{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "MINED109", "name": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is ", "shortDescription": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every f"}, "fullDescription": {"text": "Use None as the default and create the collection inside the function: `def __init__(x=None): x = x or []`"}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED111", "name": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or ", "shortDescription": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "fullDescription": {"text": "Either narrow the exception type, log the exception with `logger.exception(...)`, or re-raise after handling."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "JRN012", "name": "Runtime environment contract is missing referenced variables", "shortDescription": {"text": "Runtime environment contract is missing referenced variables"}, "fullDescription": {"text": "Add every required runtime variable to .env.example or deployment docs with safe placeholder values, then verify CI/deploy bootstraps from that contract."}, "properties": {"scanner": "repobility-journey-contract", "category": "quality", "severity": "medium", "confidence": 0.72, "cwe": "", "owasp": ""}}, {"id": "JRN010", "name": "Critical user action appears to be handled by a no-op or placeholder", "shortDescription": {"text": "Critical user action appears to be handled by a no-op or placeholder"}, "fullDescription": {"text": "Wire the action to a real backend mutation or remove/disable the control until it is implemented. Add an end-to-end or integration test that performs the action and observes persisted state."}, "properties": {"scanner": "repobility-journey-contract", "category": "quality", "severity": "medium", "confidence": 0.74, "cwe": "", "owasp": ""}}, {"id": "ERR001", "name": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG ", "shortDescription": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "fullDescription": {"text": "Log the error: `except Exception: logger.debug('cleanup failed', exc_info=True)`. Or handle specific exception types."}, "properties": {"scanner": "repobility-threat-engine", "category": "error_handling", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC136", "name": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns ", "shortDescription": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, retur"}, "fullDescription": {"text": "Catch the specific exception type, log at error level with full exception info, and return a failure-shaped result. If the operation is genuinely best-effort, log at warning and document why in a comment so the next reader (or scanner) knows."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "COMP001", "name": "[COMP001] High cognitive complexity: Function `construct` has cognitive complexity 17 (SonarSource scale). Cognitive com", "shortDescription": {"text": "[COMP001] High cognitive complexity: Function `construct` has cognitive complexity 17 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all"}, "fullDescription": {"text": "Extract nested branches into named helper functions; flatten early-return / guard clauses; replace long if/elif chains with dispatch dicts or polymorphism. SonarQube's threshold for 'should refactor' is 15 \u2014 yours is 17."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "ERR002", "name": "[ERR002] Empty Catch Block: Empty catch blocks hide errors.", "shortDescription": {"text": "[ERR002] Empty Catch Block: Empty catch blocks hide errors."}, "fullDescription": {"text": "Log the error or rethrow it. Use console.error() at minimum."}, "properties": {"scanner": "repobility-threat-engine", "category": "error_handling", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC087", "name": "[SEC087] JS: weak Math.random for crypto: Math.random() is not cryptographically secure; using it for tokens/keys/nonces", "shortDescription": {"text": "[SEC087] JS: weak Math.random for crypto: Math.random() is not cryptographically secure; using it for tokens/keys/nonces is predictable. Ported from gosec G404 / eslint detect-pseudoRandomBytes concept (Apache-2.0)."}, "fullDescription": {"text": "Use `crypto.randomBytes(32).toString('hex')` (Node) or `crypto.getRandomValues()` (browser)."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "CORE_NO_CI", "name": "No CI/CD configuration found", "shortDescription": {"text": "No CI/CD configuration found"}, "fullDescription": {"text": "Add a CI/CD pipeline: create .github/workflows/ci.yml for GitHub Actions with steps to lint, test, and build on every push and pull request."}, "properties": {"scanner": "repobility-core", "category": "practices", "severity": "medium", "confidence": null, "cwe": "", "owasp": ""}}, {"id": "AIC003", "name": "Duplicated implementation block across source files", "shortDescription": {"text": "Duplicated implementation block across source files"}, "fullDescription": {"text": "Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.86, "cwe": "", "owasp": ""}}, {"id": "AIC009", "name": "Multiple AI-agent scaffold marker files are present", "shortDescription": {"text": "Multiple AI-agent scaffold marker files are present"}, "fullDescription": {"text": "Keep one current agent instruction file if it helps contributors, remove stale progress/completion markers, and make sure the README, tests, and CI describe the real supported behavior."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.68, "cwe": "", "owasp": ""}}, {"id": "MINED064", "name": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services.", "shortDescription": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED062", "name": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model.", "shortDescription": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED001", "name": "[MINED001] Bare Except Pass (and 2 more): Same pattern found in 2 additional files. Review if needed.", "shortDescription": {"text": "[MINED001] Bare Except Pass (and 2 more): Same pattern found in 2 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-755 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC029", "name": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 28 more): Same pattern found in 28 addi", "shortDescription": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 28 more): Same pattern found in 28 additional files. Review if needed."}, "fullDescription": {"text": "Validate the URL against an allowlist BEFORE fetching:\n  ALLOWED = {'images.example.com', 'cdn.example.com'}\n  host = urlparse(url).hostname\n  if host not in ALLOWED: abort(400)\nOr use a server-side proxy (Imgproxy / serve-files-only-from-S3) that isolates outbound network access from the request handler.\nBlock private CIDRs explicitly: 10/8, 172.16/12, 192.168/16, 169.254/16."}, "properties": {"scanner": "repobility-threat-engine", "category": "ssrf", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED067", "name": "[MINED067] Python Requests No Timeout (and 31 more): Same pattern found in 31 additional files. Review if needed.", "shortDescription": {"text": "[MINED067] Python Requests No Timeout (and 31 more): Same pattern found in 31 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-400 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC078", "name": "[SEC078] Python: requests without timeout (and 31 more): Same pattern found in 31 additional files. Review if needed.", "shortDescription": {"text": "[SEC078] Python: requests without timeout (and 31 more): Same pattern found in 31 additional files. Review if needed."}, "fullDescription": {"text": "Add `timeout=10` (or appropriate value) to every requests call."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED045", "name": "[MINED045] Ts Non Null Assertion: x! asserts not null - bypasses null checks - TypeError if wrong.", "shortDescription": {"text": "[MINED045] Ts Non Null Assertion: x! asserts not null - bypasses null checks - TypeError if wrong."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-476 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED056", "name": "[MINED056] React Key As Index (and 5 more): Same pattern found in 5 additional files. Review if needed.", "shortDescription": {"text": "[MINED056] React Key As Index (and 5 more): Same pattern found in 5 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-682 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED043", "name": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.", "shortDescription": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-319 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED036", "name": "[MINED036] Python Os System Call (and 3 more): Same pattern found in 3 additional files. Review if needed.", "shortDescription": {"text": "[MINED036] Python Os System Call (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-78 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC005", "name": "[SEC005] Command Injection Risk (and 3 more): Same pattern found in 3 additional files. Review if needed.", "shortDescription": {"text": "[SEC005] Command Injection Risk (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "fullDescription": {"text": "Use subprocess with shell=False and a list of args. Never eval user input."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC128", "name": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 4 more): Same pattern found in 4 addit", "shortDescription": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "fullDescription": {"text": "Add `await` before each async call, or chain with `.then`. If you intentionally want fire-and-forget, prefix with `void` (TS) or assign to `_` (Python with `asyncio.create_task`) to make the intent explicit and survive lint."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED050", "name": "[MINED050] Stub Only Function (and 13 more): Same pattern found in 13 additional files. Review if needed.", "shortDescription": {"text": "[MINED050] Stub Only Function (and 13 more): Same pattern found in 13 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1188 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED054", "name": "[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely.", "shortDescription": {"text": "[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-704 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC020", "name": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequen", "shortDescription": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "fullDescription": {"text": "Log only redacted, hashed, or last-four-style metadata. Rotate any secret that may have reached logs."}, "properties": {"scanner": "repobility-threat-engine", "category": "credential_exposure", "severity": "info", "confidence": 0.1, "cwe": "", "owasp": ""}}, {"id": "MINED044", "name": "[MINED044] Js Console Log Prod (and 2 more): Same pattern found in 2 additional files. Review if needed.", "shortDescription": {"text": "[MINED044] Js Console Log Prod (and 2 more): Same pattern found in 2 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-532 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED108", "name": "[MINED108] `self.t_tracker` used but never assigned in __init__: Method `explore_s_values` of class `SPlaneVisualization", "shortDescription": {"text": "[MINED108] `self.t_tracker` used but never assigned in __init__: Method `explore_s_values` of class `SPlaneVisualization` reads `self.t_tracker`, but no assignment to it exists in __init__ (and no class-level fallback). This raises Attribut"}, "fullDescription": {"text": "Initialize `self.t_tracker = <default>` in __init__, or add a class-level default."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED106", "name": "[MINED106] Phantom test coverage: test_decision_log_accepts_render_runtime_selection_with_both_options: Test function `t", "shortDescription": {"text": "[MINED106] Phantom test coverage: test_decision_log_accepts_render_runtime_selection_with_both_options: Test function `test_decision_log_accepts_render_runtime_selection_with_both_options` runs code but contains no assert / expect / should "}, "fullDescription": {"text": "Add an explicit assertion that captures the test's intent, or remove the test."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC013", "name": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows ", "shortDescription": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files."}, "fullDescription": {"text": "Use os.path.realpath() and verify the path starts with your expected base directory. Use secure_filename() for uploads."}, "properties": {"scanner": "repobility-threat-engine", "category": "path_traversal", "severity": "high", "confidence": 0.8, "cwe": "", "owasp": ""}}, {"id": "SEC040", "name": "[SEC040] innerHTML XSS \u2014 template literal with server-supplied data: Setting .innerHTML with a template literal that int", "shortDescription": {"text": "[SEC040] innerHTML XSS \u2014 template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflected XSS vector. The browser parses the HTM"}, "fullDescription": {"text": "For plain text: use el.textContent = data.value (auto-escapes).\nFor HTML you need to render: el.innerHTML = DOMPurify.sanitize(html).\nFor React/Vue/Svelte: stop using innerHTML; use the framework's binding.\nWhen data comes from CV/PDF parsers, sanitize at the parser boundary too."}, "properties": {"scanner": "repobility-threat-engine", "category": "xss", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED107", "name": "[MINED107] Missing import: `time` used but not imported: The file uses `time.something(...)` but never imports `time`. T", "shortDescription": {"text": "[MINED107] Missing import: `time` used but not imported: The file uses `time.something(...)` but never imports `time`. This raises NameError at runtime the first time the line executes."}, "fullDescription": {"text": "Add `import time` at the top of the file."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "scanner-58d8e38108fd2326", "name": "Possibly dead Python function: review_source_media", "shortDescription": {"text": "Possibly dead Python function: review_source_media"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f9a112aa4d2451de", "name": "Possibly dead Python function: has_user_media", "shortDescription": {"text": "Possibly dead Python function: has_user_media"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0eebf3d834f46162", "name": "Possibly dead Python function: knn", "shortDescription": {"text": "Possibly dead Python function: knn"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4bd5fd1926e8962a", "name": "Possibly dead Python function: check_extension_permitted", "shortDescription": {"text": "Possibly dead Python function: check_extension_permitted"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a64446202ae5ad02", "name": "Possibly dead Python function: generate_playbook", "shortDescription": {"text": "Possibly dead Python function: generate_playbook"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c1f2c77cba98332", "name": "Possibly dead Python function: save_playbook", "shortDescription": {"text": "Possibly dead Python function: save_playbook"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc1d3201a0f53585", "name": "Possibly dead Python function: classify_from_brief", "shortDescription": {"text": "Possibly dead Python function: classify_from_brief"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07caeb3589fdba88", "name": "Possibly dead Python function: format_ranking", "shortDescription": {"text": "Possibly dead Python function: format_ranking"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71731fdaf3f66344", "name": "Possibly dead Python function: build_batch_prompts", "shortDescription": {"text": "Possibly dead Python function: build_batch_prompts"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-512d0c4eafde9f37", "name": "Possibly dead Python function: require_env", "shortDescription": {"text": "Possibly dead Python function: require_env"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e43353cd699de66b", "name": "Possibly dead Python function: model_info", "shortDescription": {"text": "Possibly dead Python function: model_info"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dac7b62d26647455", "name": "Possibly dead Python function: resolve_path", "shortDescription": {"text": "Possibly dead Python function: resolve_path"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a900eb2dc33e85b", "name": "Possibly dead Python function: generate_i2i", "shortDescription": {"text": "Possibly dead Python function: generate_i2i"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9b59ee343c35f8a", "name": "Possibly dead Python function: generate_batch", "shortDescription": {"text": "Possibly dead Python function: generate_batch"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4990efb95ce94102", "name": "Possibly dead Python function: verify_webhook_signature", "shortDescription": {"text": "Possibly dead Python function: verify_webhook_signature"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6daad0716db1d680", "name": "Possibly dead Python function: construct", "shortDescription": {"text": "Possibly dead Python function: construct"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7096210766e0bdce", "name": "Possibly dead Python function: construct", "shortDescription": {"text": "Possibly dead Python function: construct"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec0c68a45ee12c25", "name": "Possibly dead Python function: construct", "shortDescription": {"text": "Possibly dead Python function: construct"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aca5cb5220c0d71d", "name": "Possibly dead Python function: construct", "shortDescription": {"text": "Possibly dead Python function: construct"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-11a2260f437c9ae8", "name": "Possibly dead Python function: construct", "shortDescription": {"text": "Possibly dead Python function: construct"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d74288f2d3d1f6e4", "name": "Possibly dead Python function: construct", "shortDescription": {"text": "Possibly dead Python function: construct"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f532265229376c30", "name": "Possibly dead Python function: construct", "shortDescription": {"text": "Possibly dead Python function: construct"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2be871fe9fcd6f02", "name": "Possibly dead Python function: construct", "shortDescription": {"text": "Possibly dead Python function: construct"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27126efa838ca9a5", "name": "Possibly dead Python function: update_emb_vect", "shortDescription": {"text": "Possibly dead Python function: update_emb_vect"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6fa40e84cfc6d37f", "name": "Possibly dead Python function: construct", "shortDescription": {"text": "Possibly dead Python function: construct"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c54f974745777b27", "name": "Stray `console.log` in TS/JS \u2014 .claude/skills/bfl-api/references/code-examples/typescript-client.ts:12", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/skills/bfl-api/references/code-examples/typescript-client.ts:12"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bfd1095f87578973", "name": "Stray `console.log` in TS/JS \u2014 .claude/skills/beautiful-mermaid/scripts/render.ts:104", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/skills/beautiful-mermaid/scripts/render.ts:104"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f257d5e93931f0ff", "name": "Stray `console.log` in TS/JS \u2014 .claude/skills/beautiful-mermaid/scripts/create-html.ts:77", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/skills/beautiful-mermaid/scripts/create-html.ts:77"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e21c37e6311a54d6", "name": "dynamic urllib use detected \u2014 tools/audio/freesound_music.py:197", "shortDescription": {"text": "dynamic urllib use detected \u2014 tools/audio/freesound_music.py:197"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a2fd51a5468e4b3", "name": "dynamic urllib use detected \u2014 tools/audio/freesound_music.py:226", "shortDescription": {"text": "dynamic urllib use detected \u2014 tools/audio/freesound_music.py:226"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b796983de1bb5c7e", "name": "dynamic urllib use detected \u2014 tools/audio/pixabay_music.py:352", "shortDescription": {"text": "dynamic urllib use detected \u2014 tools/audio/pixabay_music.py:352"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48adef4a389c49e3", "name": "CVE-2026-6321: fast-uri 3.1.0 \u2014 remotion-composer/package-lock.json", "shortDescription": {"text": "CVE-2026-6321: fast-uri 3.1.0 \u2014 remotion-composer/package-lock.json"}, "fullDescription": {"text": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies\n\nfast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Version\n\nPackage: fast-uri\nInstalled: 3.1.0\nFixed in: 3.1.1\nSeverity: HIGH\nFix: Upgrade fast-uri to 3.1.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8b6aa47b628bbaa3", "name": "CVE-2026-6322: fast-uri 3.1.0 \u2014 remotion-composer/package-lock.json", "shortDescription": {"text": "CVE-2026-6322: fast-uri 3.1.0 \u2014 remotion-composer/package-lock.json"}, "fullDescription": {"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling\n\nfast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI's authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a differ\n\nPackage: fast-uri\nInstalled: 3.1.0\nFixed in: 3.1.2\nSeverity: HIGH\nFix: Upgrade fast-uri to 3.1.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8399d7cb8c87e275", "name": "CVE-2022-37601: loader-utils 2.0.2 \u2014 remotion-composer/package-lock.json", "shortDescription": {"text": "CVE-2022-37601: loader-utils 2.0.2 \u2014 remotion-composer/package-lock.json"}, "fullDescription": {"text": "loader-utils: prototype pollution in function parseQuery in parseQuery.js\n\nPrototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.\n\nPackage: loader-utils\nInstalled: 2.0.2\nFixed in: 2.0.3, 1.4.1\nSeverity: CRITICAL\nFix: Upgrade loader-utils to 2.0.3, 1.4.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-e73c05ed7badfa12", "name": "CVE-2022-37599: loader-utils 2.0.2 \u2014 remotion-composer/package-lock.json", "shortDescription": {"text": "CVE-2022-37599: loader-utils 2.0.2 \u2014 remotion-composer/package-lock.json"}, "fullDescription": {"text": "loader-utils: regular expression denial of service in interpolateName.js\n\nA Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.\n\nPackage: loader-utils\nInstalled: 2.0.2\nFixed in: 1.4.2, 2.0.4, 3.2.1\nSeverity: HIGH\nFix: Upgrade loader-utils to 1.4.2, 2.0.4, 3.2.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c0e855f270332c91", "name": "CVE-2022-37603: loader-utils 2.0.2 \u2014 remotion-composer/package-lock.json", "shortDescription": {"text": "CVE-2022-37603: loader-utils 2.0.2 \u2014 remotion-composer/package-lock.json"}, "fullDescription": {"text": "loader-utils: Regular expression denial of service\n\nA Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.\n\nPackage: loader-utils\nInstalled: 2.0.2\nFixed in: 1.4.2, 2.0.4, 3.2.1\nSeverity: HIGH\nFix: Upgrade loader-utils to 1.4.2, 2.0.4, 3.2.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4ff7d117e9b96f7b", "name": "CVE-2026-41305: postcss 8.5.1 \u2014 remotion-composer/package-lock.json", "shortDescription": {"text": "CVE-2026-41305: postcss 8.5.1 \u2014 remotion-composer/package-lock.json"}, "fullDescription": {"text": "postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags\n\nPostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `</style>` sequences when stringifying CSS ASTs. When user-submitted CSS is parsed and re-stringified for embedding in HTML `<style>` tags, `</style>` in CSS values breaks out of the style context, enabling XSS. Version 8.5.10 fixes the issue.\n\nPackage: postcss\nInstalled: 8.5.1\nFixed in: 8.5.10\nSeverity: MEDIUM\nFix: Upgrade postcss to 8.5.10"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f164d5f1ab7ac43a", "name": "CVE-2026-48779: ws 8.17.1 \u2014 remotion-composer/package-lock.json", "shortDescription": {"text": "CVE-2026-48779: ws 8.17.1 \u2014 remotion-composer/package-lock.json"}, "fullDescription": {"text": "ws is an open source WebSocket client and server for Node.js. All vers ...\n\n### Impact\n\nA high volume of exceptionally small fragments and data chunks can be sent by a peer, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM.\n\n### Proof of concept\n\n```js\nimport { WebSocket, WebSocketServer } from 'ws';\n\nconst wss = new WebSocketServer({ port: 0 }, function () {\n  const data = Buffer.alloc(1);\n  const op\n\nPackage: ws\nInstalled: 8.17.1\nFixed in: 5.2.5, 6.2.4, 7.5.11, 8.21.0\nSeverity: HIGH\nFix: Upgrade ws to 5.2.5, 6.2.4, 7.5.11, 8.21.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d45ae8182b100449", "name": "CVE-2026-45736: ws 8.17.1 \u2014 remotion-composer/package-lock.json", "shortDescription": {"text": "CVE-2026-45736: ws 8.17.1 \u2014 remotion-composer/package-lock.json"}, "fullDescription": {"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`\n\nws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This vulnerability is fixed in 8.20.1.\n\nPackage: ws\nInstalled: 8.17.1\nFixed in: 8.20.1\nSeverity: MEDIUM\nFix: Upgrade ws to 8.20.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-624d54724482b6db", "name": "Agent authority lacks a verifier contract: .claude/skills/ai-video-gen/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ai-video-gen/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ca50ef4047a1626", "name": "Agent authority lacks a verifier contract: .claude/skills/web-design-guidelines/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/web-design-guidelines/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-760662b595e44ec1", "name": "Agent authority lacks a verifier contract: .claude/skills/flux-best-practices/rules/typography-text.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/flux-best-practices/rules/typography-text.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c3703048deaf20b4", "name": "Agent authority lacks a verifier contract: .claude/skills/text-to-speech/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/text-to-speech/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3440a3ea40b01c36", "name": "Agent authority lacks a verifier contract: .claude/skills/elevenlabs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/elevenlabs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-891b16a127a62c16", "name": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/assets.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/assets.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-054c0972e03f5257", "name": "Agent instruction/config may expose a secret: .claude/skills/heygen/references/photo-avatars.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/heygen/references/photo-avatars.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-27cfbf8a1a6328c5", "name": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/photo-avatars.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/photo-avatars.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-755bee30b603578c", "name": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/video-agent.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/video-agent.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90fca9142ab06bcc", "name": "Agent instruction/config may expose a secret: .claude/skills/heygen/references/captions.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/heygen/references/captions.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2f6f4317b9a94097", "name": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/dimensions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/dimensions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f583772382ec5f6", "name": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/prompt-optimizer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/prompt-optimizer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b1e8ca09ec67c3e8", "name": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/visual-styles.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/visual-styles.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb243d34a9057641", "name": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/authentication.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/authentication.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ddaab6092b58042d", "name": "Agent authority lacks a verifier contract: .claude/skills/video-understand/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/video-understand/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80e0d194169ae92b", "name": "Agent authority lacks a verifier contract: .claude/skills/video-edit/references/operations.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/video-edit/references/operations.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-463871eec7d41c38", "name": "Agent authority lacks a verifier contract: .claude/skills/create-video/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87a0c55a943a03a7", "name": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/assets.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/assets.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-624a74a0419ce8c3", "name": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/video-agent.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/video-agent.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e646b93a6b1fb038", "name": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/dimensions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/dimensions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed9d32bae6c42253", "name": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/prompt-optimizer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/prompt-optimizer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47274a5b90ca4d5f", "name": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/visual-styles.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/visual-styles.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de4fababee7f907d", "name": "Agent authority lacks a verifier contract: .claude/skills/faceswap/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/faceswap/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-956d661f15aa5cc4", "name": "Agent authority lacks a verifier contract: .claude/skills/playwright-recording/reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/playwright-recording/reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a451b397286d983", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e35b7c474c11200c", "name": "Agent instruction/config may expose a secret: .claude/skills/threejs-materials/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/threejs-materials/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-35596cacf6493702", "name": "Agent authority lacks a verifier contract: .claude/skills/visual-style/references/gallery/game-boy-color.visual-style.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/visual-style/references/gallery/game-boy-color.visual-style.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-575f1cee4374b172", "name": "Agent authority lacks a verifier contract: .claude/skills/video-download/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/video-download/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c78613fcb6ea3a7e", "name": "Agent instruction/config may expose a secret: .claude/skills/bfl-api/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/bfl-api/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-81e579b375ab4a09", "name": "Agent instruction/config may expose a secret: .claude/skills/bfl-api/references/api-key-setup.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/bfl-api/references/api-key-setup.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8d4dfa97f9759017", "name": "Agent instruction/config may expose a secret: .claude/skills/bfl-api/references/webhook-integration.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/bfl-api/references/webhook-integration.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3062d6d09edface6", "name": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bd8fb130c009dc6f", "name": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/realtime-server-side.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/realtime-server-side.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dcbdbb65bf06fdd8", "name": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/installation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/installation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6fb85512e6a9eb4", "name": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/transcription-options.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/transcription-options.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf468caff31ce42e", "name": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/realtime-client-side.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/realtime-client-side.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4488709831c5165b", "name": "Agent instruction contains unpinned remote install: .claude/skills/agents/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/agents/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-16787a94a70ec5c6", "name": "Agent instruction contains unpinned remote install: .claude/skills/agents/references/installation.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/agents/references/installation.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-92013cb0f145e51d", "name": "Agent instruction/config may expose a secret: .claude/skills/video_toolkit/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/video_toolkit/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6b5ee1188931558e", "name": "Agent authority lacks a verifier contract: .claude/skills/video_toolkit/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/video_toolkit/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-43f2a8b7876a21b1", "name": "Agent authority lacks a verifier contract: .claude/skills/avatar-video/references/assets.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/avatar-video/references/assets.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d929d1d33e964e0c", "name": "Agent instruction/config may expose a secret: .claude/skills/avatar-video/references/photo-avatars.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/avatar-video/references/photo-avatars.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ac45e07617120dab", "name": "Agent authority lacks a verifier contract: .claude/skills/avatar-video/references/photo-avatars.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/avatar-video/references/photo-avatars.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-16b278533827d034", "name": "Agent instruction/config may expose a secret: .claude/skills/avatar-video/references/captions.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/avatar-video/references/captions.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-569e29762e1f9410", "name": "Agent authority lacks a verifier contract: .claude/skills/avatar-video/references/dimensions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/avatar-video/references/dimensions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b0454bfb0fc2489e", "name": "Agent authority lacks a verifier contract: .claude/skills/ffmpeg/reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ffmpeg/reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5735910028b3b679", "name": "Agent authority lacks a verifier contract: .claude/skills/ffmpeg/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ffmpeg/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4579662bed0468a8", "name": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1ba68a6fe684767", "name": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/rules/interactive.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/rules/interactive.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce811a3656a04710", "name": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/rules/scenes.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/rules/scenes.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd20ae734211da8b", "name": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/spring_mass_system.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/spring_mass_system.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf15e3b3201fc627", "name": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/equation_transforms.