{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-90c0e3cf3f9b5943", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 site/app/page.tsx:671", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 site/app/page.tsx:671"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e0eb5f4feb301c4d", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 site/app/launch/page.tsx:84", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 site/app/launch/page.tsx:84"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e8ab22e7a3c8cd9", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 site/app/compare/manual-agent-config/page.tsx:84", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 site/app/compare/manual-agent-config/page.tsx:84"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8be4dc880220390f", "name": "Stray `console.log` in TS/JS \u2014 src/commands/sync.js:171", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/sync.js:171"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7db9cc416789c67e", "name": "Stray `console.log` in TS/JS \u2014 src/commands/add.js:56", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/add.js:56"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f36d96e9cb056c2c", "name": "Stray `console.log` in TS/JS \u2014 src/commands/init.js:129", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/init.js:129"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5cd2f4f3bb482508", "name": "Stray `console.log` in TS/JS \u2014 src/commands/status.js:91", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/status.js:91"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0803c48e3c41e957", "name": "Insecure pattern 'dangerous_innerhtml' in site/app/page.tsx:671", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in site/app/page.tsx:671"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48c45f6f62e67ee9", "name": "Insecure pattern 'dangerous_innerhtml' in site/app/launch/page.tsx:84", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in site/app/launch/page.tsx:84"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3e264ea4ef994b13", "name": "Insecure pattern 'dangerous_innerhtml' in site/app/compare/manual-agent-config/page.tsx:84", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in site/app/compare/manual-agent-config/page.tsx:84"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "5 tests / 39 src (ratio 0.13)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 39 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3b1c2f9d59e20ecb", "name": "Agent authority lacks a verifier contract: templates/.claude/commands/toon-encode.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/commands/toon-encode.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c7fc912130bdd77", "name": "Agent authority lacks a verifier contract: templates/.claude/commands/convert-to-toon.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/commands/convert-to-toon.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-498a4b8e34e85491", "name": "Agent authority lacks a verifier contract: templates/.claude/commands/toon-decode.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/commands/toon-decode.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-272a9430751f6267", "name": "Agent authority lacks a verifier contract: templates/.claude/commands/toon-validate.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/commands/toon-validate.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b5ccfa9f0f0bc17", "name": "Agent authority lacks a verifier contract: templates/.claude/commands/analyze-tokens.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/commands/analyze-tokens.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9260bed0d6a84e0f", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-patterns/references/feedback.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-patterns/references/feedback.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aaf46d06b2010477", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-patterns/references/file-management.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-patterns/references/file-management.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ba01dd0ee60d2798", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-inputs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-inputs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5a818e69af3a6b21", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-inputs/references/keyboards.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-inputs/references/keyboards.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7dc9e53c22f57c40", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/toon-formatter/skill.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/toon-formatter/skill.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0980e6279b44419b", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/toon-formatter/references/toon-guide.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/toon-formatter/references/toon-guide.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d51ccc73fc65df3a", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-menus/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-menus/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ede23b60ce27f7fc", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-menus/references/toolbars.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-menus/references/toolbars.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-af44427ae5a3ed91", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-menus/references/edit-menus.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-menus/references/edit-menus.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48755f57a26c7e35", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-search/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-search/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-89ae1bda10cc84ad", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-technologies/references/siri.