22fa6e5c04f749", "scanner": "scanner-primary", "fingerprint": "c3a81ad3359a5058", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.minimap.no-bg"]}}, {"ruleId": "scanner-82ef92459db8b93e", "level": "note", "message": {"text": "React Flow <Controls> without dark theming \u2014 front/web/app/v3/parcours/ParcoursClient.tsx:297"}, "properties": {"repobilityId": "9b4225966badec93", "scanner": "scanner-primary", "fingerprint": "82ef92459db8b93e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.controls.no-bg"]}}, {"ruleId": "scanner-9ca13fc8701b699b", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/parcours/ParcoursClient.tsx:81"}, "properties": {"repobilityId": "24955e89f6d1e02b", "scanner": "scanner-primary", "fingerprint": "9ca13fc8701b699b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-bbad984129fecde9", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/environnements/EnvsClient.tsx:764"}, "properties": {"repobilityId": "1e2d3302089dff1b", "scanner": "scanner-primary", "fingerprint": "bbad984129fecde9", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-bb6cf452545ee294", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 front/web/app/v3/lab/PreviewPane.tsx:196"}, "properties": {"repobilityId": "bed9e6fe67204e3e", "scanner": "scanner-primary", "fingerprint": "bb6cf452545ee294", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-32e0d7bb79c84423", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 front/web/lib/v2/code-extract.test.ts:35"}, "properties": {"repobilityId": "8c46c86a90039afd", "scanner": "scanner-primary", "fingerprint": "32e0d7bb79c84423", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b8467d6cc03b6e6f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:85"}, "properties": {"repobilityId": "54c5b5fce4f8e23c", "scanner": "scanner-primary", "fingerprint": "b8467d6cc03b6e6f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-180cf6bbc82174d9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/superpowers/tests/brainstorm-server/ws-protocol.test.js:38"}, "properties": {"repobilityId": "c5be0d553207c2b2", "scanner": "scanner-primary", "fingerprint": "180cf6bbc82174d9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e59f3de2f9302ce9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js:124"}, "properties": {"repobilityId": "ac1c81abaa788f72", "scanner": "scanner-primary", "fingerprint": "e59f3de2f9302ce9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1edc036fe3dd9629", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:85"}, "properties": {"repobilityId": "8e9f52c1bec10b5c", "scanner": "scanner-primary", "fingerprint": "1edc036fe3dd9629", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-51f95f90bafad32f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/ws-protocol.test.js:38"}, "properties": {"repobilityId": "24b57bbc8e22e4c5", "scanner": "scanner-primary", "fingerprint": "51f95f90bafad32f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d0aab3ad8c975081", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js:124"}, "properties": {"repobilityId": "a68d1f89cc5733a3", "scanner": "scanner-primary", "fingerprint": "d0aab3ad8c975081", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-639bb254e460958f", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 .claude/marketplaces/cdesign-expo/sample-output/sereine-expo/app/index.tsx:55"}, "properties": {"repobilityId": "997dfa517b70ce78", "scanner": "scanner-primary", "fingerprint": "639bb254e460958f", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-ca35b6da69466377", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 .claude/marketplaces/cdesign-expo/src/index.ts:9"}, "properties": {"repobilityId": "c1d3b79b8b3ba60e", "scanner": "scanner-primary", "fingerprint": "ca35b6da69466377", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-161a1f657c9a0b91", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 infra/dev-preview/server.js:197"}, "properties": {"repobilityId": "1bc066b313df3f04", "scanner": "scanner-primary", "fingerprint": "161a1f657c9a0b91", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-517f60eec8ebc89a", "level": "warning", "message": {"text": "Dockerfile runs as root: back/cmd/aidosinterpreter/Dockerfile"}, "properties": {"repobilityId": "83308a8b43430a9b", "scanner": "scanner-primary", "fingerprint": "517f60eec8ebc89a", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5ef7536b2b80b0b2", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.25-alpine"}, "properties": {"repobilityId": "729c14e975f5dfce", "scanner": "scanner-primary", "fingerprint": "5ef7536b2b80b0b2", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "back/cmd/aidosinterpreter/Dockerfile"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-09c929a0f9c5ddb8", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot"}, "properties": {"repobilityId": "dbe6640c2eac8015", "scanner": "scanner-primary", "fingerprint": "09c929a0f9c5ddb8", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "back/cmd/aidosinterpreter/Dockerfile"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-17c5189be3e94986", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in front/web/app/v2/deploy/actions.ts:3"}, "properties": {"repobilityId": "92267d2baff96e93", "scanner": "scanner-primary", "fingerprint": "17c5189be3e94986", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/app/v2/deploy/actions.ts"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-d55a77f7ad8334b0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in front/web/app/v2/builder/actions.ts:3"}, "properties": {"repobilityId": "2ec776c528baad03", "scanner": "scanner-primary", "fingerprint": "d55a77f7ad8334b0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/app/v2/builder/actions.ts"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-cf13ffadc77c76fe", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in front/web/app/ai-lab/actions.ts:3"}, "properties": {"repobilityId": "27796765aec2a1e4", "scanner": "scanner-primary", "fingerprint": "cf13ffadc77c76fe", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/app/ai-lab/actions.ts"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-872b50aacaaa89b1", "level": "error", "message": {"text": "Possible secret in front/web/app/ops-observability/OpsObservabilityPanel.tsx"}, "properties": {"repobilityId": "4e2bf4aad6974dbe", "scanner": "scanner-primary", "fingerprint": "872b50aacaaa89b1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/app/ops-observability/OpsObservabilityPanel.tsx"}, "region": {"startLine": 132}}}]}, {"ruleId": "scanner-399dc6487143ec7f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in front/web/app/deploy/actions.ts:3"}, "properties": {"repobilityId": "139fa47f5bf29597", "scanner": "scanner-primary", "fingerprint": "399dc6487143ec7f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/app/deploy/actions.ts"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-313f463cacbb3031", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in front/web/app/app-docs/actions.ts:3"}, "properties": {"repobilityId": "90cb0eaabe950a15", "scanner": "scanner-primary", "fingerprint": "313f463cacbb3031", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/app/app-docs/actions.ts"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-38ddc5838bdb84ea", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in front/web/app/collab/page.tsx:89"}, "properties": {"repobilityId": "aa72b44aa108d0b4", "scanner": "scanner-primary", "fingerprint": "38ddc5838bdb84ea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/app/collab/page.tsx"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-d091c48746256193", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in front/web/app/substrate/actions.ts:3"}, "properties": {"repobilityId": "b918aff5c2ee41ac", "scanner": "scanner-primary", "fingerprint": "d091c48746256193", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/app/substrate/actions.ts"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-c333bed37b33b0e7", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in front/web/app/v3/actions.ts:3"}, "properties": {"repobilityId": "300aef9c288a9775", "scanner": "scanner-primary", "fingerprint": "c333bed37b33b0e7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/app/v3/actions.ts"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-423dd69a9ceb58a3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in front/web/app/v3/instance/actions.ts:3"}, "properties": {"repobilityId": "5a47c37940eb2367", "scanner": "scanner-primary", "fingerprint": "423dd69a9ceb58a3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/app/v3/instance/actions.ts"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-a108f7f0ab23716b", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in front/web/lib/governance.ts:61"}, "properties": {"repobilityId": "4273d3a6bc81508c", "scanner": "scanner-primary", "fingerprint": "a108f7f0ab23716b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/lib/governance.ts"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-a5d513c0f64bedcd", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in front/web/messages/fr.json:2826"}, "properties": {"repobilityId": "04fab22318a32d61", "scanner": "scanner-primary", "fingerprint": "a5d513c0f64bedcd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/messages/fr.json"}, "region": {"startLine": 2826}}}]}, {"ruleId": "scanner-c87dbea9829abbf0", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in front/web/messages/en.json:2826"}, "properties": {"repobilityId": "d0ac7f0507e0ff71", "scanner": "scanner-primary", "fingerprint": "c87dbea9829abbf0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/messages/en.json"}, "region": {"startLine": 2826}}}]}, {"ruleId": "scanner-c4d683d019aa2593", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in .claude/skills/superpowers__brainstorming/scripts/helper.js:57"}, "properties": {"repobilityId": "889de22af238176f", "scanner": "scanner-primary", "fingerprint": "c4d683d019aa2593", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/superpowers__brainstorming/scripts/helper.js"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-6c46c26ab34c5665", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in .claude/marketplaces/superpowers/skills/brainstorming/scripts/helper.js:57"}, "properties": {"repobilityId": "e3d3c10a564004be", "scanner": "scanner-primary", "fingerprint": "6c46c26ab34c5665", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/skills/brainstorming/scripts/helper.js"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-bbcb744fc56caa9c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js:18"}, "properties": {"repobilityId": "1633e0e0fc100bf8", "scanner": "scanner-primary", "fingerprint": "bbcb744fc56caa9c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-5a2da7e211b0d133", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in .claude/marketplaces/cdesign-expo/.claude/skills/superpowers__brainstorming/scripts/helper.js:57"}, "properties": {"repobilityId": "f03d17a37f4f8867", "scanner": "scanner-primary", "fingerprint": "5a2da7e211b0d133", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/skills/superpowers__brainstorming/scripts/helper.js"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-15b226a22b135135", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/brainstorming/scripts/helper.js:57"}, "properties": {"repobilityId": "729fbfb3269a3356", "scanner": "scanner-primary", "fingerprint": "15b226a22b135135", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/brainstorming/scripts/helper.js"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-956910e396011635", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js:18"}, "properties": {"repobilityId": "f4b278ea9f92af67", "scanner": "scanner-primary", "fingerprint": "956910e396011635", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/writing-skills/render-graphs.js"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-d8d27328f8ff7cb7", "level": "error", "message": {"text": "Possible secret in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/e2e-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "fb07733c7f388ac6", "scanner": "scanner-primary", "fingerprint": "d8d27328f8ff7cb7", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/e2e-testing-patterns/SKILL.md"}, "region": {"startLine": 177}}}]}, {"ruleId": "scanner-5555ec47e3f792e9", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/code-review-excellence/SKILL.md:422"}, "properties": {"repobilityId": "48d6666dce998623", "scanner": "scanner-primary", "fingerprint": "5555ec47e3f792e9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/code-review-excellence/SKILL.md"}, "region": {"startLine": 422}}}]}, {"ruleId": "scanner-107c7f80bc3b79bf", "level": "error", "message": {"text": "Insecure pattern 'private_key_in_repo' in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md:222"}, "properties": {"repobilityId": "6a83eb4938db5c5c", "scanner": "scanner-primary", "fingerprint": "107c7f80bc3b79bf", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["owasp", "private_key_in_repo"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md"}, "region": {"startLine": 222}}}]}, {"ruleId": "scanner-471558e4bc4829f9", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in .claude/marketplaces/wshobson/plugins/developer-essentials/skills/code-review-excellence/SKILL.md:422"}, "properties": {"repobilityId": "a4a085be41a14e68", "scanner": "scanner-primary", "fingerprint": "471558e4bc4829f9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/developer-essentials/skills/code-review-excellence/SKILL.md"}, "region": {"startLine": 422}}}]}, {"ruleId": "scanner-d245ea4247bac659", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in back/runtime/governance/owasp.go:144"}, "properties": {"repobilityId": "fe497bfe610c483f", "scanner": "scanner-primary", "fingerprint": "d245ea4247bac659", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "back/runtime/governance/owasp.go"}, "region": {"startLine": 144}}}]}, {"ruleId": "scanner-e1060a0c329f137d", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "134dbaebb3e89122", "scanner": "scanner-primary", "fingerprint": "e1060a0c329f137d", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/workflows/eval-report.yml"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-e1060a0c329f137d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "60da3c1457d1697c", "scanner": "scanner-primary", "fingerprint": "e1060a0c329f137d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/workflows/eval-report.yml"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-22fae5ba89b72953", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "50fb8d65992bddb4", "scanner": "scanner-primary", "fingerprint": "22fae5ba89b72953", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/workflows/validate.yml"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-95648a4f952ce6c5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a8aba50d808ef1e6", "scanner": "scanner-primary", "fingerprint": "95648a4f952ce6c5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-95648a4f952ce6c5", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "460db21c74d38ed9", "scanner": "scanner-primary", "fingerprint": "95648a4f952ce6c5", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-3ebe12b508d9c4b1", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "33a73ee148fae8f3", "scanner": "scanner-primary", "fingerprint": "3ebe12b508d9c4b1", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2aa972b96980e74f", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "7c35e554c5a2ef91", "scanner": "scanner-primary", "fingerprint": "2aa972b96980e74f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.github/workflows/claude-code-review.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f1049721192da393", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8170f25771e686ea", "scanner": "scanner-primary", "fingerprint": "f1049721192da393", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.github/workflows/eval-report.yml"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-f1049721192da393", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1e51ece786f25892", "scanner": "scanner-primary", "fingerprint": "f1049721192da393", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.github/workflows/eval-report.yml"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-c79505d5c8470190", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "1c648d99ad722ab9", "scanner": "scanner-primary", "fingerprint": "c79505d5c8470190", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.github/workflows/claude.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa48c7d910242858", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "af4e9fd4c8932c63", "scanner": "scanner-primary", "fingerprint": "aa48c7d910242858", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-aa48c7d910242858", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "483b53a8c45a8294", "scanner": "scanner-primary", "fingerprint": "aa48c7d910242858", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-7ef960d2dc4024bc", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "6618f708a002824d", "scanner": "scanner-primary", "fingerprint": "7ef960d2dc4024bc", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "b86179956da3a4a8", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0200618877e61194", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "47666ff31d4be87f", "scanner": "scanner-primary", "fingerprint": "0200618877e61194", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2931de17fb6c2ad4", "level": "note", "message": {"text": "Very large file: tests/e2e/agents.spec.ts (1966 lines)"}, "properties": {"repobilityId": "9bd40eaf08505ccc", "scanner": "scanner-primary", "fingerprint": "2931de17fb6c2ad4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5bbc5d231bf33754", "level": "note", "message": {"text": "Very large file: front/web/components/AgentsPanel.tsx (4868 lines)"}, "properties": {"repobilityId": "69f8b7e9220b2541", "scanner": "scanner-primary", "fingerprint": "5bbc5d231bf33754", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d3f5cd599f5e3135", "level": "note", "message": {"text": "Very large file: front/web/app/connectors/ConnectorsPanel.tsx (1983 lines)"}, "properties": {"repobilityId": "1b7a4188d4201b74", "scanner": "scanner-primary", "fingerprint": "d3f5cd599f5e3135", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2ab4c1f96422a202", "level": "note", "message": {"text": "Very large file: front/web/app/deploy/DeployPanel.tsx (2396 lines)"}, "properties": {"repobilityId": "8573fd3ada120d23", "scanner": "scanner-primary", "fingerprint": "2ab4c1f96422a202", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b41a357be225acd9", "level": "note", "message": {"text": "Very large file: front/web/lib/agentlayer.ts (1543 lines)"}, "properties": {"repobilityId": "e6d80744efdd7431", "scanner": "scanner-primary", "fingerprint": "b41a357be225acd9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-30f59a115daef8f7", "level": "note", "message": {"text": "Very large file: front/web/lib/agentlayer.test.ts (1944 lines)"}, "properties": {"repobilityId": "fef56b5991d82f3d", "scanner": "scanner-primary", "fingerprint": "30f59a115daef8f7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-12682c96f818158c", "level": "note", "message": {"text": "Very large file: front/web/lib/governance.ts (1506 lines)"}, "properties": {"repobilityId": "67c3054a35b18ed3", "scanner": "scanner-primary", "fingerprint": "12682c96f818158c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c7fd9743fe90bf69", "level": "note", "message": {"text": "Very large file: .claude/marketplaces/wshobson/tools/tests/test_adapters.py (1204 lines)"}, "properties": {"repobilityId": "6a29498e07984fba", "scanner": "scanner-primary", "fingerprint": "c7fd9743fe90bf69", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c82de2e0e56ea489", "level": "note", "message": {"text": "Very large file: back/runtime/blockreason/blockreason.go (1461 lines)"}, "properties": {"repobilityId": "59a1d8ebd70dd68f", "scanner": "scanner-primary", "fingerprint": "c82de2e0e56ea489", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9cc8788a17c1527e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: front/web/package.json"}, "properties": {"repobilityId": "59025336bf699bc0", "scanner": "scanner-primary", "fingerprint": "9cc8788a17c1527e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "9dc3bf8145b1cd5d", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "87010146a003b30a", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "b869ad33ab9f50ed", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "ba397216735b9eb4", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "67b870b162f27493", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "ce957a3530461a73", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "acb3ff1542b8797d", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-cc55229a7a3c078d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .mcp.json"}, "properties": {"repobilityId": "51942fb3d5b8b5b4", "scanner": "scanner-primary", "fingerprint": "cc55229a7a3c078d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a824e1dcd7df45f9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_fn06_functional_graph.md"}, "properties": {"repobilityId": "5a168479a9fd6501", "scanner": "scanner-primary", "fingerprint": "a824e1dcd7df45f9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/.claude/agent-memory/step-verifier/project_fn06_functional_graph.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80547953de465dfd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_hr05_perrun_economy.md"}, "properties": {"repobilityId": "6055629857ba4c06", "scanner": "scanner-primary", "fingerprint": "80547953de465dfd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/.claude/agent-memory/step-verifier/project_hr05_perrun_economy.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-055bc4d79a3b9371", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_ba28_replay_redact.md"}, "properties": {"repobilityId": "50dc6ead0de3de48", "scanner": "scanner-primary", "fingerprint": "055bc4d79a3b9371", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/.claude/agent-memory/step-verifier/project_ba28_replay_redact.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ad0e569bf734049", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_gv05_policy_compiler.md"}, "properties": {"repobilityId": "068ba1043585534f", "scanner": "scanner-primary", "fingerprint": "6ad0e569bf734049", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/.claude/agent-memory/step-verifier/project_gv05_policy_compiler.