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/equation_transforms.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-873509dbc4e88cd5", "name": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/transit_animation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/transit_animation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cefcbd8759b6b97a", "name": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/parallax_starfield.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/parallax_starfield.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bafa2996bc997b6c", "name": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/three_d_surfaces.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/three_d_surfaces.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c85c5bf833fdb20", "name": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/rotating_exponentials.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/rotating_exponentials.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1eba4372d00b0871", "name": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/vector_fields.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/vector_fields.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-22eb8e5240c736fa", "name": "Agent instruction/config may expose a secret: .claude/skills/video-translate/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/video-translate/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-775c9c73397aeb9b", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/display-captions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/display-captions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d4595a7c564317e", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/gifs.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/gifs.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d1839dd48325ef51", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/transitions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/transitions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88471abe159d2c3b", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/ffmpeg.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/ffmpeg.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d8d56ba5901e3de6", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/maps.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/maps.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-46ce95048bd5e096", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/lottie.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/lottie.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c861cfe5d597f1b3", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/light-leaks.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/light-leaks.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e620720cae22567", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/charts.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/charts.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2da3ec3a9182762", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/parameters.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/parameters.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-631305131c84e990", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/import-srt-captions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/import-srt-captions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-949fc886050db1e7", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/fonts.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/fonts.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-271e89668934a3a0", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/voiceover.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/voiceover.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a014170c5b9783a2", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/3d.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/3d.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7351a220651792c7", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/transparent-videos.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/transparent-videos.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24e29eafe1b30dbb", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/videos.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/videos.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f85281f72c8c8b9", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/audio.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/audio.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe020b1424694e86", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/transcribe-captions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/transcribe-captions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c5d540c405dfdf28", "name": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/audio-visualization.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/audio-visualization.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-83405dca7aa9e59b", "name": "Agent instruction/config may expose a secret: .claude/skills/ltx2/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/ltx2/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dcae3de084232e81", "name": "Agent authority lacks a verifier contract: .claude/skills/sound-effects/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/sound-effects/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c6bf8900369d3efa", "name": "Agent authority lacks a verifier contract: .claude/skills/sound-effects/references/installation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/sound-effects/references/installation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a38338ad31ff9fff", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-composition-patterns/AGENTS.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-composition-patterns/AGENTS.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed7b10d414a686b3", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-composition-patterns/rules/patterns-explicit-variants.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-composition-patterns/rules/patterns-explicit-variants.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8d5ee4ad6db1e39a", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/advanced-init-once.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/advanced-init-once.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3be63d58ae2f512c", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-hoist-static-io.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-hoist-static-io.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-06de946f8492faed", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-cache-react.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-cache-react.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b19df7e602bc140", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-parallel-fetching.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-parallel-fetching.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8de3286afcf087b1", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-after-nonblocking.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-after-nonblocking.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-42fccc8975005dd9", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rendering-resource-hints.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rendering-resource-hints.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85f39657dd05c44d", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rerender-split-combined-hook", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rerender-split-combined-hooks.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-994972a56f1f53b5", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/async-dependencies.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/async-dependencies.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f50ad04d10a70b78", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/async-parallel.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/async-parallel.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ca1e1b649775b91", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/js-length-check-first.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/js-length-check-first.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4fc1de90442c5a3", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rendering-svg-precision.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rendering-svg-precision.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97137f602936ba76", "name": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rerender-move-effect-to-even", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rerender-move-effect-to-event.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1c3a19753d9b3b47", "name": "Agent authority lacks a verifier contract: .claude/skills/music/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/music/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d5cc68f68d92d770", "name": "Agent authority lacks a verifier contract: .claude/skills/music/references/api_reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/music/references/api_reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e0f035af831af975", "name": "Agent authority lacks a verifier contract: .claude/skills/music/references/installation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/music/references/installation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-addf1ec5fd6fe69d", "name": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/cli.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/cli.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5333911a8299b94d", "name": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/text-animations.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/text-animations.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-158e52086bceb75d", "name": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/scenes.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/scenes.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dfab911a0b94a04a", "name": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/config.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/config.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e725d2ab884fbd49", "name": "Multiple root agent instruction files without precedence", "shortDescription": {"text": "Multiple root agent instruction files without precedence"}, "fullDescription": {"text": "The repo has multiple top-level AI-coder instruction files. Without precedence rules, different agents may follow different policies."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-89021a0c26f5b99f", "name": "SkillSpector E1 (data-exfil) in .claude/skills/agents/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/SKILL.md"}, "fullDescription": {"text": "cURL\n\n```bash\ncurl -X POST \"https://api.elevenlabs.io/v1/convai/agents/create?enable_versioning=true\" \\\n  -H \"xi-api-key: $ELEVENLABS_API_KEY\" -H \"Content-Type: application/json\" \\\n  -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: agents\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-45d8cc26bfe528f6", "name": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/agent-configuration.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/agent-configuration.md"}, "fullDescription": {"text": "curl -X GET \"https://api.elevenlabs.io/v1/convai/agents\" -H \"xi-api-key: $ELEVENLABS_API_KEY\"\n```\n\n### SDK: Get Agent\n\n```python\nagent = client.conversational_ai.agents.get(agent_id=\"your-agent-id\")\n`\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: agents\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-caf0ab3cb9bdbd6d", "name": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/client-tools.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/client-tools.md"}, "fullDescription": {"text": "https://api.example.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: agents\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-a9a133528af2ac87", "name": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/installation.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/installation.md"}, "fullDescription": {"text": "cURL / REST API\n\nSet your API key as an environment variable:\n\n```bash\nexport ELEVENLABS_API_KEY=\"your-api-key\"\n```\n\nInclude in requests via the `xi-api-key` header:\n\n```bash\ncurl -X POST \"https://api\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: agents\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-d7c666c90b421549", "name": "SkillSpector RA2 (rogue-agent) in .claude/skills/agents/references/installation.md", "shortDescription": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/agents/references/installation.md"}, "fullDescription": {"text": "create and manage agents:\n\n```bash\nnpm install -g @elevenlabs/cli\n# or\npnpm add -g @elevenlabs/cli\n# or\nyarn global add @elevenlabs/cli\n```\n\nRequires Node.js 16.0.0 or higher.\n\n### Authentication\n\n```\n\nSkill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.\n\nSkill: agents\nRule: RA2  Category: rogue-agent\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-f469f5dc8eedf756", "name": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "fullDescription": {"text": "requests.post(\n        \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: ai-video-gen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-0f268f917cd8db8f", "name": "SkillSpector E2 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: ai-video-gen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-60525ca59de6ac36", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/SKILL.md"}, "fullDescription": {"text": "https://api.heygen.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-c588de12c9e6af3b", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/assets.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/assets.md"}, "fullDescription": {"text": "requests.post(\n            \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-78fd04cfaf7c74b2", "name": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/assets.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/assets.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: avatar-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-b74a940f314993f1", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "fullDescription": {"text": "https://api.heygen.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-5db1ff398a60cbb9", "name": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/avatars.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: avatar-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-e9391af054e477d8", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/dimensions.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/dimensions.md"}, "fullDescription": {"text": "curl\n\n```bash\n# Landscape 1080p\ncurl -X POST \"https://api.heygen.com/v2/video/generate\" \\\n  -H \"X-Api-Key: $HEYGEN_API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-41cdb11c0ceadd9f", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "fullDescription": {"text": "requests.post(\n            \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-768ef27a94a0ba37", "name": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: avatar-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-ddc60adb41a631c6", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/quota.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/quota.md"}, "fullDescription": {"text": "https://api.heygen.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-a0b739ded33479b5", "name": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/quota.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/quota.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: avatar-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-ca61c53e22a00663", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/remotion-integration.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/remotion-integration.md"}, "fullDescription": {"text": "fetch(\"https://api.heygen.com/v2/video/generate\", {\n    method: \"POST\"\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-6bf48736ea9d18f4", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "fullDescription": {"text": "requests.post(\n        f\"https://api.heygen.com/v2/template/{template_id}/generate\",\n        headers={\n            \"X-Api-Key\": os.environ[\"HEYGEN_API_KEY\"],\n            \"Content-Type\": \"application/j\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-3ab7056dae0cec6f", "name": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/templates.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: avatar-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-ef0921ae06456456", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "fullDescription": {"text": "requests.post(\n        \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-510298ca8a7d4cbc", "name": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: avatar-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-cf80320227675339", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-status.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-status.md"}, "fullDescription": {"text": "fetch(\n    \"https://api.heygen.com/v2/video/generate\",\n    {\n      method: \"POST\"\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-147f3b2d297b7494", "name": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/video-status.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/video-status.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: avatar-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-c7096c653671fb31", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/voices.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/voices.md"}, "fullDescription": {"text": "https://api.heygen.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-57147193429c0883", "name": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/voices.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/voices.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: avatar-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-6c748d5fe7344377", "name": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/webhooks.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/webhooks.md"}, "fullDescription": {"text": "fetch(\"https://api.heygen.com/v1/webhook/endpoint.add\", {\n    method: \"POST\"\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: avatar-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-a563a6e3837a7f35", "name": "SkillSpector RA2 (rogue-agent) in .claude/skills/avatar-video/references/avatars.md", "shortDescription": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/avatar-video/references/avatars.md"}, "fullDescription": {"text": "pList\n\nSkill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.\n\nSkill: avatar-video\nRule: RA2  Category: rogue-agent\nSeverity: MEDIUM  Confidence: 0.75\n\nRemediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.75}}, {"id": "scanner-0f9b2839abf9b565", "name": "SkillSpector TM1 (tool-misuse) in .claude/skills/avatar-video/SKILL.md", "shortDescription": {"text": "SkillSpector TM1 (tool-misuse) in .claude/skills/avatar-video/SKILL.md"}, "fullDescription": {"text": "DELETE /v2/videos/{video_id}`\n\nTool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).\n\nSkill: avatar-video\nRule: TM1  Category: tool-misuse\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-14b33b465807036c", "name": "SkillSpector LP3 (mcp-least-priv) in .claude/skills/bfl-api/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in .claude/skills/bfl-api/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: bfl-api\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-ff235b294b7d43ab", "name": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/SKILL.md"}, "fullDescription": {"text": "curl -X POST \"https://api.bfl.ai/v1/flux-2-pro\" \\\n  -H \"x-key: $BFL_API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\n    \"prompt\": \"Change the background to a sunset\",\n    \"input_image\": \"ht\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: bfl-api\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-bbcd33090433ee40", "name": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/code-examples/curl-examples.sh", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "fullDescription": {"text": "curl -s -X POST \"${BASE_URL}/v1/flux-2-pro\" \\\n  -H \"x-key: ${API_KEY}\" \\\n  -H \"Content-Type: application/json\" \\\n  -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: bfl-api\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-b351bd38e363d9e9", "name": "SkillSpector E2 (data-exfil) in .claude/skills/bfl-api/references/code-examples/python-client.py", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/bfl-api/references/code-examples/python-client.py"}, "fullDescription": {"text": "os.environ.get(\"BFL_API_KEY\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: bfl-api\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.70\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-b794d37239533263", "name": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/endpoints.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/endpoints.md"}, "fullDescription": {"text": "curl -X POST \"https://api.bfl.ai/v1/flux-2-pro\" \\\n  -H \"x-key: YOUR_API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\n    \"prompt\": \"A serene mountain landscape at golden hour\",\n    \"width\":\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: bfl-api\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-5eb35734beb91aa5", "name": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/polling-patterns.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/polling-patterns.md"}, "fullDescription": {"text": "requests.post(endpoint, headers=self.headers, json=\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: bfl-api\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-5f66758f8d9bfe8b", "name": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/rate-limiting.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/rate-limiting.md"}, "fullDescription": {"text": "requests.post(endpoint, json=\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: bfl-api\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-60aa147b62ca9963", "name": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/webhook-integration.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/webhook-integration.md"}, "fullDescription": {"text": "requests.post(\n            \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: bfl-api\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-7f0b47efb70c573d", "name": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/SKILL.md"}, "fullDescription": {"text": "curl -X POST \"https://api.heygen.com/v1/video_agent/generate\" \\\n  -H \"X-Api-Key: $HEYGEN_API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: create-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-0c345119256ff58d", "name": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/assets.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/assets.md"}, "fullDescription": {"text": "requests.post(\n            \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: create-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-90ff48811a834b03", "name": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/assets.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/assets.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: create-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-56bc8265fbcfee7e", "name": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/dimensions.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/dimensions.md"}, "fullDescription": {"text": "curl\n\n```bash\n# Landscape 1080p\ncurl -X POST \"https://api.heygen.com/v2/video/generate\" \\\n  -H \"X-Api-Key: $HEYGEN_API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: create-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-773a4f8de85a0b82", "name": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/quota.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/quota.md"}, "fullDescription": {"text": "https://api.heygen.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: create-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-906175a892e08b50", "name": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/quota.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/quota.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: create-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-55fc0060d9078207", "name": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "fullDescription": {"text": "requests.post(\n        \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: create-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-711262c1f6db71fd", "name": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/video-agent.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: create-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-e3e2e8c84bde58c9", "name": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-status.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-status.md"}, "fullDescription": {"text": "fetch(\n    \"https://api.heygen.com/v2/video/generate\",\n    {\n      method: \"POST\"\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: create-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-fa6e9e4f923a1e7c", "name": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/video-status.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/video-status.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: create-video\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-d90d0ea2efb0eeb2", "name": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/webhooks.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/webhooks.md"}, "fullDescription": {"text": "fetch(\"https://api.heygen.com/v1/webhook/endpoint.add\", {\n    method: \"POST\"\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: create-video\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-ae92756523b2c519", "name": "SkillSpector EA1 (excessive-agency) in .claude/skills/create-video/SKILL.md", "shortDescription": {"text": "SkillSpector EA1 (excessive-agency) in .claude/skills/create-video/SKILL.md"}, "fullDescription": {"text": "tools:*\n\nSkill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.\n\nSkill: create-video\nRule: EA1  Category: excessive-agency\nSeverity: MEDIUM  Confidence: 0.85\n\nRemediation: Restrict tool access to only the tools required for the skill's stated purpose. Use an explicit allowlist rather than granting blanket access."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.85}}, {"id": "scanner-86bd7067ac10abde", "name": "SkillSpector P6 (prompt-injection) in .claude/skills/create-video/references/prompt-examples.md", "shortDescription": {"text": "SkillSpector P6 (prompt-injection) in .claude/skills/create-video/references/prompt-examples.md"}, "fullDescription": {"text": "Output Prompt\n\nSkill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.\n\nSkill: create-video\nRule: P6  Category: prompt-injection\nSeverity: HIGH  Confidence: 0.85\n\nRemediation: Remove any instructions that reveal, print, or output system prompts or internal rules. System instructions should never be exposed to end users."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.85}}, {"id": "scanner-af234b36d2b3ffbc", "name": "SkillSpector TM1 (tool-misuse) in .claude/skills/create-video/SKILL.md", "shortDescription": {"text": "SkillSpector TM1 (tool-misuse) in .claude/skills/create-video/SKILL.md"}, "fullDescription": {"text": "DELETE /v2/videos/{video_id}`\n\nTool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).\n\nSkill: create-video\nRule: TM1  Category: tool-misuse\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-52309c1d72d8715d", "name": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "fullDescription": {"text": "requests.post(\n        \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: faceswap\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-604cfef72311531a", "name": "SkillSpector E2 (data-exfil) in .claude/skills/faceswap/SKILL.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: faceswap\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-85964c4afdbca854", "name": "SkillSpector RA1 (rogue-agent) in .claude/skills/ffmpeg/SKILL.md", "shortDescription": {"text": "SkillSpector RA1 (rogue-agent) in .claude/skills/ffmpeg/SKILL.md"}, "fullDescription": {"text": "Update this skill\n\nSkill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.\n\nSkill: ffmpeg\nRule: RA1  Category: rogue-agent\nSeverity: HIGH  Confidence: 0.85\n\nRemediation: Prevent the skill from modifying its own code, SKILL.md, or configuration files. Treat skill files as read-only at runtime."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.85}}, {"id": "scanner-d21184934e59c281", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/assets.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/assets.md"}, "fullDescription": {"text": "requests.post(\n            \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-96c5cfd6733d11bd", "name": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/assets.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/assets.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: heygen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-d1c80cfe7ee0d6cf", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/authentication.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/authentication.md"}, "fullDescription": {"text": "https://api.heygen.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-d06f82cdb3b90421", "name": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/authentication.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/authentication.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: heygen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-7081042c7567dc0a", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "fullDescription": {"text": "https://api.heygen.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-dcf0a8e29126a8b9", "name": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/avatars.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: heygen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-925bd942fa751f1f", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/dimensions.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/dimensions.md"}, "fullDescription": {"text": "curl\n\n```bash\n# Landscape 1080p\ncurl -X POST \"https://api.heygen.com/v2/video/generate\" \\\n  -H \"X-Api-Key: $HEYGEN_API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-a0a2258c1d2ece4f", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "fullDescription": {"text": "requests.post(\n            \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-c24a2b4d8c1abdf8", "name": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: heygen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-1db14256232189c2", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/quota.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/quota.md"}, "fullDescription": {"text": "https://api.heygen.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-b47000321a8ce600", "name": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/quota.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/quota.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: heygen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-2e014cbc71571754", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/remotion-integration.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/remotion-integration.md"}, "fullDescription": {"text": "fetch(\"https://api.heygen.com/v2/video/generate\", {\n    method: \"POST\"\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-5901dbf205169269", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "fullDescription": {"text": "requests.post(\n        f\"https://api.heygen.com/v2/template/{template_id}/generate\",\n        headers={\n            \"X-Api-Key\": os.environ[\"HEYGEN_API_KEY\"],\n            \"Content-Type\": \"application/j\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-e1c220710990a8c7", "name": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/templates.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: heygen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-22230a2a775ae989", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "fullDescription": {"text": "requests.post(\n        \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-b27e61f54644a84a", "name": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/video-agent.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: heygen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-04ce0266d7d3a6f0", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "fullDescription": {"text": "requests.post(\n        \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-56f155b3b09448ca", "name": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/video-generation.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: heygen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-2ee448bb4dc53679", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-status.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-status.md"}, "fullDescription": {"text": "fetch(\n    \"https://api.heygen.com/v2/video/generate\",\n    {\n      method: \"POST\"\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-f2503df547350481", "name": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/video-status.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/video-status.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: heygen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-31ce4b1b601a0f0c", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/voices.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/voices.md"}, "fullDescription": {"text": "https://api.heygen.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-46bb51f4e538f81d", "name": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/voices.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/voices.md"}, "fullDescription": {"text": "os.environ[\"HEYGEN_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: heygen\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-247ae11c9b052dda", "name": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/webhooks.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/webhooks.md"}, "fullDescription": {"text": "fetch(\"https://api.heygen.com/v1/webhook/endpoint.add\", {\n    method: \"POST\"\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: heygen\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-af1684e8770445cb", "name": "SkillSpector EA1 (excessive-agency) in .claude/skills/heygen/SKILL.md", "shortDescription": {"text": "SkillSpector EA1 (excessive-agency) in .claude/skills/heygen/SKILL.md"}, "fullDescription": {"text": "tools:*\n\nSkill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.\n\nSkill: heygen\nRule: EA1  Category: excessive-agency\nSeverity: MEDIUM  Confidence: 0.85\n\nRemediation: Restrict tool access to only the tools required for the skill's stated purpose. Use an explicit allowlist rather than granting blanket access."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.85}}, {"id": "scanner-d8c8b8618fbeb317", "name": "SkillSpector RA2 (rogue-agent) in .claude/skills/heygen/references/avatars.md", "shortDescription": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/heygen/references/avatars.md"}, "fullDescription": {"text": "pList\n\nSkill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.\n\nSkill: heygen\nRule: RA2  Category: rogue-agent\nSeverity: MEDIUM  Confidence: 0.75\n\nRemediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.75}}, {"id": "scanner-aa9bdc38ef504bbd", "name": "SkillSpector P6 (prompt-injection) in .claude/skills/heygen/references/prompt-examples.md", "shortDescription": {"text": "SkillSpector P6 (prompt-injection) in .claude/skills/heygen/references/prompt-examples.md"}, "fullDescription": {"text": "Output Prompt\n\nSkill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.\n\nSkill: heygen\nRule: P6  Category: prompt-injection\nSeverity: HIGH  Confidence: 0.85\n\nRemediation: Remove any instructions that reveal, print, or output system prompts or internal rules. System instructions should never be exposed to end users."