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-technologies/references/siri.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5a8fb9ddd9c81de", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-technologies/references/in-app-purchase.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-technologies/references/in-app-purchase.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a50cd5019c240a94", "name": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-technologies/references/game-center.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-technologies/references/game-center.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e725d2ab884fbd49", "name": "Multiple root agent instruction files without precedence", "shortDescription": {"text": "Multiple root agent instruction files without precedence"}, "fullDescription": {"text": "The repo has multiple top-level AI-coder instruction files. Without precedence rules, different agents may follow different policies."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b5a76780c3df9aa", "name": "1 env vars used in code but missing from .env.example", "shortDescription": {"text": "1 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `NODE_ENV`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/17762"}, "properties": {"repository": "raintree-technology/agent-starter", "repoUrl": "https://github.com/raintree-technology/agent-starter", "branch": "main"}, "results": [{"ruleId": "scanner-90c0e3cf3f9b5943", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 site/app/page.tsx:671"}, "properties": {"repobilityId": "22e5e6f3c01c34e2", "scanner": "scanner-primary", "fingerprint": "90c0e3cf3f9b5943", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-e0eb5f4feb301c4d", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 site/app/launch/page.tsx:84"}, "properties": {"repobilityId": "46a7ce360c81e196", "scanner": "scanner-primary", "fingerprint": "e0eb5f4feb301c4d", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-9e8ab22e7a3c8cd9", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 site/app/compare/manual-agent-config/page.tsx:84"}, "properties": {"repobilityId": "9a1dd9fdcc740937", "scanner": "scanner-primary", "fingerprint": "9e8ab22e7a3c8cd9", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-8be4dc880220390f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/sync.js:171"}, "properties": {"repobilityId": "879f6807d6b4e844", "scanner": "scanner-primary", "fingerprint": "8be4dc880220390f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7db9cc416789c67e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/add.js:56"}, "properties": {"repobilityId": "704d18e841fd0e8b", "scanner": "scanner-primary", "fingerprint": "7db9cc416789c67e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f36d96e9cb056c2c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/init.js:129"}, "properties": {"repobilityId": "1978b7d12b05657c", "scanner": "scanner-primary", "fingerprint": "f36d96e9cb056c2c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5cd2f4f3bb482508", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/status.js:91"}, "properties": {"repobilityId": "9f6119fb614b6c20", "scanner": "scanner-primary", "fingerprint": "5cd2f4f3bb482508", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0803c48e3c41e957", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in site/app/page.tsx:671"}, "properties": {"repobilityId": "33e12d4ce6cebd98", "scanner": "scanner-primary", "fingerprint": "0803c48e3c41e957", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "site/app/page.tsx"}, "region": {"startLine": 671}}}]}, {"ruleId": "scanner-48c45f6f62e67ee9", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in site/app/launch/page.tsx:84"}, "properties": {"repobilityId": "185c51c144c637d2", "scanner": "scanner-primary", "fingerprint": "48c45f6f62e67ee9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "site/app/launch/page.tsx"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-3e264ea4ef994b13", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in site/app/compare/manual-agent-config/page.tsx:84"}, "properties": {"repobilityId": "4fa9241d718f5830", "scanner": "scanner-primary", "fingerprint": "3e264ea4ef994b13", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "site/app/compare/manual-agent-config/page.tsx"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "efdb49204d2223de", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "d039f4aa88a341a5", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "f73f366a5e99c181", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-3b1c2f9d59e20ecb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/commands/toon-encode.md"}, "properties": {"repobilityId": "6503e6f6051e5c2f", "scanner": "scanner-primary", "fingerprint": "3b1c2f9d59e20ecb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/commands/toon-encode.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3c7fc912130bdd77", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/commands/convert-to-toon.md"}, "properties": {"repobilityId": "0ff268d7c00bf79b", "scanner": "scanner-primary", "fingerprint": "3c7fc912130bdd77", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/commands/convert-to-toon.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-498a4b8e34e85491", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/commands/toon-decode.md"}, "properties": {"repobilityId": "e3f860140b1ebb20", "scanner": "scanner-primary", "fingerprint": "498a4b8e34e85491", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/commands/toon-decode.