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9111142913986455", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: front/web/.claude/agent-memory/step-verifier/project_fn02_functional_mandate.md"}, "properties": {"repobilityId": "26f7c7f37a0d64ff", "scanner": "scanner-primary", "fingerprint": "9111142913986455", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "front/web/.claude/agent-memory/step-verifier/project_fn02_functional_mandate.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-122f91b7f2906dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "properties": {"repobilityId": "a2967269048b6a9d", "scanner": "scanner-primary", "fingerprint": "122f91b7f2906dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5fdd011e421df658", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/stack.json"}, "properties": {"repobilityId": "053ac5c89756dc64", "scanner": "scanner-primary", "fingerprint": "5fdd011e421df658", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/stack.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9429d588dc82fb5a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/step-executor.md"}, "properties": {"repobilityId": "edde4b81b2322109", "scanner": "scanner-primary", "fingerprint": "9429d588dc82fb5a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/step-executor.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-19f18bdc1ea8040d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/security-auditor.md"}, "properties": {"repobilityId": "41fc5f6dc929e898", "scanner": "scanner-primary", "fingerprint": "19f18bdc1ea8040d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/security-auditor.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f517f5dadd6c8a2e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agent-memory/step-verifier/project_fk11_ai_lab.md"}, "properties": {"repobilityId": "fa5a63081e3d76a9", "scanner": "scanner-primary", "fingerprint": "f517f5dadd6c8a2e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agent-memory/step-verifier/project_fk11_ai_lab.md"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-f0e6f1f57da69469", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_el02_grammar.md"}, "properties": {"repobilityId": "289bb55c160f8426", "scanner": "scanner-primary", "fingerprint": "f0e6f1f57da69469", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agent-memory/step-verifier/project_el02_grammar.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a5370fc240e83acb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_s00_pattern.md"}, "properties": {"repobilityId": "235bb4630f83b759", "scanner": "scanner-primary", "fingerprint": "a5370fc240e83acb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agent-memory/step-verifier/project_s00_pattern.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-29be53a5c5f44918", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_ba27_economicsloop.md"}, "properties": {"repobilityId": "0b204aab49aa2e8c", "scanner": "scanner-primary", "fingerprint": "29be53a5c5f44918", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agent-memory/step-verifier/project_ba27_economicsloop.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c57f2a3e450a2321", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_wb2_21_emetteurs.md"}, "properties": {"repobilityId": "dec21c65d1cbd0a8", "scanner": "scanner-primary", "fingerprint": "c57f2a3e450a2321", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agent-memory/step-verifier/project_wb2_21_emetteurs.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3c8b494ebf65af93", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_wb2_15_ai_lab.md"}, "properties": {"repobilityId": "0a6d285e6a93499a", "scanner": "scanner-primary", "fingerprint": "3c8b494ebf65af93", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agent-memory/step-verifier/project_wb2_15_ai_lab.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ea0b8a46bacac079", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_ba20_scheduler.md"}, "properties": {"repobilityId": "940def9fa28790e8", "scanner": "scanner-primary", "fingerprint": "ea0b8a46bacac079", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agent-memory/step-verifier/project_ba20_scheduler.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11418f8e92b4f17a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agent-memory/step-verifier/project_s12_completeness_stop.md"}, "properties": {"repobilityId": "34b22b09a0bc883a", "scanner": "scanner-primary", "fingerprint": "11418f8e92b4f17a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agent-memory/step-verifier/project_s12_completeness_stop.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f80db7feea3d7b2b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agent-memory/step-verifier/MEMORY.md"}, "properties": {"repobilityId": "85f4614f4af2de93", "scanner": "scanner-primary", "fingerprint": "f80db7feea3d7b2b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agent-memory/step-verifier/MEMORY.md"}, "region": {"startLine": 165}}}]}, {"ruleId": "scanner-520e9ab7459f7c2c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/compound-besoin/SKILL.md"}, "properties": {"repobilityId": "6237db6eed12486c", "scanner": "scanner-primary", "fingerprint": "520e9ab7459f7c2c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/compound-besoin/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e61b809052ae4ea0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/besoin-invariant/SKILL.md"}, "properties": {"repobilityId": "6ed0d44d6586383f", "scanner": "scanner-primary", "fingerprint": "e61b809052ae4ea0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/besoin-invariant/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9e6b88d43ddd5bb9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/trim/SKILL.md"}, "properties": {"repobilityId": "8d6fca52a45f037d", "scanner": "scanner-primary", "fingerprint": "9e6b88d43ddd5bb9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/trim/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef8cc0f79889ec84", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/pocock__domain-model/SKILL.md"}, "properties": {"repobilityId": "47e447fd08f4bbbb", "scanner": "scanner-primary", "fingerprint": "ef8cc0f79889ec84", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/pocock__domain-model/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62a4060617c6766e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/view/SKILL.md"}, "properties": {"repobilityId": "e448ee3862e566c4", "scanner": "scanner-primary", "fingerprint": "62a4060617c6766e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/view/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2db2b264c688f767", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/pocock__qa/SKILL.md"}, "properties": {"repobilityId": "3b4ddd392c3fe657", "scanner": "scanner-primary", "fingerprint": "2db2b264c688f767", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/pocock__qa/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf7a9f06bcd0ffc8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/.version-bump.json"}, "properties": {"repobilityId": "f121ed5b286bb571", "scanner": "scanner-primary", "fingerprint": "cf7a9f06bcd0ffc8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/.version-bump.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-baaffba15107b35e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/CODE_OF_CONDUCT.md"}, "properties": {"repobilityId": "bd12dad117cfec9b", "scanner": "scanner-primary", "fingerprint": "baaffba15107b35e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/CODE_OF_CONDUCT.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6df5e9fe6dccde61", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/tests/subagent-driven-dev/svelte-todo/design.md"}, "properties": {"repobilityId": "eee0dbcfc8603bf6", "scanner": "scanner-primary", "fingerprint": "6df5e9fe6dccde61", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/tests/subagent-driven-dev/svelte-todo/design.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8e74b20bf2629ae", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/tests/subagent-driven-dev/go-fractals/design.md"}, "properties": {"repobilityId": "d0f4466f3601a94d", "scanner": "scanner-primary", "fingerprint": "b8e74b20bf2629ae", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/tests/subagent-driven-dev/go-fractals/design.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4af09166c73dd31c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/hooks/hooks.json"}, "properties": {"repobilityId": "34f0d82b3f37289a", "scanner": "scanner-primary", "fingerprint": "4af09166c73dd31c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/hooks/hooks.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a8d8f860c7eff3c6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/hooks/hooks-cursor.json"}, "properties": {"repobilityId": "1c3e7c28296b0fd3", "scanner": "scanner-primary", "fingerprint": "a8d8f860c7eff3c6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/hooks/hooks-cursor.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94b8274407d78c15", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/skills/using-superpowers/references/gemini-tools.md"}, "properties": {"repobilityId": "02ad5338021cd69b", "scanner": "scanner-primary", "fingerprint": "94b8274407d78c15", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/skills/using-superpowers/references/gemini-tools.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d2127a0edb29cae9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/skills/using-superpowers/references/copilot-tools.md"}, "properties": {"repobilityId": "5888f4ead7fd2a85", "scanner": "scanner-primary", "fingerprint": "d2127a0edb29cae9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/skills/using-superpowers/references/copilot-tools.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-801d29bf41a926f7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/skills/using-superpowers/references/codex-tools.md"}, "properties": {"repobilityId": "06361f7f7eb010e2", "scanner": "scanner-primary", "fingerprint": "801d29bf41a926f7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/skills/using-superpowers/references/codex-tools.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4ed159ff57464d2a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/superpowers/skills/writing-skills/anthropic-best-practices.md"}, "properties": {"repobilityId": "5a249aaa2e6e6c5b", "scanner": "scanner-primary", "fingerprint": "4ed159ff57464d2a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/skills/writing-skills/anthropic-best-practices.md"}, "region": {"startLine": 1063}}}]}, {"ruleId": "scanner-429e8b987da1411c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/superpowers/.github/ISSUE_TEMPLATE/bug_report.md"}, "properties": {"repobilityId": "6dad3ca7976c8955", "scanner": "scanner-primary", "fingerprint": "429e8b987da1411c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/superpowers/.github/ISSUE_TEMPLATE/bug_report.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-42fb7ea8f02b1f7f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.mcp.json"}, "properties": {"repobilityId": "66278ca700a5d3e7", "scanner": "scanner-primary", "fingerprint": "42fb7ea8f02b1f7f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d472f1ab69d5d09c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/settings.json"}, "properties": {"repobilityId": "33ff4d37d7071539", "scanner": "scanner-primary", "fingerprint": "d472f1ab69d5d09c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-70f1d34aeb8681cf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/agents/security-auditor.md"}, "properties": {"repobilityId": "3307993d735263e1", "scanner": "scanner-primary", "fingerprint": "70f1d34aeb8681cf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/agents/security-auditor.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-04a34eef5d3ab0b7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/skills/octo-issue-tracker/SKILL.md"}, "properties": {"repobilityId": "36716d8ac59c55be", "scanner": "scanner-primary", "fingerprint": "04a34eef5d3ab0b7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/skills/octo-issue-tracker/SKILL.md"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-6613b74d14203717", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/skills/pocock__qa/SKILL.md"}, "properties": {"repobilityId": "10d0a4afe4349d48", "scanner": "scanner-primary", "fingerprint": "6613b74d14203717", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/skills/pocock__qa/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-18575619f3380a56", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/.version-bump.json"}, "properties": {"repobilityId": "f93b26c6f932fb69", "scanner": "scanner-primary", "fingerprint": "18575619f3380a56", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/.version-bump.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-396386738cffda43", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/CODE_OF_CONDUCT.md"}, "properties": {"repobilityId": "ab6d44e8933b079c", "scanner": "scanner-primary", "fingerprint": "396386738cffda43", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/CODE_OF_CONDUCT.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d5097615342fe2d6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/subagent-driven-dev/svelte-todo/design.md"}, "properties": {"repobilityId": "876c96b67b28c245", "scanner": "scanner-primary", "fingerprint": "d5097615342fe2d6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/subagent-driven-dev/svelte-todo/design.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f7294a0eab0f5ee8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/subagent-driven-dev/go-fractals/design.md"}, "properties": {"repobilityId": "4d6d24f76e796b0f", "scanner": "scanner-primary", "fingerprint": "f7294a0eab0f5ee8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/subagent-driven-dev/go-fractals/design.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ad5259b377c9f7d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/hooks/hooks.json"}, "properties": {"repobilityId": "a33a4225d480a4f6", "scanner": "scanner-primary", "fingerprint": "6ad5259b377c9f7d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/hooks/hooks.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-57e3b853b0a29f5e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/hooks/hooks-cursor.json"}, "properties": {"repobilityId": "9f1c5409d2ac44a1", "scanner": "scanner-primary", "fingerprint": "57e3b853b0a29f5e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/hooks/hooks-cursor.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cbbd91f9c6387e1b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/using-superpowers/references/gemini-tools.md"}, "properties": {"repobilityId": "562ed7c58f3c442a", "scanner": "scanner-primary", "fingerprint": "cbbd91f9c6387e1b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/using-superpowers/references/gemini-tools.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-870797ba4332a478", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/using-superpowers/references/copilot-tools.md"}, "properties": {"repobilityId": "d7c1bfaacc67a50c", "scanner": "scanner-primary", "fingerprint": "870797ba4332a478", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/using-superpowers/references/copilot-tools.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c9317aab5151c6de", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/using-superpowers/references/codex-tools.md"}, "properties": {"repobilityId": "23e181349a0181c8", "scanner": "scanner-primary", "fingerprint": "c9317aab5151c6de", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/using-superpowers/references/codex-tools.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74c27e415a1a38fb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/writing-skills/anthropic-best-practices.md"}, "properties": {"repobilityId": "79e6eac51fc47f9d", "scanner": "scanner-primary", "fingerprint": "74c27e415a1a38fb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/writing-skills/anthropic-best-practices.md"}, "region": {"startLine": 1063}}}]}, {"ruleId": "scanner-8d86c829a555ac3e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/.github/ISSUE_TEMPLATE/bug_report.md"}, "properties": {"repobilityId": "8d822e68b2305ac5", "scanner": "scanner-primary", "fingerprint": "8d86c829a555ac3e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/.github/ISSUE_TEMPLATE/bug_report.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8e48914439b08c0d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/docs/agent-skills.md"}, "properties": {"repobilityId": "7353b53772997213", "scanner": "scanner-primary", "fingerprint": "8e48914439b08c0d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/docs/agent-skills.md"}, "region": {"startLine": 247}}}]}, {"ruleId": "scanner-fea7fb8ae75ccc3e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/new_subagent.yml"}, "properties": {"repobilityId": "076236cd7e2e77ab", "scanner": "scanner-primary", "fingerprint": "fea7fb8ae75ccc3e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/new_subagent.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-66224a394ab9dba8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/workflows/eval-report.yml"}, "properties": {"repobilityId": "68a31a704a3cc655", "scanner": "scanner-primary", "fingerprint": "66224a394ab9dba8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/.github/workflows/eval-report.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b5e65094a3e6bb87", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/code-refactoring/commands/context-restore.md"}, "properties": {"repobilityId": "2cc9420ce23d90d8", "scanner": "scanner-primary", "fingerprint": "b5e65094a3e6bb87", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/code-refactoring/commands/context-restore.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-a811bc58e8c8be6f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/error-debugging/commands/error-trace.md"}, "properties": {"repobilityId": "cb49bf2965c832a8", "scanner": "scanner-primary", "fingerprint": "a811bc58e8c8be6f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/error-debugging/commands/error-trace.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e102520eb59f28ad", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/README.md"}, "properties": {"repobilityId": "5e03d175e837dd3e", "scanner": "scanner-primary", "fingerprint": "e102520eb59f28ad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e8030e311e7bd28", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/mobile-android-design/references/compose-components.md"}, "properties": {"repobilityId": "23a256a248fdae01", "scanner": "scanner-primary", "fingerprint": "2e8030e311e7bd28", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/mobile-android-design/references/compose-components.md"}, "region": {"startLine": 163}}}]}, {"ruleId": "scanner-cddaefa0015a3e10", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/web-component-design/SKILL.md"}, "properties": {"repobilityId": "53fed2ee6e574593", "scanner": "scanner-primary", "fingerprint": "cddaefa0015a3e10", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/web-component-design/SKILL.md"}, "region": {"startLine": 215}}}]}, {"ruleId": "scanner-a86972cf41504369", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/design-tokens.md"}, "properties": {"repobilityId": "924ef4db406467c7", "scanner": "scanner-primary", "fingerprint": "a86972cf41504369", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/design-tokens.md"}, "region": {"startLine": 328}}}]}, {"ruleId": "scanner-7f6744e19d13bc8b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/component-architecture.md"}, "properties": {"repobilityId": "e482b4599bda5866", "scanner": "scanner-primary", "fingerprint": "7f6744e19d13bc8b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/component-architecture.md"}, "region": {"startLine": 362}}}]}, {"ruleId": "scanner-8013e95af860b6ac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/react-native-design/references/navigation-patterns.md"}, "properties": {"repobilityId": "70f4f98dc799477c", "scanner": "scanner-primary", "fingerprint": "8013e95af860b6ac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ui-design/skills/react-native-design/references/navigation-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f2ac8fa68c9329b7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-standards/skills/hads/SKILL.md"}, "properties": {"repobilityId": "65e26562d1b9ab99", "scanner": "scanner-primary", "fingerprint": "f2ac8fa68c9329b7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-standards/skills/hads/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d369b45f6000f77", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/commands/ai-assistant.md"}, "properties": {"repobilityId": "7e6fe44b72a89ada", "scanner": "scanner-primary", "fingerprint": "4d369b45f6000f77", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/commands/ai-assistant.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-30dbbc3effebd774", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/embedding-strategies/SKILL.md"}, "properties": {"repobilityId": "92d0defe264b5abe", "scanner": "scanner-primary", "fingerprint": "30dbbc3effebd774", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/embedding-strategies/SKILL.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-c1f3c6584faece31", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/hybrid-search-implementation/SKILL.md"}, "properties": {"repobilityId": "e2919bca02cad44e", "scanner": "scanner-primary", "fingerprint": "c1f3c6584faece31", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/hybrid-search-implementation/SKILL.md"}, "region": {"startLine": 427}}}]}, {"ruleId": "scanner-6a3b7961115964b3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-engineering-patterns/references/few-shot-learning.md"}, "properties": {"repobilityId": "06e27187928eb1d5", "scanner": "scanner-primary", "fingerprint": "6a3b7961115964b3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-engineering-patterns/references/few-shot-learning.md"}, "region": {"startLine": 197}}}]}, {"ruleId": "scanner-b05f52ecc9258c47", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/similarity-search-patterns/SKILL.md"}, "properties": {"repobilityId": "3ed1159fdd92b4c8", "scanner": "scanner-primary", "fingerprint": "b05f52ecc9258c47", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/llm-application-dev/skills/similarity-search-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-beb00e6c81f2ecc1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ship-mate/commands/ship.md"}, "properties": {"repobilityId": "64f2a6b24fa2960d", "scanner": "scanner-primary", "fingerprint": "beb00e6c81f2ecc1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ship-mate/commands/ship.