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.85}}, {"id": "scanner-1737e89ac4dfd1a3", "name": "SkillSpector TM1 (tool-misuse) in .claude/skills/heygen/SKILL.md", "shortDescription": {"text": "SkillSpector TM1 (tool-misuse) in .claude/skills/heygen/SKILL.md"}, "fullDescription": {"text": "DELETE /v2/videos/{video_id}`\n\nTool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).\n\nSkill: heygen\nRule: TM1  Category: tool-misuse\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-9a64d348a618945e", "name": "SkillSpector PE3 (priv-esc) in .claude/skills/ltx2/SKILL.md", "shortDescription": {"text": "SkillSpector PE3 (priv-esc) in .claude/skills/ltx2/SKILL.md"}, "fullDescription": {"text": ".env\n\nCode accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.\n\nSkill: ltx2\nRule: PE3  Category: priv-esc\nSeverity: HIGH  Confidence: 0.60\n\nRemediation: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.6}}, {"id": "scanner-6b1da4c5acc1ab00", "name": "SkillSpector EA3 (excessive-agency) in .claude/skills/manimce-best-practices/LICENSE.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in .claude/skills/manimce-best-practices/LICENSE.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: manimce-best-practices\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-58d5de08b35bd2ac", "name": "SkillSpector AST5 (behavioral-ast) in .claude/skills/manimgl-best-practices/templates/3d_scene.py", "shortDescription": {"text": "SkillSpector AST5 (behavioral-ast) in .claude/skills/manimgl-best-practices/templates/3d_scene.py"}, "fullDescription": {"text": "os.system(f\"manimgl {__file__} ThreeDSceneTemplate\")\n\nos.system() and os exec-family calls run shell commands with the process's full privileges, enabling arbitrary command execution.\n\nSkill: manimgl-best-practices\nRule: AST5  Category: behavioral-ast\nSeverity: HIGH  Confidence: 0.60\n\nRemediation: Replace os.system() with subprocess.run(shell=False). Use explicit argument lists and validate all command inputs."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.6}}, {"id": "scanner-343714097e02ecb7", "name": "SkillSpector AST5 (behavioral-ast) in .claude/skills/manimgl-best-practices/templates/basic_scene.py", "shortDescription": {"text": "SkillSpector AST5 (behavioral-ast) in .claude/skills/manimgl-best-practices/templates/basic_scene.py"}, "fullDescription": {"text": "os.system(f\"manimgl {__file__} BasicSceneTemplate\")\n\nos.system() and os exec-family calls run shell commands with the process's full privileges, enabling arbitrary command execution.\n\nSkill: manimgl-best-practices\nRule: AST5  Category: behavioral-ast\nSeverity: HIGH  Confidence: 0.60\n\nRemediation: Replace os.system() with subprocess.run(shell=False). Use explicit argument lists and validate all command inputs."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.6}}, {"id": "scanner-2a5b52203a0db6f8", "name": "SkillSpector AST5 (behavioral-ast) in .claude/skills/manimgl-best-practices/templates/math_scene.py", "shortDescription": {"text": "SkillSpector AST5 (behavioral-ast) in .claude/skills/manimgl-best-practices/templates/math_scene.py"}, "fullDescription": {"text": "os.system(f\"manimgl {__file__} MathSceneTemplate\")\n\nos.system() and os exec-family calls run shell commands with the process's full privileges, enabling arbitrary command execution.\n\nSkill: manimgl-best-practices\nRule: AST5  Category: behavioral-ast\nSeverity: HIGH  Confidence: 0.60\n\nRemediation: Replace os.system() with subprocess.run(shell=False). Use explicit argument lists and validate all command inputs."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.6}}, {"id": "scanner-8b149611af4b72ee", "name": "SkillSpector LP3 (mcp-least-priv) in .claude/skills/manimgl-best-practices/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in .claude/skills/manimgl-best-practices/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: manimgl-best-practices\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-f04cfb44390325a1", "name": "SkillSpector E1 (data-exfil) in .claude/skills/music/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/music/SKILL.md"}, "fullDescription": {"text": "cURL\n\n```bash\ncurl -X POST \"https://api.elevenlabs.io/v1/music\" \\\n  -H \"xi-api-key: $ELEVENLABS_API_KEY\" -H \"Content-Type: application/json\" \\\n  -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: music\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-3da41981bc704328", "name": "SkillSpector E1 (data-exfil) in .claude/skills/music/references/api_reference.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/music/references/api_reference.md"}, "fullDescription": {"text": "https://api.elevenlabs.io/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: music\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-43e7c2b11624291b", "name": "SkillSpector E1 (data-exfil) in .claude/skills/music/references/installation.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/music/references/installation.md"}, "fullDescription": {"text": "cURL / REST API\n\nSet your API key as an environment variable:\n\n```bash\nexport ELEVENLABS_API_KEY=\"your-api-key\"\n```\n\nInclude in requests via the `xi-api-key` header:\n\n```bash\ncurl -X POST \"https://api\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: music\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-825a77aa6116149c", "name": "SkillSpector RA1 (rogue-agent) in .claude/skills/playwright-recording/SKILL.md", "shortDescription": {"text": "SkillSpector RA1 (rogue-agent) in .claude/skills/playwright-recording/SKILL.md"}, "fullDescription": {"text": "Update this skill\n\nSkill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.\n\nSkill: playwright-recording\nRule: RA1  Category: rogue-agent\nSeverity: HIGH  Confidence: 0.85\n\nRemediation: Prevent the skill from modifying its own code, SKILL.md, or configuration files. Treat skill files as read-only at runtime."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.85}}, {"id": "scanner-c04ca308f626465c", "name": "SkillSpector RA2 (rogue-agent) in .claude/skills/playwright-recording/SKILL.md", "shortDescription": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/playwright-recording/SKILL.md"}, "fullDescription": {"text": "pList\n\nSkill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.\n\nSkill: playwright-recording\nRule: RA2  Category: rogue-agent\nSeverity: MEDIUM  Confidence: 0.75\n\nRemediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.75}}, {"id": "scanner-fad3bdb1b1465f4e", "name": "SkillSpector RA1 (rogue-agent) in .claude/skills/remotion/SKILL.md", "shortDescription": {"text": "SkillSpector RA1 (rogue-agent) in .claude/skills/remotion/SKILL.md"}, "fullDescription": {"text": "Update this skill\n\nSkill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.\n\nSkill: remotion\nRule: RA1  Category: rogue-agent\nSeverity: HIGH  Confidence: 0.85\n\nRemediation: Prevent the skill from modifying its own code, SKILL.md, or configuration files. Treat skill files as read-only at runtime."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.85}}, {"id": "scanner-e52085340d206f57", "name": "SkillSpector E1 (data-exfil) in .claude/skills/remotion-best-practices/rules/compositions.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/remotion-best-practices/rules/compositions.md"}, "fullDescription": {"text": "https://api.example.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: remotion-best-practices\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-d9c7d899125d9950", "name": "SkillSpector E1 (data-exfil) in .claude/skills/remotion-best-practices/rules/voiceover.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/remotion-best-practices/rules/voiceover.md"}, "fullDescription": {"text": "https://api.elevenlabs.io/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: remotion-best-practices\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-682c38d7f540f27f", "name": "SkillSpector EA4 (excessive-agency) in .claude/skills/remotion-best-practices/rules/gifs.md", "shortDescription": {"text": "SkillSpector EA4 (excessive-agency) in .claude/skills/remotion-best-practices/rules/gifs.md"}, "fullDescription": {"text": "Loop indefinitely\n\nSkill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.\n\nSkill: remotion-best-practices\nRule: EA4  Category: excessive-agency\nSeverity: MEDIUM  Confidence: 0.75\n\nRemediation: Set explicit rate limits, timeouts, and resource quotas for API calls, file operations, and compute. Implement circuit breakers for runaway loops."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.75}}, {"id": "scanner-0e9d48b04c6ef977", "name": "SkillSpector P2 (prompt-injection) in .claude/skills/remotion-best-practices/rules/maps.md", "shortDescription": {"text": "SkillSpector P2 (prompt-injection) in .claude/skills/remotion-best-practices/rules/maps.md"}, "fullDescription": {"text": "\u2060\n\nHidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.\n\nSkill: remotion-best-practices\nRule: P2  Category: prompt-injection\nSeverity: HIGH  Confidence: 0.60\n\nRemediation: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.6}}, {"id": "scanner-e59e8ba1ae5cd9af", "name": "SkillSpector E1 (data-exfil) in .claude/skills/setup-api-key/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/setup-api-key/SKILL.md"}, "fullDescription": {"text": "https://api.elevenlabs.io/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: setup-api-key\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-15aa816beacf4010", "name": "SkillSpector E1 (data-exfil) in .claude/skills/sound-effects/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/sound-effects/SKILL.md"}, "fullDescription": {"text": "cURL\n\n```bash\ncurl -X POST \"https://api.elevenlabs.io/v1/sound-generation\" \\\n  -H \"xi-api-key: $ELEVENLABS_API_KEY\" -H \"Content-Type: application/json\" \\\n  -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: sound-effects\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-407618dcfc99c1bf", "name": "SkillSpector E1 (data-exfil) in .claude/skills/sound-effects/references/installation.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/sound-effects/references/installation.md"}, "fullDescription": {"text": "cURL / REST API\n\nSet your API key as an environment variable:\n\n```bash\nexport ELEVENLABS_API_KEY=\"your-api-key\"\n```\n\nInclude in requests via the `xi-api-key` header:\n\n```bash\ncurl -X POST \"https://api\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: sound-effects\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-e637c415447867e4", "name": "Run SkillSpector's LLM-backed analysis in your own pipeline", "shortDescription": {"text": "Run SkillSpector's LLM-backed analysis in your own pipeline"}, "fullDescription": {"text": "Repobility ran SkillSpector's static rules server-side. The deeper LLM-backed analyzers \u2014 tool-poisoning (TP*), semantic security discovery (SSD*), developer-intent mismatch (SDI*) \u2014 are meant to run on YOUR machine with YOUR model; repobility never sends your code to an LLM. Recipe:\n\n# 1. Install SkillSpector in your own isolated env\npipx install \"skillspector @ git+https://github.com/NVIDIA/SkillSpector.git\"\n\n# 2. Point it at YOUR LLM pipeline (pick one) - your code stays on your machine\nexport SKILLSPECTOR_PROVIDER=anthropic && export ANTHROPIC_API_KEY=sk-ant-...\n# export SKILLSPECTOR_PROVIDER=openai   && export OPENAI_API_KEY=sk-...\n# export SKILLSPECTOR_PROVIDER=openai OPENAI_API_KEY=ollama OPENAI_BASE_URL=http://localhost:11434/v1 SKILLSPECTOR_MODEL=llama3.1:8b\n# export SKILLSPECTOR_PROVIDER=nv_build && export NVIDIA_INFERENCE_KEY=nvapi-...\n\n# 3. Run the LLM-backed scan per skill (omit --no-llm to enable the LLM analyzers)\nskillspector scan .claude/skills/acestep --format sarif -"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0e4f9802d7ff470d", "name": "Insecure pattern 'dangerous_innerhtml' in .claude/skills/vercel-react-best-practices/AGENTS.md:2281", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in .claude/skills/vercel-react-best-practices/AGENTS.md:2281"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3cc9136e029761f1", "name": "Very large file: tools/video/video_compose.py (2202 lines)", "shortDescription": {"text": "Very large file: tools/video/video_compose.py (2202 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "28 tests / 272 src (ratio 0.10)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 39 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing ci. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-169c58be924aaaf4", "name": "Network/subprocess call without timeout or try/except \u2014 render_demo.py:63", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 render_demo.py:63"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c273db040f5bd8d0", "name": "Legacy-named symbol `_link_or_copy` in tests/tools/test_clip_cache.py:19", "shortDescription": {"text": "Legacy-named symbol `_link_or_copy` in tests/tools/test_clip_cache.py:19"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-446454bce21b04a8", "name": "Commented-code block (5 lines) in remotion-composer/src/components/EndTag.tsx:16", "shortDescription": {"text": "Commented-code block (5 lines) in remotion-composer/src/components/EndTag.tsx:16"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1c74d7bad7fd9fb6", "name": "Commented-code block (5 lines) in lib/scoring.py:495", "shortDescription": {"text": "Commented-code block (5 lines) in lib/scoring.py:495"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-58a655c85ee4a606", "name": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/video-understand/scripts/understand_video.py:67", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/video-understand/scripts/understand_video.py:67"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b221348940faa0d", "name": "Commented-code block (7 lines) in .claude/skills/manimgl-best-practices/templates/3d_scene.py:179", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/skills/manimgl-best-practices/templates/3d_scene.py:179"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b596f8830a6608d2", "name": "Legacy-named symbol `inp_copy` in .claude/skills/manimgl-best-practices/examples/mlp_relu_visualization.py:160", "shortDescription": {"text": "Legacy-named symbol `inp_copy` in .claude/skills/manimgl-best-practices/examples/mlp_relu_visualization.py:160"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf843c0f30e15cb0", "name": "Legacy-named symbol `text_copy` in .claude/skills/manimgl-best-practices/examples/llm_prediction_pipeline.py:97", "shortDescription": {"text": "Legacy-named symbol `text_copy` in .claude/skills/manimgl-best-practices/examples/llm_prediction_pipeline.py:97"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86e85cb4c47be014", "name": "Legacy-named symbol `text_copy` in .claude/skills/manimgl-best-practices/examples/autoregressive_flow.py:77", "shortDescription": {"text": "Legacy-named symbol `text_copy` in .claude/skills/manimgl-best-practices/examples/autoregressive_flow.py:77"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a3961e4041c00a8e", "name": "Network/subprocess call without timeout or try/except \u2014 tools/base_tool.py:318", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/base_tool.py:318"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f8af1b9a972fc32f", "name": "Commented-code block (6 lines) in tools/tool_registry.py:356", "shortDescription": {"text": "Commented-code block (6 lines) in tools/tool_registry.py:356"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c9192f608a9442ed", "name": "Commented-code block (8 lines) in tools/audio/audio_mixer.py:537", "shortDescription": {"text": "Commented-code block (8 lines) in tools/audio/audio_mixer.py:537"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b19f3863856eb054", "name": "Network/subprocess call without timeout or try/except \u2014 tools/audio/piper_tts.py:127", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/audio/piper_tts.py:127"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a62407b5c85fd43", "name": "Legacy-named symbol `eleven_multilingual_v2` in tools/audio/elevenlabs_tts.py:78", "shortDescription": {"text": "Legacy-named symbol `eleven_multilingual_v2` in tools/audio/elevenlabs_tts.py:78"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eaa57c62847127bc", "name": "Network/subprocess call without timeout or try/except \u2014 tools/audio/elevenlabs_tts.py:149", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/audio/elevenlabs_tts.py:149"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90b5a04be7fa0be1", "name": "Legacy-named symbol `eleven_multilingual_v2` in tools/audio/tts_selector.py:50", "shortDescription": {"text": "Legacy-named symbol `eleven_multilingual_v2` in tools/audio/tts_selector.py:50"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0764f302d4d42a2d", "name": "Commented-code block (8 lines) in tools/graphics/recraft_image.py:147", "shortDescription": {"text": "Commented-code block (8 lines) in tools/graphics/recraft_image.py:147"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3dc2c6db4b746998", "name": "Network/subprocess call without timeout or try/except \u2014 tools/character/character_animation.py:104", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/character/character_animation.py:104"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce1eb7ac2e5f0498", "name": "Commented-code block (5 lines) in tools/video/corpus_builder.py:305", "shortDescription": {"text": "Commented-code block (5 lines) in tools/video/corpus_builder.py:305"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8177bb2e5ee54340", "name": "Legacy-named symbol `kling_v2` in tools/video/_shared.py:22", "shortDescription": {"text": "Legacy-named symbol `kling_v2` in tools/video/_shared.py:22"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0587ee75d7c3376d", "name": "Commented-code block (5 lines) in tools/video/hyperframes_compose.py:223", "shortDescription": {"text": "Commented-code block (5 lines) in tools/video/hyperframes_compose.py:223"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-890b3088219397ee", "name": "Legacy-named symbol `_link_or_copy` in tools/video/clip_cache.py:354", "shortDescription": {"text": "Legacy-named symbol `_link_or_copy` in tools/video/clip_cache.py:354"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3268ef55a580182", "name": "Commented-code block (7 lines) in tools/video/video_compose.py:451", "shortDescription": {"text": "Commented-code block (7 lines) in tools/video/video_compose.py:451"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6258cdf0835040ce", "name": "Commented-code block (7 lines) in tools/video/stock_sources/archive_org.py:65", "shortDescription": {"text": "Commented-code block (7 lines) in tools/video/stock_sources/archive_org.py:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d785c17821858dcb", "name": "22 env vars used in code but missing from .env.example", "shortDescription": {"text": "22 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `APPDATA`, `BFL_API_KEY`, `COVERR_API_KEY`, `DISPLAY`, `FAL_AI_API_KEY`, `FREESOUND_API_KEY`, `GEMINI_API_KEY`, `GOOGLE_APPLICATION_CREDENTIALS` + 14 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nlib/scoring.py:weighted_score, lib/scoring.py:weighted_score\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n.claude/skills/manimgl-best-practices/templates/basic_scene.py:construct, .claude/skills/manimgl-best-practices/templates/basic_scene.py:construct, .claude/skills/manimgl-best-practices/templates/basic_scene.py:construct\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n.claude/skills/manimgl-best-practices/templates/3d_scene.py:construct, .claude/skills/manimgl-best-practices/templates/3d_scene.py:construct, .claude/skills/manimgl-best-practices/templates/3d_scene.py:construct, .claude/skills/manimgl-best-practices/templates/3d_scene.py:construct\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0027e313ade46c8f", "name": "Near-duplicate function bodies in 7 places", "shortDescription": {"text": "Near-duplicate function bodies in 7 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n.claude/skills/manimgl-best-practices/templates/math_scene.py:construct, .claude/skills/manimgl-best-practices/templates/math_scene.py:construct, .claude/skills/manimgl-best-practices/templates/math_scene.py:construct, .claude/skills/manimgl-best-practices/templates/math_scene.py:construct\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6297377883dd7783", "name": "Near-duplicate function bodies in 13 places", "shortDescription": {"text": "Near-duplicate function bodies in 13 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n.claude/skills/manimgl-best-practices/examples/value_matrix_transform.py:value_to_color, .claude/skills/manimgl-best-practices/examples/token_embeddings_flow.py:value_to_color, .claude/skills/manimgl-best-practices/examples/token_to_embedding.py:value_to_color, .claude/skills/manimgl-best-practices/examples/attention_scenes.py:value_to_color\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n.claude/skills/manimgl-best-practices/examples/blocks_3d.py:set_time, .claude/skills/manimgl-best-practices/examples/block_collision_basic.py:set_time, .claude/skills/manimgl-best-practices/examples/elastic_collision_vectors.py:set_time, .claude/skills/manimgl-best-practices/examples/collision_phase_space.py:set_time\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/30731"}, "properties": {"repository": "calesthio/OpenMontage", "repoUrl": "https://github.com/calesthio/OpenMontage.git", "branch": "main"}, "results": [{"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 469010, "scanner": "repobility-ast-engine", "fingerprint": "1abfdff572ea48ebb3834087d6424f9a912f66b1cb52be0fe293db4233219844", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1abfdff572ea48ebb3834087d6424f9a912f66b1cb52be0fe293db4233219844"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimce-best-practices/examples/attention/helpers.py"}, "region": {"startLine": 302}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 469008, "scanner": "repobility-ast-engine", "fingerprint": "e6eb3cd47add6c1f0e5c90b14a7c536852e0b90340c4db8274ea995e9fc1da4e", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e6eb3cd47add6c1f0e5c90b14a7c536852e0b90340c4db8274ea995e9fc1da4e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/neural_network_basic.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 469006, "scanner": "repobility-ast-engine", "fingerprint": "568a1d0691bcec3b48320960c346f6e99f1eefc9e5f3688cfe1c0d55d420c049", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|568a1d0691bcec3b48320960c346f6e99f1eefc9e5f3688cfe1c0d55d420c049"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/collision_phase_space.py"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 469002, "scanner": "repobility-ast-engine", "fingerprint": "1cc8ed2f739b56a2e2a34bd64753c94fffd4d283d1442849ff1c1ec8af1f131d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1cc8ed2f739b56a2e2a34bd64753c94fffd4d283d1442849ff1c1ec8af1f131d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/elastic_collision_vectors.py"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 469001, "scanner": "repobility-ast-engine", "fingerprint": "bb4586779c5481beafc058753eb88416623b748bc5e4d7f5a10cb08b052c0459", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bb4586779c5481beafc058753eb88416623b748bc5e4d7f5a10cb08b052c0459"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/block_collision_basic.py"}, "region": {"startLine": 23}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `play_time_forward` (list): `def play_time_forward(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 469000, "scanner": "repobility-ast-engine", "fingerprint": "19fcaf570839cd8bc4821c67406a36d1e97cc97838c40cbf66da5a12eb89efde", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|19fcaf570839cd8bc4821c67406a36d1e97cc97838c40cbf66da5a12eb89efde"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/complex_s_plane.py"}, "region": {"startLine": 181}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `get_half_cube` (list): `def get_half_cube(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 468998, "scanner": "repobility-ast-engine", "fingerprint": "88ed6810962c51f092b09949de1c3680b82fd304deccab304e10b9b0106ce693", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|88ed6810962c51f092b09949de1c3680b82fd304deccab304e10b9b0106ce693"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/hexagon_cube_correspondence.py"}, "region": {"startLine": 68}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 468997, "scanner": "repobility-ast-engine", "fingerprint": "88f520175761e9697743bae27a683e374e90a7b565953c1592c518c485dd32d2", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|88f520175761e9697743bae27a683e374e90a7b565953c1592c518c485dd32d2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/blocks_3d.py"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468996, "scanner": "repobility-ast-engine", "fingerprint": "0e7e4cc6aaba9df36ddb7c66ed7bb6e4d7cc316e559f065d93890d28093eb9db", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0e7e4cc6aaba9df36ddb7c66ed7bb6e4d7cc316e559f065d93890d28093eb9db"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/scene_detect.py"}, "region": {"startLine": 240}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468995, "scanner": "repobility-ast-engine", "fingerprint": "1ed84b70887727fccb7faff0ad1a34e205aeb65cfe77ae32c69ca57ee1b748d2", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1ed84b70887727fccb7faff0ad1a34e205aeb65cfe77ae32c69ca57ee1b748d2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 495}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468994, "scanner": "repobility-ast-engine", "fingerprint": "04207269e6067826d135ad7086f41e899babab416d1d7c4e87e723029d719ef5", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|04207269e6067826d135ad7086f41e899babab416d1d7c4e87e723029d719ef5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 519}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468993, "scanner": "repobility-ast-engine", "fingerprint": "cafbf6a22a708832778e0c9c4bb5f0d9b092074e1a9bd1e026dd6b570f9c1434", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cafbf6a22a708832778e0c9c4bb5f0d9b092074e1a9bd1e026dd6b570f9c1434"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 471}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468992, "scanner": "repobility-ast-engine", "fingerprint": "fb6fee8945ad6c997a02cedbb30975a1b006d59a0980276d34614d800074d326", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|fb6fee8945ad6c997a02cedbb30975a1b006d59a0980276d34614d800074d326"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 437}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468991, "scanner": "repobility-ast-engine", "fingerprint": "9f3b14f8d6dc75b50ee9f6b70fd71a801ca43de7224b4d78dbb182a2705f642d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9f3b14f8d6dc75b50ee9f6b70fd71a801ca43de7224b4d78dbb182a2705f642d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 396}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468990, "scanner": "repobility-ast-engine", "fingerprint": "71be6b49e5900c5f40f2a11eae79a9de739cd6caa2e98d590f6bcafbaff57486", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|71be6b49e5900c5f40f2a11eae79a9de739cd6caa2e98d590f6bcafbaff57486"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 362}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468989, "scanner": "repobility-ast-engine", "fingerprint": "489f757a00493e3fb8198e56ffb59e8b760a999ea16c1f6c8fad776d70ccd7c7", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|489f757a00493e3fb8198e56ffb59e8b760a999ea16c1f6c8fad776d70ccd7c7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 323}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468988, "scanner": "repobility-ast-engine", "fingerprint": "2764dac18d6a7fa2bce64c7ca52506f414f0d0e8ddb2f80f23d9231ba4477485", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2764dac18d6a7fa2bce64c7ca52506f414f0d0e8ddb2f80f23d9231ba4477485"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 298}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468987, "scanner": "repobility-ast-engine", "fingerprint": "c0f60d5d25c46c6bca52fae045f8f9d1c583d9ba4e55e7d042284c06e9f75c25", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c0f60d5d25c46c6bca52fae045f8f9d1c583d9ba4e55e7d042284c06e9f75c25"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 254}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468986, "scanner": "repobility-ast-engine", "fingerprint": "0fd08cfe2acebcb2b2f26692349b0d1d4e23f7a005b52c479c6f712dc815c509", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0fd08cfe2acebcb2b2f26692349b0d1d4e23f7a005b52c479c6f712dc815c509"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 237}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468984, "scanner": "repobility-ast-engine", "fingerprint": "16b333f3e4825237ae6b2ea7fcffef0a351880508c6b413b9ed59469826ddbc7", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|16b333f3e4825237ae6b2ea7fcffef0a351880508c6b413b9ed59469826ddbc7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/graphics/code_snippet.py"}, "region": {"startLine": 149}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468983, "scanner": "repobility-ast-engine", "fingerprint": "470c6455bd62f3479637f07a47b60fd63dce6ae378e429f0fc0127fb431fb6ee", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|470c6455bd62f3479637f07a47b60fd63dce6ae378e429f0fc0127fb431fb6ee"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/character/character_animation.py"}, "region": {"startLine": 861}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468982, "scanner": "repobility-ast-engine", "fingerprint": "5495c27e0be0b7d27eee35c940c6992dfc438590df3a3ac0cd8d326bfb80158e", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5495c27e0be0b7d27eee35c940c6992dfc438590df3a3ac0cd8d326bfb80158e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/video_compose.py"}, "region": {"startLine": 1845}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468981, "scanner": "repobility-ast-engine", "fingerprint": "318586b97207982343c3b2f94f9784627949db9d519c73885c4cf0a09d4c12a3", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|318586b97207982343c3b2f94f9784627949db9d519c73885c4cf0a09d4c12a3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/video_compose.py"}, "region": {"startLine": 1155}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468979, "scanner": "repobility-ast-engine", "fingerprint": "7a2265583546c9842ce2a495accfa25eff605a8ec7af5b82a5c1947465674299", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7a2265583546c9842ce2a495accfa25eff605a8ec7af5b82a5c1947465674299"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/corpus_builder.py"}, "region": {"startLine": 475}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468978, "scanner": "repobility-ast-engine", "fingerprint": "f407a781a782638687a4cd204165cfb12979b566c971db14f6aab540b3b55bc8", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f407a781a782638687a4cd204165cfb12979b566c971db14f6aab540b3b55bc8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/corpus_builder.py"}, "region": {"startLine": 222}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468977, "scanner": "repobility-ast-engine", "fingerprint": "342d4a2d82fc541e64d87e1c864adec2380c0b1bcb526032eb7b56be43412933", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|342d4a2d82fc541e64d87e1c864adec2380c0b1bcb526032eb7b56be43412933"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/green_screen_processor.py"}, "region": {"startLine": 504}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468976, "scanner": "repobility-ast-engine", "fingerprint": "f823b4109a416f5ec5215fbfed798deb28fe430778b090591475d9569a97e9d9", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f823b4109a416f5ec5215fbfed798deb28fe430778b090591475d9569a97e9d9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/green_screen_processor.py"}, "region": {"startLine": 273}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468975, "scanner": "repobility-ast-engine", "fingerprint": "f256b0f2f86bff51f2f0095cb1a893c53aa3b6ba5add708b03e72ebebc653b51", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f256b0f2f86bff51f2f0095cb1a893c53aa3b6ba5add708b03e72ebebc653b51"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/green_screen_processor.py"}, "region": {"startLine": 564}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468974, "scanner": "repobility-ast-engine", "fingerprint": "1b66e57a3401a0520a31725fe9366c9912175ad7d6c5629d4d44bbc0a2e53485", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1b66e57a3401a0520a31725fe9366c9912175ad7d6c5629d4d44bbc0a2e53485"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/green_screen_processor.py"}, "region": {"startLine": 360}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468973, "scanner": "repobility-ast-engine", "fingerprint": "8e40d3d64cbf4e15f76100b279b402fd4ebc26f993c0737100cb0cf2610a4a5e", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8e40d3d64cbf4e15f76100b279b402fd4ebc26f993c0737100cb0cf2610a4a5e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/silence_cutter.py"}, "region": {"startLine": 234}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468972, "scanner": "repobility-ast-engine", "fingerprint": "48d1dc949f8959456ea4027ec9bedd0411e69198b8296bf7022fe30edccbf75a", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|48d1dc949f8959456ea4027ec9bedd0411e69198b8296bf7022fe30edccbf75a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/direct_clip_search.py"}, "region": {"startLine": 213}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 468971, "scanner": "repobility-ast-engine", "fingerprint": "5d8a118962ffe10b7f01ba74b0a7da68d138374326a6389ae2ccc73281228a4f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5d8a118962ffe10b7f01ba74b0a7da68d138374326a6389ae2ccc73281228a4f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimce-best-practices/examples/attention/helpers.py"}, "region": {"startLine": 302}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 468969, "scanner": "repobility-ast-engine", "fingerprint": "ee8fd328f4b1bc2890592c6dfa160e07bedd0291a545efa493f1ae849fe0f304", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ee8fd328f4b1bc2890592c6dfa160e07bedd0291a545efa493f1ae849fe0f304"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/neural_network_basic.