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-272a9430751f6267", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/commands/toon-validate.md"}, "properties": {"repobilityId": "f505dbdd090f6734", "scanner": "scanner-primary", "fingerprint": "272a9430751f6267", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/commands/toon-validate.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b5ccfa9f0f0bc17", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/commands/analyze-tokens.md"}, "properties": {"repobilityId": "a7967df1787b64fc", "scanner": "scanner-primary", "fingerprint": "7b5ccfa9f0f0bc17", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/commands/analyze-tokens.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9260bed0d6a84e0f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-patterns/references/feedback.md"}, "properties": {"repobilityId": "751f6c0c798cdd5e", "scanner": "scanner-primary", "fingerprint": "9260bed0d6a84e0f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-patterns/references/feedback.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aaf46d06b2010477", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-patterns/references/file-management.md"}, "properties": {"repobilityId": "47ecc6c33c85cf9e", "scanner": "scanner-primary", "fingerprint": "aaf46d06b2010477", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-patterns/references/file-management.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ba01dd0ee60d2798", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-inputs/SKILL.md"}, "properties": {"repobilityId": "77af21f51ff417c2", "scanner": "scanner-primary", "fingerprint": "ba01dd0ee60d2798", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-inputs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5a818e69af3a6b21", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-inputs/references/keyboards.md"}, "properties": {"repobilityId": "2d03c657705cc343", "scanner": "scanner-primary", "fingerprint": "5a818e69af3a6b21", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-inputs/references/keyboards.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7dc9e53c22f57c40", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/toon-formatter/skill.md"}, "properties": {"repobilityId": "02bc5c2fe8979ff6", "scanner": "scanner-primary", "fingerprint": "7dc9e53c22f57c40", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/toon-formatter/skill.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0980e6279b44419b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/toon-formatter/references/toon-guide.md"}, "properties": {"repobilityId": "571245e2f1ad3407", "scanner": "scanner-primary", "fingerprint": "0980e6279b44419b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/toon-formatter/references/toon-guide.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d51ccc73fc65df3a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-menus/SKILL.md"}, "properties": {"repobilityId": "f78f742c1405cfe9", "scanner": "scanner-primary", "fingerprint": "d51ccc73fc65df3a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-components-menus/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ede23b60ce27f7fc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-menus/references/toolbars.md"}, "properties": {"repobilityId": "af54e39f09580457", "scanner": "scanner-primary", "fingerprint": "ede23b60ce27f7fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-components-menus/references/toolbars.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-af44427ae5a3ed91", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-menus/references/edit-menus.md"}, "properties": {"repobilityId": "89f084b35115f798", "scanner": "scanner-primary", "fingerprint": "af44427ae5a3ed91", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-components-menus/references/edit-menus.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-48755f57a26c7e35", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-components-search/SKILL.md"}, "properties": {"repobilityId": "3e743feee07f42ec", "scanner": "scanner-primary", "fingerprint": "48755f57a26c7e35", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-components-search/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-89ae1bda10cc84ad", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-technologies/references/siri.md"}, "properties": {"repobilityId": "06099c3f27dbbb2f", "scanner": "scanner-primary", "fingerprint": "89ae1bda10cc84ad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-technologies/references/siri.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e5a8fb9ddd9c81de", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-technologies/references/in-app-purchase.md"}, "properties": {"repobilityId": "fb9b0a090e5baf58", "scanner": "scanner-primary", "fingerprint": "e5a8fb9ddd9c81de", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-technologies/references/in-app-purchase.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a50cd5019c240a94", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/.claude/skills/hig-technologies/references/game-center.md"}, "properties": {"repobilityId": "0ef9636c25a5cc3a", "scanner": "scanner-primary", "fingerprint": "a50cd5019c240a94", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/.claude/skills/hig-technologies/references/game-center.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e725d2ab884fbd49", "level": "note", "message": {"text": "Multiple root agent instruction files without precedence"}, "properties": {"repobilityId": "1953db6c89508d22", "scanner": "scanner-primary", "fingerprint": "e725d2ab884fbd49", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["agent-instructions", "governance"]}}, {"ruleId": "scanner-1b5a76780c3df9aa", "level": "none", "message": {"text": "1 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "d04379b337b44a15", "scanner": "scanner-primary", "fingerprint": "1b5a76780c3df9aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}]}]}