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-865263d9f1734d69", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ship-mate/stories/_template.md"}, "properties": {"repobilityId": "c9548023f5d22b2f", "scanner": "scanner-primary", "fingerprint": "865263d9f1734d69", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/ship-mate/stories/_template.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c96601de10e37a8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/systems-programming/agents/c-pro.md"}, "properties": {"repobilityId": "d0f54726796d4dc2", "scanner": "scanner-primary", "fingerprint": "9c96601de10e37a8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/systems-programming/agents/c-pro.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dfdf8a5ab1187e82", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "properties": {"repobilityId": "9f4d91a0f98dc64b", "scanner": "scanner-primary", "fingerprint": "dfdf8a5ab1187e82", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "region": {"startLine": 254}}}]}, {"ruleId": "scanner-86df708bf7234fde", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "properties": {"repobilityId": "370277e2c9673d3c", "scanner": "scanner-primary", "fingerprint": "86df708bf7234fde", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d26bc1cddf56f3d5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-compliance/commands/compliance-check.md"}, "properties": {"repobilityId": "03ed97249483a462", "scanner": "scanner-primary", "fingerprint": "d26bc1cddf56f3d5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-compliance/commands/compliance-check.md"}, "region": {"startLine": 674}}}]}, {"ruleId": "scanner-f119d25b7cd6f10f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/SKILL.md"}, "properties": {"repobilityId": "7281d073089a64ce", "scanner": "scanner-primary", "fingerprint": "f119d25b7cd6f10f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c2d82faed856b8d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/references/advanced-patterns.md"}, "properties": {"repobilityId": "4bfd30b658667a69", "scanner": "scanner-primary", "fingerprint": "6c2d82faed856b8d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/references/advanced-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-efc44217a8a07d05", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/commands/certify.md"}, "properties": {"repobilityId": "2ea510153ed289a0", "scanner": "scanner-primary", "fingerprint": "efc44217a8a07d05", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/commands/certify.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f9ec9e77c98acef9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/commands/compare.md"}, "properties": {"repobilityId": "74958a6fd81cc636", "scanner": "scanner-primary", "fingerprint": "f9ec9e77c98acef9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/commands/compare.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa53c8316bbe808d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/commands/eval.md"}, "properties": {"repobilityId": "521f758340c3b4b5", "scanner": "scanner-primary", "fingerprint": "fa53c8316bbe808d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/commands/eval.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-13e720151692091c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/agents/eval-orchestrator.md"}, "properties": {"repobilityId": "a11d686fd58a5029", "scanner": "scanner-primary", "fingerprint": "13e720151692091c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/agents/eval-orchestrator.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5dfdff870f19fdd5", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/code-documentation/commands/doc-generate.md"}, "properties": {"repobilityId": "af9de5f50b915e64", "scanner": "scanner-primary", "fingerprint": "5dfdff870f19fdd5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/code-documentation/commands/doc-generate.md"}, "region": {"startLine": 592}}}]}, {"ruleId": "scanner-715b57e675981d66", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/observability-monitoring/commands/monitor-setup.md"}, "properties": {"repobilityId": "5499b7b6828a26c9", "scanner": "scanner-primary", "fingerprint": "715b57e675981d66", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/observability-monitoring/commands/monitor-setup.md"}, "region": {"startLine": 504}}}]}, {"ruleId": "scanner-38b64f3bba17b6e7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/observability-monitoring/skills/prometheus-configuration/SKILL.md"}, "properties": {"repobilityId": "e79c2360ef01a0c8", "scanner": "scanner-primary", "fingerprint": "38b64f3bba17b6e7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/observability-monitoring/skills/prometheus-configuration/SKILL.md"}, "region": {"startLine": 155}}}]}, {"ruleId": "scanner-ffaa7f2f1383aa29", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/frontend-mobile-development/skills/react-state-management/SKILL.md"}, "properties": {"repobilityId": "add8a1efc7c9e5ac", "scanner": "scanner-primary", "fingerprint": "ffaa7f2f1383aa29", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/frontend-mobile-development/skills/react-state-management/SKILL.md"}, "region": {"startLine": 297}}}]}, {"ruleId": "scanner-c1cf413137526e24", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/blockchain-web3/skills/nft-standards/SKILL.md"}, "properties": {"repobilityId": "b21252cbc021ccce", "scanner": "scanner-primary", "fingerprint": "c1cf413137526e24", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/blockchain-web3/skills/nft-standards/SKILL.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-bfa199a259bc0117", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/commands/python-scaffold.md"}, "properties": {"repobilityId": "eb1f30bd0d1337a4", "scanner": "scanner-primary", "fingerprint": "bfa199a259bc0117", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/commands/python-scaffold.md"}, "region": {"startLine": 283}}}]}, {"ruleId": "scanner-b4dc36e2ca26cad6", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/uv-package-manager/SKILL.md"}, "properties": {"repobilityId": "0d211af208b71b15", "scanner": "scanner-primary", "fingerprint": "b4dc36e2ca26cad6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/uv-package-manager/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-6d04db1869e4f66b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "properties": {"repobilityId": "ea5fabc401337d2b", "scanner": "scanner-primary", "fingerprint": "6d04db1869e4f66b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-5e24614c3b15ad71", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "properties": {"repobilityId": "0f3fbc59280535a7", "scanner": "scanner-primary", "fingerprint": "5e24614c3b15ad71", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-18608c52ff9841dc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "4a9b9a7ea7dc7d4b", "scanner": "scanner-primary", "fingerprint": "18608c52ff9841dc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/SKILL.md"}, "region": {"startLine": 534}}}]}, {"ruleId": "scanner-56ccfa099fe78e29", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/references/advanced-patterns.md"}, "properties": {"repobilityId": "be1271960f5cd4fc", "scanner": "scanner-primary", "fingerprint": "56ccfa099fe78e29", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/references/advanced-patterns.md"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-4ce735c1319a40ac", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/context-management/commands/context-restore.md"}, "properties": {"repobilityId": "36001cf49fff1db1", "scanner": "scanner-primary", "fingerprint": "4ce735c1319a40ac", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/context-management/commands/context-restore.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-8373f9d8f8c78448", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/reverse-engineering/agents/firmware-analyst.md"}, "properties": {"repobilityId": "355317f926b1a351", "scanner": "scanner-primary", "fingerprint": "8373f9d8f8c78448", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/reverse-engineering/agents/firmware-analyst.md"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-2a85ccbd324e2d27", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/reverse-engineering/skills/protocol-reverse-engineering/SKILL.md"}, "properties": {"repobilityId": "0c92c2a9fa89f5f6", "scanner": "scanner-primary", "fingerprint": "2a85ccbd324e2d27", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/reverse-engineering/skills/protocol-reverse-engineering/SKILL.md"}, "region": {"startLine": 314}}}]}, {"ruleId": "scanner-2b135511996f46d0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/database-design/skills/postgresql/SKILL.md"}, "properties": {"repobilityId": "96451f5faac9fa31", "scanner": "scanner-primary", "fingerprint": "2b135511996f46d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/database-design/skills/postgresql/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce8ccadf92ad4ee2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/meigen-ai-design/README.md"}, "properties": {"repobilityId": "1a3d6187737848f5", "scanner": "scanner-primary", "fingerprint": "ce8ccadf92ad4ee2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/meigen-ai-design/README.md"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-42f2134f523e331f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/meigen-ai-design/commands/gen.md"}, "properties": {"repobilityId": "422b29e5e2ea2c25", "scanner": "scanner-primary", "fingerprint": "42f2134f523e331f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/meigen-ai-design/commands/gen.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0ca9e2454ca63b7b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "properties": {"repobilityId": "2f2514fd7ff28d1e", "scanner": "scanner-primary", "fingerprint": "0ca9e2454ca63b7b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-429f975a977121b9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "properties": {"repobilityId": "15b9498976a488de", "scanner": "scanner-primary", "fingerprint": "429f975a977121b9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef3adfab8a094850", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/auth-implementation-patterns/SKILL.md"}, "properties": {"repobilityId": "0a976672e4130548", "scanner": "scanner-primary", "fingerprint": "ef3adfab8a094850", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/auth-implementation-patterns/SKILL.md"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-a0aa32d5f877d0a5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/sql-optimization-patterns/SKILL.md"}, "properties": {"repobilityId": "daab8f448e2cf49f", "scanner": "scanner-primary", "fingerprint": "a0aa32d5f877d0a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/developer-essentials/skills/sql-optimization-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d49e97ec0eb3777", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/business-analytics/skills/kpi-dashboard-design/SKILL.md"}, "properties": {"repobilityId": "4c1dad2e7816ee0c", "scanner": "scanner-primary", "fingerprint": "3d49e97ec0eb3777", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/business-analytics/skills/kpi-dashboard-design/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-421d01675f8aa12a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/SKILL.md"}, "properties": {"repobilityId": "1864c59322302c15", "scanner": "scanner-primary", "fingerprint": "421d01675f8aa12a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/SKILL.md"}, "region": {"startLine": 245}}}]}, {"ruleId": "scanner-4edabf010e463c0f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "properties": {"repobilityId": "6aceb9be1bf518e9", "scanner": "scanner-primary", "fingerprint": "4edabf010e463c0f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "region": {"startLine": 65}}}]}, {"ruleId": "scanner-a0b59008fced508c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "properties": {"repobilityId": "0cd741685deadb01", "scanner": "scanner-primary", "fingerprint": "a0b59008fced508c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-34aff4e5803bccee", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md"}, "properties": {"repobilityId": "2b9ea3ec10e4dbad", "scanner": "scanner-primary", "fingerprint": "34aff4e5803bccee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09e1399fbd27b461", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/references/rbac-patterns.md"}, "properties": {"repobilityId": "f327bec8557a8368", "scanner": "scanner-primary", "fingerprint": "09e1399fbd27b461", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/references/rbac-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1342f0ac2b4e098", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md"}, "properties": {"repobilityId": "ad96f79e433eb929", "scanner": "scanner-primary", "fingerprint": "e1342f0ac2b4e098", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md"}, "region": {"startLine": 184}}}]}, {"ruleId": "scanner-93f4943cc681bf0e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/references/deployment-spec.md"}, "properties": {"repobilityId": "a7db0b128b625db8", "scanner": "scanner-primary", "fingerprint": "93f4943cc681bf0e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/references/deployment-spec.md"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-a33dcb3a9c80cafd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/deployment-template.yaml"}, "properties": {"repobilityId": "acba5e3732cc8f66", "scanner": "scanner-primary", "fingerprint": "a33dcb3a9c80cafd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/deployment-template.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9d3a6b5b8778d652", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/configmap-template.yaml"}, "properties": {"repobilityId": "e78aadb472027a9b", "scanner": "scanner-primary", "fingerprint": "9d3a6b5b8778d652", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/configmap-template.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf66428b98eecc7c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/review-agent-governance/commands/approve-review.md"}, "properties": {"repobilityId": "d816a8f3aabeffdb", "scanner": "scanner-primary", "fingerprint": "cf66428b98eecc7c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/review-agent-governance/commands/approve-review.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7fd67ada3b9fc68f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "properties": {"repobilityId": "7b670efd77382e83", "scanner": "scanner-primary", "fingerprint": "7fd67ada3b9fc68f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-080bc4bf5f69e809", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "properties": {"repobilityId": "ec5305acdf356721", "scanner": "scanner-primary", "fingerprint": "080bc4bf5f69e809", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df815a9f452da57c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/performance-testing-review/commands/ai-review.md"}, "properties": {"repobilityId": "1b6afa4f79a387c4", "scanner": "scanner-primary", "fingerprint": "df815a9f452da57c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/performance-testing-review/commands/ai-review.md"}, "region": {"startLine": 180}}}]}, {"ruleId": "scanner-f518bd07cad070e2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/frontend-mobile-security/commands/xss-scan.md"}, "properties": {"repobilityId": "76e8e8e8864f7dd9", "scanner": "scanner-primary", "fingerprint": "f518bd07cad070e2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/frontend-mobile-security/commands/xss-scan.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-214189e0d975a662", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/web-scripting/agents/ruby-pro.md"}, "properties": {"repobilityId": "8e379d7d8bdc6737", "scanner": "scanner-primary", "fingerprint": "214189e0d975a662", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/web-scripting/agents/ruby-pro.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c5bbf8a3e8f55a61", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/database-migrations/commands/migration-observability.md"}, "properties": {"repobilityId": "9773c90748a18c1d", "scanner": "scanner-primary", "fingerprint": "c5bbf8a3e8f55a61", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/database-migrations/commands/migration-observability.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1bd0b932553c74c7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-metrics-calculation/SKILL.md"}, "properties": {"repobilityId": "f7ecd6e9de4f4045", "scanner": "scanner-primary", "fingerprint": "1bd0b932553c74c7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-metrics-calculation/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-5ac69a113cc0c7fb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/payment-processing/skills/pci-compliance/SKILL.md"}, "properties": {"repobilityId": "b4c186da44e2e1b0", "scanner": "scanner-primary", "fingerprint": "5ac69a113cc0c7fb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/payment-processing/skills/pci-compliance/SKILL.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-f84d3734398bd11a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/payment-processing/skills/paypal-integration/SKILL.md"}, "properties": {"repobilityId": "8d94652efee5ea66", "scanner": "scanner-primary", "fingerprint": "f84d3734398bd11a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/payment-processing/skills/paypal-integration/SKILL.md"}, "region": {"startLine": 137}}}]}, {"ruleId": "scanner-459aee76129bcfb6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/database-cloud-optimization/commands/cost-optimize.md"}, "properties": {"repobilityId": "574f0f1cb580a09d", "scanner": "scanner-primary", "fingerprint": "459aee76129bcfb6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/database-cloud-optimization/commands/cost-optimize.md"}, "region": {"startLine": 572}}}]}, {"ruleId": "scanner-88528dced40f4d72", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/error-diagnostics/commands/error-trace.md"}, "properties": {"repobilityId": "2ef30bd5a0af3b56", "scanner": "scanner-primary", "fingerprint": "88528dced40f4d72", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/error-diagnostics/commands/error-trace.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9b92e3deea2718e2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "properties": {"repobilityId": "a37f79b16316a9f4", "scanner": "scanner-primary", "fingerprint": "9b92e3deea2718e2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "region": {"startLine": 310}}}]}, {"ruleId": "scanner-92855b526cd3f7d5", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "properties": {"repobilityId": "f7720342cfbf6516", "scanner": "scanner-primary", "fingerprint": "92855b526cd3f7d5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-f903baf1abaf6546", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/javascript-testing-patterns/references/advanced-testing-patterns.md"}, "properties": {"repobilityId": "f104903dc952e842", "scanner": "scanner-primary", "fingerprint": "f903baf1abaf6546", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/javascript-testing-patterns/references/advanced-testing-patterns.md"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-f426acf2bbba88db", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/SKILL.md"}, "properties": {"repobilityId": "f08ba1feee454374", "scanner": "scanner-primary", "fingerprint": "f426acf2bbba88db", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/SKILL.md"}, "region": {"startLine": 339}}}]}, {"ruleId": "scanner-8efe8794b2707a58", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/references/advanced-patterns.md"}, "properties": {"repobilityId": "8fd6ad5e0d72b05e", "scanner": "scanner-primary", "fingerprint": "8efe8794b2707a58", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/references/advanced-patterns.md"}, "region": {"startLine": 254}}}]}, {"ruleId": "scanner-760d1c3e7424831c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/modern-javascript-patterns/references/advanced-patterns.md"}, "properties": {"repobilityId": "2c65d6d7e2acefd1", "scanner": "scanner-primary", "fingerprint": "760d1c3e7424831c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/javascript-typescript/skills/modern-javascript-patterns/references/advanced-patterns.md"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-3175f27d92aaadca", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/agents/security-auditor.md"}, "properties": {"repobilityId": "5d2cea075a4600bf", "scanner": "scanner-primary", "fingerprint": "3175f27d92aaadca", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/agents/security-auditor.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-130af51186591d42", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/event-store-design/SKILL.md"}, "properties": {"repobilityId": "d03c0de8013c0d5c", "scanner": "scanner-primary", "fingerprint": "130af51186591d42", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/event-store-design/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-647c46418dd92c20", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/references/rest-best-practices.md"}, "properties": {"repobilityId": "c691755ba9dd53bf", "scanner": "scanner-primary", "fingerprint": "647c46418dd92c20", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/references/rest-best-practices.md"}, "region": {"startLine": 334}}}]}, {"ruleId": "scanner-cd89f2cff4f44adc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/SKILL.md"}, "properties": {"repobilityId": "8ab932ed3323ec27", "scanner": "scanner-primary", "fingerprint": "cd89f2cff4f44adc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/SKILL.md"}, "region": {"startLine": 280}}}]}, {"ruleId": "scanner-8897c4d85f690762", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "properties": {"repobilityId": "e5899e6df3f88520", "scanner": "scanner-primary", "fingerprint": "8897c4d85f690762", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "region": {"startLine": 313}}}]}, {"ruleId": "scanner-9d936ae533afa673", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "properties": {"repobilityId": "47b4618726d08788", "scanner": "scanner-primary", "fingerprint": "9d936ae533afa673", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-26f6a84fc69c7250", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "properties": {"repobilityId": "e966e943c646e4d9", "scanner": "scanner-primary", "fingerprint": "26f6a84fc69c7250", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "region": {"startLine": 304}}}]}, {"ruleId": "scanner-f2f63925237d3d7a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "properties": {"repobilityId": "ae14390fa2597f82", "scanner": "scanner-primary", "fingerprint": "f2f63925237d3d7a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b46e8a81068de40d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cicd-automation/commands/workflow-automate.md"}, "properties": {"repobilityId": "331535feb807c11c", "scanner": "scanner-primary", "fingerprint": "b46e8a81068de40d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cicd-automation/commands/workflow-automate.md"}, "region": {"startLine": 423}}}]}, {"ruleId": "scanner-0fcce26dfe626700", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cicd-automation/skills/secrets-management/SKILL.md"}, "properties": {"repobilityId": "57f2497acf876457", "scanner": "scanner-primary", "fingerprint": "0fcce26dfe626700", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cicd-automation/skills/secrets-management/SKILL.md"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-a8a99673632c23fb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cicd-automation/skills/deployment-pipeline-design/references/advanced-strategies.md"}, "properties": {"repobilityId": "259e7820f59ec5fd", "scanner": "scanner-primary", "fingerprint": "a8a99673632c23fb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cicd-automation/skills/deployment-pipeline-design/references/advanced-strategies.md"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-347ffb271c223d80", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/conductor/templates/code_styleguides/csharp.md"}, "properties": {"repobilityId": "0cb2934ed1b15eb9", "scanner": "scanner-primary", "fingerprint": "347ffb271c223d80", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/conductor/templates/code_styleguides/csharp.