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 468967, "scanner": "repobility-ast-engine", "fingerprint": "3f77479415c4311b554b77623e4a39977aaf19aecb127580e51d89106a23cc96", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3f77479415c4311b554b77623e4a39977aaf19aecb127580e51d89106a23cc96"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/collision_phase_space.py"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 468963, "scanner": "repobility-ast-engine", "fingerprint": "14a800817841c07a3c33c26b3dfaeb303cebe3188fb41ceee7507e68d2f6d8a9", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|14a800817841c07a3c33c26b3dfaeb303cebe3188fb41ceee7507e68d2f6d8a9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/elastic_collision_vectors.py"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 468962, "scanner": "repobility-ast-engine", "fingerprint": "4139c6e1db462093eedf1536c334d9d8aeef26c20a16a9118dd34a27011231a8", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4139c6e1db462093eedf1536c334d9d8aeef26c20a16a9118dd34a27011231a8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/block_collision_basic.py"}, "region": {"startLine": 23}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `play_time_forward` (list): `def play_time_forward(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 468961, "scanner": "repobility-ast-engine", "fingerprint": "cf0e4fdb7a54476fba9f39ecfa17ef965f91f38df0c5da976f7af5318d27eaa6", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cf0e4fdb7a54476fba9f39ecfa17ef965f91f38df0c5da976f7af5318d27eaa6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/complex_s_plane.py"}, "region": {"startLine": 181}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `get_half_cube` (list): `def get_half_cube(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 468943, "scanner": "repobility-ast-engine", "fingerprint": "0951ee1dd3e8b38ae3dc79ea8ddd99898b292a1148e6b0e78bfa708e052c4abb", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0951ee1dd3e8b38ae3dc79ea8ddd99898b292a1148e6b0e78bfa708e052c4abb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/hexagon_cube_correspondence.py"}, "region": {"startLine": 68}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 468939, "scanner": "repobility-ast-engine", "fingerprint": "cc1ac38b4429005f734ad076b5ce87365fb077242b365e906d52444ce78d7cff", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cc1ac38b4429005f734ad076b5ce87365fb077242b365e906d52444ce78d7cff"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/blocks_3d.py"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468928, "scanner": "repobility-ast-engine", "fingerprint": "274a93c83ddf63ad3617620a1702473c016c63c07344add6c42c68a711c66df4", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|274a93c83ddf63ad3617620a1702473c016c63c07344add6c42c68a711c66df4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/scoring.py"}, "region": {"startLine": 418}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468927, "scanner": "repobility-ast-engine", "fingerprint": "83eb420929872b9cbc63dd008763dd991a1c2ae744dabbaff4998f28e0e067b2", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|83eb420929872b9cbc63dd008763dd991a1c2ae744dabbaff4998f28e0e067b2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/source_media_review.py"}, "region": {"startLine": 184}}}]}, {"ruleId": "JRN012", "level": "warning", "message": {"text": "Runtime environment contract is missing referenced variables"}, "properties": {"repobilityId": 468926, "scanner": "repobility-journey-contract", "fingerprint": "519dc050a73cc10ec676ca7dfb6ae2da05e1abb785125c8dc2c7f4ee340d1803", "category": "quality", "severity": "medium", "confidence": 0.72, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source code references runtime environment variables that are absent from env templates or deployment docs.", "evidence": {"rule_id": "JRN012", "scanner": "repobility-journey-contract", "references": ["https://repobility.com/library/authorization/"], "correlation_key": "fp|519dc050a73cc10ec676ca7dfb6ae2da05e1abb785125c8dc2c7f4ee340d1803", "missing_env_vars": ["APPDATA", "BFL_API_KEY", "COVERR_API_KEY", "DISPLAY", "FAL_AI_API_KEY", "FREESOUND_API_KEY", "GEMINI_API_KEY", "GOOGLE_APPLICATION_CREDENTIALS", "HIGGSFIELD_API_KEY", "HIGGSFIELD_API_SECRET", "HIGGSFIELD_KEY", "LOCALAPPDATA", "NARA_API_KEY", "OPENMONTAGE_CACHE_DIR", "OPENMONTAGE_CACHE_MAX_GB", "POND5_API_KEY", "PROGRAMFILES", "REMOTION_MAPBOX_TOKEN", "REPLICATE_API_TOKEN", "RUNWAYML_API_SECRET", "SADTALKER_PATH", "VIDEVO_API_KEY", "WAV2LIP_PATH"], "documented_env_vars": ["AGENT_GUIDE", "ARCHITECTURE", "BANANA", "BLIP", "CLAUDE", "CLIP", "CODEX", "COPILOT", "CRISPR", "CURSOR", "DALL", "DOUBAO_SPEECH_API_KEY", "DOUBAO_SPEECH_VOICE_TYPE", "ELEVENLABS_API_KEY", "ERR_INVALID_ARG_TYPE", "ESRGAN", "FAL_KEY", "FF0000", "FLUX", "FROM", "GFPGAN", "GOOGLE_API_KEY", "GSAP", "HEYGEN_API_KEY", "HF_TOKEN", "HTML", "JSON", "LAST", "LICENSE", "MODAL_LTX2_ENDPOINT_URL", "NASA", "OPENAI_API_KEY", "PEXELS_API_KEY", "PIXABAY_API_KEY", "PROJECT_CONTEXT", "PROMPT_GALLERY", "PROVIDERS", "RUNWAY_API_KEY", "SIGNAL", "SUNO_API_KEY", "TOMORROW", "UNSPLASH_ACCESS_KEY", "VIDEO_GEN_LOCAL_ENABLED", "VIDEO_GEN_LOCAL_MODEL", "VOID", "XAI_API_KEY", "YAML"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/bfl-api/references/code-examples/python-client.py"}, "region": {"startLine": 456}}}]}, {"ruleId": "JRN010", "level": "warning", "message": {"text": "Critical user action appears to be handled by a no-op or placeholder"}, "properties": {"repobilityId": 468925, "scanner": "repobility-journey-contract", "fingerprint": "e478b6da2ed5524463b649f60e8e635a13be0fa5034bc0ae87b0b2ad66ec6585", "category": "quality", "severity": "medium", "confidence": 0.74, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Action wording appears near alert/console/not-implemented placeholder behavior without a nearby backend call.", "evidence": {"rule_id": "JRN010", "scanner": "repobility-journey-contract", "references": ["https://repobility.com/library/authorization/"], "correlation_key": "fp|e478b6da2ed5524463b649f60e8e635a13be0fa5034bc0ae87b0b2ad66ec6585"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/typescript-client.ts"}, "region": {"startLine": 469}}}]}, {"ruleId": "JRN010", "level": "warning", "message": {"text": "Critical user action appears to be handled by a no-op or placeholder"}, "properties": {"repobilityId": 468924, "scanner": "repobility-journey-contract", "fingerprint": "8be1f241cdbe17375e5d38772a59cf6e13c4058b5476d9e80061cce594d0d9d0", "category": "quality", "severity": "medium", "confidence": 0.74, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Action wording appears near alert/console/not-implemented placeholder behavior without a nearby backend call.", "evidence": {"rule_id": "JRN010", "scanner": "repobility-journey-contract", "references": ["https://repobility.com/library/authorization/"], "correlation_key": "fp|8be1f241cdbe17375e5d38772a59cf6e13c4058b5476d9e80061cce594d0d9d0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/beautiful-mermaid/scripts/create-html.ts"}, "region": {"startLine": 77}}}]}, {"ruleId": "JRN010", "level": "warning", "message": {"text": "Critical user action appears to be handled by a no-op or placeholder"}, "properties": {"repobilityId": 468923, "scanner": "repobility-journey-contract", "fingerprint": "02bff7eb2b666a5393c708e11f2bb36c6028a260ca91fcfb00426a00dfb43feb", "category": "quality", "severity": "medium", "confidence": 0.74, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Action wording appears near alert/console/not-implemented placeholder behavior without a nearby backend call.", "evidence": {"rule_id": "JRN010", "scanner": "repobility-journey-contract", "references": ["https://repobility.com/library/authorization/"], "correlation_key": "fp|02bff7eb2b666a5393c708e11f2bb36c6028a260ca91fcfb00426a00dfb43feb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/bfl-api/references/code-examples/typescript-client.ts"}, "region": {"startLine": 469}}}]}, {"ruleId": "JRN010", "level": "warning", "message": {"text": "Critical user action appears to be handled by a no-op or placeholder"}, "properties": {"repobilityId": 468922, "scanner": "repobility-journey-contract", "fingerprint": "69289de35800479d96b5949c9054868e49fc9c030242106fbcc619c0b8a38cac", "category": "quality", "severity": "medium", "confidence": 0.74, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Action wording appears near alert/console/not-implemented placeholder behavior without a nearby backend call.", "evidence": {"rule_id": "JRN010", "scanner": "repobility-journey-contract", "references": ["https://repobility.com/library/authorization/"], "correlation_key": "fp|69289de35800479d96b5949c9054868e49fc9c030242106fbcc619c0b8a38cac"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/beautiful-mermaid/scripts/create-html.ts"}, "region": {"startLine": 77}}}]}, {"ruleId": "ERR001", "level": "warning", "message": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "properties": {"repobilityId": 468890, "scanner": "repobility-threat-engine", "fingerprint": "e41ac1a855cda4ef61825657d4f19a0492574bbfbe90aa6b28a831a79746ed0f", "category": "error_handling", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "except Exception:\n            pass", "reason": "Pattern matched with no mitigating context found", "rule_id": "ERR001", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|e41ac1a855cda4ef61825657d4f19a0492574bbfbe90aa6b28a831a79746ed0f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/enhancement/upscale.py"}, "region": {"startLine": 336}}}]}, {"ruleId": "SEC136", "level": "warning", "message": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated."}, "properties": {"repobilityId": 468869, "scanner": "repobility-threat-engine", "fingerprint": "d196954c828a1b01354ce43dae1d3f742e167192a2306742b003384bda2cc434", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "try:\n            r = requests.get(asset_href, timeout=30)\n            r.raise_for_status()", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC136", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|d196954c828a1b01354ce43dae1d3f742e167192a2306742b003384bda2cc434"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/stock_sources/nasa.py"}, "region": {"startLine": 170}}}]}, {"ruleId": "SEC136", "level": "warning", "message": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated."}, "properties": {"repobilityId": 468868, "scanner": "repobility-threat-engine", "fingerprint": "52cf3e903f95ad396aff56c904bf8c46242b8f3c152b819c63d6d1f1a5d0e7e9", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "try:\n        result = subprocess.run(\n            [\n                ffprobe,\n                \"-v\", \"", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC136", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|52cf3e903f95ad396aff56c904bf8c46242b8f3c152b819c63d6d1f1a5d0e7e9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/audio_probe.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "COMP001", "level": "warning", "message": {"text": "[COMP001] High cognitive complexity: Function `construct` has cognitive complexity 17 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: elif=1, else=1, for=8, if=1, nested_bonus=6."}, "properties": {"repobilityId": 468841, "scanner": "repobility-threat-engine", "fingerprint": "3f43ad4e4a913eeaf1517da81b0cea022ba23c516aaa15c743af593fee8f794a", "category": "quality", "severity": "medium", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 17 (severity threshold for medium: 15+).", "evidence": {"scanner": "repobility-threat-engine", "function": "construct", "breakdown": {"if": 1, "for": 8, "elif": 1, "else": 1, "nested_bonus": 6}, "complexity": 17, "correlation_key": "fp|3f43ad4e4a913eeaf1517da81b0cea022ba23c516aaa15c743af593fee8f794a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/attention_pattern_dots.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "ERR002", "level": "warning", "message": {"text": "[ERR002] Empty Catch Block: Empty catch blocks hide errors."}, "properties": {"repobilityId": 468839, "scanner": "repobility-threat-engine", "fingerprint": "9f95661a2cf5a11ba986c14028836e468d94383e8db1bb7a097aac9659d0a675", "category": "error_handling", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".catch(() => {})", "reason": "Pattern matched with no mitigating context found", "rule_id": "ERR002", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|9f95661a2cf5a11ba986c14028836e468d94383e8db1bb7a097aac9659d0a675"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/hyperframes/scripts/contrast-report.mjs"}, "region": {"startLine": 95}}}]}, {"ruleId": "SEC087", "level": "warning", "message": {"text": "[SEC087] JS: weak Math.random for crypto: Math.random() is not cryptographically secure; using it for tokens/keys/nonces is predictable. Ported from gosec G404 / eslint detect-pseudoRandomBytes concept (Apache-2.0)."}, "properties": {"repobilityId": 468838, "scanner": "repobility-threat-engine", "fingerprint": "c91f0519e5c40342e590fea2cdf40780f056e6a7f004cf4ba8422588860aef47", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "Math.random() * 4)]\n  }));\n  \n  return (\n    <div", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC087", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|c91f0519e5c40342e590fea2cdf40780f056e6a7f004cf4ba8422588860aef47"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/d3-viz/assets/interactive-template.jsx"}, "region": {"startLine": 215}}}]}, {"ruleId": "SEC087", "level": "warning", "message": {"text": "[SEC087] JS: weak Math.random for crypto: Math.random() is not cryptographically secure; using it for tokens/keys/nonces is predictable. Ported from gosec G404 / eslint detect-pseudoRandomBytes concept (Apache-2.0)."}, "properties": {"repobilityId": 468837, "scanner": "repobility-threat-engine", "fingerprint": "d6443fe24265625dbc32ba17177a841d2effd47e0551c96b959204ae6ffb1a87", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "Math.random() * 4)]\n  }));\n  \n  return (\n    <div", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC087", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|d6443fe24265625dbc32ba17177a841d2effd47e0551c96b959204ae6ffb1a87"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/d3-viz/assets/interactive-template.jsx"}, "region": {"startLine": 215}}}]}, {"ruleId": "CORE_NO_CI", "level": "warning", "message": {"text": "No CI/CD configuration found"}, "properties": {"repobilityId": 468826, "scanner": "repobility-core", "fingerprint": "ca5da3551af97272c4f099fc472740148135a15816b81b90bd862e8f91ec66ce", "category": "practices", "severity": "medium", "confidence": null, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"rule_id": "CORE_NO_CI", "scanner": "repobility-core", "correlation_key": "repo|practices|core_no_ci"}}}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468921, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ff32b13c5d4be95e733d3928244558c3dbc078edb91bb679fc03914bcb3f8320", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/audio/freesound_music.py", "duplicate_line": 9, "correlation_key": "fp|ff32b13c5d4be95e733d3928244558c3dbc078edb91bb679fc03914bcb3f8320"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/pixabay_music.py"}, "region": {"startLine": 12}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468920, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ed468d19cf34e65f38860a928288403850eb14015091c85fd74b95b604ea8621", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/audio_energy.py", "duplicate_line": 15, "correlation_key": "fp|ed468d19cf34e65f38860a928288403850eb14015091c85fd74b95b604ea8621"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/piper_tts.py"}, "region": {"startLine": 4}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468919, "scanner": "repobility-ai-code-hygiene", "fingerprint": "07221c175371ce852eaced435cd75e0082cb1d3aee1ef9d593e83912046133eb", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/audio_energy.py", "duplicate_line": 16, "correlation_key": "fp|07221c175371ce852eaced435cd75e0082cb1d3aee1ef9d593e83912046133eb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/openai_tts.py"}, "region": {"startLine": 4}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468918, "scanner": "repobility-ai-code-hygiene", "fingerprint": "61b3699396dcb1639886719484cd8c14d6508b6e09f91f026143a8d1feed1155", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/audio/elevenlabs_tts.py", "duplicate_line": 3, "correlation_key": "fp|61b3699396dcb1639886719484cd8c14d6508b6e09f91f026143a8d1feed1155"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/openai_tts.py"}, "region": {"startLine": 3}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468917, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4ee88a7d1c16d0c4b9166e98c8f23db221780e94e9ca780adf17124e6051f03c", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/audio_energy.py", "duplicate_line": 16, "correlation_key": "fp|4ee88a7d1c16d0c4b9166e98c8f23db221780e94e9ca780adf17124e6051f03c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/music_gen.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468916, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ae846dd0e87a366227f16dfa2c1063a60e3ddf9a2fc98bc419132488b1a294b8", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/audio/elevenlabs_tts.py", "duplicate_line": 3, "correlation_key": "fp|ae846dd0e87a366227f16dfa2c1063a60e3ddf9a2fc98bc419132488b1a294b8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/music_gen.py"}, "region": {"startLine": 6}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468915, "scanner": "repobility-ai-code-hygiene", "fingerprint": "9c806c85cd8cc8c637fe781a01e0180c58ba5a03e7d42eca14b1653f43b15fdf", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/audio_energy.py", "duplicate_line": 16, "correlation_key": "fp|9c806c85cd8cc8c637fe781a01e0180c58ba5a03e7d42eca14b1653f43b15fdf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/google_tts.py"}, "region": {"startLine": 8}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468914, "scanner": "repobility-ai-code-hygiene", "fingerprint": "97b48e3a2bfc36c2b673dd33d030171f6dd59c07c34976c3121d6ff561e8adad", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/audio/elevenlabs_tts.py", "duplicate_line": 3, "correlation_key": "fp|97b48e3a2bfc36c2b673dd33d030171f6dd59c07c34976c3121d6ff561e8adad"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/google_tts.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468913, "scanner": "repobility-ai-code-hygiene", "fingerprint": "c25958d50bb5112a51573f53ca3df9d87ac00caead42ab56232e11cb8e8c4bb7", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/audio_energy.py", "duplicate_line": 17, "correlation_key": "fp|c25958d50bb5112a51573f53ca3df9d87ac00caead42ab56232e11cb8e8c4bb7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/freesound_music.py"}, "region": {"startLine": 11}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468912, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1e6779576da17bd778dcb6d8674c27dcbbdc5cecbebd25855b7f964d3235d1f2", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/audio_energy.py", "duplicate_line": 16, "correlation_key": "fp|1e6779576da17bd778dcb6d8674c27dcbbdc5cecbebd25855b7f964d3235d1f2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/elevenlabs_tts.py"}, "region": {"startLine": 4}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468911, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4f10e3bb802c8f6452c1d159dac69698aae6312f0b31e36bdf2318c9766ee00c", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/audio_energy.py", "duplicate_line": 17, "correlation_key": "fp|4f10e3bb802c8f6452c1d159dac69698aae6312f0b31e36bdf2318c9766ee00c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/doubao_tts.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468910, "scanner": "repobility-ai-code-hygiene", "fingerprint": "c6f051c905a98c9c62d236ec4ecc1207405d3a5dd35acc1b1824e6146270ad64", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/face_tracker.py", "duplicate_line": 9, "correlation_key": "fp|c6f051c905a98c9c62d236ec4ecc1207405d3a5dd35acc1b1824e6146270ad64"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/audio_mixer.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468909, "scanner": "repobility-ai-code-hygiene", "fingerprint": "04780bbf25d8a164969e43049fcf34df6d273d219c27c9d79e676708a38eae78", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/visual_qa.py", "duplicate_line": 8, "correlation_key": "fp|04780bbf25d8a164969e43049fcf34df6d273d219c27c9d79e676708a38eae78"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/audio_mixer.py"}, "region": {"startLine": 5}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468908, "scanner": "repobility-ai-code-hygiene", "fingerprint": "3b254f06a04784c5a73a44874065f13a3be443ad7d31c14926c9c77ec36eb4be", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/frame_sampler.py", "duplicate_line": 9, "correlation_key": "fp|3b254f06a04784c5a73a44874065f13a3be443ad7d31c14926c9c77ec36eb4be"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/audio_enhance.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468907, "scanner": "repobility-ai-code-hygiene", "fingerprint": "0662aaf68e472ef48a8910a8cfedb546164c72b914b3f01ea4d0c8213b4a7acc", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/visual_qa.py", "duplicate_line": 8, "correlation_key": "fp|0662aaf68e472ef48a8910a8cfedb546164c72b914b3f01ea4d0c8213b4a7acc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/audio_enhance.py"}, "region": {"startLine": 5}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468906, "scanner": "repobility-ai-code-hygiene", "fingerprint": "90132f647edb0c3c6e7bdee3e72fd36723c45732f4ab924c66817a387da950bc", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/frame_sampler.py", "duplicate_line": 9, "correlation_key": "fp|90132f647edb0c3c6e7bdee3e72fd36723c45732f4ab924c66817a387da950bc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/visual_qa.py"}, "region": {"startLine": 10}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468905, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4f6cc28969c66609effda9080ffd7aeac2cf85755e59c3bdc43775d9bcfc6472", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/transcript_fetcher.py", "duplicate_line": 8, "correlation_key": "fp|4f6cc28969c66609effda9080ffd7aeac2cf85755e59c3bdc43775d9bcfc6472"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_downloader.py"}, "region": {"startLine": 11}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468904, "scanner": "repobility-ai-code-hygiene", "fingerprint": "bf03cebf7b51196dc20190b71327ac36314afe37dac379e55f3a29622b2427b4", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/video_analyzer.py", "duplicate_line": 12, "correlation_key": "fp|bf03cebf7b51196dc20190b71327ac36314afe37dac379e55f3a29622b2427b4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_downloader.py"}, "region": {"startLine": 10}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468903, "scanner": "repobility-ai-code-hygiene", "fingerprint": "26268a1a3fe4f33de68a77ab50809239681f6ae5e9dab6e8c46f265c19c5281c", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/face_tracker.py", "duplicate_line": 9, "correlation_key": "fp|26268a1a3fe4f33de68a77ab50809239681f6ae5e9dab6e8c46f265c19c5281c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_downloader.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468902, "scanner": "repobility-ai-code-hygiene", "fingerprint": "81d5770b725aa1f320e3dcda8af65dd40d315cbfa63a502013fe62fdfacfc63f", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/transcript_fetcher.py", "duplicate_line": 8, "correlation_key": "fp|81d5770b725aa1f320e3dcda8af65dd40d315cbfa63a502013fe62fdfacfc63f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 13}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468901, "scanner": "repobility-ai-code-hygiene", "fingerprint": "867513f5a91fd8196008013fb33e2c75b7f7e9c534a2e421305df635deff6b66", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/face_tracker.py", "duplicate_line": 8, "correlation_key": "fp|867513f5a91fd8196008013fb33e2c75b7f7e9c534a2e421305df635deff6b66"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/video_analyzer.py"}, "region": {"startLine": 10}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468900, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a18e37856a409ecef922433f326199e7e19ff58b982b5854af3d1d6cdb74bab8", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/face_tracker.py", "duplicate_line": 8, "correlation_key": "fp|a18e37856a409ecef922433f326199e7e19ff58b982b5854af3d1d6cdb74bab8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/scene_detect.py"}, "region": {"startLine": 6}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468899, "scanner": "repobility-ai-code-hygiene", "fingerprint": "beb45d414262fdddafbf4e2364236af8ae6fbd7b0e3a2c3fb28909f81b56fa12", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tools/analysis/audio_energy.py", "duplicate_line": 15, "correlation_key": "fp|beb45d414262fdddafbf4e2364236af8ae6fbd7b0e3a2c3fb28909f81b56fa12"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/audio_probe.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468898, "scanner": "repobility-ai-code-hygiene", "fingerprint": "78f813daf49c85cd215d9a56342b252a85ed361bcc5d29757d426a4bb832c5d1", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "remotion-composer/src/components/charts/BarChart.tsx", "duplicate_line": 62, "correlation_key": "fp|78f813daf49c85cd215d9a56342b252a85ed361bcc5d29757d426a4bb832c5d1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/components/charts/PieChart.tsx"}, "region": {"startLine": 77}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468897, "scanner": "repobility-ai-code-hygiene", "fingerprint": "8773b319d254ac0d690137b088683f470b75ec82aa66ed3097d0563db59f2545", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "remotion-composer/src/components/charts/KPIGrid.tsx", "duplicate_line": 60, "correlation_key": "fp|8773b319d254ac0d690137b088683f470b75ec82aa66ed3097d0563db59f2545"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/components/charts/PieChart.tsx"}, "region": {"startLine": 71}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468896, "scanner": "repobility-ai-code-hygiene", "fingerprint": "3faf5d788f0e3cb24f9683b384e532eb51fb468a495c631d2b79489148ceae99", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "remotion-composer/src/components/charts/LineChart.tsx", "duplicate_line": 78, "correlation_key": "fp|3faf5d788f0e3cb24f9683b384e532eb51fb468a495c631d2b79489148ceae99"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/components/charts/PieChart.tsx"}, "region": {"startLine": 70}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468895, "scanner": "repobility-ai-code-hygiene", "fingerprint": "7f70188215c8fb027945cf5b050a5359b99116918bc9eba53416eaacd5069ac4", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "remotion-composer/src/components/charts/BarChart.tsx", "duplicate_line": 62, "correlation_key": "fp|7f70188215c8fb027945cf5b050a5359b99116918bc9eba53416eaacd5069ac4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/components/charts/LineChart.tsx"}, "region": {"startLine": 85}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468894, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1eb3af1267df3186121cdf43fae1eef7ee509c76d1c4d5d66d782d8a1f282e87", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "remotion-composer/src/components/charts/KPIGrid.tsx", "duplicate_line": 60, "correlation_key": "fp|1eb3af1267df3186121cdf43fae1eef7ee509c76d1c4d5d66d782d8a1f282e87"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/components/charts/LineChart.tsx"}, "region": {"startLine": 79}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468893, "scanner": "repobility-ai-code-hygiene", "fingerprint": "b1263fca8d7a035149221336445e0659355063cab1e7b3f9fec6865d1363841f", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "remotion-composer/src/Explainer.tsx", "duplicate_line": 167, "correlation_key": "fp|b1263fca8d7a035149221336445e0659355063cab1e7b3f9fec6865d1363841f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/TalkingHead.tsx"}, "region": {"startLine": 37}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 468892, "scanner": "repobility-ai-code-hygiene", "fingerprint": "11480d65efd0d743118addd594d4c4a1b17ae2adc6ff6fbd5d50b9db04df0840", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "remotion-composer/src/CollageBurst.tsx", "duplicate_line": 19, "correlation_key": "fp|11480d65efd0d743118addd594d4c4a1b17ae2adc6ff6fbd5d50b9db04df0840"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/LyricOverlay.tsx"}, "region": {"startLine": 12}}}]}, {"ruleId": "AIC009", "level": "note", "message": {"text": "Multiple AI-agent scaffold marker files are present"}, "properties": {"repobilityId": 468891, "scanner": "repobility-ai-code-hygiene", "fingerprint": "32459e18838866b083b985fd53ac32d4e825aa20af779d902253d8278f625dfb", "category": "quality", "severity": "low", "confidence": 0.68, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Repository root contains several AI-agent scaffold marker files.", "evidence": {"markers": [".github/copilot-instructions.md", ".windsurfrules", "AGENTS.md", "CLAUDE.md", "CODEX.md"], "rule_id": "AIC009", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|32459e18838866b083b985fd53ac32d4e825aa20af779d902253d8278f625dfb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/copilot-instructions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `__init__` has cognitive complexity 11 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: for=5, if=1, nested_bonus=4, recursion=1."}, "properties": {"repobilityId": 468842, "scanner": "repobility-threat-engine", "fingerprint": "a8adee1edfefc8a975f31be3dc327e378bb42a4b87d510ecfe05443da8c93337", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 11 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "__init__", "breakdown": {"if": 1, "for": 5, "recursion": 1, "nested_bonus": 4}, "complexity": 11, "correlation_key": "fp|a8adee1edfefc8a975f31be3dc327e378bb42a4b87d510ecfe05443da8c93337"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/basic_multihead.py"}, "region": {"startLine": 20}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `play_attention_animation` has cognitive complexity 9 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: for=3, if=1, nested_bonus=5."}, "properties": {"repobilityId": 468840, "scanner": "repobility-threat-engine", "fingerprint": "e1f02343e4829ea0a0c78a02c187f528ac7ce39013b95d5392af409bf829f76f", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 9 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "play_attention_animation", "breakdown": {"if": 1, "for": 3, "nested_bonus": 5}, "complexity": 9, "correlation_key": "fp|e1f02343e4829ea0a0c78a02c187f528ac7ce39013b95d5392af409bf829f76f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/attention_arcs_animation.py"}, "region": {"startLine": 129}}}]}, {"ruleId": "MINED064", "level": "none", "message": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "properties": {"repobilityId": 468889, "scanner": "repobility-threat-engine", "fingerprint": "cb1fd73660d93238eb37187e53dec014d1a83f314604ea56ee63f14798514de6", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-input-call", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348050+00:00", "triaged_in_corpus": 12, "observations_count": 66378, "ai_coder_pattern_id": 124}, "scanner": "repobility-threat-engine", "correlation_key": "fp|cb1fd73660d93238eb37187e53dec014d1a83f314604ea56ee63f14798514de6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/enhancement/face_restore.py"}, "region": {"startLine": 73}}}]}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "properties": {"repobilityId": 468887, "scanner": "repobility-threat-engine", "fingerprint": "86b555053fa4bb3eb3a7c868983366e7bee27a295a831d7d8db6532c30bd2cef", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "correlation_key": "fp|86b555053fa4bb3eb3a7c868983366e7bee27a295a831d7d8db6532c30bd2cef"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/stock_sources/base.py"}, "region": {"startLine": 43}}}]}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "properties": {"repobilityId": 468886, "scanner": "repobility-threat-engine", "fingerprint": "8903a880edf6870267232d2c62ef7aba0beb130af66e75c42fe66f5ca12a6b81", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "correlation_key": "fp|8903a880edf6870267232d2c62ef7aba0beb130af66e75c42fe66f5ca12a6b81"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/base_tool.py"}, "region": {"startLine": 101}}}]}, {"ruleId": "MINED001", "level": "none", "message": {"text": "[MINED001] Bare Except Pass (and 2 more): Same pattern found in 2 additional files. Review if needed."}, "properties": {"repobilityId": 468885, "scanner": "repobility-threat-engine", "fingerprint": "95cc9797c40c926759aaa04a4225f0a4ae4f9faafb543c58446c2f46cd9cfe9e", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 2 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|95cc9797c40c926759aaa04a4225f0a4ae4f9faafb543c58446c2f46cd9cfe9e", "aggregated_count": 2}}}, {"ruleId": "SEC029", "level": "none", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 28 more): Same pattern found in 28 additional files. Review if needed."}, "properties": {"repobilityId": 468881, "scanner": "repobility-threat-engine", "fingerprint": "97e571c05ca717d36106ca86b31da5f02e1ea23f79acf5261276063bd6e438fc", "category": "ssrf", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 28 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 28 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|97e571c05ca717d36106ca86b31da5f02e1ea23f79acf5261276063bd6e438fc"}}}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout (and 31 more): Same pattern found in 31 additional files. Review if needed."}, "properties": {"repobilityId": 468877, "scanner": "repobility-threat-engine", "fingerprint": "678581a0e312605608d6b98a3dbd7cfafe428c4813ba4bd16b6aa9879cff20d3", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 31 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|678581a0e312605608d6b98a3dbd7cfafe428c4813ba4bd16b6aa9879cff20d3", "aggregated_count": 31}}}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 468876, "scanner": "repobility-threat-engine", "fingerprint": "f56ba2d9697846486b6ae3f4cd44040c73aded1e7727cc5006aae1ad6008134c", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f56ba2d9697846486b6ae3f4cd44040c73aded1e7727cc5006aae1ad6008134c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/music_gen.py"}, "region": {"startLine": 152}}}]}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 468875, "scanner": "repobility-threat-engine", "fingerprint": "3773ec9ca486c6adf01d6dec0fba7d942866b239102341047a33bbf5d42c0257", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3773ec9ca486c6adf01d6dec0fba7d942866b239102341047a33bbf5d42c0257"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/google_tts.py"}, "region": {"startLine": 206}}}]}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 468874, "scanner": "repobility-threat-engine", "fingerprint": "d1b766be8e18fe2e598a0884fba734ced20901b95f3a02fbc0c23e67adfbdebc", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|d1b766be8e18fe2e598a0884fba734ced20901b95f3a02fbc0c23e67adfbdebc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/elevenlabs_tts.py"}, "region": {"startLine": 149}}}]}, {"ruleId": "SEC078", "level": "none", "message": {"text": "[SEC078] Python: requests without timeout (and 31 more): Same pattern found in 31 additional files. Review if needed."}, "properties": {"repobilityId": 468873, "scanner": "repobility-threat-engine", "fingerprint": "5087007e5ad5bca3c05532f1c365863657c97df6271686cd8a98f073c2227131", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 31 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 31 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|5087007e5ad5bca3c05532f1c365863657c97df6271686cd8a98f073c2227131"}}}, {"ruleId": "MINED045", "level": "none", "message": {"text": "[MINED045] Ts Non Null Assertion: x! asserts not null - bypasses null checks - TypeError if wrong."}, "properties": {"repobilityId": 468867, "scanner": "repobility-threat-engine", "fingerprint": "3cc33d4fb23efa2b8d807aa7ff4680d5382ac4c8f977e55dd8ffa6516230442f", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "ts-non-null-assertion", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["typescript", "tsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348005+00:00", "triaged_in_corpus": 12, "observations_count": 1810954, "ai_coder_pattern_id": 105}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3cc33d4fb23efa2b8d807aa7ff4680d5382ac4c8f977e55dd8ffa6516230442f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/components/ProgressBar.tsx"}, "region": {"startLine": 188}}}]}, {"ruleId": "MINED056", "level": "none", "message": {"text": "[MINED056] React Key As Index (and 5 more): Same pattern found in 5 additional files. Review if needed."}, "properties": {"repobilityId": 468866, "scanner": "repobility-threat-engine", "fingerprint": "4db3df9a58704d55636bd1053cf88cb80048c172ae779f3f99e1995443ef680a", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 5 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "react-key-as-index", "owasp": null, "cwe_ids": ["CWE-682"], "languages": ["typescript", "tsx", "javascript", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348032+00:00", "triaged_in_corpus": 12, "observations_count": 299917, "ai_coder_pattern_id": 135}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|4db3df9a58704d55636bd1053cf88cb80048c172ae779f3f99e1995443ef680a", "aggregated_count": 5}}}, {"ruleId": "MINED056", "level": "none", "message": {"text": "[MINED056] React Key As Index: key={index} in map() \u2014 re-renders the wrong elements on re-order."}, "properties": {"repobilityId": 468865, "scanner": "repobility-threat-engine", "fingerprint": "55dc842e3e01402d823cba5b60ca2e637737891e84a14f89b22b7eaaf63c825d", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "react-key-as-index", "owasp": null, "cwe_ids": ["CWE-682"], "languages": ["typescript", "tsx", "javascript", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348032+00:00", "triaged_in_corpus": 12, "observations_count": 299917, "ai_coder_pattern_id": 135}, "scanner": "repobility-threat-engine", "correlation_key": "fp|55dc842e3e01402d823cba5b60ca2e637737891e84a14f89b22b7eaaf63c825d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/components/AnimeScene.tsx"}, "region": {"startLine": 263}}}]}, {"ruleId": "MINED056", "level": "none", "message": {"text": "[MINED056] React Key As Index: key={index} in map() \u2014 re-renders the wrong elements on re-order."