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3fccb006728f0b4d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-generation/commands/doc-generate.md"}, "properties": {"repobilityId": "63e3a12a9d84b3c0", "scanner": "scanner-primary", "fingerprint": "3fccb006728f0b4d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-generation/commands/doc-generate.md"}, "region": {"startLine": 592}}}]}, {"ruleId": "scanner-bbf4d51b9558ebfc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/SKILL.md"}, "properties": {"repobilityId": "158064d4f080084e", "scanner": "scanner-primary", "fingerprint": "bbf4d51b9558ebfc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-615ca0b0a84b9667", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/references/code-first-and-tooling.md"}, "properties": {"repobilityId": "5028d102132d561d", "scanner": "scanner-primary", "fingerprint": "615ca0b0a84b9667", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/references/code-first-and-tooling.md"}, "region": {"startLine": 385}}}]}, {"ruleId": "scanner-6d28673dbc0b2369", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/mtls-configuration/SKILL.md"}, "properties": {"repobilityId": "483b62b44dde0244", "scanner": "scanner-primary", "fingerprint": "6d28673dbc0b2369", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/mtls-configuration/SKILL.md"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-7e71a4123e9cd1e6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/multi-cloud-patterns.md"}, "properties": {"repobilityId": "80775b69b18cec1a", "scanner": "scanner-primary", "fingerprint": "7e71a4123e9cd1e6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/multi-cloud-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09e371dc4dafcec4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/service-comparison.md"}, "properties": {"repobilityId": "273cab72b59b3d34", "scanner": "scanner-primary", "fingerprint": "09e371dc4dafcec4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/service-comparison.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8db68516acc5a61c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/service-mesh-observability/SKILL.md"}, "properties": {"repobilityId": "922c12db61a275bf", "scanner": "scanner-primary", "fingerprint": "8db68516acc5a61c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/service-mesh-observability/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c0dc3a44b29d6e4", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md"}, "properties": {"repobilityId": "8cf265468765ad50", "scanner": "scanner-primary", "fingerprint": "6c0dc3a44b29d6e4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-1b5b972a0ce18caf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md"}, "properties": {"repobilityId": "5a73df567048d417", "scanner": "scanner-primary", "fingerprint": "1b5b972a0ce18caf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f1597fde18a094d1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/README.md"}, "properties": {"repobilityId": "7d42eebca25140a5", "scanner": "scanner-primary", "fingerprint": "f1597fde18a094d1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/README.md"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-6d2080a04bf22004", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/commands/team-delegate.md"}, "properties": {"repobilityId": "c386456fc70b740e", "scanner": "scanner-primary", "fingerprint": "6d2080a04bf22004", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/commands/team-delegate.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b5a7093a114407e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/skills/parallel-feature-development/references/file-ownership.md"}, "properties": {"repobilityId": "387c2fe84fd28789", "scanner": "scanner-primary", "fingerprint": "7b5a7093a114407e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/skills/parallel-feature-development/references/file-ownership.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-357a74f00ea38846", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/skills/team-composition-patterns/references/agent-type-selection.md"}, "properties": {"repobilityId": "a788d2a91724a6d4", "scanner": "scanner-primary", "fingerprint": "357a74f00ea38846", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/skills/team-composition-patterns/references/agent-type-selection.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-caf7d1a3fea3defc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/skills/task-coordination-strategies/SKILL.md"}, "properties": {"repobilityId": "da863a499ae6db11", "scanner": "scanner-primary", "fingerprint": "caf7d1a3fea3defc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/agent-teams/skills/task-coordination-strategies/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-db037dd2f5003675", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/startup-business-analyst/commands/business-case.md"}, "properties": {"repobilityId": "50414bb1163065e0", "scanner": "scanner-primary", "fingerprint": "db037dd2f5003675", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/startup-business-analyst/commands/business-case.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0789b9d8ee72b680", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "properties": {"repobilityId": "749b06a155df59fe", "scanner": "scanner-primary", "fingerprint": "0789b9d8ee72b680", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "region": {"startLine": 225}}}]}, {"ruleId": "scanner-9d2e771f147d4311", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "properties": {"repobilityId": "a52892cc050cf336", "scanner": "scanner-primary", "fingerprint": "9d2e771f147d4311", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "region": {"startLine": 479}}}]}, {"ruleId": "scanner-61c997c1c5c74249", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-scanning/commands/security-dependencies.md"}, "properties": {"repobilityId": "601e5a93dae95049", "scanner": "scanner-primary", "fingerprint": "61c997c1c5c74249", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-scanning/commands/security-dependencies.md"}, "region": {"startLine": 499}}}]}, {"ruleId": "scanner-14b50c13afa343d9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/application-performance/commands/performance-optimization.md"}, "properties": {"repobilityId": "3c44e222bcde564c", "scanner": "scanner-primary", "fingerprint": "14b50c13afa343d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/application-performance/commands/performance-optimization.md"}, "region": {"startLine": 656}}}]}, {"ruleId": "scanner-c30efc26d7f43416", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/deployment-validation/commands/config-validate.md"}, "properties": {"repobilityId": "b19f98aeedc403c2", "scanner": "scanner-primary", "fingerprint": "c30efc26d7f43416", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/deployment-validation/commands/config-validate.md"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-9d052f148b48bded", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/team-collaboration/commands/issue.md"}, "properties": {"repobilityId": "a7792fed8b7941d0", "scanner": "scanner-primary", "fingerprint": "9d052f148b48bded", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/team-collaboration/commands/issue.md"}, "region": {"startLine": 195}}}]}, {"ruleId": "scanner-f6c89a71190a3b13", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-container.md"}, "properties": {"repobilityId": "f2b2cbd59180b6fa", "scanner": "scanner-primary", "fingerprint": "f6c89a71190a3b13", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-container.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a476610cf89ca2b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-component.md"}, "properties": {"repobilityId": "83e79bb727d20d51", "scanner": "scanner-primary", "fingerprint": "6a476610cf89ca2b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-component.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-adbdbebccd21fcd1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/README.md"}, "properties": {"repobilityId": "6d647b1f675a5882", "scanner": "scanner-primary", "fingerprint": "adbdbebccd21fcd1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1f97c31ba4ce330a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/qa/SKILL.md"}, "properties": {"repobilityId": "83ead928c00403c0", "scanner": "scanner-primary", "fingerprint": "1f97c31ba4ce330a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/qa/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-255a0c57c75c51cd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/domain-model/SKILL.md"}, "properties": {"repobilityId": "3887940cddb84114", "scanner": "scanner-primary", "fingerprint": "255a0c57c75c51cd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/domain-model/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c18995463b768b8b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/obsidian-vault/SKILL.md"}, "properties": {"repobilityId": "2409cf07a002cd8a", "scanner": "scanner-primary", "fingerprint": "c18995463b768b8b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/obsidian-vault/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a15ddd7433ea4b5f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/github-triage/AGENT-BRIEF.md"}, "properties": {"repobilityId": "0546183f763181e1", "scanner": "scanner-primary", "fingerprint": "a15ddd7433ea4b5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/skills/github-triage/AGENT-BRIEF.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-99e933c08f2a4881", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "properties": {"repobilityId": "963f22a069362a78", "scanner": "scanner-primary", "fingerprint": "99e933c08f2a4881", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/cdesign-expo/.claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-572afeaabb9fef17", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/docs/agent-skills.md"}, "properties": {"repobilityId": "fd4ea0aef8ae7491", "scanner": "scanner-primary", "fingerprint": "572afeaabb9fef17", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/docs/agent-skills.md"}, "region": {"startLine": 247}}}]}, {"ruleId": "scanner-076c2f899d90b6a9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/docs/harnesses.md"}, "properties": {"repobilityId": "199f53c97ccaffcd", "scanner": "scanner-primary", "fingerprint": "076c2f899d90b6a9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/docs/harnesses.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5a1ca9702593d940", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/tools/adapters/cursor_rules/010-python-tooling.mdc"}, "properties": {"repobilityId": "5b68f50de8813f24", "scanner": "scanner-primary", "fingerprint": "5a1ca9702593d940", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/tools/adapters/cursor_rules/010-python-tooling.mdc"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d33d94a4f9882e4c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/tools/adapters/cursor_rules/020-agent-skill-authoring.mdc"}, "properties": {"repobilityId": "e99350818472cc7b", "scanner": "scanner-primary", "fingerprint": "d33d94a4f9882e4c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/tools/adapters/cursor_rules/020-agent-skill-authoring.mdc"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-133eacb4fb7ec5e0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/new_subagent.yml"}, "properties": {"repobilityId": "a473952bceddf9ab", "scanner": "scanner-primary", "fingerprint": "133eacb4fb7ec5e0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/new_subagent.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ded387d3445b7229", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/bug_report.yml"}, "properties": {"repobilityId": "3959e1eadf780d73", "scanner": "scanner-primary", "fingerprint": "ded387d3445b7229", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.github/ISSUE_TEMPLATE/bug_report.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-005ab8dfa378bea2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.github/workflows/eval-report.yml"}, "properties": {"repobilityId": "017addd974cf8a72", "scanner": "scanner-primary", "fingerprint": "005ab8dfa378bea2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.github/workflows/eval-report.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cfeff09930260678", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/.github/workflows/validate.yml"}, "properties": {"repobilityId": "492579cd1384a3b7", "scanner": "scanner-primary", "fingerprint": "cfeff09930260678", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.github/workflows/validate.yml"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-a4ae6a14de00fbec", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/.github/workflows/validate.yml"}, "properties": {"repobilityId": "955cc940bbb004f3", "scanner": "scanner-primary", "fingerprint": "a4ae6a14de00fbec", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.github/workflows/validate.yml"}, "region": {"startLine": 242}}}]}, {"ruleId": "scanner-cd9ebaa4a20a4d3d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.cursor/rules/010-python-tooling.mdc"}, "properties": {"repobilityId": "115f431e8de394b4", "scanner": "scanner-primary", "fingerprint": "cd9ebaa4a20a4d3d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "cursor_rule"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.cursor/rules/010-python-tooling.mdc"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1510cab197f38908", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/.cursor/rules/020-agent-skill-authoring.mdc"}, "properties": {"repobilityId": "cef0a8826b3a4cee", "scanner": "scanner-primary", "fingerprint": "1510cab197f38908", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "cursor_rule"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/.cursor/rules/020-agent-skill-authoring.mdc"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c8ecbefb2c54caeb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/code-refactoring/commands/context-restore.md"}, "properties": {"repobilityId": "d540f17f8a58f375", "scanner": "scanner-primary", "fingerprint": "c8ecbefb2c54caeb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/code-refactoring/commands/context-restore.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-6b2d97c92e8f4715", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/error-debugging/commands/error-trace.md"}, "properties": {"repobilityId": "803da1ae97bf5896", "scanner": "scanner-primary", "fingerprint": "6b2d97c92e8f4715", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/error-debugging/commands/error-trace.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a32710537ca85f7a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ui-design/README.md"}, "properties": {"repobilityId": "4f162a5e35cebadd", "scanner": "scanner-primary", "fingerprint": "a32710537ca85f7a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/ui-design/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d58c200644d83475", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/mobile-android-design/references/compose-components.md"}, "properties": {"repobilityId": "5ee43c27e0201f3e", "scanner": "scanner-primary", "fingerprint": "d58c200644d83475", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/ui-design/skills/mobile-android-design/references/compose-components.md"}, "region": {"startLine": 163}}}]}, {"ruleId": "scanner-5dc679f480b988fe", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/web-component-design/SKILL.md"}, "properties": {"repobilityId": "19a13c17c7b0aa18", "scanner": "scanner-primary", "fingerprint": "5dc679f480b988fe", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/ui-design/skills/web-component-design/SKILL.md"}, "region": {"startLine": 215}}}]}, {"ruleId": "scanner-9b91efcbb16788fc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/design-tokens.md"}, "properties": {"repobilityId": "9fb2708523be5c77", "scanner": "scanner-primary", "fingerprint": "9b91efcbb16788fc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/design-tokens.md"}, "region": {"startLine": 328}}}]}, {"ruleId": "scanner-0f08a9854e0812b5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/component-architecture.md"}, "properties": {"repobilityId": "b1ea951235249a59", "scanner": "scanner-primary", "fingerprint": "0f08a9854e0812b5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/ui-design/skills/design-system-patterns/references/component-architecture.md"}, "region": {"startLine": 362}}}]}, {"ruleId": "scanner-8f1f21cda18ab398", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ui-design/skills/react-native-design/references/navigation-patterns.md"}, "properties": {"repobilityId": "ff681c760e4113d5", "scanner": "scanner-primary", "fingerprint": "8f1f21cda18ab398", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/ui-design/skills/react-native-design/references/navigation-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49066b89ffc4b8b0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/documentation-standards/skills/hads/SKILL.md"}, "properties": {"repobilityId": "d52d0c9e7d202667", "scanner": "scanner-primary", "fingerprint": "49066b89ffc4b8b0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/documentation-standards/skills/hads/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-17d2f31b8bb5876a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/commands/ai-assistant.md"}, "properties": {"repobilityId": "4313733ce6dfd640", "scanner": "scanner-primary", "fingerprint": "17d2f31b8bb5876a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/llm-application-dev/commands/ai-assistant.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-9c4b3a3f6718e0c3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/embedding-strategies/references/details.md"}, "properties": {"repobilityId": "31ec468d76d47cd3", "scanner": "scanner-primary", "fingerprint": "9c4b3a3f6718e0c3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/llm-application-dev/skills/embedding-strategies/references/details.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-0dca501ca9f0fd26", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/hybrid-search-implementation/references/details.md"}, "properties": {"repobilityId": "6be887b6366bea03", "scanner": "scanner-primary", "fingerprint": "0dca501ca9f0fd26", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/llm-application-dev/skills/hybrid-search-implementation/references/details.md"}, "region": {"startLine": 393}}}]}, {"ruleId": "scanner-3e9557d5ebd9765d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-engineering-patterns/references/few-shot-learning.md"}, "properties": {"repobilityId": "6fe61de5fae6c5ce", "scanner": "scanner-primary", "fingerprint": "3e9557d5ebd9765d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/llm-application-dev/skills/prompt-engineering-patterns/references/few-shot-learning.md"}, "region": {"startLine": 197}}}]}, {"ruleId": "scanner-b4e346dc62c37c34", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/llm-application-dev/skills/similarity-search-patterns/references/details.md"}, "properties": {"repobilityId": "7fa8f98acbe80307", "scanner": "scanner-primary", "fingerprint": "b4e346dc62c37c34", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/llm-application-dev/skills/similarity-search-patterns/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb24f22bb1f2a66e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ship-mate/commands/ship.md"}, "properties": {"repobilityId": "ba110aaf997ef370", "scanner": "scanner-primary", "fingerprint": "eb24f22bb1f2a66e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/ship-mate/commands/ship.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5fb57840402757aa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/ship-mate/stories/_template.md"}, "properties": {"repobilityId": "25944fafb61ffda2", "scanner": "scanner-primary", "fingerprint": "5fb57840402757aa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/ship-mate/stories/_template.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b32f64b80b3640d1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/systems-programming/agents/c-pro.md"}, "properties": {"repobilityId": "408a57cdb70be84c", "scanner": "scanner-primary", "fingerprint": "b32f64b80b3640d1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/systems-programming/agents/c-pro.