}, "properties": {"repobilityId": 468864, "scanner": "repobility-threat-engine", "fingerprint": "63ebcbf1cb1e06037032f4c5052663efda026611bfe4afea25f85b60e4df7a50", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "react-key-as-index", "owasp": null, "cwe_ids": ["CWE-682"], "languages": ["typescript", "tsx", "javascript", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348032+00:00", "triaged_in_corpus": 12, "observations_count": 299917, "ai_coder_pattern_id": 135}, "scanner": "repobility-threat-engine", "correlation_key": "fp|63ebcbf1cb1e06037032f4c5052663efda026611bfe4afea25f85b60e4df7a50"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/TitledVideo.tsx"}, "region": {"startLine": 159}}}]}, {"ruleId": "MINED056", "level": "none", "message": {"text": "[MINED056] React Key As Index: key={index} in map() \u2014 re-renders the wrong elements on re-order."}, "properties": {"repobilityId": 468863, "scanner": "repobility-threat-engine", "fingerprint": "0352f94e0521daff78d46165530ceac8f6ed58be7f89cfa6a46ef7cf6e8dbb79", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "react-key-as-index", "owasp": null, "cwe_ids": ["CWE-682"], "languages": ["typescript", "tsx", "javascript", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348032+00:00", "triaged_in_corpus": 12, "observations_count": 299917, "ai_coder_pattern_id": 135}, "scanner": "repobility-threat-engine", "correlation_key": "fp|0352f94e0521daff78d46165530ceac8f6ed58be7f89cfa6a46ef7cf6e8dbb79"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/LyricOverlay.tsx"}, "region": {"startLine": 169}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 468862, "scanner": "repobility-threat-engine", "fingerprint": "f51947f42a17eb9676e5719dd371fcd1ec2c098f969325e0c8f74d6fd19bae4a", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f51947f42a17eb9676e5719dd371fcd1ec2c098f969325e0c8f74d6fd19bae4a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/components/AnimeScene.tsx"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 468861, "scanner": "repobility-threat-engine", "fingerprint": "ccb022579f7c4d11b6df3d4bb12f8c69763ddca7c0dd6203deaf6271faecb53e", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|ccb022579f7c4d11b6df3d4bb12f8c69763ddca7c0dd6203deaf6271faecb53e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/TitledVideo.tsx"}, "region": {"startLine": 41}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 468860, "scanner": "repobility-threat-engine", "fingerprint": "121e8e5e5b6d7922a6cdf10420cfc6a56d12ac72248f187d6741d299aed77ea8", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|121e8e5e5b6d7922a6cdf10420cfc6a56d12ac72248f187d6741d299aed77ea8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/LyricOverlay.tsx"}, "region": {"startLine": 19}}}]}, {"ruleId": "MINED036", "level": "none", "message": {"text": "[MINED036] Python Os System Call (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "properties": {"repobilityId": 468859, "scanner": "repobility-threat-engine", "fingerprint": "c57a30000c1571c0cefd289b7a0ec16cd2e999ef325aa95e94c5385989f5023c", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "python-os-system-call", "owasp": null, "cwe_ids": ["CWE-78"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347982+00:00", "triaged_in_corpus": 15, "observations_count": 2221, "ai_coder_pattern_id": 117}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|c57a30000c1571c0cefd289b7a0ec16cd2e999ef325aa95e94c5385989f5023c", "aggregated_count": 3}}}, {"ruleId": "SEC005", "level": "none", "message": {"text": "[SEC005] Command Injection Risk (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "properties": {"repobilityId": 468855, "scanner": "repobility-threat-engine", "fingerprint": "68f61fc2eb853673a55a9af2ee02e16c2e776ebc9a53bbcea35619ca06ccca92", "category": "injection", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC005", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|68f61fc2eb853673a55a9af2ee02e16c2e776ebc9a53bbcea35619ca06ccca92"}}}, {"ruleId": "SEC128", "level": "none", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "properties": {"repobilityId": 468851, "scanner": "repobility-threat-engine", "fingerprint": "384b13d01eca021cad8caa867cbe69ee4fc1353f389030e2ca3b6fe8412f11af", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 4 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 4 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|384b13d01eca021cad8caa867cbe69ee4fc1353f389030e2ca3b6fe8412f11af"}}}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function (and 13 more): Same pattern found in 13 additional files. Review if needed."}, "properties": {"repobilityId": 468847, "scanner": "repobility-threat-engine", "fingerprint": "7279be3bf1fcb1aa10ba0c2ac1be9be53dc68b6d651aeb9501d6be025f645add", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 13 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|7279be3bf1fcb1aa10ba0c2ac1be9be53dc68b6d651aeb9501d6be025f645add", "aggregated_count": 13}}}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 468846, "scanner": "repobility-threat-engine", "fingerprint": "71487e69e92e5da3c3060ab647ff07a6dd979d29738b08f549c39c4e148050ef", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|71487e69e92e5da3c3060ab647ff07a6dd979d29738b08f549c39c4e148050ef"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/quantum_gates.py"}, "region": {"startLine": 308}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 468845, "scanner": "repobility-threat-engine", "fingerprint": "90b925d7592c53624da6b5a96f7174f25d5304f797c64ed8f9fa6539e1077d17", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|90b925d7592c53624da6b5a96f7174f25d5304f797c64ed8f9fa6539e1077d17"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/light_polarization.py"}, "region": {"startLine": 389}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 468844, "scanner": "repobility-threat-engine", "fingerprint": "3173a633161f233ae6f81793a36155442aeea02cdc57b310948313546b0d090a", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3173a633161f233ae6f81793a36155442aeea02cdc57b310948313546b0d090a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/bloch_sphere_3d.py"}, "region": {"startLine": 246}}}]}, {"ruleId": "COMP001", "level": "none", "message": {"text": "[COMP001] High cognitive complexity (and 94 more): Same pattern found in 94 additional files. Review if needed."}, "properties": {"repobilityId": 468843, "scanner": "repobility-threat-engine", "fingerprint": "e1137807aba0b4112330bf640875473f36b4ede6c7dcb500405baf6bae86a009", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 94 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"scanner": "repobility-threat-engine", "function": "play_attention_animation", "breakdown": {"if": 1, "for": 3, "nested_bonus": 5}, "aggregated": true, "complexity": 9, "correlation_key": "fp|e1137807aba0b4112330bf640875473f36b4ede6c7dcb500405baf6bae86a009", "aggregated_count": 94}}}, {"ruleId": "MINED054", "level": "none", "message": {"text": "[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely."}, "properties": {"repobilityId": 468834, "scanner": "repobility-threat-engine", "fingerprint": "954339e20d4e5928adabbee4b3cf3e7bddfe203c3079294fa1c93d7ebfcd2a51", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "ts-as-any", "owasp": null, "cwe_ids": ["CWE-704"], "languages": ["typescript", "tsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348028+00:00", "triaged_in_corpus": 12, "observations_count": 341218, "ai_coder_pattern_id": 98}, "scanner": "repobility-threat-engine", "correlation_key": "fp|954339e20d4e5928adabbee4b3cf3e7bddfe203c3079294fa1c93d7ebfcd2a51"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "remotion-composer/src/TalkingHead.tsx"}, "region": {"startLine": 173}}}]}, {"ruleId": "MINED054", "level": "none", "message": {"text": "[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely."}, "properties": {"repobilityId": 468833, "scanner": "repobility-threat-engine", "fingerprint": "e4b2497b0e210fd4981f31a2b603e352548c0fd7b84140679d639abeb809ead2", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "ts-as-any", "owasp": null, "cwe_ids": ["CWE-704"], "languages": ["typescript", "tsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348028+00:00", "triaged_in_corpus": 12, "observations_count": 341218, "ai_coder_pattern_id": 98}, "scanner": "repobility-threat-engine", "correlation_key": "fp|e4b2497b0e210fd4981f31a2b603e352548c0fd7b84140679d639abeb809ead2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/beautiful-mermaid/scripts/render.ts"}, "region": {"startLine": 133}}}]}, {"ruleId": "MINED054", "level": "none", "message": {"text": "[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely."}, "properties": {"repobilityId": 468832, "scanner": "repobility-threat-engine", "fingerprint": "3972d0b62ead71190d0c9010824566d9d651225ae1776f733b8ea67331dfcb4d", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "ts-as-any", "owasp": null, "cwe_ids": ["CWE-704"], "languages": ["typescript", "tsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348028+00:00", "triaged_in_corpus": 12, "observations_count": 341218, "ai_coder_pattern_id": 98}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3972d0b62ead71190d0c9010824566d9d651225ae1776f733b8ea67331dfcb4d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/beautiful-mermaid/scripts/render.ts"}, "region": {"startLine": 133}}}]}, {"ruleId": "SEC020", "level": "none", "message": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "properties": {"repobilityId": 468831, "scanner": "repobility-threat-engine", "fingerprint": "2ef8cd0c931567d3fb80553728e4b26a19869634af56ec9bd3d29a5c0a376f8f", "category": "credential_exposure", "severity": "info", "confidence": 0.1, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Safe context pattern detected Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "console.log(`Using theme: bg=${themeConfig.bg}, fg=${themeConfig.fg}`)", "reason": "Safe context pattern detected", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.1, "correlation_key": "secret|. token|20|console.log using theme: bg themeconfig.bg fg themeconfig.fg", "duplicate_count": 1, "duplicate_rule_ids": ["SEC020"], "duplicate_scanners": ["repobility-threat-engine"], "duplicate_fingerprints": ["221f3831bd9f1e1b7aa74991ae533d4e40f2c584b75798ee2d232bb628bc64a3", "2ef8cd0c931567d3fb80553728e4b26a19869634af56ec9bd3d29a5c0a376f8f"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/beautiful-mermaid/scripts/render.ts"}, "region": {"startLine": 209}}}]}, {"ruleId": "MINED044", "level": "none", "message": {"text": "[MINED044] Js Console Log Prod (and 2 more): Same pattern found in 2 additional files. Review if needed."}, "properties": {"repobilityId": 468830, "scanner": "repobility-threat-engine", "fingerprint": "f5f0ee0407b51d0ac20b895b10fb0fb2d25d496c71c3de2200e03e778c4fe3f2", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 2 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "js-console-log-prod", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["javascript", "typescript", "tsx", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348003+00:00", "triaged_in_corpus": 10, "observations_count": 1940833, "ai_coder_pattern_id": 102}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|f5f0ee0407b51d0ac20b895b10fb0fb2d25d496c71c3de2200e03e778c4fe3f2", "aggregated_count": 2}}}, {"ruleId": "MINED044", "level": "none", "message": {"text": "[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed."}, "properties": {"repobilityId": 468829, "scanner": "repobility-threat-engine", "fingerprint": "923dfad007ed9a0a0cd9dccada8f09f94a6e8f031ca3d3dc3fc3788b82b42539", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "js-console-log-prod", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["javascript", "typescript", "tsx", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348003+00:00", "triaged_in_corpus": 10, "observations_count": 1940833, "ai_coder_pattern_id": 102}, "scanner": "repobility-threat-engine", "correlation_key": "fp|923dfad007ed9a0a0cd9dccada8f09f94a6e8f031ca3d3dc3fc3788b82b42539"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/hyperframes/scripts/contrast-report.mjs"}, "region": {"startLine": 301}}}]}, {"ruleId": "MINED044", "level": "none", "message": {"text": "[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed."}, "properties": {"repobilityId": 468828, "scanner": "repobility-threat-engine", "fingerprint": "e958da07a592c15c796bf379d30ba507d164c02ea4701d329f70665f2b2bde43", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "js-console-log-prod", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["javascript", "typescript", "tsx", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348003+00:00", "triaged_in_corpus": 10, "observations_count": 1940833, "ai_coder_pattern_id": 102}, "scanner": "repobility-threat-engine", "correlation_key": "fp|e958da07a592c15c796bf379d30ba507d164c02ea4701d329f70665f2b2bde43"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/beautiful-mermaid/scripts/render.ts"}, "region": {"startLine": 75}}}]}, {"ruleId": "MINED044", "level": "none", "message": {"text": "[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed."}, "properties": {"repobilityId": 468827, "scanner": "repobility-threat-engine", "fingerprint": "8ed16e98237fe644b0b13deaf1b8d321a7c2ab671ad37dadf3507b2fe06e6720", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "js-console-log-prod", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["javascript", "typescript", "tsx", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348003+00:00", "triaged_in_corpus": 10, "observations_count": 1940833, "ai_coder_pattern_id": 102}, "scanner": "repobility-threat-engine", "correlation_key": "fp|8ed16e98237fe644b0b13deaf1b8d321a7c2ab671ad37dadf3507b2fe06e6720"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/beautiful-mermaid/scripts/create-html.ts"}, "region": {"startLine": 62}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.t_tracker` used but never assigned in __init__: Method `explore_s_values` of class `SPlaneVisualization` reads `self.t_tracker`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468960, "scanner": "repobility-ast-engine", "fingerprint": "6629a15107d6e2a23af277f73872e503f6f84fa084e3a0700703ff6ecea958e3", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6629a15107d6e2a23af277f73872e503f6f84fa084e3a0700703ff6ecea958e3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/complex_s_plane.py"}, "region": {"startLine": 217}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.s_tracker` used but never assigned in __init__: Method `explore_s_values` of class `SPlaneVisualization` reads `self.s_tracker`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468959, "scanner": "repobility-ast-engine", "fingerprint": "179a0c684f6b4e6422334850260ed0d72ff4a46238173c046c6720254bda4b22", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|179a0c684f6b4e6422334850260ed0d72ff4a46238173c046c6720254bda4b22"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/complex_s_plane.py"}, "region": {"startLine": 192}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.t_tracker` used but never assigned in __init__: Method `play_time_forward` of class `SPlaneVisualization` reads `self.t_tracker`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468958, "scanner": "repobility-ast-engine", "fingerprint": "7e56cdeec50fa33339c1f2acf8eba2cd111e8540d290a50ba220e430d29e5aa6", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7e56cdeec50fa33339c1f2acf8eba2cd111e8540d290a50ba220e430d29e5aa6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/complex_s_plane.py"}, "region": {"startLine": 185}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.t_tracker` used but never assigned in __init__: Method `play_time_forward` of class `SPlaneVisualization` reads `self.t_tracker`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468957, "scanner": "repobility-ast-engine", "fingerprint": "fcce6ada0c79594047a2680b521def7f6f3b6a4254553681fc725dd2cd739de7", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|fcce6ada0c79594047a2680b521def7f6f3b6a4254553681fc725dd2cd739de7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/complex_s_plane.py"}, "region": {"startLine": 183}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.s_plane` used but never assigned in __init__: Method `construct` of class `SPlaneVisualization` reads `self.s_plane`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468956, "scanner": "repobility-ast-engine", "fingerprint": "65fd2c28ebfb119240f1c742da10d2e5fcf99e58461c86e5c488330695354800", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|65fd2c28ebfb119240f1c742da10d2e5fcf99e58461c86e5c488330695354800"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/complex_s_plane.py"}, "region": {"startLine": 59}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.t_tracker` used but never assigned in __init__: Method `construct` of class `SPlaneVisualization` reads `self.t_tracker`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468955, "scanner": "repobility-ast-engine", "fingerprint": "4a6b7d725f44fb1512feab3f3dd621f35e1a211e1f566c4236e66fd38e5251de", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4a6b7d725f44fb1512feab3f3dd621f35e1a211e1f566c4236e66fd38e5251de"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/complex_s_plane.py"}, "region": {"startLine": 58}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.s_tracker` used but never assigned in __init__: Method `construct` of class `SPlaneVisualization` reads `self.s_tracker`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468954, "scanner": "repobility-ast-engine", "fingerprint": "db632b9f43aca0b0a9b841e80a9139d99d4673c0920119088060c8516ff0ce24", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|db632b9f43aca0b0a9b841e80a9139d99d4673c0920119088060c8516ff0ce24"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/complex_s_plane.py"}, "region": {"startLine": 57}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.camera` used but never assigned in __init__: Method `construct` of class `MultiHead3D` reads `self.camera`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468953, "scanner": "repobility-ast-engine", "fingerprint": "0c4c1eab58f355ada3da69e7a3c1797cfdf8e7c0fef933ab047381331f08b344", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0c4c1eab58f355ada3da69e7a3c1797cfdf8e7c0fef933ab047381331f08b344"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/basic_multihead.py"}, "region": {"startLine": 120}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `MultiHeadedAttention` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468952, "scanner": "repobility-ast-engine", "fingerprint": "d2e47e48255f0d4511cb0feff2ba7b358a9aca71f28541e6b4c1fb14ed9515ad", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d2e47e48255f0d4511cb0feff2ba7b358a9aca71f28541e6b4c1fb14ed9515ad"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/attention_scenes.py"}, "region": {"startLine": 910}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `QueryMap` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468951, "scanner": "repobility-ast-engine", "fingerprint": "8bb680d1676d9928ee4eb55a506f30295f6f7bd52c570137ad1762f1aed8650e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8bb680d1676d9928ee4eb55a506f30295f6f7bd52c570137ad1762f1aed8650e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/attention_scenes.py"}, "region": {"startLine": 758}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `LowRankTransformation` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468950, "scanner": "repobility-ast-engine", "fingerprint": "ebc6f2160ede96225c4b1b2bfbf1e40162d3e9fd3faee5b265320162f4e92a45", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ebc6f2160ede96225c4b1b2bfbf1e40162d3e9fd3faee5b265320162f4e92a45"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/attention_scenes.py"}, "region": {"startLine": 419}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `ScalingAPattern` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468949, "scanner": "repobility-ast-engine", "fingerprint": "83c9b201c40d1fdff4cfe227c26b30845f61af318c806bf5e46a13a6a218f620", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|83c9b201c40d1fdff4cfe227c26b30845f61af318c806bf5e46a13a6a218f620"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/attention_scenes.py"}, "region": {"startLine": 408}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.run_time` used but never assigned in __init__: Method `new_step` of class `Randomize` reads `self.run_time`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468948, "scanner": "repobility-ast-engine", "fingerprint": "c1c9a339abd51a2d14cc54425fe1a341f62d1e0c74f4aae740dd7b28e80076a3", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c1c9a339abd51a2d14cc54425fe1a341f62d1e0c74f4aae740dd7b28e80076a3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/max_random_process.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `WordVectorAnalogy` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468947, "scanner": "repobility-ast-engine", "fingerprint": "c30344168c6bb190e924c5bb57d411487a72f92d0f42cabab3de81db4609dee7", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c30344168c6bb190e924c5bb57d411487a72f92d0f42cabab3de81db4609dee7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/word_vector_analogy.py"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `TokenToEmbedding` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468946, "scanner": "repobility-ast-engine", "fingerprint": "738c30c0f0609831a2d727b05449de97d10c6916c1adde40e1604529341d68fb", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|738c30c0f0609831a2d727b05449de97d10c6916c1adde40e1604529341d68fb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/token_to_embedding.py"}, "region": {"startLine": 146}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.camera` used but never assigned in __init__: Method `construct` of class `WaveAmplitudeDemo` reads `self.camera`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468944, "scanner": "repobility-ast-engine", "fingerprint": "7debe4b7f330cfc2bbe96d60d5faab8927d8cf9653d2f5b3d4cb8e9c7087506f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7debe4b7f330cfc2bbe96d60d5faab8927d8cf9653d2f5b3d4cb8e9c7087506f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/wave_amplitude_visualization.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `HexagonCubeCorrespondence` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468942, "scanner": "repobility-ast-engine", "fingerprint": "e608bd2aca88cc10125ba8998132dadda3fa650c0cb68586ee0a457c678599f7", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e608bd2aca88cc10125ba8998132dadda3fa650c0cb68586ee0a457c678599f7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/hexagon_cube_correspondence.py"}, "region": {"startLine": 63}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `HexagonCubeCorrespondence` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468941, "scanner": "repobility-ast-engine", "fingerprint": "cce5654b968c32960b274bd8dd97713afa287950920df375bcb1a050bae88a83", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cce5654b968c32960b274bd8dd97713afa287950920df375bcb1a050bae88a83"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/hexagon_cube_correspondence.py"}, "region": {"startLine": 24}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `HexagonCubeCorrespondence` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468940, "scanner": "repobility-ast-engine", "fingerprint": "46e431216d46a4d86283bda9989273c9f9e450f38486951b48ce85aff34a9ce0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|46e431216d46a4d86283bda9989273c9f9e450f38486951b48ce85aff34a9ce0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/hexagon_cube_correspondence.py"}, "region": {"startLine": 23}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `PreviewClip3D` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468938, "scanner": "repobility-ast-engine", "fingerprint": "c8c1764b64882376f4a5d55d06e659ad8bc81ceda0626de80b11a4582025da66", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c8c1764b64882376f4a5d55d06e659ad8bc81ceda0626de80b11a4582025da66"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/blocks_3d.py"}, "region": {"startLine": 182}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `Blocks3D` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468937, "scanner": "repobility-ast-engine", "fingerprint": "0d059f9d678be9303dc5a67fd42e2ec543504db3225139bb3c9a86db2f74ab5f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0d059f9d678be9303dc5a67fd42e2ec543504db3225139bb3c9a86db2f74ab5f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/blocks_3d.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `LozengeTiling` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468936, "scanner": "repobility-ast-engine", "fingerprint": "790e12efdd661e9a1c69c1abf97e3881d5806648d1483a554a3cd91faf56bb83", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|790e12efdd661e9a1c69c1abf97e3881d5806648d1483a554a3cd91faf56bb83"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/lozenge_tiling.py"}, "region": {"startLine": 77}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.frame` used but never assigned in __init__: Method `construct` of class `QueryKeySpaceMapping` reads `self.frame`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468935, "scanner": "repobility-ast-engine", "fingerprint": "2b4e6f424b4f0da3d4c52c9c00c79f254506c36464cd6202564ad051b89692cf", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2b4e6f424b4f0da3d4c52c9c00c79f254506c36464cd6202564ad051b89692cf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/query_key_space_mapping.py"}, "region": {"startLine": 15}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.camera` used but never assigned in __init__: Method `construct` of class `SimpleMultiHead` reads `self.camera`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468934, "scanner": "repobility-ast-engine", "fingerprint": "8763c6069d484da82afee6411fecf7ce5abc2759efdee2f90ae91e5c56ca2f2d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8763c6069d484da82afee6411fecf7ce5abc2759efdee2f90ae91e5c56ca2f2d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/multi_head_attention.py"}, "region": {"startLine": 247}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.camera` used but never assigned in __init__: Method `construct` of class `MultiHeadedAttention` reads `self.camera`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468933, "scanner": "repobility-ast-engine", "fingerprint": "dc667428726700771117451e21148507d7cf1d373e19cd32f5d420b692c40c15", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|dc667428726700771117451e21148507d7cf1d373e19cd32f5d420b692c40c15"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/multi_head_attention.py"}, "region": {"startLine": 128}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_decision_log_accepts_render_runtime_selection_with_both_options: Test function `test_decision_log_accepts_render_runtime_selection_with_both_options` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468931, "scanner": "repobility-ast-engine", "fingerprint": "c6311d2111b9c1507d78e8a3d41f1d3669ee2d216e68751c57df757804445bf5", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c6311d2111b9c1507d78e8a3d41f1d3669ee2d216e68751c57df757804445bf5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/tools/test_hyperframes_compose.py"}, "region": {"startLine": 587}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_video_analysis_brief_validates: Test function `test_video_analysis_brief_validates` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468930, "scanner": "repobility-ast-engine", "fingerprint": "072880a8ab477d3c7265541b78f73984c8aff058d41fabe04d3fb9cf816a2e7a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|072880a8ab477d3c7265541b78f73984c8aff058d41fabe04d3fb9cf816a2e7a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/contracts/test_phase0_contracts.py"}, "region": {"startLine": 284}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_brief_validates: Test function `test_brief_validates` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468929, "scanner": "repobility-ast-engine", "fingerprint": "0aa2dc120eb46391a06849deef9ea5ec56fc3c2d205f116c4d42de7b83a39682", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0aa2dc120eb46391a06849deef9ea5ec56fc3c2d205f116c4d42de7b83a39682"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/contracts/test_phase0_contracts.py"}, "region": {"startLine": 277}}}]}, {"ruleId": "SEC013", "level": "error", "message": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files."}, "properties": {"repobilityId": 468888, "scanner": "repobility-threat-engine", "fingerprint": "bd283755da0143d09c1d31a03c12cceafc41848e8b11cba542361dfc49ce96af", "category": "path_traversal", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "User-controlled input detected in file path construction", "evidence": {"match": "open(input", "reason": "User-controlled input detected in file path construction", "rule_id": "SEC013", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|path_traversal|token|129|sec013"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/enhancement/bg_remove.py"}, "region": {"startLine": 129}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 468884, "scanner": "repobility-threat-engine", "fingerprint": "a40478523728484086de66928c04eae6f9d3429e7c2ba05688c42bdfbfb57ea9", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|a40478523728484086de66928c04eae6f9d3429e7c2ba05688c42bdfbfb57ea9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/enhancement/upscale.py"}, "region": {"startLine": 336}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 468883, "scanner": "repobility-threat-engine", "fingerprint": "dc58f00cb9a6d85296e17f8cf876e2d9f91d4b189467675435392473cb16b334", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|dc58f00cb9a6d85296e17f8cf876e2d9f91d4b189467675435392473cb16b334"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/avatar/talking_head.py"}, "region": {"startLine": 122}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 468882, "scanner": "repobility-threat-engine", "fingerprint": "cf92c51f7115d32b7fa9856026b3c761a42f04699d1a14a2a6a76804c12ba364", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|cf92c51f7115d32b7fa9856026b3c761a42f04699d1a14a2a6a76804c12ba364"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/avatar/lip_sync.py"}, "region": {"startLine": 121}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 468880, "scanner": "repobility-threat-engine", "fingerprint": "cd7b5208c0d693f43b1c886c4d353d6d6ecaadfa00aa39c1b478b438cb246e78", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(image_url", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|cd7b5208c0d693f43b1c886c4d353d6d6ecaadfa00aa39c1b478b438cb246e78"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/graphics/flux_image.py"}, "region": {"startLine": 140}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 468879, "scanner": "repobility-threat-engine", "fingerprint": "f7677c36733c631cfbe99ad20044c77f8e1cc3fc2f567f892300c9def4b92f11", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(audio_url", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|f7677c36733c631cfbe99ad20044c77f8e1cc3fc2f567f892300c9def4b92f11"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/suno_music.py"}, "region": {"startLine": 284}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 468878, "scanner": "repobility-threat-engine", "fingerprint": "8d129b7b1d2f5639932771fc58114760f218f2e121df8eccc05f3e7f1022c922", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "urllib.request.urlopen(r", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|8d129b7b1d2f5639932771fc58114760f218f2e121df8eccc05f3e7f1022c922"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/freesound_music.py"}, "region": {"startLine": 197}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 468872, "scanner": "repobility-threat-engine", "fingerprint": "35179ef0a1cbd7f0ec8d4ca423080c827e7e1f851b937e0d1118fa03e09abc86", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.post(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|35179ef0a1cbd7f0ec8d4ca423080c827e7e1f851b937e0d1118fa03e09abc86"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/music_gen.py"}, "region": {"startLine": 152}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 468871, "scanner": "repobility-threat-engine", "fingerprint": "62bfea8b170097d6c2b21bd84c9310a96d575c970fcabc105eb835dfe0122d18", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.post(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|62bfea8b170097d6c2b21bd84c9310a96d575c970fcabc105eb835dfe0122d18"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/google_tts.py"}, "region": {"startLine": 206}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 468870, "scanner": "repobility-threat-engine", "fingerprint": "14d1e9a71de9a87a9e5a3a2becd4a456b0b174efbfdaa9bec88928267b60855f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.post(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|14d1e9a71de9a87a9e5a3a2becd4a456b0b174efbfdaa9bec88928267b60855f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/audio/elevenlabs_tts.py"}, "region": {"startLine": 149}}}]}, {"ruleId": "MINED036", "level": "error", "message": {"text": "[MINED036] Python Os System Call: os.system() invokes shell with no escaping."}, "properties": {"repobilityId": 468858, "scanner": "repobility-threat-engine", "fingerprint": "074326b7eae7d3ca7c65b945369f4f416bac2d0def85ee2c47d83189d16fb139", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-os-system-call", "owasp": null, "cwe_ids": ["CWE-78"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347982+00:00", "triaged_in_corpus": 15, "observations_count": 2221, "ai_coder_pattern_id": 117}, "scanner": "repobility-threat-engine", "correlation_key": "fp|074326b7eae7d3ca7c65b945369f4f416bac2d0def85ee2c47d83189d16fb139"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/templates/math_scene.py"}, "region": {"startLine": 333}}}]}, {"ruleId": "MINED036", "level": "error", "message": {"text": "[MINED036] Python Os System Call: os.system() invokes shell with no escaping."}, "properties": {"repobilityId": 468857, "scanner": "repobility-threat-engine", "fingerprint": "4824c8916c57069c380c35e12803ad93e17f0a563021a7b6b5974a7f4a768e09", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-os-system-call", "owasp": null, "cwe_ids": ["CWE-78"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347982+00:00", "triaged_in_corpus": 15, "observations_count": 2221, "ai_coder_pattern_id": 117}, "scanner": "repobility-threat-engine", "correlation_key": "fp|4824c8916c57069c380c35e12803ad93e17f0a563021a7b6b5974a7f4a768e09"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/templates/basic_scene.py"}, "region": {"startLine": 134}}}]}, {"ruleId": "MINED036", "level": "error", "message": {"text": "[MINED036] Python Os System Call: os.system() invokes shell with no escaping."}, "properties": {"repobilityId": 468856, "scanner": "repobility-threat-engine", "fingerprint": "af5493cb3d9bd1b0b48ed166cb5358774ae88bb0325b5695398ab5dc42bb1de0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-os-system-call", "owasp": null, "cwe_ids": ["CWE-78"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347982+00:00", "triaged_in_corpus": 15, "observations_count": 2221, "ai_coder_pattern_id": 117}, "scanner": "repobility-threat-engine", "correlation_key": "fp|af5493cb3d9bd1b0b48ed166cb5358774ae88bb0325b5695398ab5dc42bb1de0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/templates/3d_scene.py"}, "region": {"startLine": 258}}}]}, {"ruleId": "SEC005", "level": "error", "message": {"text": "[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input."}, "properties": {"repobilityId": 468854, "scanner": "repobility-threat-engine", "fingerprint": "b824fb902ecb69fbc2a1959ffa87bd877a4d40def9081f18e99a38b037345081", "category": "injection", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Command source appears controllable (config/plugin/argv/user input)", "evidence": {"match": "os.system(f\"", "reason": "Command source appears controllable (config/plugin/argv/user input)", "rule_id": "SEC005", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|injection|. token|333|sec005"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/templates/math_scene.py"}, "region": {"startLine": 333}}}]}, {"ruleId": "SEC005", "level": "error", "message": {"text": "[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input."}, "properties": {"repobilityId": 468853, "scanner": "repobility-threat-engine", "fingerprint": "8a6155dce0e3abcfa94eddaa011aca65ab91f8db557f0f93b04e97b8d49764a8", "category": "injection", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Command source appears controllable (config/plugin/argv/user input)", "evidence": {"match": "os.system(f\"", "reason": "Command source appears controllable (config/plugin/argv/user input)", "rule_id": "SEC005", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|injection|. token|134|sec005"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/templates/basic_scene.py"}, "region": {"startLine": 134}}}]}, {"ruleId": "SEC005", "level": "error", "message": {"text": "[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input."}, "properties": {"repobilityId": 468852, "scanner": "repobility-threat-engine", "fingerprint": "96827a6c19753256148de5cb70537119c1cb4e0178f34f5a251f6f498f936b5a", "category": "injection", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Command source appears controllable (config/plugin/argv/user input)", "evidence": {"match": "os.system(f\"", "reason": "Command source appears controllable (config/plugin/argv/user input)", "rule_id": "SEC005", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|injection|. token|258|sec005"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/templates/3d_scene.py"}, "region": {"startLine": 258}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 468850, "scanner": "repobility-threat-engine", "fingerprint": "86085111d2eff8256d5ee6fa897be7533267d143d6714b302b3edb61ce48aba2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "superposition.update()", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|86085111d2eff8256d5ee6fa897be7533267d143d6714b302b3edb61ce48aba2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/superposition_effect.py"}, "region": {"startLine": 136}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 468849, "scanner": "repobility-threat-engine", "fingerprint": "14849c5366a955bbb6839ef4b970974c0febe255f8184b5ff6e3266d4e4c3769", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "kwargs.update(remover=True)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|14849c5366a955bbb6839ef4b970974c0febe255f8184b5ff6e3266d4e4c3769"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/sqrt_random_process.py"}, "region": {"startLine": 43}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 468848, "scanner": "repobility-threat-engine", "fingerprint": "69d00b40635ec7931d5d2c326bff6d52f05ada55a8a03bf22233e781522fcd08", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "kwargs.update(remover=True)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|69d00b40635ec7931d5d2c326bff6d52f05ada55a8a03bf22233e781522fcd08"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/max_random_process.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "SEC040", "level": "error", "message": {"text": "[SEC040] innerHTML XSS \u2014 template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflected XSS vector. The browser parses the HTML and executes any <script> or event-handler attributes in the data. CWE-79. Especially dangerous when the data comes from a CV parser, profile field, or any user-input pipeline."}, "properties": {"repobilityId": 468836, "scanner": "repobility-threat-engine", "fingerprint": "f01092ce7ad628a8a542249cf7037e18e83263f53171108c24048f205ab4952e", "category": "xss", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".html(`\n            <strong>${d.label || 'Point'}</strong><br/>\n            X: ${d.x.toFixed(2)}<br/", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC040", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|f01092ce7ad628a8a542249cf7037e18e83263f53171108c24048f205ab4952e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/d3-viz/assets/interactive-template.jsx"}, "region": {"startLine": 112}}}]}, {"ruleId": "SEC040", "level": "error", "message": {"text": "[SEC040] innerHTML XSS \u2014 template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflected XSS vector. The browser parses the HTML and executes any <script> or event-handler attributes in the data. CWE-79. Especially dangerous when the data comes from a CV parser, profile field, or any user-input pipeline."}, "properties": {"repobilityId": 468835, "scanner": "repobility-threat-engine", "fingerprint": "d0b20c540510912c02245cada76849fcee464323c62804f33be9e2336b768831", "category": "xss", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".html(`\n            <strong>${d.label || 'Point'}</strong><br/>\n            X: ${d.x.toFixed(2)}<br/", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC040", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|d0b20c540510912c02245cada76849fcee464323c62804f33be9e2336b768831"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/d3-viz/assets/interactive-template.jsx"}, "region": {"startLine": 112}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `time` used but not imported: The file uses `time.something(...)` but never imports `time`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 469009, "scanner": "repobility-ast-engine", "fingerprint": "f278f12eff3a0385f516cafd5de5e6cfa7a7ba616a577ed5848196a6a8db38cb", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f278f12eff3a0385f516cafd5de5e6cfa7a7ba616a577ed5848196a6a8db38cb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimce-best-practices/examples/3d_visualization.py"}, "region": {"startLine": 332}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `math` used but not imported: The file uses `math.something(...)` but never imports `math`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 469007, "scanner": "repobility-ast-engine", "fingerprint": "995fce4da2f4525c4328261b83fbf635909bb5a1d47610837ee2c243f38a6bf0", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|995fce4da2f4525c4328261b83fbf635909bb5a1d47610837ee2c243f38a6bf0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/damped_solutions_splane.py"}, "region": {"startLine": 76}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `time` used but not imported: The file uses `time.something(...)` but never imports `time`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 469005, "scanner": "repobility-ast-engine", "fingerprint": "38cc231bfddf7f38866a5fb01c518c3d30a79a88bfeabe66a927566ea05a2036", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|38cc231bfddf7f38866a5fb01c518c3d30a79a88bfeabe66a927566ea05a2036"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/transit_animation.py"}, "region": {"startLine": 147}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `copy` used but not imported: The file uses `copy.something(...)` but never imports `copy`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 469004, "scanner": "repobility-ast-engine", "fingerprint": "a12302cbf2aaad0971ebdb9dea8a5fa9cd09a6da00ddbe0085d50a6cdc1f0095", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a12302cbf2aaad0971ebdb9dea8a5fa9cd09a6da00ddbe0085d50a6cdc1f0095"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/transit_animation.py"}, "region": {"startLine": 60}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `math` used but not imported: The file uses `math.something(...)` but never imports `math`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 469003, "scanner": "repobility-ast-engine", "fingerprint": "e2417a0191cd8e8656aaff87db3b8f252cb773a9da53e1aa40bdd64e93c973a3", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e2417a0191cd8e8656aaff87db3b8f252cb773a9da53e1aa40bdd64e93c973a3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/qubit_state_vector.py"}, "region": {"startLine": 62}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `array` used but not imported: The file uses `array.something(...)` but never imports `array`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468999, "scanner": "repobility-ast-engine", "fingerprint": "e145acc79b7eabeed7a05c71e2481b5ecb832501094558d3d7d2fdf4a49ce462", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e145acc79b7eabeed7a05c71e2481b5ecb832501094558d3d7d2fdf4a49ce462"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".agents/skills/manimgl-best-practices/examples/token_to_embedding.py"}, "region": {"startLine": 218}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `warnings` used but not imported: The file uses `warnings.something(...)` but never imports `warnings`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468985, "scanner": "repobility-ast-engine", "fingerprint": "3e20d1cd0cf0770c9243af6ac4586a6011695ed13bc0112a5ebebf4a09c011b1", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3e20d1cd0cf0770c9243af6ac4586a6011695ed13bc0112a5ebebf4a09c011b1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/analysis/composition_validator.py"}, "region": {"startLine": 241}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `warnings` used but not imported: The file uses `warnings.something(...)` but never imports `warnings`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468980, "scanner": "repobility-ast-engine", "fingerprint": "d79637d1e026580c3377e1095bcaa22dee4580216696e9580270702ae785dec9", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d79637d1e026580c3377e1095bcaa22dee4580216696e9580270702ae785dec9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/video/video_compose.py"}, "region": {"startLine": 853}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `time` used but not imported: The file uses `time.something(...)` but never imports `time`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468970, "scanner": "repobility-ast-engine", "fingerprint": "c2edc45741535b6c2c69d38c8c0591822a448d999c64678ef393d2cd38a0b17c", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c2edc45741535b6c2c69d38c8c0591822a448d999c64678ef393d2cd38a0b17c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimce-best-practices/examples/3d_visualization.py"}, "region": {"startLine": 332}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `math` used but not imported: The file uses `math.something(...)` but never imports `math`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468968, "scanner": "repobility-ast-engine", "fingerprint": "730dea70e9ea69874ac5d3410fbe39ac3786ea6c9f92d38237c6e7716b867f25", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|730dea70e9ea69874ac5d3410fbe39ac3786ea6c9f92d38237c6e7716b867f25"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/damped_solutions_splane.py"}, "region": {"startLine": 76}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `time` used but not imported: The file uses `time.something(...)` but never imports `time`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468966, "scanner": "repobility-ast-engine", "fingerprint": "20a5aae1f0e216bb183b9144a76d021b4b2ea2c36b546f39d1738feb42827361", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|20a5aae1f0e216bb183b9144a76d021b4b2ea2c36b546f39d1738feb42827361"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/transit_animation.py"}, "region": {"startLine": 147}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `copy` used but not imported: The file uses `copy.something(...)` but never imports `copy`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468965, "scanner": "repobility-ast-engine", "fingerprint": "617d4a98cb2bbeb012ab83a3aa6d5c6632a6c24c83a43b7b3ce87a60eb02a120", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|617d4a98cb2bbeb012ab83a3aa6d5c6632a6c24c83a43b7b3ce87a60eb02a120"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/transit_animation.py"}, "region": {"startLine": 60}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `math` used but not imported: The file uses `math.something(...)` but never imports `math`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468964, "scanner": "repobility-ast-engine", "fingerprint": "eaae6b3452d4534b9dae361b56f85e72f5a5824acdde20fb21d243d670a8e182", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|eaae6b3452d4534b9dae361b56f85e72f5a5824acdde20fb21d243d670a8e182"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/qubit_state_vector.py"}, "region": {"startLine": 62}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `array` used but not imported: The file uses `array.something(...)` but never imports `array`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468945, "scanner": "repobility-ast-engine", "fingerprint": "8da180f4b893991f7498a37d18f20e854ec29e03c041f33bd771434d45b8843c", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8da180f4b893991f7498a37d18f20e854ec29e03c041f33bd771434d45b8843c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/token_to_embedding.py"}, "region": {"startLine": 218}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `html` used but not imported: The file uses `html.something(...)` but never imports `html`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468932, "scanner": "repobility-ast-engine", "fingerprint": "e1a98c12837b896c20495c8e0f892fd5e1ccc97ed84a671f4b9b20a76d636bee", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e1a98c12837b896c20495c8e0f892fd5e1ccc97ed84a671f4b9b20a76d636bee"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/tools/test_hyperframes_compose.py"}, "region": {"startLine": 944}}}]}, {"ruleId": "scanner-58d8e38108fd2326", "level": "note", "message": {"text": "Possibly dead Python function: review_source_media"}, "properties": {"repobilityId": "6b159f65f72bd472", "scanner": "scanner-primary", "fingerprint": "58d8e38108fd2326", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/source_media_review.py:215"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f9a112aa4d2451de", "level": "note", "message": {"text": "Possibly dead Python function: has_user_media"}, "properties": {"repobilityId": "ecfd5fef8e2b6e5b", "scanner": "scanner-primary", "fingerprint": "f9a112aa4d2451de", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/source_media_review.py:387"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0eebf3d834f46162", "level": "note", "message": {"text": "Possibly dead Python function: knn"}, "properties": {"repobilityId": "dfe6491f1f9bf207", "scanner": "scanner-primary", "fingerprint": "0eebf3d834f46162", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/corpus.py:288"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4bd5fd1926e8962a", "level": "note", "message": {"text": "Possibly dead Python function: check_extension_permitted"}, "properties": {"repobilityId": "fd3891cb8c5e718c", "scanner": "scanner-primary", "fingerprint": "4bd5fd1926e8962a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/pipeline_loader.py:169"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a64446202ae5ad02", "level": "note", "message": {"text": "Possibly dead Python function: generate_playbook"}, "properties": {"repobilityId": "7d3890f9075e7d62", "scanner": "scanner-primary", "fingerprint": "a64446202ae5ad02", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/playbook_generator.py:52"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0c1f2c77cba98332", "level": "note", "message": {"text": "Possibly dead Python function: save_playbook"}, "properties": {"repobilityId": "a865e0eb70f3f336", "scanner": "scanner-primary", "fingerprint": "0c1f2c77cba98332", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/playbook_generator.py:200"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bc1d3201a0f53585", "level": "note", "message": {"text": "Possibly dead Python function: classify_from_brief"}, "properties": {"repobilityId": "2117ba6d07c843b3", "scanner": "scanner-primary", "fingerprint": "bc1d3201a0f53585", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/delivery_promise.py:196"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07caeb3589fdba88", "level": "note", "message": {"text": "Possibly dead Python function: format_ranking"}, "properties": {"repobilityId": "04ed6b5a504fba71", "scanner": "scanner-primary", "fingerprint": "07caeb3589fdba88", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/scoring.py:545"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71731fdaf3f66344", "level": "note", "message": {"text": "Possibly dead Python function: build_batch_prompts"}, "properties": {"repobilityId": "1ccb7e926571eb90", "scanner": "scanner-primary", "fingerprint": "71731fdaf3f66344", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/shot_prompt_builder.py:146"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-512d0c4eafde9f37", "level": "note", "message": {"text": "Possibly dead Python function: require_env"}, "properties": {"repobilityId": "f856dd845d12fb74", "scanner": "scanner-primary", "fingerprint": "512d0c4eafde9f37", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/env_loader.py:29"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e43353cd699de66b", "level": "note", "message": {"text": "Possibly dead Python function: model_info"}, "properties": {"repobilityId": "c47e7df8e5238843", "scanner": "scanner-primary", "fingerprint": "e43353cd699de66b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/clip_embedder.py:55"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dac7b62d26647455", "level": "note", "message": {"text": "Possibly dead Python function: resolve_path"}, "properties": {"repobilityId": "087cfc9f0fa6981c", "scanner": "scanner-primary", "fingerprint": "dac7b62d26647455", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/config_model.py:87"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a900eb2dc33e85b", "level": "note", "message": {"text": "Possibly dead Python function: generate_i2i"}, "properties": {"repobilityId": "0dbb3f4bbab88d3d", "scanner": "scanner-primary", "fingerprint": "3a900eb2dc33e85b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/python-client.py:196"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9b59ee343c35f8a", "level": "note", "message": {"text": "Possibly dead Python function: generate_batch"}, "properties": {"repobilityId": "484370700d73a6e4", "scanner": "scanner-primary", "fingerprint": "b9b59ee343c35f8a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/python-client.py:241"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4990efb95ce94102", "level": "note", "message": {"text": "Possibly dead Python function: verify_webhook_signature"}, "properties": {"repobilityId": "291c7fe00a98654c", "scanner": "scanner-primary", "fingerprint": "4990efb95ce94102", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/python-client.py:426"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6daad0716db1d680", "level": "note", "message": {"text": "Possibly dead Python function: construct"}, "properties": {"repobilityId": "495aa6ceaa730f6f", "scanner": "scanner-primary", "fingerprint": "6daad0716db1d680", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/templates/interactive_scene.py:36"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7096210766e0bdce", "level": "note", "message": {"text": "Possibly dead Python function: construct"}, "properties": {"repobilityId": "495aa6ceaa730f6f", "scanner": "scanner-primary", "fingerprint": "7096210766e0bdce", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/templates/basic_scene.py:97"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ec0c68a45ee12c25", "level": "note", "message": {"text": "Possibly dead Python function: construct"}, "properties": {"repobilityId": "495aa6ceaa730f6f", "scanner": "scanner-primary", "fingerprint": "ec0c68a45ee12c25", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/templates/3d_scene.py:228"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aca5cb5220c0d71d", "level": "note", "message": {"text": "Possibly dead Python function: construct"}, "properties": {"repobilityId": "495aa6ceaa730f6f", "scanner": "scanner-primary", "fingerprint": "aca5cb5220c0d71d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/templates/math_scene.py:292"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11a2260f437c9ae8", "level": "note", "message": {"text": "Possibly dead Python function: construct"}, "properties": {"repobilityId": "495aa6ceaa730f6f", "scanner": "scanner-primary", "fingerprint": "11a2260f437c9ae8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/spring_mass_system.py:276"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d74288f2d3d1f6e4", "level": "note", "message": {"text": "Possibly dead Python function: construct"}, "properties": {"repobilityId": "495aa6ceaa730f6f", "scanner": "scanner-primary", "fingerprint": "d74288f2d3d1f6e4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/multi_head_attention.py:229"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f532265229376c30", "level": "note", "message": {"text": "Possibly dead Python function: construct"}, "properties": {"repobilityId": "495aa6ceaa730f6f", "scanner": "scanner-primary", "fingerprint": "f532265229376c30", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/attention_pattern_dots.py:21"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2be871fe9fcd6f02", "level": "note", "message": {"text": "Possibly dead Python function: construct"}, "properties": {"repobilityId": "495aa6ceaa730f6f", "scanner": "scanner-primary", "fingerprint": "2be871fe9fcd6f02", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/mlp_vector_space.py:156"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27126efa838ca9a5", "level": "note", "message": {"text": "Possibly dead Python function: update_emb_vect"}, "properties": {"repobilityId": "4094561467999e77", "scanner": "scanner-primary", "fingerprint": "27126efa838ca9a5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/mlp_vector_space.py:114"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6fa40e84cfc6d37f", "level": "note", "message": {"text": "Possibly dead Python function: construct"}, "properties": {"repobilityId": "495aa6ceaa730f6f", "scanner": "scanner-primary", "fingerprint": "6fa40e84cfc6d37f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/examples/query_key_space_mapping.py:12"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c54f974745777b27", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/skills/bfl-api/references/code-examples/typescript-client.ts:12"}, "properties": {"repobilityId": "5138fcfbeed5e9c4", "scanner": "scanner-primary", "fingerprint": "c54f974745777b27", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bfd1095f87578973", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/skills/beautiful-mermaid/scripts/render.ts:104"}, "properties": {"repobilityId": "113e84b2563799cc", "scanner": "scanner-primary", "fingerprint": "bfd1095f87578973", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f257d5e93931f0ff", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/skills/beautiful-mermaid/scripts/create-html.ts:77"}, "properties": {"repobilityId": "c9d4790c512e7e4b", "scanner": "scanner-primary", "fingerprint": "f257d5e93931f0ff", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e21c37e6311a54d6", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 tools/audio/freesound_music.py:197"}, "properties": {"repobilityId": "0c57788afab38910", "scanner": "scanner-primary", "fingerprint": "e21c37e6311a54d6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-7a2fd51a5468e4b3", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 tools/audio/freesound_music.py:226"}, "properties": {"repobilityId": "dcde7b12bd2404ba", "scanner": "scanner-primary", "fingerprint": "7a2fd51a5468e4b3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-b796983de1bb5c7e", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 tools/audio/pixabay_music.py:352"}, "properties": {"repobilityId": "9f7953be0bbed43e", "scanner": "scanner-primary", "fingerprint": "b796983de1bb5c7e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-48adef4a389c49e3", "level": "error", "message": {"text": "CVE-2026-6321: fast-uri 3.1.0 \u2014 remotion-composer/package-lock.json"}, "properties": {"repobilityId": "0b2d376987510fce", "scanner": "scanner-primary", "fingerprint": "48adef4a389c49e3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-6321"]}}, {"ruleId": "scanner-8b6aa47b628bbaa3", "level": "error", "message": {"text": "CVE-2026-6322: fast-uri 3.1.0 \u2014 remotion-composer/package-lock.json"}, "properties": {"repobilityId": "33aabedd404f02f2", "scanner": "scanner-primary", "fingerprint": "8b6aa47b628bbaa3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-6322"]}}, {"ruleId": "scanner-8399d7cb8c87e275", "level": "error", "message": {"text": "CVE-2022-37601: loader-utils 2.0.2 \u2014 remotion-composer/package-lock.json"}, "properties": {"repobilityId": "1e529c0e5fadd3ac", "scanner": "scanner-primary", "fingerprint": "8399d7cb8c87e275", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2022-37601"]}}, {"ruleId": "scanner-e73c05ed7badfa12", "level": "error", "message": {"text": "CVE-2022-37599: loader-utils 2.0.2 \u2014 remotion-composer/package-lock.json"}, "properties": {"repobilityId": "c4581e57806ba0fe", "scanner": "scanner-primary", "fingerprint": "e73c05ed7badfa12", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2022-37599"]}}, {"ruleId": "scanner-c0e855f270332c91", "level": "error", "message": {"text": "CVE-2022-37603: loader-utils 2.0.2 \u2014 remotion-composer/package-lock.json"}, "properties": {"repobilityId": "6d10f30b90dc6955", "scanner": "scanner-primary", "fingerprint": "c0e855f270332c91", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2022-37603"]}}, {"ruleId": "scanner-4ff7d117e9b96f7b", "level": "warning", "message": {"text": "CVE-2026-41305: postcss 8.5.1 \u2014 remotion-composer/package-lock.json"}, "properties": {"repobilityId": "5bb6b43f4fe5ebde", "scanner": "scanner-primary", "fingerprint": "4ff7d117e9b96f7b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-41305"]}}, {"ruleId": "scanner-f164d5f1ab7ac43a", "level": "error", "message": {"text": "CVE-2026-48779: ws 8.17.1 \u2014 remotion-composer/package-lock.json"}, "properties": {"repobilityId": "3fd66da87d07a877", "scanner": "scanner-primary", "fingerprint": "f164d5f1ab7ac43a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-48779"]}}, {"ruleId": "scanner-d45ae8182b100449", "level": "warning", "message": {"text": "CVE-2026-45736: ws 8.17.1 \u2014 remotion-composer/package-lock.json"}, "properties": {"repobilityId": "6c416d0eb3af4fed", "scanner": "scanner-primary", "fingerprint": "d45ae8182b100449", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-45736"]}}, {"ruleId": "scanner-624d54724482b6db", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "6b1dfd3232d0e5aa", "scanner": "scanner-primary", "fingerprint": "624d54724482b6db", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1ca50ef4047a1626", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/web-design-guidelines/SKILL.md"}, "properties": {"repobilityId": "f2451fa9a31e4611", "scanner": "scanner-primary", "fingerprint": "1ca50ef4047a1626", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/web-design-guidelines/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-760662b595e44ec1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/flux-best-practices/rules/typography-text.md"}, "properties": {"repobilityId": "197a6b0701f7b134", "scanner": "scanner-primary", "fingerprint": "760662b595e44ec1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/flux-best-practices/rules/typography-text.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c3703048deaf20b4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/text-to-speech/SKILL.md"}, "properties": {"repobilityId": "95dc013042d68254", "scanner": "scanner-primary", "fingerprint": "c3703048deaf20b4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/text-to-speech/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3440a3ea40b01c36", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/elevenlabs/SKILL.md"}, "properties": {"repobilityId": "1eb787577c135275", "scanner": "scanner-primary", "fingerprint": "3440a3ea40b01c36", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/elevenlabs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-891b16a127a62c16", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/assets.md"}, "properties": {"repobilityId": "1ced7a399a7ff0dd", "scanner": "scanner-primary", "fingerprint": "891b16a127a62c16", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/assets.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-054c0972e03f5257", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "ed0ae2266b50be64", "scanner": "scanner-primary", "fingerprint": "054c0972e03f5257", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-27cfbf8a1a6328c5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "63f65d53106b619c", "scanner": "scanner-primary", "fingerprint": "27cfbf8a1a6328c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-755bee30b603578c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "f3fbe656cc16e328", "scanner": "scanner-primary", "fingerprint": "755bee30b603578c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90fca9142ab06bcc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/heygen/references/captions.md"}, "properties": {"repobilityId": "38bfd8248c5d118b", "scanner": "scanner-primary", "fingerprint": "90fca9142ab06bcc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/captions.md"}, "region": {"startLine": 138}}}]}, {"ruleId": "scanner-2f6f4317b9a94097", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/dimensions.md"}, "properties": {"repobilityId": "e03766811db3897e", "scanner": "scanner-primary", "fingerprint": "2f6f4317b9a94097", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/dimensions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8f583772382ec5f6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/prompt-optimizer.md"}, "properties": {"repobilityId": "10d46dac897fb306", "scanner": "scanner-primary", "fingerprint": "8f583772382ec5f6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/prompt-optimizer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b1e8ca09ec67c3e8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/visual-styles.md"}, "properties": {"repobilityId": "56266cb5963cea20", "scanner": "scanner-primary", "fingerprint": "b1e8ca09ec67c3e8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/visual-styles.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bb243d34a9057641", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/heygen/references/authentication.md"}, "properties": {"repobilityId": "5be245aedb8e8e7e", "scanner": "scanner-primary", "fingerprint": "bb243d34a9057641", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/authentication.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ddaab6092b58042d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/video-understand/SKILL.md"}, "properties": {"repobilityId": "323e77392a794749", "scanner": "scanner-primary", "fingerprint": "ddaab6092b58042d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/video-understand/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80e0d194169ae92b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/video-edit/references/operations.md"}, "properties": {"repobilityId": "20575ec6fc4e447b", "scanner": "scanner-primary", "fingerprint": "80e0d194169ae92b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/video-edit/references/operations.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-463871eec7d41c38", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/SKILL.md"}, "properties": {"repobilityId": "6d0bb21532c5a401", "scanner": "scanner-primary", "fingerprint": "463871eec7d41c38", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-87a0c55a943a03a7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/assets.md"}, "properties": {"repobilityId": "f59f7ab84e3bb306", "scanner": "scanner-primary", "fingerprint": "87a0c55a943a03a7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/assets.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-624a74a0419ce8c3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "17416c43134f933b", "scanner": "scanner-primary", "fingerprint": "624a74a0419ce8c3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e646b93a6b1fb038", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/dimensions.md"}, "properties": {"repobilityId": "caecb9b51c28f74f", "scanner": "scanner-primary", "fingerprint": "e646b93a6b1fb038", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/dimensions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed9d32bae6c42253", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/prompt-optimizer.md"}, "properties": {"repobilityId": "940817dc28e67543", "scanner": "scanner-primary", "fingerprint": "ed9d32bae6c42253", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/prompt-optimizer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47274a5b90ca4d5f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-video/references/visual-styles.md"}, "properties": {"repobilityId": "7f3d95034b13ad49", "scanner": "scanner-primary", "fingerprint": "47274a5b90ca4d5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/visual-styles.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de4fababee7f907d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "36b5359dbf85dc1b", "scanner": "scanner-primary", "fingerprint": "de4fababee7f907d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-956d661f15aa5cc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/playwright-recording/reference.md"}, "properties": {"repobilityId": "4ab0c02bf5bee689", "scanner": "scanner-primary", "fingerprint": "956d661f15aa5cc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/playwright-recording/reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a451b397286d983", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion/SKILL.md"}, "properties": {"repobilityId": "f197ae18b093fb16", "scanner": "scanner-primary", "fingerprint": "0a451b397286d983", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e35b7c474c11200c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/threejs-materials/SKILL.md"}, "properties": {"repobilityId": "2bb2e7cc95b6b75e", "scanner": "scanner-primary", "fingerprint": "e35b7c474c11200c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/threejs-materials/SKILL.md"}, "region": {"startLine": 505}}}]}, {"ruleId": "scanner-35596cacf6493702", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/visual-style/references/gallery/game-boy-color.visual-style.md"}, "properties": {"repobilityId": "658a0ec5da8414f6", "scanner": "scanner-primary", "fingerprint": "35596cacf6493702", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/visual-style/references/gallery/game-boy-color.visual-style.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-575f1cee4374b172", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/video-download/SKILL.md"}, "properties": {"repobilityId": "ade6ea82dbc07e0d", "scanner": "scanner-primary", "fingerprint": "575f1cee4374b172", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/video-download/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c78613fcb6ea3a7e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/bfl-api/SKILL.md"}, "properties": {"repobilityId": "e30f6d8e2ac39b4c", "scanner": "scanner-primary", "fingerprint": "c78613fcb6ea3a7e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/SKILL.md"}, "region": {"startLine": 163}}}]}, {"ruleId": "scanner-81e579b375ab4a09", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/bfl-api/references/api-key-setup.md"}, "properties": {"repobilityId": "2b3b43eec03c4da1", "scanner": "scanner-primary", "fingerprint": "81e579b375ab4a09", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/api-key-setup.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-8d4dfa97f9759017", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/bfl-api/references/webhook-integration.md"}, "properties": {"repobilityId": "c99755745ec2ebb9", "scanner": "scanner-primary", "fingerprint": "8d4dfa97f9759017", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/webhook-integration.md"}, "region": {"startLine": 270}}}]}, {"ruleId": "scanner-3062d6d09edface6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/SKILL.md"}, "properties": {"repobilityId": "5720931341cb8f18", "scanner": "scanner-primary", "fingerprint": "3062d6d09edface6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/speech-to-text/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd8fb130c009dc6f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/realtime-server-side.md"}, "properties": {"repobilityId": "1bf2329448da625c", "scanner": "scanner-primary", "fingerprint": "bd8fb130c009dc6f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/speech-to-text/references/realtime-server-side.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dcbdbb65bf06fdd8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/installation.md"}, "properties": {"repobilityId": "01b21c9213b45cdd", "scanner": "scanner-primary", "fingerprint": "dcbdbb65bf06fdd8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/speech-to-text/references/installation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6fb85512e6a9eb4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/transcription-options.md"}, "properties": {"repobilityId": "a4c46543c58f3d08", "scanner": "scanner-primary", "fingerprint": "a6fb85512e6a9eb4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/speech-to-text/references/transcription-options.