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e415bd1e8093cbbd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/references/details.md"}, "properties": {"repobilityId": "75a779d23d7d127b", "scanner": "scanner-primary", "fingerprint": "e415bd1e8093cbbd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/references/details.md"}, "region": {"startLine": 182}}}]}, {"ruleId": "scanner-d545369e1b1e30c6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/references/details.md"}, "properties": {"repobilityId": "22b9d2afe92c6aaa", "scanner": "scanner-primary", "fingerprint": "d545369e1b1e30c6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/systems-programming/skills/rust-async-patterns/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d77e7fe52b6dcd3a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/security-compliance/commands/compliance-check.md"}, "properties": {"repobilityId": "f0a7c3e91f319755", "scanner": "scanner-primary", "fingerprint": "d77e7fe52b6dcd3a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/security-compliance/commands/compliance-check.md"}, "region": {"startLine": 674}}}]}, {"ruleId": "scanner-c0e2dac4690f1135", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/references/advanced-patterns.md"}, "properties": {"repobilityId": "33786e2f869a18e2", "scanner": "scanner-primary", "fingerprint": "c0e2dac4690f1135", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/references/advanced-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-af1197b00598bc78", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/references/details.md"}, "properties": {"repobilityId": "c167dbf6ca85c749", "scanner": "scanner-primary", "fingerprint": "af1197b00598bc78", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/game-development/skills/godot-gdscript-patterns/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62214f2ad515895d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/commands/certify.md"}, "properties": {"repobilityId": "7bc866a34bdc90b8", "scanner": "scanner-primary", "fingerprint": "62214f2ad515895d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/plugin-eval/commands/certify.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-15ba2c7a2330a0c4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/commands/compare.md"}, "properties": {"repobilityId": "c84e2b68815a0574", "scanner": "scanner-primary", "fingerprint": "15ba2c7a2330a0c4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/plugin-eval/commands/compare.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c64f7a1206d22ad5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/commands/eval.md"}, "properties": {"repobilityId": "ac0099b731e62ade", "scanner": "scanner-primary", "fingerprint": "c64f7a1206d22ad5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/plugin-eval/commands/eval.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-552bd02a0a1c8892", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/plugin-eval/agents/eval-orchestrator.md"}, "properties": {"repobilityId": "2bae3638076d9028", "scanner": "scanner-primary", "fingerprint": "552bd02a0a1c8892", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/plugin-eval/agents/eval-orchestrator.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a10f0f11fa2f9247", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/code-documentation/commands/doc-generate.md"}, "properties": {"repobilityId": "8e2042324711d39d", "scanner": "scanner-primary", "fingerprint": "a10f0f11fa2f9247", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/code-documentation/commands/doc-generate.md"}, "region": {"startLine": 592}}}]}, {"ruleId": "scanner-aced0143cfb6b85d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/observability-monitoring/commands/monitor-setup.md"}, "properties": {"repobilityId": "257b0bb6e78acce2", "scanner": "scanner-primary", "fingerprint": "aced0143cfb6b85d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/observability-monitoring/commands/monitor-setup.md"}, "region": {"startLine": 504}}}]}, {"ruleId": "scanner-41552d4e502fa482", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/observability-monitoring/skills/distributed-tracing/references/details.md"}, "properties": {"repobilityId": "b1382e79ab832555", "scanner": "scanner-primary", "fingerprint": "41552d4e502fa482", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/observability-monitoring/skills/distributed-tracing/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72f1f31d835a3188", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/observability-monitoring/skills/prometheus-configuration/references/details.md"}, "properties": {"repobilityId": "4ae823da4e901a5f", "scanner": "scanner-primary", "fingerprint": "72f1f31d835a3188", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/observability-monitoring/skills/prometheus-configuration/references/details.md"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-b6c6027da67fb90c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/frontend-mobile-development/skills/react-state-management/references/details.md"}, "properties": {"repobilityId": "78fd6068693175ab", "scanner": "scanner-primary", "fingerprint": "b6c6027da67fb90c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/frontend-mobile-development/skills/react-state-management/references/details.md"}, "region": {"startLine": 216}}}]}, {"ruleId": "scanner-7fe81b3b91b3ed2b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/blockchain-web3/skills/nft-standards/SKILL.md"}, "properties": {"repobilityId": "69e4666453f47118", "scanner": "scanner-primary", "fingerprint": "7fe81b3b91b3ed2b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/blockchain-web3/skills/nft-standards/SKILL.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-49d2b818f9e8a07a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/commands/python-scaffold.md"}, "properties": {"repobilityId": "97a754e3a1c32c4a", "scanner": "scanner-primary", "fingerprint": "49d2b818f9e8a07a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/python-development/commands/python-scaffold.md"}, "region": {"startLine": 283}}}]}, {"ruleId": "scanner-f6e807b04cb2216d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/python-development/skills/uv-package-manager/SKILL.md"}, "properties": {"repobilityId": "6279f2693e739dc5", "scanner": "scanner-primary", "fingerprint": "f6e807b04cb2216d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/python-development/skills/uv-package-manager/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-a0630d85e86a03e0", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "properties": {"repobilityId": "66e9c3ddda8da45b", "scanner": "scanner-primary", "fingerprint": "a0630d85e86a03e0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-f2427d3879c467c1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "properties": {"repobilityId": "c090aedf16789d59", "scanner": "scanner-primary", "fingerprint": "f2427d3879c467c1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dbda152e41d319b4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/references/details.md"}, "properties": {"repobilityId": "c3ed5fe17e1bf80e", "scanner": "scanner-primary", "fingerprint": "dbda152e41d319b4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/references/details.md"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-a71e2725f5355128", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/references/details.md"}, "properties": {"repobilityId": "fdd57d963561155a", "scanner": "scanner-primary", "fingerprint": "a71e2725f5355128", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/python-development/skills/python-configuration/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb3395cef4629bcc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "ab85b82842533752", "scanner": "scanner-primary", "fingerprint": "eb3395cef4629bcc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/SKILL.md"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-500b75d595bc6f62", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/references/advanced-patterns.md"}, "properties": {"repobilityId": "87a3a105197f6c37", "scanner": "scanner-primary", "fingerprint": "500b75d595bc6f62", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/python-development/skills/python-testing-patterns/references/advanced-patterns.md"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-3651a9e21f02dfbc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-type-safety/references/details.md"}, "properties": {"repobilityId": "2b05a0dc003890f8", "scanner": "scanner-primary", "fingerprint": "3651a9e21f02dfbc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/python-development/skills/python-type-safety/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-178f32c317d73a68", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/python-development/skills/python-background-jobs/references/details.md"}, "properties": {"repobilityId": "140dcc1c0adcf247", "scanner": "scanner-primary", "fingerprint": "178f32c317d73a68", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/python-development/skills/python-background-jobs/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e586bc30dc706cd8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/context-management/commands/context-restore.md"}, "properties": {"repobilityId": "6e2d722b8a19a14e", "scanner": "scanner-primary", "fingerprint": "e586bc30dc706cd8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/context-management/commands/context-restore.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-cc4cc4791f10e831", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/reverse-engineering/agents/firmware-analyst.md"}, "properties": {"repobilityId": "560d71a3671fb09d", "scanner": "scanner-primary", "fingerprint": "cc4cc4791f10e831", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/reverse-engineering/agents/firmware-analyst.md"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-88befa66bda63b60", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/reverse-engineering/skills/memory-forensics/references/details.md"}, "properties": {"repobilityId": "a447aabf19380650", "scanner": "scanner-primary", "fingerprint": "88befa66bda63b60", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/reverse-engineering/skills/memory-forensics/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3287b2d999f85b3c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/reverse-engineering/skills/protocol-reverse-engineering/SKILL.md"}, "properties": {"repobilityId": "6865769bff4e3219", "scanner": "scanner-primary", "fingerprint": "3287b2d999f85b3c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/reverse-engineering/skills/protocol-reverse-engineering/SKILL.md"}, "region": {"startLine": 314}}}]}, {"ruleId": "scanner-5e8bd7faf75e54fe", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/database-design/skills/postgresql/SKILL.md"}, "properties": {"repobilityId": "4d74c521505436c8", "scanner": "scanner-primary", "fingerprint": "5e8bd7faf75e54fe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/database-design/skills/postgresql/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-704b3eb3e6aca227", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/meigen-ai-design/README.md"}, "properties": {"repobilityId": "5c5cf90eed1f962d", "scanner": "scanner-primary", "fingerprint": "704b3eb3e6aca227", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/meigen-ai-design/README.md"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-6d47dbd243495008", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/meigen-ai-design/commands/gen.md"}, "properties": {"repobilityId": "f562fa423a971b07", "scanner": "scanner-primary", "fingerprint": "6d47dbd243495008", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/meigen-ai-design/commands/gen.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a2e8db0c87ac18f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "properties": {"repobilityId": "a22dd267a5b57a95", "scanner": "scanner-primary", "fingerprint": "8a2e8db0c87ac18f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-9f2227b8cf7ba790", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "properties": {"repobilityId": "a0a29874a7051cba", "scanner": "scanner-primary", "fingerprint": "9f2227b8cf7ba790", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/protect-mcp/hooks/hooks.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d533812d3f9eab9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/developer-essentials/skills/auth-implementation-patterns/references/details.md"}, "properties": {"repobilityId": "d655d5f4e0baf6d9", "scanner": "scanner-primary", "fingerprint": "1d533812d3f9eab9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/developer-essentials/skills/auth-implementation-patterns/references/details.md"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-ad732fd82db63fac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/developer-essentials/skills/sql-optimization-patterns/SKILL.md"}, "properties": {"repobilityId": "59277b8754fad4d2", "scanner": "scanner-primary", "fingerprint": "ad732fd82db63fac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/developer-essentials/skills/sql-optimization-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b5442a875442e1d9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/business-analytics/skills/kpi-dashboard-design/SKILL.md"}, "properties": {"repobilityId": "8d1acb54f73bf825", "scanner": "scanner-primary", "fingerprint": "b5442a875442e1d9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/business-analytics/skills/kpi-dashboard-design/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-119107ad041bdda6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/SKILL.md"}, "properties": {"repobilityId": "9bc7943c7fc2e2fa", "scanner": "scanner-primary", "fingerprint": "119107ad041bdda6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/SKILL.md"}, "region": {"startLine": 245}}}]}, {"ruleId": "scanner-675935e87534cb12", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "properties": {"repobilityId": "62dae16cc4426d0f", "scanner": "scanner-primary", "fingerprint": "675935e87534cb12", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "region": {"startLine": 65}}}]}, {"ruleId": "scanner-0b81198c7205b0f4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "properties": {"repobilityId": "1f8b916f8a828ea1", "scanner": "scanner-primary", "fingerprint": "0b81198c7205b0f4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/gitops-workflow/references/argocd-setup.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cdb45f7b517a91e5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md"}, "properties": {"repobilityId": "8c725fdacc7b4f5b", "scanner": "scanner-primary", "fingerprint": "cdb45f7b517a91e5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cbff1f0407d5aa75", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/references/rbac-patterns.md"}, "properties": {"repobilityId": "9585ecda35bb1bee", "scanner": "scanner-primary", "fingerprint": "cbff1f0407d5aa75", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies/references/rbac-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c24b0c06ca7dd6a5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/references/deployment-spec.md"}, "properties": {"repobilityId": "64728a0b7c4a7d31", "scanner": "scanner-primary", "fingerprint": "c24b0c06ca7dd6a5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/references/deployment-spec.md"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-338696023d7052c1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/references/details.md"}, "properties": {"repobilityId": "0e4c9b11dbc2780c", "scanner": "scanner-primary", "fingerprint": "338696023d7052c1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/references/details.md"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-f9146dd58e50854a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/deployment-template.yaml"}, "properties": {"repobilityId": "f071e34b107d3b68", "scanner": "scanner-primary", "fingerprint": "f9146dd58e50854a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/deployment-template.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08e6021af25d84fc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/configmap-template.yaml"}, "properties": {"repobilityId": "938550388972997b", "scanner": "scanner-primary", "fingerprint": "08e6021af25d84fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/kubernetes-operations/skills/k8s-manifest-generator/assets/configmap-template.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ecb34b957780be64", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/review-agent-governance/commands/approve-review.md"}, "properties": {"repobilityId": "c42589007ca7180e", "scanner": "scanner-primary", "fingerprint": "ecb34b957780be64", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/review-agent-governance/commands/approve-review.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2eb8326883b4161", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "properties": {"repobilityId": "27ff7fd28b0f850e", "scanner": "scanner-primary", "fingerprint": "a2eb8326883b4161", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-c1edf57ff302c143", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "properties": {"repobilityId": "16b28c0fff9d15fa", "scanner": "scanner-primary", "fingerprint": "c1edf57ff302c143", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/review-agent-governance/hooks/hooks.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62f05173af0866d6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/performance-testing-review/commands/ai-review.md"}, "properties": {"repobilityId": "ed52c68a33b03ef9", "scanner": "scanner-primary", "fingerprint": "62f05173af0866d6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/performance-testing-review/commands/ai-review.md"}, "region": {"startLine": 180}}}]}, {"ruleId": "scanner-1f88e1b77404588c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/frontend-mobile-security/commands/xss-scan.md"}, "properties": {"repobilityId": "a2a30dc27a217acc", "scanner": "scanner-primary", "fingerprint": "1f88e1b77404588c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/frontend-mobile-security/commands/xss-scan.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1a26c806356cb9f7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/hr-legal-compliance/skills/gdpr-data-handling/references/details.md"}, "properties": {"repobilityId": "ed753037f13ebb81", "scanner": "scanner-primary", "fingerprint": "1a26c806356cb9f7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/hr-legal-compliance/skills/gdpr-data-handling/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0d7b0e29d595e0a3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/shell-scripting/skills/shellcheck-configuration/SKILL.md"}, "properties": {"repobilityId": "00d30b93e468c683", "scanner": "scanner-primary", "fingerprint": "0d7b0e29d595e0a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/shell-scripting/skills/shellcheck-configuration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8e330e45d37bcc3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/web-scripting/agents/ruby-pro.md"}, "properties": {"repobilityId": "0a8ca8c53c2831e4", "scanner": "scanner-primary", "fingerprint": "e8e330e45d37bcc3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/web-scripting/agents/ruby-pro.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5c3932afdfee0405", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/database-migrations/commands/migration-observability.md"}, "properties": {"repobilityId": "1ef8eb5cabb78f79", "scanner": "scanner-primary", "fingerprint": "5c3932afdfee0405", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/database-migrations/commands/migration-observability.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-231d964c11690e69", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-metrics-calculation/SKILL.md"}, "properties": {"repobilityId": "e3a64ccb5d59b474", "scanner": "scanner-primary", "fingerprint": "231d964c11690e69", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-metrics-calculation/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-6b8050553684a857", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-metrics-calculation/references/details.md"}, "properties": {"repobilityId": "c18a6c7aff212a43", "scanner": "scanner-primary", "fingerprint": "6b8050553684a857", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/quantitative-trading/skills/risk-metrics-calculation/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a475c863bf305768", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/payment-processing/skills/pci-compliance/SKILL.md"}, "properties": {"repobilityId": "45e9b293b3241627", "scanner": "scanner-primary", "fingerprint": "a475c863bf305768", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/payment-processing/skills/pci-compliance/SKILL.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-8172d7b5910f824e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/payment-processing/skills/paypal-integration/references/details.md"}, "properties": {"repobilityId": "eb66038ee310e688", "scanner": "scanner-primary", "fingerprint": "8172d7b5910f824e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/payment-processing/skills/paypal-integration/references/details.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-139f45c0eaf812fe", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/database-cloud-optimization/commands/cost-optimize.md"}, "properties": {"repobilityId": "9c598d67f330388b", "scanner": "scanner-primary", "fingerprint": "139f45c0eaf812fe", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/database-cloud-optimization/commands/cost-optimize.md"}, "region": {"startLine": 572}}}]}, {"ruleId": "scanner-adb58146573c2640", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/error-diagnostics/commands/error-trace.md"}, "properties": {"repobilityId": "efbd74d6b055c3c5", "scanner": "scanner-primary", "fingerprint": "adb58146573c2640", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/error-diagnostics/commands/error-trace.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1f8462039a7b1c65", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "properties": {"repobilityId": "3e801dc28f980184", "scanner": "scanner-primary", "fingerprint": "1f8462039a7b1c65", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "region": {"startLine": 310}}}]}, {"ruleId": "scanner-954d92b57e82e793", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "properties": {"repobilityId": "39a7864729c3740a", "scanner": "scanner-primary", "fingerprint": "954d92b57e82e793", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/javascript-typescript/commands/typescript-scaffold.md"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-bb0edb2e5996ca04", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/javascript-testing-patterns/references/advanced-testing-patterns.md"}, "properties": {"repobilityId": "c89d2dfff6e1069e", "scanner": "scanner-primary", "fingerprint": "bb0edb2e5996ca04", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/javascript-typescript/skills/javascript-testing-patterns/references/advanced-testing-patterns.md"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-5e677585ec92c0c4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/references/advanced-patterns.md"}, "properties": {"repobilityId": "8000db812c83d012", "scanner": "scanner-primary", "fingerprint": "5e677585ec92c0c4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/references/advanced-patterns.md"}, "region": {"startLine": 254}}}]}, {"ruleId": "scanner-8f708c14928b9fc2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/references/details.md"}, "properties": {"repobilityId": "6faac39ee3f07d51", "scanner": "scanner-primary", "fingerprint": "8f708c14928b9fc2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/javascript-typescript/skills/nodejs-backend-patterns/references/details.md"}, "region": {"startLine": 321}}}]}, {"ruleId": "scanner-34e678f0e4bdc4bb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/javascript-typescript/skills/modern-javascript-patterns/references/advanced-patterns.md"}, "properties": {"repobilityId": "5215b2ec4fbc00b8", "scanner": "scanner-primary", "fingerprint": "34e678f0e4bdc4bb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/javascript-typescript/skills/modern-javascript-patterns/references/advanced-patterns.md"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-69e34d053dbb462f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/agents/security-auditor.md"}, "properties": {"repobilityId": "0046214b1038162b", "scanner": "scanner-primary", "fingerprint": "69e34d053dbb462f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/agents/security-auditor.