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bf468caff31ce42e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/speech-to-text/references/realtime-client-side.md"}, "properties": {"repobilityId": "3ce5199ceb97aaad", "scanner": "scanner-primary", "fingerprint": "bf468caff31ce42e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/speech-to-text/references/realtime-client-side.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4488709831c5165b", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/agents/SKILL.md"}, "properties": {"repobilityId": "3833c7e067a32e46", "scanner": "scanner-primary", "fingerprint": "4488709831c5165b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/SKILL.md"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-16787a94a70ec5c6", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/agents/references/installation.md"}, "properties": {"repobilityId": "ce202a018ff1c7e4", "scanner": "scanner-primary", "fingerprint": "16787a94a70ec5c6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/installation.md"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-92013cb0f145e51d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/video_toolkit/SKILL.md"}, "properties": {"repobilityId": "c3762d3f3d30c334", "scanner": "scanner-primary", "fingerprint": "92013cb0f145e51d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/video_toolkit/SKILL.md"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-6b5ee1188931558e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/video_toolkit/SKILL.md"}, "properties": {"repobilityId": "bdc7ec336e92f9b8", "scanner": "scanner-primary", "fingerprint": "6b5ee1188931558e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/video_toolkit/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43f2a8b7876a21b1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/avatar-video/references/assets.md"}, "properties": {"repobilityId": "875ed3218e94cc8d", "scanner": "scanner-primary", "fingerprint": "43f2a8b7876a21b1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/assets.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d929d1d33e964e0c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "b9f48511d42fe82f", "scanner": "scanner-primary", "fingerprint": "d929d1d33e964e0c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-ac45e07617120dab", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "91dcdeff3ba8ae31", "scanner": "scanner-primary", "fingerprint": "ac45e07617120dab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-16b278533827d034", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/avatar-video/references/captions.md"}, "properties": {"repobilityId": "7cb2d134e3a94bed", "scanner": "scanner-primary", "fingerprint": "16b278533827d034", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/captions.md"}, "region": {"startLine": 138}}}]}, {"ruleId": "scanner-569e29762e1f9410", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/avatar-video/references/dimensions.md"}, "properties": {"repobilityId": "a18fbf8e8a86de50", "scanner": "scanner-primary", "fingerprint": "569e29762e1f9410", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/dimensions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b0454bfb0fc2489e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ffmpeg/reference.md"}, "properties": {"repobilityId": "67a145f6a2dcbe2d", "scanner": "scanner-primary", "fingerprint": "b0454bfb0fc2489e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ffmpeg/reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5735910028b3b679", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ffmpeg/SKILL.md"}, "properties": {"repobilityId": "68b278008e96323a", "scanner": "scanner-primary", "fingerprint": "5735910028b3b679", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ffmpeg/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4579662bed0468a8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/SKILL.md"}, "properties": {"repobilityId": "b71708c769aac7c2", "scanner": "scanner-primary", "fingerprint": "4579662bed0468a8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1ba68a6fe684767", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/rules/interactive.md"}, "properties": {"repobilityId": "f3ca5c1049abe612", "scanner": "scanner-primary", "fingerprint": "e1ba68a6fe684767", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/rules/interactive.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce811a3656a04710", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/rules/scenes.md"}, "properties": {"repobilityId": "056077440265be4b", "scanner": "scanner-primary", "fingerprint": "ce811a3656a04710", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/rules/scenes.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd20ae734211da8b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/spring_mass_system.md"}, "properties": {"repobilityId": "35aaae4bc8a41f29", "scanner": "scanner-primary", "fingerprint": "cd20ae734211da8b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/references/spring_mass_system.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bf15e3b3201fc627", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/equation_transforms.md"}, "properties": {"repobilityId": "e94503b623df807c", "scanner": "scanner-primary", "fingerprint": "bf15e3b3201fc627", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/references/equation_transforms.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-873509dbc4e88cd5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/transit_animation.md"}, "properties": {"repobilityId": "09941f82714bc754", "scanner": "scanner-primary", "fingerprint": "873509dbc4e88cd5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/references/transit_animation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cefcbd8759b6b97a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/parallax_starfield.md"}, "properties": {"repobilityId": "97c4635e4c273249", "scanner": "scanner-primary", "fingerprint": "cefcbd8759b6b97a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/references/parallax_starfield.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bafa2996bc997b6c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/three_d_surfaces.md"}, "properties": {"repobilityId": "c6231b1fbc3951e8", "scanner": "scanner-primary", "fingerprint": "bafa2996bc997b6c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/references/three_d_surfaces.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c85c5bf833fdb20", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/rotating_exponentials.md"}, "properties": {"repobilityId": "d627126e5b0131e5", "scanner": "scanner-primary", "fingerprint": "9c85c5bf833fdb20", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/references/rotating_exponentials.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1eba4372d00b0871", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimgl-best-practices/references/vector_fields.md"}, "properties": {"repobilityId": "49a59f9f2956afc2", "scanner": "scanner-primary", "fingerprint": "1eba4372d00b0871", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/references/vector_fields.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-22eb8e5240c736fa", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/video-translate/SKILL.md"}, "properties": {"repobilityId": "207e6c3fc7133b44", "scanner": "scanner-primary", "fingerprint": "22eb8e5240c736fa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/video-translate/SKILL.md"}, "region": {"startLine": 230}}}]}, {"ruleId": "scanner-775c9c73397aeb9b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/display-captions.md"}, "properties": {"repobilityId": "309437e5beb04896", "scanner": "scanner-primary", "fingerprint": "775c9c73397aeb9b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/display-captions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d4595a7c564317e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/gifs.md"}, "properties": {"repobilityId": "bb98db22fbf89edf", "scanner": "scanner-primary", "fingerprint": "3d4595a7c564317e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/gifs.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d1839dd48325ef51", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/transitions.md"}, "properties": {"repobilityId": "faa4c5c5e4bce374", "scanner": "scanner-primary", "fingerprint": "d1839dd48325ef51", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/transitions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-88471abe159d2c3b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/ffmpeg.md"}, "properties": {"repobilityId": "61a4975f290a3701", "scanner": "scanner-primary", "fingerprint": "88471abe159d2c3b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/ffmpeg.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d8d56ba5901e3de6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/maps.md"}, "properties": {"repobilityId": "5eb0be35fc5deb08", "scanner": "scanner-primary", "fingerprint": "d8d56ba5901e3de6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/maps.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-46ce95048bd5e096", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/lottie.md"}, "properties": {"repobilityId": "c21bb9de750aab4c", "scanner": "scanner-primary", "fingerprint": "46ce95048bd5e096", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/lottie.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c861cfe5d597f1b3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/light-leaks.md"}, "properties": {"repobilityId": "33b5da1bf571d19c", "scanner": "scanner-primary", "fingerprint": "c861cfe5d597f1b3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/light-leaks.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e620720cae22567", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/charts.md"}, "properties": {"repobilityId": "ae69aefc3398e1e4", "scanner": "scanner-primary", "fingerprint": "4e620720cae22567", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/charts.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f2da3ec3a9182762", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/parameters.md"}, "properties": {"repobilityId": "0131a0cf4f85d39a", "scanner": "scanner-primary", "fingerprint": "f2da3ec3a9182762", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/parameters.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-631305131c84e990", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/import-srt-captions.md"}, "properties": {"repobilityId": "ff9a80ff9d98d633", "scanner": "scanner-primary", "fingerprint": "631305131c84e990", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/import-srt-captions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-949fc886050db1e7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/fonts.md"}, "properties": {"repobilityId": "5c03b18fc30f0394", "scanner": "scanner-primary", "fingerprint": "949fc886050db1e7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/fonts.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-271e89668934a3a0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/voiceover.md"}, "properties": {"repobilityId": "e2873fba71b4fac8", "scanner": "scanner-primary", "fingerprint": "271e89668934a3a0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/voiceover.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a014170c5b9783a2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/3d.md"}, "properties": {"repobilityId": "6da610b2a0481fcb", "scanner": "scanner-primary", "fingerprint": "a014170c5b9783a2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/3d.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7351a220651792c7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/transparent-videos.md"}, "properties": {"repobilityId": "5383ccaa0b4e130d", "scanner": "scanner-primary", "fingerprint": "7351a220651792c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/transparent-videos.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-24e29eafe1b30dbb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/videos.md"}, "properties": {"repobilityId": "e123de08dc319aa0", "scanner": "scanner-primary", "fingerprint": "24e29eafe1b30dbb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/videos.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f85281f72c8c8b9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/audio.md"}, "properties": {"repobilityId": "7c3dbf68d806c61d", "scanner": "scanner-primary", "fingerprint": "7f85281f72c8c8b9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/audio.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fe020b1424694e86", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/transcribe-captions.md"}, "properties": {"repobilityId": "849f8ba6a69e5c9b", "scanner": "scanner-primary", "fingerprint": "fe020b1424694e86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/transcribe-captions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c5d540c405dfdf28", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/remotion-best-practices/rules/audio-visualization.md"}, "properties": {"repobilityId": "7469ac1e2d841431", "scanner": "scanner-primary", "fingerprint": "c5d540c405dfdf28", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/audio-visualization.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-83405dca7aa9e59b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/ltx2/SKILL.md"}, "properties": {"repobilityId": "dd71cc2125c93d11", "scanner": "scanner-primary", "fingerprint": "83405dca7aa9e59b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ltx2/SKILL.md"}, "region": {"startLine": 164}}}]}, {"ruleId": "scanner-dcae3de084232e81", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/sound-effects/SKILL.md"}, "properties": {"repobilityId": "319186ff0a3d4960", "scanner": "scanner-primary", "fingerprint": "dcae3de084232e81", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/sound-effects/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c6bf8900369d3efa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/sound-effects/references/installation.md"}, "properties": {"repobilityId": "ca7c06674670f77f", "scanner": "scanner-primary", "fingerprint": "c6bf8900369d3efa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/sound-effects/references/installation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a38338ad31ff9fff", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-composition-patterns/AGENTS.md"}, "properties": {"repobilityId": "5b0f997a392e82f3", "scanner": "scanner-primary", "fingerprint": "a38338ad31ff9fff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-composition-patterns/AGENTS.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed7b10d414a686b3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-composition-patterns/rules/patterns-explicit-variants.md"}, "properties": {"repobilityId": "3ac011d7f5f0db0d", "scanner": "scanner-primary", "fingerprint": "ed7b10d414a686b3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-composition-patterns/rules/patterns-explicit-variants.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8d5ee4ad6db1e39a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/advanced-init-once.md"}, "properties": {"repobilityId": "9db1328a1676e0f4", "scanner": "scanner-primary", "fingerprint": "8d5ee4ad6db1e39a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/advanced-init-once.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3be63d58ae2f512c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-hoist-static-io.md"}, "properties": {"repobilityId": "74f9988a13b78c80", "scanner": "scanner-primary", "fingerprint": "3be63d58ae2f512c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/server-hoist-static-io.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06de946f8492faed", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-cache-react.md"}, "properties": {"repobilityId": "3ce5e08f493a39a7", "scanner": "scanner-primary", "fingerprint": "06de946f8492faed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/server-cache-react.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b19df7e602bc140", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-parallel-fetching.md"}, "properties": {"repobilityId": "bc129d0a1901861d", "scanner": "scanner-primary", "fingerprint": "7b19df7e602bc140", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/server-parallel-fetching.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8de3286afcf087b1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/server-after-nonblocking.md"}, "properties": {"repobilityId": "b1a52c31b241f98e", "scanner": "scanner-primary", "fingerprint": "8de3286afcf087b1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/server-after-nonblocking.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-42fccc8975005dd9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rendering-resource-hints.md"}, "properties": {"repobilityId": "1109af041dfcb18d", "scanner": "scanner-primary", "fingerprint": "42fccc8975005dd9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/rendering-resource-hints.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85f39657dd05c44d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rerender-split-combined-hooks.md"}, "properties": {"repobilityId": "b7dc45f1f8059b32", "scanner": "scanner-primary", "fingerprint": "85f39657dd05c44d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/rerender-split-combined-hooks.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-994972a56f1f53b5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/async-dependencies.md"}, "properties": {"repobilityId": "04d0ba896db63996", "scanner": "scanner-primary", "fingerprint": "994972a56f1f53b5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/async-dependencies.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f50ad04d10a70b78", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/async-parallel.md"}, "properties": {"repobilityId": "4ba81d4382f5dfd6", "scanner": "scanner-primary", "fingerprint": "f50ad04d10a70b78", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/async-parallel.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ca1e1b649775b91", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/js-length-check-first.md"}, "properties": {"repobilityId": "9cdfdcf1c77a3caa", "scanner": "scanner-primary", "fingerprint": "5ca1e1b649775b91", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/js-length-check-first.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b4fc1de90442c5a3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rendering-svg-precision.md"}, "properties": {"repobilityId": "442c1b09c5840b4d", "scanner": "scanner-primary", "fingerprint": "b4fc1de90442c5a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/rendering-svg-precision.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97137f602936ba76", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/vercel-react-best-practices/rules/rerender-move-effect-to-event.md"}, "properties": {"repobilityId": "e92629638c3acc4c", "scanner": "scanner-primary", "fingerprint": "97137f602936ba76", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/rules/rerender-move-effect-to-event.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1c3a19753d9b3b47", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/music/SKILL.md"}, "properties": {"repobilityId": "1219f77fdbaba447", "scanner": "scanner-primary", "fingerprint": "1c3a19753d9b3b47", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/music/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d5cc68f68d92d770", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/music/references/api_reference.md"}, "properties": {"repobilityId": "d49d7566537de9d4", "scanner": "scanner-primary", "fingerprint": "d5cc68f68d92d770", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/music/references/api_reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e0f035af831af975", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/music/references/installation.md"}, "properties": {"repobilityId": "7afccea26617c197", "scanner": "scanner-primary", "fingerprint": "e0f035af831af975", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/music/references/installation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-addf1ec5fd6fe69d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/cli.md"}, "properties": {"repobilityId": "5a527b2e4fc205a2", "scanner": "scanner-primary", "fingerprint": "addf1ec5fd6fe69d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimce-best-practices/rules/cli.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5333911a8299b94d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/text-animations.md"}, "properties": {"repobilityId": "faa7be66c4541a5f", "scanner": "scanner-primary", "fingerprint": "5333911a8299b94d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimce-best-practices/rules/text-animations.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-158e52086bceb75d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/scenes.md"}, "properties": {"repobilityId": "f50042ae9b0abebd", "scanner": "scanner-primary", "fingerprint": "158e52086bceb75d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimce-best-practices/rules/scenes.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dfab911a0b94a04a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/manimce-best-practices/rules/config.md"}, "properties": {"repobilityId": "2de78d1d7b5c4073", "scanner": "scanner-primary", "fingerprint": "dfab911a0b94a04a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimce-best-practices/rules/config.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e725d2ab884fbd49", "level": "note", "message": {"text": "Multiple root agent instruction files without precedence"}, "properties": {"repobilityId": "1953db6c89508d22", "scanner": "scanner-primary", "fingerprint": "e725d2ab884fbd49", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["agent-instructions", "governance"]}}, {"ruleId": "scanner-89021a0c26f5b99f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/SKILL.md"}, "properties": {"repobilityId": "c1e95be0ac9ca627", "scanner": "scanner-primary", "fingerprint": "89021a0c26f5b99f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/SKILL.md"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-89021a0c26f5b99f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/SKILL.md"}, "properties": {"repobilityId": "c1e95be0ac9ca627", "scanner": "scanner-primary", "fingerprint": "89021a0c26f5b99f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/SKILL.md"}, "region": {"startLine": 217}}}]}, {"ruleId": "scanner-89021a0c26f5b99f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/SKILL.md"}, "properties": {"repobilityId": "c1e95be0ac9ca627", "scanner": "scanner-primary", "fingerprint": "89021a0c26f5b99f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/SKILL.md"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-89021a0c26f5b99f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/SKILL.md"}, "properties": {"repobilityId": "c1e95be0ac9ca627", "scanner": "scanner-primary", "fingerprint": "89021a0c26f5b99f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/SKILL.md"}, "region": {"startLine": 154}}}]}, {"ruleId": "scanner-89021a0c26f5b99f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/SKILL.md"}, "properties": {"repobilityId": "c1e95be0ac9ca627", "scanner": "scanner-primary", "fingerprint": "89021a0c26f5b99f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/SKILL.md"}, "region": {"startLine": 220}}}]}, {"ruleId": "scanner-45d8cc26bfe528f6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/agent-configuration.md"}, "properties": {"repobilityId": "e92109075ddb2cbe", "scanner": "scanner-primary", "fingerprint": "45d8cc26bfe528f6", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/agent-configuration.md"}, "region": {"startLine": 450}}}]}, {"ruleId": "scanner-45d8cc26bfe528f6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/agent-configuration.md"}, "properties": {"repobilityId": "e92109075ddb2cbe", "scanner": "scanner-primary", "fingerprint": "45d8cc26bfe528f6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/agent-configuration.md"}, "region": {"startLine": 450}}}]}, {"ruleId": "scanner-45d8cc26bfe528f6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/agent-configuration.md"}, "properties": {"repobilityId": "e92109075ddb2cbe", "scanner": "scanner-primary", "fingerprint": "45d8cc26bfe528f6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/agent-configuration.md"}, "region": {"startLine": 464}}}]}, {"ruleId": "scanner-45d8cc26bfe528f6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/agent-configuration.md"}, "properties": {"repobilityId": "e92109075ddb2cbe", "scanner": "scanner-primary", "fingerprint": "45d8cc26bfe528f6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/agent-configuration.md"}, "region": {"startLine": 510}}}]}, {"ruleId": "scanner-45d8cc26bfe528f6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/agent-configuration.md"}, "properties": {"repobilityId": "e92109075ddb2cbe", "scanner": "scanner-primary", "fingerprint": "45d8cc26bfe528f6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/agent-configuration.md"}, "region": {"startLine": 542}}}]}, {"ruleId": "scanner-caf0ab3cb9bdbd6d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/client-tools.md"}, "properties": {"repobilityId": "c44a192f93e9f9b5", "scanner": "scanner-primary", "fingerprint": "caf0ab3cb9bdbd6d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/client-tools.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-caf0ab3cb9bdbd6d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/client-tools.md"}, "properties": {"repobilityId": "c44a192f93e9f9b5", "scanner": "scanner-primary", "fingerprint": "caf0ab3cb9bdbd6d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/client-tools.md"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-caf0ab3cb9bdbd6d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/client-tools.md"}, "properties": {"repobilityId": "c44a192f93e9f9b5", "scanner": "scanner-primary", "fingerprint": "caf0ab3cb9bdbd6d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/client-tools.md"}, "region": {"startLine": 472}}}]}, {"ruleId": "scanner-caf0ab3cb9bdbd6d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/client-tools.md"}, "properties": {"repobilityId": "c44a192f93e9f9b5", "scanner": "scanner-primary", "fingerprint": "caf0ab3cb9bdbd6d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/client-tools.md"}, "region": {"startLine": 505}}}]}, {"ruleId": "scanner-a9a133528af2ac87", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/installation.md"}, "properties": {"repobilityId": "b6b3560e1b44f798", "scanner": "scanner-primary", "fingerprint": "a9a133528af2ac87", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/installation.md"}, "region": {"startLine": 101}}}]}, {"ruleId": "scanner-a9a133528af2ac87", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/agents/references/installation.md"}, "properties": {"repobilityId": "b6b3560e1b44f798", "scanner": "scanner-primary", "fingerprint": "a9a133528af2ac87", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/installation.md"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-d7c666c90b421549", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/agents/references/installation.md"}, "properties": {"repobilityId": "ff0339786df26dee", "scanner": "scanner-primary", "fingerprint": "d7c666c90b421549", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agents/references/installation.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 166}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 166}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 265}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 167}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 194}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 199}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 235}}}]}, {"ruleId": "scanner-f469f5dc8eedf756", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "9d0d99fd08126d95", "scanner": "scanner-primary", "fingerprint": "f469f5dc8eedf756", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 265}}}]}, {"ruleId": "scanner-0f268f917cd8db8f", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/ai-video-gen/SKILL.md"}, "properties": {"repobilityId": "eae57a14ab24af28", "scanner": "scanner-primary", "fingerprint": "0f268f917cd8db8f", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ai-video-gen/SKILL.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-60525ca59de6ac36", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/SKILL.md"}, "properties": {"repobilityId": "dbd726c23949072d", "scanner": "scanner-primary", "fingerprint": "60525ca59de6ac36", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/SKILL.md"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-c588de12c9e6af3b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/assets.md"}, "properties": {"repobilityId": "fc015c4fef731298", "scanner": "scanner-primary", "fingerprint": "c588de12c9e6af3b", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/assets.md"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-c588de12c9e6af3b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/assets.md"}, "properties": {"repobilityId": "fc015c4fef731298", "scanner": "scanner-primary", "fingerprint": "c588de12c9e6af3b", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/assets.md"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-c588de12c9e6af3b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/assets.md"}, "properties": {"repobilityId": "fc015c4fef731298", "scanner": "scanner-primary", "fingerprint": "c588de12c9e6af3b", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/assets.md"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-c588de12c9e6af3b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/assets.md"}, "properties": {"repobilityId": "fc015c4fef731298", "scanner": "scanner-primary", "fingerprint": "c588de12c9e6af3b", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/assets.md"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-c588de12c9e6af3b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/assets.md"}, "properties": {"repobilityId": "fc015c4fef731298", "scanner": "scanner-primary", "fingerprint": "c588de12c9e6af3b", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/assets.md"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-c588de12c9e6af3b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/assets.md"}, "properties": {"repobilityId": "fc015c4fef731298", "scanner": "scanner-primary", "fingerprint": "c588de12c9e6af3b", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/assets.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-c588de12c9e6af3b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/assets.md"}, "properties": {"repobilityId": "fc015c4fef731298", "scanner": "scanner-primary", "fingerprint": "c588de12c9e6af3b", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/assets.md"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-78fd04cfaf7c74b2", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/assets.md"}, "properties": {"repobilityId": "1d2aa99507c8184f", "scanner": "scanner-primary", "fingerprint": "78fd04cfaf7c74b2", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/assets.md"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-b74a940f314993f1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "3ae04829606ed051", "scanner": "scanner-primary", "fingerprint": "b74a940f314993f1", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-b74a940f314993f1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "3ae04829606ed051", "scanner": "scanner-primary", "fingerprint": "b74a940f314993f1", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-b74a940f314993f1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "3ae04829606ed051", "scanner": "scanner-primary", "fingerprint": "b74a940f314993f1", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-b74a940f314993f1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "3ae04829606ed051", "scanner": "scanner-primary", "fingerprint": "b74a940f314993f1", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 104}}}]}, {"ruleId": "scanner-b74a940f314993f1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "3ae04829606ed051", "scanner": "scanner-primary", "fingerprint": "b74a940f314993f1", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 258}}}]}, {"ruleId": "scanner-b74a940f314993f1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "3ae04829606ed051", "scanner": "scanner-primary", "fingerprint": "b74a940f314993f1", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 297}}}]}, {"ruleId": "scanner-b74a940f314993f1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "3ae04829606ed051", "scanner": "scanner-primary", "fingerprint": "b74a940f314993f1", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 314}}}]}, {"ruleId": "scanner-b74a940f314993f1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "3ae04829606ed051", "scanner": "scanner-primary", "fingerprint": "b74a940f314993f1", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 392}}}]}, {"ruleId": "scanner-b74a940f314993f1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "3ae04829606ed051", "scanner": "scanner-primary", "fingerprint": "b74a940f314993f1", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 434}}}]}, {"ruleId": "scanner-5db1ff398a60cbb9", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "6b7495563e60b776", "scanner": "scanner-primary", "fingerprint": "5db1ff398a60cbb9", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-e9391af054e477d8", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/dimensions.md"}, "properties": {"repobilityId": "755f4eb05a6e90b4", "scanner": "scanner-primary", "fingerprint": "e9391af054e477d8", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/dimensions.md"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-e9391af054e477d8", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/dimensions.md"}, "properties": {"repobilityId": "755f4eb05a6e90b4", "scanner": "scanner-primary", "fingerprint": "e9391af054e477d8", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/dimensions.md"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 267}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 283}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 283}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 155}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 172}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 353}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 447}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 607}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 678}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 321}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 516}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 91}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 173}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 200}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 284}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 301}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 318}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 321}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 345}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 354}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 380}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 383}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 391}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 397}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 400}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 448}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 498}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 519}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 546}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 608}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 633}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 679}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 748}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 753}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 762}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 767}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 782}}}]}, {"ruleId": "scanner-41cdb11c0ceadd9f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "5380ed9b13ea59be", "scanner": "scanner-primary", "fingerprint": "41cdb11c0ceadd9f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 787}}}]}, {"ruleId": "scanner-768ef27a94a0ba37", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/photo-avatars.md"}, "properties": {"repobilityId": "a60e50340768bc1f", "scanner": "scanner-primary", "fingerprint": "768ef27a94a0ba37", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/photo-avatars.md"}, "region": {"startLine": 263}}}]}, {"ruleId": "scanner-ddc60adb41a631c6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/quota.md"}, "properties": {"repobilityId": "69adfffe23b4971f", "scanner": "scanner-primary", "fingerprint": "ddc60adb41a631c6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/quota.