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4f108d4fd18f757f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/event-store-design/references/details.md"}, "properties": {"repobilityId": "b79b7d76550f88a4", "scanner": "scanner-primary", "fingerprint": "4f108d4fd18f757f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/event-store-design/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97b2ceed54d0670f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/references/rest-best-practices.md"}, "properties": {"repobilityId": "72d7a261b1fa0e2b", "scanner": "scanner-primary", "fingerprint": "97b2ceed54d0670f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/api-design-principles/references/rest-best-practices.md"}, "region": {"startLine": 334}}}]}, {"ruleId": "scanner-e5d2d2ecfd0dc077", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "properties": {"repobilityId": "9a17a79c8367ae02", "scanner": "scanner-primary", "fingerprint": "e5d2d2ecfd0dc077", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "region": {"startLine": 313}}}]}, {"ruleId": "scanner-94f2c638262d0e5a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "properties": {"repobilityId": "4a055df351067cc3", "scanner": "scanner-primary", "fingerprint": "94f2c638262d0e5a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/advanced-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6333d09eb228ab95", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/details.md"}, "properties": {"repobilityId": "1246928f0164071e", "scanner": "scanner-primary", "fingerprint": "6333d09eb228ab95", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/details.md"}, "region": {"startLine": 199}}}]}, {"ruleId": "scanner-178319ac4f4a08ad", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/details.md"}, "properties": {"repobilityId": "7c20eb564c4688fa", "scanner": "scanner-primary", "fingerprint": "178319ac4f4a08ad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/saga-orchestration/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c8fde0702df472ff", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/workflow-orchestration-patterns/references/details.md"}, "properties": {"repobilityId": "8466699db9ae9aae", "scanner": "scanner-primary", "fingerprint": "c8fde0702df472ff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/workflow-orchestration-patterns/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aee005d55dcae1a2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/references/details.md"}, "properties": {"repobilityId": "b32c6aec5185f418", "scanner": "scanner-primary", "fingerprint": "aee005d55dcae1a2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/references/details.md"}, "region": {"startLine": 220}}}]}, {"ruleId": "scanner-cd43282fc4a97ed4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/references/details.md"}, "properties": {"repobilityId": "9b43aa141a72212b", "scanner": "scanner-primary", "fingerprint": "cd43282fc4a97ed4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/microservices-patterns/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3664dc7febac8a9f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/projection-patterns/references/details.md"}, "properties": {"repobilityId": "8e0bf591563a0c6b", "scanner": "scanner-primary", "fingerprint": "3664dc7febac8a9f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/projection-patterns/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94ff9b1d9d4b9d66", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/backend-development/skills/cqrs-implementation/SKILL.md"}, "properties": {"repobilityId": "28637ed9ea2bdd6f", "scanner": "scanner-primary", "fingerprint": "94ff9b1d9d4b9d66", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/backend-development/skills/cqrs-implementation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4cd5ca3155577288", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/cicd-automation/commands/workflow-automate.md"}, "properties": {"repobilityId": "9df06b61143124bf", "scanner": "scanner-primary", "fingerprint": "4cd5ca3155577288", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/cicd-automation/commands/workflow-automate.md"}, "region": {"startLine": 423}}}]}, {"ruleId": "scanner-6ffd1dd3b568df1f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/cicd-automation/skills/secrets-management/SKILL.md"}, "properties": {"repobilityId": "466c49b104a33834", "scanner": "scanner-primary", "fingerprint": "6ffd1dd3b568df1f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/cicd-automation/skills/secrets-management/SKILL.md"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-5dcdd1bf58ddcfff", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/cicd-automation/skills/deployment-pipeline-design/references/advanced-strategies.md"}, "properties": {"repobilityId": "d1715d912ba128a0", "scanner": "scanner-primary", "fingerprint": "5dcdd1bf58ddcfff", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/cicd-automation/skills/deployment-pipeline-design/references/advanced-strategies.md"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-6eb10ec36de2ee55", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/framework-migration/skills/angular-migration/SKILL.md"}, "properties": {"repobilityId": "d483bf86470b2ec1", "scanner": "scanner-primary", "fingerprint": "6eb10ec36de2ee55", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/framework-migration/skills/angular-migration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1dd813c4553cf1c4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/framework-migration/skills/react-modernization/SKILL.md"}, "properties": {"repobilityId": "4504aca8f175063f", "scanner": "scanner-primary", "fingerprint": "1dd813c4553cf1c4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/framework-migration/skills/react-modernization/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2fc02ad15ba912a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/conductor/templates/code_styleguides/csharp.md"}, "properties": {"repobilityId": "674b12f0b309fdb3", "scanner": "scanner-primary", "fingerprint": "a2fc02ad15ba912a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/conductor/templates/code_styleguides/csharp.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0043fba7bf8c703d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/conductor/skills/context-driven-development/SKILL.md"}, "properties": {"repobilityId": "eae4d850d2de2396", "scanner": "scanner-primary", "fingerprint": "0043fba7bf8c703d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/conductor/skills/context-driven-development/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c754eda7114a28f5", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/documentation-generation/commands/doc-generate.md"}, "properties": {"repobilityId": "69ec7bc00993d6a2", "scanner": "scanner-primary", "fingerprint": "c754eda7114a28f5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/documentation-generation/commands/doc-generate.md"}, "region": {"startLine": 592}}}]}, {"ruleId": "scanner-89828ee2d6738800", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/SKILL.md"}, "properties": {"repobilityId": "c7335c17429f09ca", "scanner": "scanner-primary", "fingerprint": "89828ee2d6738800", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-64ca26c8a5571933", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/references/code-first-and-tooling.md"}, "properties": {"repobilityId": "7da543b05075aeec", "scanner": "scanner-primary", "fingerprint": "64ca26c8a5571933", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/documentation-generation/skills/openapi-spec-generation/references/code-first-and-tooling.md"}, "region": {"startLine": 385}}}]}, {"ruleId": "scanner-d315a7a024566aad", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/documentation-generation/skills/changelog-automation/SKILL.md"}, "properties": {"repobilityId": "c78421d521fb8f4f", "scanner": "scanner-primary", "fingerprint": "d315a7a024566aad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/documentation-generation/skills/changelog-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-50567f8c2e7490e1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/mtls-configuration/references/details.md"}, "properties": {"repobilityId": "cac312ea52c04760", "scanner": "scanner-primary", "fingerprint": "50567f8c2e7490e1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/mtls-configuration/references/details.md"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-c48504adf4f52987", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/multi-cloud-patterns.md"}, "properties": {"repobilityId": "525317aed33c6f3e", "scanner": "scanner-primary", "fingerprint": "c48504adf4f52987", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/multi-cloud-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c55b84ee915fd22", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/service-comparison.md"}, "properties": {"repobilityId": "0b300303a0a6f9b8", "scanner": "scanner-primary", "fingerprint": "6c55b84ee915fd22", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/multi-cloud-architecture/references/service-comparison.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5dd3c50299b46639", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/service-mesh-observability/references/details.md"}, "properties": {"repobilityId": "c99656686736f146", "scanner": "scanner-primary", "fingerprint": "5dd3c50299b46639", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/service-mesh-observability/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43162ee9da76d61d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md"}, "properties": {"repobilityId": "940292a4d6c480b9", "scanner": "scanner-primary", "fingerprint": "43162ee9da76d61d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-0ec2332db4b54bb0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md"}, "properties": {"repobilityId": "23768453136a9604", "scanner": "scanner-primary", "fingerprint": "0ec2332db4b54bb0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cfb5bc87158100fb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/agent-teams/README.md"}, "properties": {"repobilityId": "152b7a79b8b406d4", "scanner": "scanner-primary", "fingerprint": "cfb5bc87158100fb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/agent-teams/README.md"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-49d225e140eae172", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/agent-teams/commands/team-delegate.md"}, "properties": {"repobilityId": "a68491aef75e1d80", "scanner": "scanner-primary", "fingerprint": "49d225e140eae172", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/agent-teams/commands/team-delegate.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2092dcc43df77633", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/agent-teams/skills/parallel-feature-development/references/file-ownership.md"}, "properties": {"repobilityId": "907ca51de0c2f5c6", "scanner": "scanner-primary", "fingerprint": "2092dcc43df77633", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/agent-teams/skills/parallel-feature-development/references/file-ownership.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-00c30837211adeb7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/agent-teams/skills/team-composition-patterns/references/agent-type-selection.md"}, "properties": {"repobilityId": "148ccbae221482b6", "scanner": "scanner-primary", "fingerprint": "00c30837211adeb7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/agent-teams/skills/team-composition-patterns/references/agent-type-selection.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-787860bb3ed26652", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/agent-teams/skills/task-coordination-strategies/SKILL.md"}, "properties": {"repobilityId": "51cc14f4a343f65e", "scanner": "scanner-primary", "fingerprint": "787860bb3ed26652", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/agent-teams/skills/task-coordination-strategies/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-3706482cbf21f4aa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/startup-business-analyst/commands/business-case.md"}, "properties": {"repobilityId": "45077494f3f1dd0c", "scanner": "scanner-primary", "fingerprint": "3706482cbf21f4aa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/startup-business-analyst/commands/business-case.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-929350c281892aac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/startup-business-analyst/skills/team-composition-analysis/references/details.md"}, "properties": {"repobilityId": "30fd43b88a1b0803", "scanner": "scanner-primary", "fingerprint": "929350c281892aac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/startup-business-analyst/skills/team-composition-analysis/references/details.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-caaaac97be2516df", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "properties": {"repobilityId": "22bb4f8c197001dc", "scanner": "scanner-primary", "fingerprint": "caaaac97be2516df", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "region": {"startLine": 225}}}]}, {"ruleId": "scanner-430c59b8b5ab807a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "properties": {"repobilityId": "f756efacdbde269e", "scanner": "scanner-primary", "fingerprint": "430c59b8b5ab807a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/security-scanning/commands/security-sast.md"}, "region": {"startLine": 479}}}]}, {"ruleId": "scanner-b0bab34e800aee69", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/marketplaces/wshobson/plugins/security-scanning/commands/security-dependencies.md"}, "properties": {"repobilityId": "ad1d1be01098535c", "scanner": "scanner-primary", "fingerprint": "b0bab34e800aee69", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/security-scanning/commands/security-dependencies.md"}, "region": {"startLine": 499}}}]}, {"ruleId": "scanner-0dfd66da0886d9fa", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/application-performance/commands/performance-optimization.md"}, "properties": {"repobilityId": "64c0b1f192ae057d", "scanner": "scanner-primary", "fingerprint": "0dfd66da0886d9fa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/application-performance/commands/performance-optimization.md"}, "region": {"startLine": 656}}}]}, {"ruleId": "scanner-411b61a641d8a1be", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/deployment-validation/commands/config-validate.md"}, "properties": {"repobilityId": "67ee479dfe995cf8", "scanner": "scanner-primary", "fingerprint": "411b61a641d8a1be", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/deployment-validation/commands/config-validate.md"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-e3f19a988ca5e0dc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/marketplaces/wshobson/plugins/team-collaboration/commands/issue.md"}, "properties": {"repobilityId": "ca13e34752b9fd6e", "scanner": "scanner-primary", "fingerprint": "e3f19a988ca5e0dc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/team-collaboration/commands/issue.md"}, "region": {"startLine": 195}}}]}, {"ruleId": "scanner-4b786487a8833d26", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-container.md"}, "properties": {"repobilityId": "ee5d64ac0a020a24", "scanner": "scanner-primary", "fingerprint": "4b786487a8833d26", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-container.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d49b58d800f21964", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-component.md"}, "properties": {"repobilityId": "f3898b89305fb4c3", "scanner": "scanner-primary", "fingerprint": "d49b58d800f21964", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/wshobson/plugins/c4-architecture/agents/c4-component.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0fd1ce15c5b1800", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/README.md"}, "properties": {"repobilityId": "5a0e61a7fc179aad", "scanner": "scanner-primary", "fingerprint": "a0fd1ce15c5b1800", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/pocock/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3fdc941537a545cc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/qa/SKILL.md"}, "properties": {"repobilityId": "c2eead84b9f0ec1d", "scanner": "scanner-primary", "fingerprint": "3fdc941537a545cc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/pocock/skills/qa/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a6401be4fa1848c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/domain-model/SKILL.md"}, "properties": {"repobilityId": "b5b6f5471a0a4ef5", "scanner": "scanner-primary", "fingerprint": "4a6401be4fa1848c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/pocock/skills/domain-model/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e4f4b3bfa5e8913", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/obsidian-vault/SKILL.md"}, "properties": {"repobilityId": "37a7cbb71820156d", "scanner": "scanner-primary", "fingerprint": "1e4f4b3bfa5e8913", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/pocock/skills/obsidian-vault/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f330ce42c962b3b2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/skills/github-triage/AGENT-BRIEF.md"}, "properties": {"repobilityId": "d726888744222c71", "scanner": "scanner-primary", "fingerprint": "f330ce42c962b3b2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/pocock/skills/github-triage/AGENT-BRIEF.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ea262c066a26c528", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "properties": {"repobilityId": "4efab3c8ef9fef14", "scanner": "scanner-primary", "fingerprint": "ea262c066a26c528", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/marketplaces/pocock/.github/workflows/sync-upstream.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d3be87eacc75c672", "level": "none", "message": {"text": "Commented-code block (5 lines) in playwright.config.ts:3"}, "properties": {"repobilityId": "ef66d26f568a7fd4", "scanner": "scanner-primary", "fingerprint": "d3be87eacc75c672", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ea0c30a246bf1bd4", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/v2-deploy.spec.ts:142"}, "properties": {"repobilityId": "eec9cedf92ee13af", "scanner": "scanner-primary", "fingerprint": "ea0c30a246bf1bd4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d55cc3d40a8fd146", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/e2e/v3.spec.ts:369"}, "properties": {"repobilityId": "a4c7688e79f27460", "scanner": "scanner-primary", "fingerprint": "d55cc3d40a8fd146", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-841b0cfb7a9e6a88", "level": "none", "message": {"text": "Commented-code block (10 lines) in tests/e2e/agents.spec.ts:288"}, "properties": {"repobilityId": "5db9cbf72f5515e2", "scanner": "scanner-primary", "fingerprint": "841b0cfb7a9e6a88", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1afffea28efdf551", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/components/SchedulerSection.tsx:8"}, "properties": {"repobilityId": "e2d165189eedbd76", "scanner": "scanner-primary", "fingerprint": "1afffea28efdf551", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2f757a1257e8ae41", "level": "note", "message": {"text": "Legacy-named symbol `replayModeLegacy` in front/web/components/AgentsPanel.tsx:429"}, "properties": {"repobilityId": "bc53761ac6b98406", "scanner": "scanner-primary", "fingerprint": "2f757a1257e8ae41", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-015cf7a66ff33524", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/components/AgentsPanel.tsx:96"}, "properties": {"repobilityId": "b0b0061b4a16a06e", "scanner": "scanner-primary", "fingerprint": "015cf7a66ff33524", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c548a48adecfabf1", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/components/GovernancePanel.tsx:30"}, "properties": {"repobilityId": "2405f09b54563624", "scanner": "scanner-primary", "fingerprint": "c548a48adecfabf1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dee4ce285d463dfd", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/components/ErasurePanel.tsx:15"}, "properties": {"repobilityId": "b88d51d35ba35a00", "scanner": "scanner-primary", "fingerprint": "dee4ce285d463dfd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1c34dd9b67358aa9", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/components/CompoundingSection.tsx:3"}, "properties": {"repobilityId": "1b4c10814d8cf4ca", "scanner": "scanner-primary", "fingerprint": "1c34dd9b67358aa9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-56d85fbf67417b58", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/governance/page.tsx:6"}, "properties": {"repobilityId": "dacac06967d4c4ff", "scanner": "scanner-primary", "fingerprint": "56d85fbf67417b58", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6cc9f998684ee396", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/global-invariants/page.tsx:6"}, "properties": {"repobilityId": "25845fb54b6f97b8", "scanner": "scanner-primary", "fingerprint": "6cc9f998684ee396", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-57403b59a130a013", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/sensors/page.tsx:4"}, "properties": {"repobilityId": "7f3b38abaab63c05", "scanner": "scanner-primary", "fingerprint": "57403b59a130a013", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fcdea574b77179dc", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/archive-curation/page.tsx:6"}, "properties": {"repobilityId": "33502d7eae5a1654", "scanner": "scanner-primary", "fingerprint": "fcdea574b77179dc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c259a4cc51a74b42", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/ai-lab/actions.ts:111"}, "properties": {"repobilityId": "458a0524c2905478", "scanner": "scanner-primary", "fingerprint": "c259a4cc51a74b42", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3b6ac55ad61986ee", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/app/compound-besoin/page.tsx:10"}, "properties": {"repobilityId": "691f6a898e35367c", "scanner": "scanner-primary", "fingerprint": "3b6ac55ad61986ee", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-87f70f33ba9723da", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/compound-besoin/doc/page.tsx:6"}, "properties": {"repobilityId": "b9b87b96a6bccaa0", "scanner": "scanner-primary", "fingerprint": "87f70f33ba9723da", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bd5d3de0bfb5ce00", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/entity-map/page.tsx:7"}, "properties": {"repobilityId": "419a50006e3cbb0f", "scanner": "scanner-primary", "fingerprint": "bd5d3de0bfb5ce00", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7d488bec70553ca9", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/authorities/page.tsx:8"}, "properties": {"repobilityId": "20bcb54cd91a035f", "scanner": "scanner-primary", "fingerprint": "7d488bec70553ca9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6b5514598ec664ad", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/truth-typing/page.tsx:7"}, "properties": {"repobilityId": "393fc615572931a9", "scanner": "scanner-primary", "fingerprint": "6b5514598ec664ad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-73b84fae79c470a8", "level": "none", "message": {"text": "Commented-code block (11 lines) in front/web/app/web-preview/page.tsx:6"}, "properties": {"repobilityId": "18d43863feeeee23", "scanner": "scanner-primary", "fingerprint": "73b84fae79c470a8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-df802cf4c4581119", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/web-preview/_generated/checkout-button.tsx:1"}, "properties": {"repobilityId": "9bec3f47ad7daeae", "scanner": "scanner-primary", "fingerprint": "df802cf4c4581119", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-69efecb696e2bd3b", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/besoin-invariant/page.tsx:6"}, "properties": {"repobilityId": "4b4a5c047752cc8b", "scanner": "scanner-primary", "fingerprint": "69efecb696e2bd3b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-19f9c3118ba55a62", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/why-tree/page.tsx:6"}, "properties": {"repobilityId": "d957eb775d16381f", "scanner": "scanner-primary", "fingerprint": "19f9c3118ba55a62", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-62115e6d88c964a2", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/policy/page.tsx:5"}, "properties": {"repobilityId": "c6af51f1e0c38af4", "scanner": "scanner-primary", "fingerprint": "62115e6d88c964a2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aa8047b32eab6340", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/tech-spec/page.tsx:6"}, "properties": {"repobilityId": "c6f4d06b2f63ec71", "scanner": "scanner-primary", "fingerprint": "aa8047b32eab6340", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0e5dae58c0a8080b", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/decision-reuse/page.tsx:7"}, "properties": {"repobilityId": "4b3652e5cecf0a2e", "scanner": "scanner-primary", "fingerprint": "0e5dae58c0a8080b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-268cfc98975a9572", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/version-dag/page.tsx:6"}, "properties": {"repobilityId": "aed5638bc1c5ab9b", "scanner": "scanner-primary", "fingerprint": "268cfc98975a9572", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b75b452e726d5dbb", "level": "none", "message": {"text": "Commented-code block (11 lines) in front/web/app/adoption/page.tsx:6"}, "properties": {"repobilityId": "f920a657c8c7d425", "scanner": "scanner-primary", "fingerprint": "b75b452e726d5dbb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-413c59c2e2b96e31", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/red-propagation/page.tsx:6"}, "properties": {"repobilityId": "75c19a0008e58b76", "scanner": "scanner-primary", "fingerprint": "413c59c2e2b96e31", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fa4ff77c3676215f", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/context-compression/page.tsx:6"}, "properties": {"repobilityId": "5aab4a657568e07f", "scanner": "scanner-primary", "fingerprint": "fa4ff77c3676215f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-64340d74b7066a51", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/caused-by/page.tsx:6"}, "properties": {"repobilityId": "1eea22364b4dfd6d", "scanner": "scanner-primary", "fingerprint": "64340d74b7066a51", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ea19947fb0167dfe", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/emitters/page.tsx:19"}, "properties": {"repobilityId": "08bdfc8f096c36fb", "scanner": "scanner-primary", "fingerprint": "ea19947fb0167dfe", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5ea7b3fa97d79944", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/emitted-target/page.tsx:9"}, "properties": {"repobilityId": "b129099e72d8e46e", "scanner": "scanner-primary", "fingerprint": "5ea7b3fa97d79944", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a70fdc24359ed4e5", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/compound-besoin-capitalisation/page.tsx:6"}, "properties": {"repobilityId": "42dadd22917ac041", "scanner": "scanner-primary", "fingerprint": "a70fdc24359ed4e5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e500c55f40314b92", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 front/web/app/front-emitter/FrontEmitterPanel.tsx:60"}, "properties": {"repobilityId": "1710db32b8937144", "scanner": "scanner-primary", "fingerprint": "e500c55f40314b92", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-45716d9d31165d36", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/expr/page.tsx:4"}, "properties": {"repobilityId": "7f3753e94cbaecfb", "scanner": "scanner-primary", "fingerprint": "45716d9d31165d36", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3536776c82c49c8b", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/semantic-diff/page.tsx:7"}, "properties": {"repobilityId": "851cb41b0ad615fa", "scanner": "scanner-primary", "fingerprint": "3536776c82c49c8b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-630a829179526ba2", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/mirrors/page.tsx:4"}, "properties": {"repobilityId": "7d5b7c27a90dfda0", "scanner": "scanner-primary", "fingerprint": "630a829179526ba2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3cd0be54db7e7152", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/exploration/page.tsx:6"}, "properties": {"repobilityId": "dc6b4631692ea678", "scanner": "scanner-primary", "fingerprint": "3cd0be54db7e7152", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c6bdad932265d6e0", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/semantic-merge/page.tsx:6"}, "properties": {"repobilityId": "3e414e61fa9e9dff", "scanner": "scanner-primary", "fingerprint": "c6bdad932265d6e0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-94b17aad82bea665", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/context-pack/page.tsx:7"}, "properties": {"repobilityId": "e8e2bb1fa10097f7", "scanner": "scanner-primary", "fingerprint": "94b17aad82bea665", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1cc77196487ee698", "level": "none", "message": {"text": "Commented-code block (9 lines) in front/web/app/db-projection/page.tsx:6"}, "properties": {"repobilityId": "2bd664d19a2231d4", "scanner": "scanner-primary", "fingerprint": "1cc77196487ee698", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c2d63163443d142c", "level": "none", "message": {"text": "Commented-code block (10 lines) in front/web/app/evolution-sandbox/page.tsx:6"}, "properties": {"repobilityId": "c86358952ef83179", "scanner": "scanner-primary", "fingerprint": "c2d63163443d142c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aaa8fac761cce074", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/phase-stable/page.tsx:6"}, "properties": {"repobilityId": "b4081c021530fd1f", "scanner": "scanner-primary", "fingerprint": "aaa8fac761cce074", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-48e9b29f828b339c", "level": "none", "message": {"text": "Commented-code block (9 lines) in front/web/app/compound-besoin-cascade/page.tsx:6"}, "properties": {"repobilityId": "0ed455372a63e2d7", "scanner": "scanner-primary", "fingerprint": "48e9b29f828b339c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2af9b4d593d298dd", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/stack-emit/page.tsx:38"}, "properties": {"repobilityId": "fab387804d2e89ec", "scanner": "scanner-primary", "fingerprint": "2af9b4d593d298dd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6bf83fca09083297", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/app/meta/page.tsx:6"}, "properties": {"repobilityId": "8b1b2ecc1f5ae86d", "scanner": "scanner-primary", "fingerprint": "6bf83fca09083297", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fc4bb4bbd1d53466", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/memory-backends/page.tsx:7"}, "properties": {"repobilityId": "6a26c75e5c2a397f", "scanner": "scanner-primary", "fingerprint": "fc4bb4bbd1d53466", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f544a9df242d8d55", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/app/compound-besoin-completeness/page.tsx:6"}, "properties": {"repobilityId": "bedfd0cb745dd988", "scanner": "scanner-primary", "fingerprint": "f544a9df242d8d55", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eabcc81d5b85e7f6", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/compound-besoin-gate/page.tsx:6"}, "properties": {"repobilityId": "685bc38097a61cde", "scanner": "scanner-primary", "fingerprint": "eabcc81d5b85e7f6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-900b303afbfea029", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 front/web/app/preview/PreviewPanel.tsx:65"}, "properties": {"repobilityId": "23df434cf1b2313a", "scanner": "scanner-primary", "fingerprint": "900b303afbfea029", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1fc7a64ce6399e9c", "level": "none", "message": {"text": "Commented-code block (10 lines) in front/web/app/billing/page.tsx:6"}, "properties": {"repobilityId": "5a455b70a6dc9758", "scanner": "scanner-primary", "fingerprint": "1fc7a64ce6399e9c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e3385be858ec22e5", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/ingestion/page.tsx:6"}, "properties": {"repobilityId": "4b9eeba0731c4666", "scanner": "scanner-primary", "fingerprint": "e3385be858ec22e5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a14183e1179063f6", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/emit-ideas/page.tsx:6"}, "properties": {"repobilityId": "5f760a0e2b45995b", "scanner": "scanner-primary", "fingerprint": "a14183e1179063f6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d5cced48c08cafe2", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/besoin-intake/page.tsx:6"}, "properties": {"repobilityId": "6f0feda1e7b7523e", "scanner": "scanner-primary", "fingerprint": "d5cced48c08cafe2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d1b857bff570e864", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/compound-besoin-proposes/page.tsx:6"}, "properties": {"repobilityId": "dcb67057ac8dc597", "scanner": "scanner-primary", "fingerprint": "d1b857bff570e864", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ca186083df685772", "level": "note", "message": {"text": "Legacy-named symbol `replayModeLegacy` in front/web/app/agents/page.tsx:284"}, "properties": {"repobilityId": "f230d3c6f2d05bda", "scanner": "scanner-primary", "fingerprint": "ca186083df685772", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-884801f6fa02b090", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/agents/page.tsx:8"}, "properties": {"repobilityId": "76e34290f9495f1e", "scanner": "scanner-primary", "fingerprint": "884801f6fa02b090", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-85ab9d8aa6fd4642", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/scopes/page.tsx:7"}, "properties": {"repobilityId": "afbf9952c897552a", "scanner": "scanner-primary", "fingerprint": "85ab9d8aa6fd4642", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9fabf5757f1233b2", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/compound-besoin-grammar/page.tsx:6"}, "properties": {"repobilityId": "8d77b72412db37a3", "scanner": "scanner-primary", "fingerprint": "9fabf5757f1233b2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-62a38f18674164ea", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/temporal-invariants/page.tsx:6"}, "properties": {"repobilityId": "479bd14c8df606d5", "scanner": "scanner-primary", "fingerprint": "62a38f18674164ea", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1825931c6ec024b0", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/app-ops/actions.ts:201"}, "properties": {"repobilityId": "5ccd1fe519601002", "scanner": "scanner-primary", "fingerprint": "1825931c6ec024b0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b4580c9cb7b1e26d", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/link-graph/page.tsx:11"}, "properties": {"repobilityId": "ea6a58e6725df66b", "scanner": "scanner-primary", "fingerprint": "b4580c9cb7b1e26d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03cebd4fc778cfda", "level": "none", "message": {"text": "Commented-code block (11 lines) in front/web/app/collab/page.tsx:6"}, "properties": {"repobilityId": "48e1f2705ae70d76", "scanner": "scanner-primary", "fingerprint": "03cebd4fc778cfda", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-352f6717d8f90ec8", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/compound-besoin-graph/page.tsx:6"}, "properties": {"repobilityId": "366e14d149635bc1", "scanner": "scanner-primary", "fingerprint": "352f6717d8f90ec8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0b2e5826eff77049", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/mirror-health/page.tsx:4"}, "properties": {"repobilityId": "fc0c4b412689f4f8", "scanner": "scanner-primary", "fingerprint": "0b2e5826eff77049", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4fd38af9fb79b9e3", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/compound/page.tsx:9"}, "properties": {"repobilityId": "4ca19f2be95157ca", "scanner": "scanner-primary", "fingerprint": "4fd38af9fb79b9e3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-235a894020b6df91", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/compound-besoin-candescend/page.tsx:6"}, "properties": {"repobilityId": "a0095f2cf74fb00b", "scanner": "scanner-primary", "fingerprint": "235a894020b6df91", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-603969de1c4c154a", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/red-backlog/page.tsx:6"}, "properties": {"repobilityId": "cd83a39f3f70afac", "scanner": "scanner-primary", "fingerprint": "603969de1c4c154a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5c5b617b33815218", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/goal/page.tsx:6"}, "properties": {"repobilityId": "815efe9651343ee5", "scanner": "scanner-primary", "fingerprint": "5c5b617b33815218", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c348a7cb715f5001", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/demo-checkout/DemoCheckoutPanel.tsx:15"}, "properties": {"repobilityId": "49baa45ce6295ad2", "scanner": "scanner-primary", "fingerprint": "c348a7cb715f5001", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eb928d1cbbe60bc4", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/harness-economics/page.tsx:6"}, "properties": {"repobilityId": "1a344e5b40bd9b03", "scanner": "scanner-primary", "fingerprint": "eb928d1cbbe60bc4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-60b0f8e1551225d3", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/app/mutation-score/page.tsx:6"}, "properties": {"repobilityId": "9dcbbc3721d0f7f3", "scanner": "scanner-primary", "fingerprint": "60b0f8e1551225d3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f67270ef9184db8f", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/truth-tree/page.tsx:6"}, "properties": {"repobilityId": "5a3c98eaedcd3e36", "scanner": "scanner-primary", "fingerprint": "f67270ef9184db8f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e997d82a9fa6ab72", "level": "none", "message": {"text": "Commented-code block (13 lines) in front/web/app/gdpr-erasure/page.tsx:6"}, "properties": {"repobilityId": "0a689ffa96ff58e1", "scanner": "scanner-primary", "fingerprint": "e997d82a9fa6ab72", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e0b27ecfe4660f26", "level": "none", "message": {"text": "Commented-code block (9 lines) in front/web/app/api-projection/page.tsx:7"}, "properties": {"repobilityId": "fc2ec0eecdceb9b5", "scanner": "scanner-primary", "fingerprint": "e0b27ecfe4660f26", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1fd9fe11d6c502ad", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/changeset/page.tsx:6"}, "properties": {"repobilityId": "443ec0275bb64c77", "scanner": "scanner-primary", "fingerprint": "1fd9fe11d6c502ad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-53a685a31d82de41", "level": "none", "message": {"text": "Commented-code block (9 lines) in front/web/app/compound-besoin-thresholds/page.tsx:6"}, "properties": {"repobilityId": "7ab805d5131e409f", "scanner": "scanner-primary", "fingerprint": "53a685a31d82de41", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-670b6c8f1eee554b", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/operation/page.tsx:4"}, "properties": {"repobilityId": "0b3482674f5cb9b4", "scanner": "scanner-primary", "fingerprint": "670b6c8f1eee554b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-84e1c959060b34f2", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/completeness/page.tsx:4"}, "properties": {"repobilityId": "ce98f30f0631e729", "scanner": "scanner-primary", "fingerprint": "84e1c959060b34f2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b7102a479603cf39", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/check/CheckPanel.tsx:13"}, "properties": {"repobilityId": "37980d42ae72aaa9", "scanner": "scanner-primary", "fingerprint": "b7102a479603cf39", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5af7dd9b57617bdb", "level": "none", "message": {"text": "Commented-code block (9 lines) in front/web/app/compound-besoin-branchtree/page.tsx:6"}, "properties": {"repobilityId": "8742f9fe4d9677ee", "scanner": "scanner-primary", "fingerprint": "5af7dd9b57617bdb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2be627aa5b916794", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/compound-besoin-mirrorform/page.tsx:6"}, "properties": {"repobilityId": "96ae08beb774e13b", "scanner": "scanner-primary", "fingerprint": "2be627aa5b916794", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-90e72df4acbe0aad", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/tool-projection/page.tsx:6"}, "properties": {"repobilityId": "38557372c2417f4d", "scanner": "scanner-primary", "fingerprint": "90e72df4acbe0aad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7fcfc77283395c6b", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/app/incidents-to-ideas/page.tsx:6"}, "properties": {"repobilityId": "f00070c9b8d344ce", "scanner": "scanner-primary", "fingerprint": "7fcfc77283395c6b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6f22b8302c62c32a", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/contract/page.tsx:43"}, "properties": {"repobilityId": "62dabc041af15b78", "scanner": "scanner-primary", "fingerprint": "6f22b8302c62c32a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-537fc5781fcaa313", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/lexicon/page.tsx:6"}, "properties": {"repobilityId": "2d157a647641f4d2", "scanner": "scanner-primary", "fingerprint": "537fc5781fcaa313", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-809b97b19a2470c7", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/app/memory-firewall/page.tsx:6"}, "properties": {"repobilityId": "eb031f2534a8566d", "scanner": "scanner-primary", "fingerprint": "809b97b19a2470c7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-02c03f7496aa2956", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/besoin-necessity/page.tsx:6"}, "properties": {"repobilityId": "9f22acad61d0fa63", "scanner": "scanner-primary", "fingerprint": "02c03f7496aa2956", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-33f5b6dd98e3e8d7", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/why-blocked/page.tsx:5"}, "properties": {"repobilityId": "9a688aff5e7a1677", "scanner": "scanner-primary", "fingerprint": "33f5b6dd98e3e8d7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-408e069c2beae572", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/red-wave/page.tsx:7"}, "properties": {"repobilityId": "dd6a192dcb757cbe", "scanner": "scanner-primary", "fingerprint": "408e069c2beae572", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-871b47e409b5545b", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/app/control/page.tsx:4"}, "properties": {"repobilityId": "c146fa8d75d29cb9", "scanner": "scanner-primary", "fingerprint": "871b47e409b5545b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b4db93bc190b2e17", "level": "none", "message": {"text": "Commented-code block (9 lines) in front/web/app/kernel-debt/page.tsx:6"}, "properties": {"repobilityId": "d3df94f0f5a22897", "scanner": "scanner-primary", "fingerprint": "b4db93bc190b2e17", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5e95434b0620d5cc", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/app/ideas/page.tsx:6"}, "properties": {"repobilityId": "f3c9727f08763f29", "scanner": "scanner-primary", "fingerprint": "5e95434b0620d5cc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-31b4c147ab0f5a98", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/app/compound-besoin-metadata/page.tsx:6"}, "properties": {"repobilityId": "474e91234652cd11", "scanner": "scanner-primary", "fingerprint": "31b4c147ab0f5a98", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a79a349228b89124", "level": "none", "message": {"text": "Commented-code block (10 lines) in front/web/app/account-release/page.tsx:6"}, "properties": {"repobilityId": "713c890397e9e205", "scanner": "scanner-primary", "fingerprint": "a79a349228b89124", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-02821999ff2ac6ac", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/mutation-data.ts:1"}, "properties": {"repobilityId": "4c3669a248838464", "scanner": "scanner-primary", "fingerprint": "02821999ff2ac6ac", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2fce7ffbc74fb6a2", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/project-evolve.ts:1"}, "properties": {"repobilityId": "60e6d6fdd6fc4872", "scanner": "scanner-primary", "fingerprint": "2fce7ffbc74fb6a2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f4970fb315c9de0f", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/adoption-data.ts:1"}, "properties": {"repobilityId": "11de10b114451d6d", "scanner": "scanner-primary", "fingerprint": "f4970fb315c9de0f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b62005b53b79a1d3", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/meta-data.ts:1"}, "properties": {"repobilityId": "10af22c4d9c4799d", "scanner": "scanner-primary", "fingerprint": "b62005b53b79a1d3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8b191845dc1cc3a7", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/mutation.ts:1"}, "properties": {"repobilityId": "8dedeaa148db0a3b", "scanner": "scanner-primary", "fingerprint": "8b191845dc1cc3a7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fbba4ed685c158e2", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/erasure.test.ts:202"}, "properties": {"repobilityId": "140dc494ba2da4c3", "scanner": "scanner-primary", "fingerprint": "fbba4ed685c158e2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-71bd0bbcde75546f", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/endpoint-fitness.ts:284"}, "properties": {"repobilityId": "e41eac2290cde6ed", "scanner": "scanner-primary", "fingerprint": "71bd0bbcde75546f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d22f3c734d0eec0b", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/deploy.ts:527"}, "properties": {"repobilityId": "e44ee2f4d12d249a", "scanner": "scanner-primary", "fingerprint": "d22f3c734d0eec0b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-56ea79cf8dad7b36", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/agentlayer.ts:350"}, "properties": {"repobilityId": "fee5a8577dfe474c", "scanner": "scanner-primary", "fingerprint": "56ea79cf8dad7b36", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e42f7051608c861e", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/lib/kernel-garden.ts:1"}, "properties": {"repobilityId": "3e79b365fbead053", "scanner": "scanner-primary", "fingerprint": "e42f7051608c861e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-655b33d0ad5097cf", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/evolution-sandbox.test.ts:1"}, "properties": {"repobilityId": "638464146c46a358", "scanner": "scanner-primary", "fingerprint": "655b33d0ad5097cf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-31e8ad0d902b8834", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/besoin-gate.ts:6"}, "properties": {"repobilityId": "7ae9aab004057e59", "scanner": "scanner-primary", "fingerprint": "31e8ad0d902b8834", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03425b36915976a7", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/kernel-debt-data.ts:1"}, "properties": {"repobilityId": "98bdf0a43c69035c", "scanner": "scanner-primary", "fingerprint": "03425b36915976a7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1dafd0b0b1f78a77", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/kernel-debt.ts:1"}, "properties": {"repobilityId": "0b1d586e7b957fb0", "scanner": "scanner-primary", "fingerprint": "1dafd0b0b1f78a77", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6e1f37e12de41750", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/context-compressor.ts:156"}, "properties": {"repobilityId": "3a471506e49c7957", "scanner": "scanner-primary", "fingerprint": "6e1f37e12de41750", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e3f82a751f3df229", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/adoption.ts:1"}, "properties": {"repobilityId": "cce1807210968bf3", "scanner": "scanner-primary", "fingerprint": "e3f82a751f3df229", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e0d36ae26ab1eb6c", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/sensors.test.ts:13"}, "properties": {"repobilityId": "cc3020d520674bab", "scanner": "scanner-primary", "fingerprint": "e0d36ae26ab1eb6c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c19a20aa52ea8c68", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/env-rollback.ts:274"}, "properties": {"repobilityId": "edb6ff3309280329", "scanner": "scanner-primary", "fingerprint": "c19a20aa52ea8c68", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-82561b5e9b1ca541", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/strangler.test.ts:17"}, "properties": {"repobilityId": "2ad62d2cbaefcdb8", "scanner": "scanner-primary", "fingerprint": "82561b5e9b1ca541", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8628cc96d126aeee", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/evolution-sandbox-data.ts:1"}, "properties": {"repobilityId": "8a382ea224a8cb36", "scanner": "scanner-primary", "fingerprint": "8628cc96d126aeee", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f26b379d28a6e519", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/lib/ideas.test.ts:16"}, "properties": {"repobilityId": "2c639543afce8d32", "scanner": "scanner-primary", "fingerprint": "f26b379d28a6e519", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-37920f2f6eb1cd4c", "level": "none", "message": {"text": "Commented-code block (9 lines) in front/web/lib/account-release.ts:1"}, "properties": {"repobilityId": "85acff3d53197dd1", "scanner": "scanner-primary", "fingerprint": "37920f2f6eb1cd4c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2e409d94b11937de", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/besoin-interview.ts:99"}, "properties": {"repobilityId": "b24fa782168bced7", "scanner": "scanner-primary", "fingerprint": "2e409d94b11937de", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ce03b2e57f2bdf37", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/wall.test.ts:11"}, "properties": {"repobilityId": "6f376c1429dbf841", "scanner": "scanner-primary", "fingerprint": "ce03b2e57f2bdf37", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2bf70f963eea153b", "level": "none", "message": {"text": "Commented-code block (9 lines) in front/web/lib/exploration.test.ts:17"}, "properties": {"repobilityId": "65043a6e67427926", "scanner": "scanner-primary", "fingerprint": "2bf70f963eea153b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8a0cd6651f1363f4", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/law-coverage.ts:1"}, "properties": {"repobilityId": "c42802578773665e", "scanner": "scanner-primary", "fingerprint": "8a0cd6651f1363f4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e7e3e6593e0d0c3", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/agentrun-redact.test.ts:14"}, "properties": {"repobilityId": "03763b6edb20cd08", "scanner": "scanner-primary", "fingerprint": "1e7e3e6593e0d0c3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-72e2b6935ffa0c4c", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/lib/compound.ts:216"}, "properties": {"repobilityId": "f1ead208c1328fd2", "scanner": "scanner-primary", "fingerprint": "72e2b6935ffa0c4c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a66ce2ac06c58186", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/evolution-sandbox.ts:1"}, "properties": {"repobilityId": "bed6ea564e1d70f5", "scanner": "scanner-primary", "fingerprint": "a66ce2ac06c58186", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fea5ce136aff1896", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/agentrun.ts:65"}, "properties": {"repobilityId": "45cab35821b92479", "scanner": "scanner-primary", "fingerprint": "fea5ce136aff1896", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3eac57b43ce364b9", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/ai-lab.ts:429"}, "properties": {"repobilityId": "2ff92401be9f98c4", "scanner": "scanner-primary", "fingerprint": "3eac57b43ce364b9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2e1abc52262fc296", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/kernel-garden.test.ts:1"}, "properties": {"repobilityId": "080b3444d5349847", "scanner": "scanner-primary", "fingerprint": "2e1abc52262fc296", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c16b9f274fe35dfb", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/meta.ts:1"}, "properties": {"repobilityId": "3016460eb493773e", "scanner": "scanner-primary", "fingerprint": "c16b9f274fe35dfb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-166f63f9db13b896", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/lib/adoption.test.ts:1"}, "properties": {"repobilityId": "958bd6859a6ada38", "scanner": "scanner-primary", "fingerprint": "166f63f9db13b896", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dd9444bff3fd1ef7", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/projectDag.test.ts:33"}, "properties": {"repobilityId": "9af1c93b31e602d2", "scanner": "scanner-primary", "fingerprint": "dd9444bff3fd1ef7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-31e35b19dc927a1e", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/account-release-data.ts:1"}, "properties": {"repobilityId": "2907f4d27e36e06b", "scanner": "scanner-primary", "fingerprint": "31e35b19dc927a1e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-38a6846c4e33b293", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/contract.ts:40"}, "properties": {"repobilityId": "a0093186586a0010", "scanner": "scanner-primary", "fingerprint": "38a6846c4e33b293", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-805d70ac466c25eb", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/lib/governance.ts:358"}, "properties": {"repobilityId": "82a44ad846d7407f", "scanner": "scanner-primary", "fingerprint": "805d70ac466c25eb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-52855da469ac7c36", "level": "none", "message": {"text": "Commented-code block (6 lines) in front/web/lib/v2/deploy.ts:316"}, "properties": {"repobilityId": "fb0f258121f62e10", "scanner": "scanner-primary", "fingerprint": "52855da469ac7c36", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03679e9911ebb168", "level": "none", "message": {"text": "Commented-code block (5 lines) in front/web/lib/v2/builder.ts:282"}, "properties": {"repobilityId": "cdc27ef3c1d82458", "scanner": "scanner-primary", "fingerprint": "03679e9911ebb168", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-15a0f6ecc4ab8f2e", "level": "none", "message": {"text": "Commented-code block (7 lines) in front/web/lib/v2/ai-lab.ts:364"}, "properties": {"repobilityId": "18cd248364f3bed0", "scanner": "scanner-primary", "fingerprint": "15a0f6ecc4ab8f2e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d1b6261513a38cb3", "level": "none", "message": {"text": "Commented-code block (8 lines) in front/web/lib/v2/ai-lab.test.ts:571"}, "properties": {"repobilityId": "c39a29726496d3d4", "scanner": "scanner-primary", "fingerprint": "d1b6261513a38cb3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ecccce35e9ef3a41", "level": "none", "message": {"text": "Commented-code block (12 lines) in .claude/workflows/long-run-dp.js:1"}, "properties": {"repobilityId": "a5fe9ded8c56b572", "scanner": "scanner-primary", "fingerprint": "ecccce35e9ef3a41", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8aa4ed4727126f0d", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/workflows/long-run-builder.js:1"}, "properties": {"repobilityId": "8627601e94873b5f", "scanner": "scanner-primary", "fingerprint": "8aa4ed4727126f0d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-561d90debe6f574d", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/skills/superpowers__systematic-debugging/condition-based-waiting-example.ts:140"}, "properties": {"repobilityId": "81896e2ce0a95594", "scanner": "scanner-primary", "fingerprint": "561d90debe6f574d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e6fca449d0182aea", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/marketplaces/superpowers/skills/systematic-debugging/condition-based-waiting-example.ts:140"}, "properties": {"repobilityId": "085cbf4fbd1d667e", "scanner": "scanner-primary", "fingerprint": "e6fca449d0182aea", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-515b264f31fdc086", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/marketplaces/cdesign-expo/.claude/skills/superpowers__systematic-debugging/condition-based-waiting-example.ts:140"}, "properties": {"repobilityId": "2e463da1fed766c6", "scanner": "scanner-primary", "fingerprint": "515b264f31fdc086", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-acb097cbec0048c4", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/skills/systematic-debugging/condition-based-waiting-example.ts:140"}, "properties": {"repobilityId": "4c6a05a18e458371", "scanner": "scanner-primary", "fingerprint": "acb097cbec0048c4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1b37fe362a191d2a", "level": "none", "message": {"text": "Commented-code block (10 lines) in .claude/marketplaces/cdesign-expo/.claude/marketplaces/wshobson/plugins/plugin-eval/src/plugin_eval/layers/static.py:33"}, "properties": {"repobilityId": "acc7d5016c26ee12", "scanner": "scanner-primary", "fingerprint": "1b37fe362a191d2a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bcb78a3c334d2f0f", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/marketplaces/wshobson/tools/doc_gardener.py:100"}, "properties": {"repobilityId": "d14d52d05d7301b4", "scanner": "scanner-primary", "fingerprint": "bcb78a3c334d2f0f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8c1f492aa3dcc266", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/marketplaces/wshobson/tools/adapters/codex.py:427"}, "properties": {"repobilityId": "305bb87581de0ceb", "scanner": "scanner-primary", "fingerprint": "8c1f492aa3dcc266", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2f763889f5f65bd3", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/marketplaces/wshobson/plugins/plugin-eval/src/plugin_eval/layers/harness_portability.py:39"}, "properties": {"repobilityId": "043c6421588572d0", "scanner": "scanner-primary", "fingerprint": "2f763889f5f65bd3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b614157d6d3a791d", "level": "none", "message": {"text": "Commented-code block (10 lines) in .claude/marketplaces/wshobson/plugins/plugin-eval/src/plugin_eval/layers/static.py:53"}, "properties": {"repobilityId": "a794bdb8480fc59c", "scanner": "scanner-primary", "fingerprint": "b614157d6d3a791d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-abeeb7abd5d51a78", "level": "none", "message": {"text": "Commented-code block (5 lines) in infra/dev-preview/server.js:3"}, "properties": {"repobilityId": "7065e1bea8f02209", "scanner": "scanner-primary", "fingerprint": "abeeb7abd5d51a78", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f1ea8a806efd728b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a4fde7e9a08660cb", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7fdeb36eb725ff38", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ee53476058e6751d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "adb72406da1e85a2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b2593850c840180b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "cabd4495727a259d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3281b9b5e55435df", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8d3bb25ecd07f637", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "32e994f3ec56ad99", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1b65ebb8570745cd", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c9dc6b5d57281011", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "685b1eaf6bb35b5a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "808d334daf51af68", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "dde210979c9cf597", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d290b398d2f63f70", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "92f34f34fd0bac8f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c45419424f17eef7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ef864db212003121", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "73cb4d1ca469c1a6", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-162f633d351217e1", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:122)"}, "properties": {"repobilityId": "d509fddf43c6f4d2", "scanner": "scanner-primary", "fingerprint": "162f633d351217e1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-79d53150c361743b", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:128)"}, "properties": {"repobilityId": "733b2f34191b43d9", "scanner": "scanner-primary", "fingerprint": "79d53150c361743b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c661c94f01a2636a", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:135)"}, "properties": {"repobilityId": "f84960957e946057", "scanner": "scanner-primary", "fingerprint": "c661c94f01a2636a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-60bff8085b55e138", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:144)"}, "properties": {"repobilityId": "7c0429d7b9054a1b", "scanner": "scanner-primary", "fingerprint": "60bff8085b55e138", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-fbb53cad8a323c3b", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:155)"}, "properties": {"repobilityId": "b3b20e651e7679d8", "scanner": "scanner-primary", "fingerprint": "fbb53cad8a323c3b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-a98e946785b057df", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:168)"}, "properties": {"repobilityId": "6f11824ee2f54b39", "scanner": "scanner-primary", "fingerprint": "a98e946785b057df", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-b279bbce74d274de", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:177)"}, "properties": {"repobilityId": "5b3d15f87b09a599", "scanner": "scanner-primary", "fingerprint": "b279bbce74d274de", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-800b7b6813fa834d", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/other (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:183)"}, "properties": {"repobilityId": "ebaefdf169e073e2", "scanner": "scanner-primary", "fingerprint": "800b7b6813fa834d", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0ba1cc883af6584b", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:293)"}, "properties": {"repobilityId": "5990b0abefc390b8", "scanner": "scanner-primary", "fingerprint": "0ba1cc883af6584b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-19d12c2e8a68b188", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:122)"}, "properties": {"repobilityId": "6d50b58482e62b9e", "scanner": "scanner-primary", "fingerprint": "19d12c2e8a68b188", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e70ec6f05bfc4c04", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:128)"}, "properties": {"repobilityId": "ccf36d656a7ffece", "scanner": "scanner-primary", "fingerprint": "e70ec6f05bfc4c04", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-b6857d653228c6e7", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:135)"}, "properties": {"repobilityId": "a392a91931d1f33f", "scanner": "scanner-primary", "fingerprint": "b6857d653228c6e7", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-2556ef2f3c299a6e", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:144)"}, "properties": {"repobilityId": "a560c3438b878760", "scanner": "scanner-primary", "fingerprint": "2556ef2f3c299a6e", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-43721338031027cd", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:155)"}, "properties": {"repobilityId": "263a9332b010bf22", "scanner": "scanner-primary", "fingerprint": "43721338031027cd", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-ced394c70ed4a7f1", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:168)"}, "properties": {"repobilityId": "69a051693f93a8ab", "scanner": "scanner-primary", "fingerprint": "ced394c70ed4a7f1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-6caea87f43c22691", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:177)"}, "properties": {"repobilityId": "88fd6d5688a875fa", "scanner": "scanner-primary", "fingerprint": "6caea87f43c22691", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c505e4ede681bbb9", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/other (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:183)"}, "properties": {"repobilityId": "add728136bc60f9f", "scanner": "scanner-primary", "fingerprint": "c505e4ede681bbb9", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-cf5233ae41c8b033", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${TEST_PORT}/ (.claude/marketplaces/cdesign-expo/.claude/marketplaces/superpowers/tests/brainstorm-server/server.test.js:293)"}, "properties": {"repobilityId": "1bcd6bf3518a337f", "scanner": "scanner-primary", "fingerprint": "cf5233ae41c8b033", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-8ed3fac9c6b90819", "level": "error", "message": {"text": "Dangling fetch: POST /api/emitted-submit (front/web/app/front-emitter/FrontEmitterPanel.tsx:60)"}, "properties": {"repobilityId": "a549924a0bd1b68c", "scanner": "scanner-primary", "fingerprint": "8ed3fac9c6b90819", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-2cac4cba7e28cf4c", "level": "error", "message": {"text": "Dangling fetch: POST /api/emitted-submit (front/web/app/preview/PreviewPanel.tsx:65)"}, "properties": {"repobilityId": "b94311e8d4100fcb", "scanner": "scanner-primary", "fingerprint": "2cac4cba7e28cf4c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-3a3c45156489b020", "level": "note", "message": {"text": "Unused endpoint: GET /api/users"}, "properties": {"repobilityId": "b157a5e3ac1ea19e", "scanner": "scanner-primary", "fingerprint": "3a3c45156489b020", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-49546f6900fb04c5", "level": "note", "message": {"text": "Unused endpoint: POST /api/users"}, "properties": {"repobilityId": "e2894be62ba4d67a", "scanner": "scanner-primary", "fingerprint": "49546f6900fb04c5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0ffef5a07597afc9", "level": "note", "message": {"text": "Unused endpoint: GET /api/users/{user_id}"}, "properties": {"repobilityId": "e30c995f56eadcb7", "scanner": "scanner-primary", "fingerprint": "0ffef5a07597afc9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-887c385438b11bc5", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/users/{user_id}"}, "properties": {"repobilityId": "f606b3fc82a08608", "scanner": "scanner-primary", "fingerprint": "887c385438b11bc5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c3fb176c336b8818", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/users/{user_id}"}, "properties": {"repobilityId": "779541417260e6eb", "scanner": "scanner-primary", "fingerprint": "c3fb176c336b8818", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}