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-ddc60adb41a631c6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/quota.md"}, "properties": {"repobilityId": "69adfffe23b4971f", "scanner": "scanner-primary", "fingerprint": "ddc60adb41a631c6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/quota.md"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-ddc60adb41a631c6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/quota.md"}, "properties": {"repobilityId": "69adfffe23b4971f", "scanner": "scanner-primary", "fingerprint": "ddc60adb41a631c6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/quota.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-ddc60adb41a631c6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/quota.md"}, "properties": {"repobilityId": "69adfffe23b4971f", "scanner": "scanner-primary", "fingerprint": "ddc60adb41a631c6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/quota.md"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-ddc60adb41a631c6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/quota.md"}, "properties": {"repobilityId": "69adfffe23b4971f", "scanner": "scanner-primary", "fingerprint": "ddc60adb41a631c6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/quota.md"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-ddc60adb41a631c6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/quota.md"}, "properties": {"repobilityId": "69adfffe23b4971f", "scanner": "scanner-primary", "fingerprint": "ddc60adb41a631c6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/quota.md"}, "region": {"startLine": 137}}}]}, {"ruleId": "scanner-a0b739ded33479b5", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/quota.md"}, "properties": {"repobilityId": "3d0c07604675c570", "scanner": "scanner-primary", "fingerprint": "a0b739ded33479b5", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/quota.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-ca61c53e22a00663", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/remotion-integration.md"}, "properties": {"repobilityId": "5b001fc56fcfed9c", "scanner": "scanner-primary", "fingerprint": "ca61c53e22a00663", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/remotion-integration.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-ca61c53e22a00663", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/remotion-integration.md"}, "properties": {"repobilityId": "5b001fc56fcfed9c", "scanner": "scanner-primary", "fingerprint": "ca61c53e22a00663", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/remotion-integration.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-ca61c53e22a00663", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/remotion-integration.md"}, "properties": {"repobilityId": "5b001fc56fcfed9c", "scanner": "scanner-primary", "fingerprint": "ca61c53e22a00663", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/remotion-integration.md"}, "region": {"startLine": 218}}}]}, {"ruleId": "scanner-ca61c53e22a00663", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/remotion-integration.md"}, "properties": {"repobilityId": "5b001fc56fcfed9c", "scanner": "scanner-primary", "fingerprint": "ca61c53e22a00663", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/remotion-integration.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-ca61c53e22a00663", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/remotion-integration.md"}, "properties": {"repobilityId": "5b001fc56fcfed9c", "scanner": "scanner-primary", "fingerprint": "ca61c53e22a00663", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/remotion-integration.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-ca61c53e22a00663", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/remotion-integration.md"}, "properties": {"repobilityId": "5b001fc56fcfed9c", "scanner": "scanner-primary", "fingerprint": "ca61c53e22a00663", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/remotion-integration.md"}, "region": {"startLine": 218}}}]}, {"ruleId": "scanner-6bf48736ea9d18f4", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "51d7d3dd1a04d1a5", "scanner": "scanner-primary", "fingerprint": "6bf48736ea9d18f4", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 223}}}]}, {"ruleId": "scanner-6bf48736ea9d18f4", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "51d7d3dd1a04d1a5", "scanner": "scanner-primary", "fingerprint": "6bf48736ea9d18f4", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-6bf48736ea9d18f4", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "51d7d3dd1a04d1a5", "scanner": "scanner-primary", "fingerprint": "6bf48736ea9d18f4", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-6bf48736ea9d18f4", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "51d7d3dd1a04d1a5", "scanner": "scanner-primary", "fingerprint": "6bf48736ea9d18f4", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-6bf48736ea9d18f4", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "51d7d3dd1a04d1a5", "scanner": "scanner-primary", "fingerprint": "6bf48736ea9d18f4", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-6bf48736ea9d18f4", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "51d7d3dd1a04d1a5", "scanner": "scanner-primary", "fingerprint": "6bf48736ea9d18f4", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-6bf48736ea9d18f4", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "51d7d3dd1a04d1a5", "scanner": "scanner-primary", "fingerprint": "6bf48736ea9d18f4", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-6bf48736ea9d18f4", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "51d7d3dd1a04d1a5", "scanner": "scanner-primary", "fingerprint": "6bf48736ea9d18f4", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-6bf48736ea9d18f4", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "51d7d3dd1a04d1a5", "scanner": "scanner-primary", "fingerprint": "6bf48736ea9d18f4", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 198}}}]}, {"ruleId": "scanner-6bf48736ea9d18f4", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "51d7d3dd1a04d1a5", "scanner": "scanner-primary", "fingerprint": "6bf48736ea9d18f4", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-3ab7056dae0cec6f", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "aca1e801a5ac960a", "scanner": "scanner-primary", "fingerprint": "3ab7056dae0cec6f", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-3ab7056dae0cec6f", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/templates.md"}, "properties": {"repobilityId": "aca1e801a5ac960a", "scanner": "scanner-primary", "fingerprint": "3ab7056dae0cec6f", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/templates.md"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 164}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 665}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 702}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 630}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 164}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 413}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 518}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 532}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 633}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 665}}}]}, {"ruleId": "scanner-ef0921ae06456456", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "3e271cf0ba3896f8", "scanner": "scanner-primary", "fingerprint": "ef0921ae06456456", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 702}}}]}, {"ruleId": "scanner-510298ca8a7d4cbc", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/video-generation.md"}, "properties": {"repobilityId": "e0d546e816f64d23", "scanner": "scanner-primary", "fingerprint": "510298ca8a7d4cbc", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-generation.md"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-cf80320227675339", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-status.md"}, "properties": {"repobilityId": "bda7f4f900ac3a82", "scanner": "scanner-primary", "fingerprint": "cf80320227675339", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-status.md"}, "region": {"startLine": 354}}}]}, {"ruleId": "scanner-cf80320227675339", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-status.md"}, "properties": {"repobilityId": "bda7f4f900ac3a82", "scanner": "scanner-primary", "fingerprint": "cf80320227675339", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-status.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-cf80320227675339", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-status.md"}, "properties": {"repobilityId": "bda7f4f900ac3a82", "scanner": "scanner-primary", "fingerprint": "cf80320227675339", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-status.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-cf80320227675339", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-status.md"}, "properties": {"repobilityId": "bda7f4f900ac3a82", "scanner": "scanner-primary", "fingerprint": "cf80320227675339", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-status.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-cf80320227675339", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/video-status.md"}, "properties": {"repobilityId": "bda7f4f900ac3a82", "scanner": "scanner-primary", "fingerprint": "cf80320227675339", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-status.md"}, "region": {"startLine": 355}}}]}, {"ruleId": "scanner-147f3b2d297b7494", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/video-status.md"}, "properties": {"repobilityId": "11bd990e25dd0295", "scanner": "scanner-primary", "fingerprint": "147f3b2d297b7494", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/video-status.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-c7096c653671fb31", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/voices.md"}, "properties": {"repobilityId": "4d1c7f0a394d7177", "scanner": "scanner-primary", "fingerprint": "c7096c653671fb31", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/voices.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-c7096c653671fb31", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/voices.md"}, "properties": {"repobilityId": "4d1c7f0a394d7177", "scanner": "scanner-primary", "fingerprint": "c7096c653671fb31", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/voices.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-c7096c653671fb31", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/voices.md"}, "properties": {"repobilityId": "4d1c7f0a394d7177", "scanner": "scanner-primary", "fingerprint": "c7096c653671fb31", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/voices.md"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-c7096c653671fb31", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/voices.md"}, "properties": {"repobilityId": "4d1c7f0a394d7177", "scanner": "scanner-primary", "fingerprint": "c7096c653671fb31", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/voices.md"}, "region": {"startLine": 429}}}]}, {"ruleId": "scanner-57147193429c0883", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/avatar-video/references/voices.md"}, "properties": {"repobilityId": "292cbcb1337f6de2", "scanner": "scanner-primary", "fingerprint": "57147193429c0883", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/voices.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-6c748d5fe7344377", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/webhooks.md"}, "properties": {"repobilityId": "14d9a3d69d5e9ca8", "scanner": "scanner-primary", "fingerprint": "6c748d5fe7344377", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/webhooks.md"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-6c748d5fe7344377", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/webhooks.md"}, "properties": {"repobilityId": "14d9a3d69d5e9ca8", "scanner": "scanner-primary", "fingerprint": "6c748d5fe7344377", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/webhooks.md"}, "region": {"startLine": 362}}}]}, {"ruleId": "scanner-6c748d5fe7344377", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/webhooks.md"}, "properties": {"repobilityId": "14d9a3d69d5e9ca8", "scanner": "scanner-primary", "fingerprint": "6c748d5fe7344377", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/webhooks.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-6c748d5fe7344377", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/webhooks.md"}, "properties": {"repobilityId": "14d9a3d69d5e9ca8", "scanner": "scanner-primary", "fingerprint": "6c748d5fe7344377", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/webhooks.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-6c748d5fe7344377", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/avatar-video/references/webhooks.md"}, "properties": {"repobilityId": "14d9a3d69d5e9ca8", "scanner": "scanner-primary", "fingerprint": "6c748d5fe7344377", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/webhooks.md"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-a563a6e3837a7f35", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "227c113f6c0f733f", "scanner": "scanner-primary", "fingerprint": "a563a6e3837a7f35", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 282}}}]}, {"ruleId": "scanner-a563a6e3837a7f35", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "227c113f6c0f733f", "scanner": "scanner-primary", "fingerprint": "a563a6e3837a7f35", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 291}}}]}, {"ruleId": "scanner-a563a6e3837a7f35", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/avatar-video/references/avatars.md"}, "properties": {"repobilityId": "227c113f6c0f733f", "scanner": "scanner-primary", "fingerprint": "a563a6e3837a7f35", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/references/avatars.md"}, "region": {"startLine": 301}}}]}, {"ruleId": "scanner-0f9b2839abf9b565", "level": "error", "message": {"text": "SkillSpector TM1 (tool-misuse) in .claude/skills/avatar-video/SKILL.md"}, "properties": {"repobilityId": "a1cf0028778dd5be", "scanner": "scanner-primary", "fingerprint": "0f9b2839abf9b565", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "tool-misuse", "TM1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/avatar-video/SKILL.md"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-14b33b465807036c", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in .claude/skills/bfl-api/SKILL.md"}, "properties": {"repobilityId": "a8f9a0d37b5a22cf", "scanner": "scanner-primary", "fingerprint": "14b33b465807036c", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ff235b294b7d43ab", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/SKILL.md"}, "properties": {"repobilityId": "e835062d662531a4", "scanner": "scanner-primary", "fingerprint": "ff235b294b7d43ab", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/SKILL.md"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-ff235b294b7d43ab", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/SKILL.md"}, "properties": {"repobilityId": "e835062d662531a4", "scanner": "scanner-primary", "fingerprint": "ff235b294b7d43ab", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/SKILL.md"}, "region": {"startLine": 204}}}]}, {"ruleId": "scanner-ff235b294b7d43ab", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/SKILL.md"}, "properties": {"repobilityId": "e835062d662531a4", "scanner": "scanner-primary", "fingerprint": "ff235b294b7d43ab", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/SKILL.md"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-ff235b294b7d43ab", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/SKILL.md"}, "properties": {"repobilityId": "e835062d662531a4", "scanner": "scanner-primary", "fingerprint": "ff235b294b7d43ab", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/SKILL.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-ff235b294b7d43ab", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/SKILL.md"}, "properties": {"repobilityId": "e835062d662531a4", "scanner": "scanner-primary", "fingerprint": "ff235b294b7d43ab", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/SKILL.md"}, "region": {"startLine": 215}}}]}, {"ruleId": "scanner-ff235b294b7d43ab", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/SKILL.md"}, "properties": {"repobilityId": "e835062d662531a4", "scanner": "scanner-primary", "fingerprint": "ff235b294b7d43ab", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/SKILL.md"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-ff235b294b7d43ab", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/SKILL.md"}, "properties": {"repobilityId": "e835062d662531a4", "scanner": "scanner-primary", "fingerprint": "ff235b294b7d43ab", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/SKILL.md"}, "region": {"startLine": 252}}}]}, {"ruleId": "scanner-bbcd33090433ee40", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "properties": {"repobilityId": "ec82ff2eec8a54ce", "scanner": "scanner-primary", "fingerprint": "bbcd33090433ee40", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-bbcd33090433ee40", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "properties": {"repobilityId": "ec82ff2eec8a54ce", "scanner": "scanner-primary", "fingerprint": "bbcd33090433ee40", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-bbcd33090433ee40", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "properties": {"repobilityId": "ec82ff2eec8a54ce", "scanner": "scanner-primary", "fingerprint": "bbcd33090433ee40", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "region": {"startLine": 90}}}]}, {"ruleId": "scanner-bbcd33090433ee40", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "properties": {"repobilityId": "ec82ff2eec8a54ce", "scanner": "scanner-primary", "fingerprint": "bbcd33090433ee40", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "region": {"startLine": 139}}}]}, {"ruleId": "scanner-bbcd33090433ee40", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "properties": {"repobilityId": "ec82ff2eec8a54ce", "scanner": "scanner-primary", "fingerprint": "bbcd33090433ee40", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-bbcd33090433ee40", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "properties": {"repobilityId": "ec82ff2eec8a54ce", "scanner": "scanner-primary", "fingerprint": "bbcd33090433ee40", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-bbcd33090433ee40", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "properties": {"repobilityId": "ec82ff2eec8a54ce", "scanner": "scanner-primary", "fingerprint": "bbcd33090433ee40", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "region": {"startLine": 148}}}]}, {"ruleId": "scanner-bbcd33090433ee40", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "properties": {"repobilityId": "ec82ff2eec8a54ce", "scanner": "scanner-primary", "fingerprint": "bbcd33090433ee40", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/curl-examples.sh"}, "region": {"startLine": 151}}}]}, {"ruleId": "scanner-b351bd38e363d9e9", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/bfl-api/references/code-examples/python-client.py"}, "properties": {"repobilityId": "e4c62951217d10b8", "scanner": "scanner-primary", "fingerprint": "b351bd38e363d9e9", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/code-examples/python-client.py"}, "region": {"startLine": 456}}}]}, {"ruleId": "scanner-b794d37239533263", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/endpoints.md"}, "properties": {"repobilityId": "20d5bf782a12b382", "scanner": "scanner-primary", "fingerprint": "b794d37239533263", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/endpoints.md"}, "region": {"startLine": 157}}}]}, {"ruleId": "scanner-b794d37239533263", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/endpoints.md"}, "properties": {"repobilityId": "20d5bf782a12b382", "scanner": "scanner-primary", "fingerprint": "b794d37239533263", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/endpoints.md"}, "region": {"startLine": 157}}}]}, {"ruleId": "scanner-b794d37239533263", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/endpoints.md"}, "properties": {"repobilityId": "20d5bf782a12b382", "scanner": "scanner-primary", "fingerprint": "b794d37239533263", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/endpoints.md"}, "region": {"startLine": 172}}}]}, {"ruleId": "scanner-b794d37239533263", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/endpoints.md"}, "properties": {"repobilityId": "20d5bf782a12b382", "scanner": "scanner-primary", "fingerprint": "b794d37239533263", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/endpoints.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-b794d37239533263", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/endpoints.md"}, "properties": {"repobilityId": "20d5bf782a12b382", "scanner": "scanner-primary", "fingerprint": "b794d37239533263", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/endpoints.md"}, "region": {"startLine": 199}}}]}, {"ruleId": "scanner-b794d37239533263", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/endpoints.md"}, "properties": {"repobilityId": "20d5bf782a12b382", "scanner": "scanner-primary", "fingerprint": "b794d37239533263", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/endpoints.md"}, "region": {"startLine": 211}}}]}, {"ruleId": "scanner-b794d37239533263", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/endpoints.md"}, "properties": {"repobilityId": "20d5bf782a12b382", "scanner": "scanner-primary", "fingerprint": "b794d37239533263", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/endpoints.md"}, "region": {"startLine": 223}}}]}, {"ruleId": "scanner-b794d37239533263", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/endpoints.md"}, "properties": {"repobilityId": "20d5bf782a12b382", "scanner": "scanner-primary", "fingerprint": "b794d37239533263", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/endpoints.md"}, "region": {"startLine": 237}}}]}, {"ruleId": "scanner-5eb35734beb91aa5", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/polling-patterns.md"}, "properties": {"repobilityId": "ba78b5f0709decdb", "scanner": "scanner-primary", "fingerprint": "5eb35734beb91aa5", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/polling-patterns.md"}, "region": {"startLine": 137}}}]}, {"ruleId": "scanner-5f66758f8d9bfe8b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/rate-limiting.md"}, "properties": {"repobilityId": "f2433d08b3c7c02a", "scanner": "scanner-primary", "fingerprint": "5f66758f8d9bfe8b", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/rate-limiting.md"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-5f66758f8d9bfe8b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/rate-limiting.md"}, "properties": {"repobilityId": "f2433d08b3c7c02a", "scanner": "scanner-primary", "fingerprint": "5f66758f8d9bfe8b", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/rate-limiting.md"}, "region": {"startLine": 165}}}]}, {"ruleId": "scanner-60aa147b62ca9963", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/webhook-integration.md"}, "properties": {"repobilityId": "4da0cd64cb6f4524", "scanner": "scanner-primary", "fingerprint": "60aa147b62ca9963", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/webhook-integration.md"}, "region": {"startLine": 289}}}]}, {"ruleId": "scanner-60aa147b62ca9963", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/webhook-integration.md"}, "properties": {"repobilityId": "4da0cd64cb6f4524", "scanner": "scanner-primary", "fingerprint": "60aa147b62ca9963", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/webhook-integration.md"}, "region": {"startLine": 289}}}]}, {"ruleId": "scanner-60aa147b62ca9963", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/webhook-integration.md"}, "properties": {"repobilityId": "4da0cd64cb6f4524", "scanner": "scanner-primary", "fingerprint": "60aa147b62ca9963", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/webhook-integration.md"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-60aa147b62ca9963", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/webhook-integration.md"}, "properties": {"repobilityId": "4da0cd64cb6f4524", "scanner": "scanner-primary", "fingerprint": "60aa147b62ca9963", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/webhook-integration.md"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-60aa147b62ca9963", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/bfl-api/references/webhook-integration.md"}, "properties": {"repobilityId": "4da0cd64cb6f4524", "scanner": "scanner-primary", "fingerprint": "60aa147b62ca9963", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/bfl-api/references/webhook-integration.md"}, "region": {"startLine": 290}}}]}, {"ruleId": "scanner-7f0b47efb70c573d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/SKILL.md"}, "properties": {"repobilityId": "898d87edc491400d", "scanner": "scanner-primary", "fingerprint": "7f0b47efb70c573d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/SKILL.md"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-7f0b47efb70c573d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/SKILL.md"}, "properties": {"repobilityId": "898d87edc491400d", "scanner": "scanner-primary", "fingerprint": "7f0b47efb70c573d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/SKILL.md"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-0c345119256ff58d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/assets.md"}, "properties": {"repobilityId": "eb918842fa943f45", "scanner": "scanner-primary", "fingerprint": "0c345119256ff58d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/assets.md"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-0c345119256ff58d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/assets.md"}, "properties": {"repobilityId": "eb918842fa943f45", "scanner": "scanner-primary", "fingerprint": "0c345119256ff58d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/assets.md"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-0c345119256ff58d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/assets.md"}, "properties": {"repobilityId": "eb918842fa943f45", "scanner": "scanner-primary", "fingerprint": "0c345119256ff58d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/assets.md"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-0c345119256ff58d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/assets.md"}, "properties": {"repobilityId": "eb918842fa943f45", "scanner": "scanner-primary", "fingerprint": "0c345119256ff58d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/assets.md"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-0c345119256ff58d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/assets.md"}, "properties": {"repobilityId": "eb918842fa943f45", "scanner": "scanner-primary", "fingerprint": "0c345119256ff58d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/assets.md"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-0c345119256ff58d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/assets.md"}, "properties": {"repobilityId": "eb918842fa943f45", "scanner": "scanner-primary", "fingerprint": "0c345119256ff58d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/assets.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-0c345119256ff58d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/assets.md"}, "properties": {"repobilityId": "eb918842fa943f45", "scanner": "scanner-primary", "fingerprint": "0c345119256ff58d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/assets.md"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-90ff48811a834b03", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/assets.md"}, "properties": {"repobilityId": "8283f42ccb87968d", "scanner": "scanner-primary", "fingerprint": "90ff48811a834b03", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/assets.md"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-56bc8265fbcfee7e", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/dimensions.md"}, "properties": {"repobilityId": "edb8dc63ae459dcf", "scanner": "scanner-primary", "fingerprint": "56bc8265fbcfee7e", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/dimensions.md"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-56bc8265fbcfee7e", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/dimensions.md"}, "properties": {"repobilityId": "edb8dc63ae459dcf", "scanner": "scanner-primary", "fingerprint": "56bc8265fbcfee7e", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/dimensions.md"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-773a4f8de85a0b82", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/quota.md"}, "properties": {"repobilityId": "a917018295ec0690", "scanner": "scanner-primary", "fingerprint": "773a4f8de85a0b82", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/quota.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-773a4f8de85a0b82", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/quota.md"}, "properties": {"repobilityId": "a917018295ec0690", "scanner": "scanner-primary", "fingerprint": "773a4f8de85a0b82", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/quota.md"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-773a4f8de85a0b82", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/quota.md"}, "properties": {"repobilityId": "a917018295ec0690", "scanner": "scanner-primary", "fingerprint": "773a4f8de85a0b82", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/quota.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-773a4f8de85a0b82", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/quota.md"}, "properties": {"repobilityId": "a917018295ec0690", "scanner": "scanner-primary", "fingerprint": "773a4f8de85a0b82", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/quota.md"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-773a4f8de85a0b82", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/quota.md"}, "properties": {"repobilityId": "a917018295ec0690", "scanner": "scanner-primary", "fingerprint": "773a4f8de85a0b82", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/quota.md"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-773a4f8de85a0b82", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/quota.md"}, "properties": {"repobilityId": "a917018295ec0690", "scanner": "scanner-primary", "fingerprint": "773a4f8de85a0b82", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/quota.md"}, "region": {"startLine": 137}}}]}, {"ruleId": "scanner-906175a892e08b50", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/quota.md"}, "properties": {"repobilityId": "ec535b94554afdd4", "scanner": "scanner-primary", "fingerprint": "906175a892e08b50", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/quota.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-55fc0060d9078207", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "e30efaa2fdd7929b", "scanner": "scanner-primary", "fingerprint": "55fc0060d9078207", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 189}}}]}, {"ruleId": "scanner-55fc0060d9078207", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "e30efaa2fdd7929b", "scanner": "scanner-primary", "fingerprint": "55fc0060d9078207", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 189}}}]}, {"ruleId": "scanner-55fc0060d9078207", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "e30efaa2fdd7929b", "scanner": "scanner-primary", "fingerprint": "55fc0060d9078207", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-55fc0060d9078207", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "e30efaa2fdd7929b", "scanner": "scanner-primary", "fingerprint": "55fc0060d9078207", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 250}}}]}, {"ruleId": "scanner-55fc0060d9078207", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "e30efaa2fdd7929b", "scanner": "scanner-primary", "fingerprint": "55fc0060d9078207", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-55fc0060d9078207", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "e30efaa2fdd7929b", "scanner": "scanner-primary", "fingerprint": "55fc0060d9078207", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-55fc0060d9078207", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "e30efaa2fdd7929b", "scanner": "scanner-primary", "fingerprint": "55fc0060d9078207", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-55fc0060d9078207", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "e30efaa2fdd7929b", "scanner": "scanner-primary", "fingerprint": "55fc0060d9078207", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-55fc0060d9078207", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "e30efaa2fdd7929b", "scanner": "scanner-primary", "fingerprint": "55fc0060d9078207", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-55fc0060d9078207", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "e30efaa2fdd7929b", "scanner": "scanner-primary", "fingerprint": "55fc0060d9078207", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 251}}}]}, {"ruleId": "scanner-711262c1f6db71fd", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/video-agent.md"}, "properties": {"repobilityId": "9a7cdda15c2d5a50", "scanner": "scanner-primary", "fingerprint": "711262c1f6db71fd", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-agent.md"}, "region": {"startLine": 192}}}]}, {"ruleId": "scanner-e3e2e8c84bde58c9", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-status.md"}, "properties": {"repobilityId": "1e26387c411eaa44", "scanner": "scanner-primary", "fingerprint": "e3e2e8c84bde58c9", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-status.md"}, "region": {"startLine": 354}}}]}, {"ruleId": "scanner-e3e2e8c84bde58c9", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-status.md"}, "properties": {"repobilityId": "1e26387c411eaa44", "scanner": "scanner-primary", "fingerprint": "e3e2e8c84bde58c9", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-status.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-e3e2e8c84bde58c9", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-status.md"}, "properties": {"repobilityId": "1e26387c411eaa44", "scanner": "scanner-primary", "fingerprint": "e3e2e8c84bde58c9", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-status.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-e3e2e8c84bde58c9", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-status.md"}, "properties": {"repobilityId": "1e26387c411eaa44", "scanner": "scanner-primary", "fingerprint": "e3e2e8c84bde58c9", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-status.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-e3e2e8c84bde58c9", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/video-status.md"}, "properties": {"repobilityId": "1e26387c411eaa44", "scanner": "scanner-primary", "fingerprint": "e3e2e8c84bde58c9", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-status.md"}, "region": {"startLine": 355}}}]}, {"ruleId": "scanner-fa6e9e4f923a1e7c", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/create-video/references/video-status.md"}, "properties": {"repobilityId": "acf1b3e3c04b0947", "scanner": "scanner-primary", "fingerprint": "fa6e9e4f923a1e7c", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/video-status.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-d90d0ea2efb0eeb2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/webhooks.md"}, "properties": {"repobilityId": "fbafea954a626195", "scanner": "scanner-primary", "fingerprint": "d90d0ea2efb0eeb2", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/webhooks.md"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-d90d0ea2efb0eeb2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/webhooks.md"}, "properties": {"repobilityId": "fbafea954a626195", "scanner": "scanner-primary", "fingerprint": "d90d0ea2efb0eeb2", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/webhooks.md"}, "region": {"startLine": 362}}}]}, {"ruleId": "scanner-d90d0ea2efb0eeb2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/webhooks.md"}, "properties": {"repobilityId": "fbafea954a626195", "scanner": "scanner-primary", "fingerprint": "d90d0ea2efb0eeb2", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/webhooks.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-d90d0ea2efb0eeb2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/webhooks.md"}, "properties": {"repobilityId": "fbafea954a626195", "scanner": "scanner-primary", "fingerprint": "d90d0ea2efb0eeb2", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/webhooks.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-d90d0ea2efb0eeb2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/create-video/references/webhooks.md"}, "properties": {"repobilityId": "fbafea954a626195", "scanner": "scanner-primary", "fingerprint": "d90d0ea2efb0eeb2", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/webhooks.md"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-ae92756523b2c519", "level": "warning", "message": {"text": "SkillSpector EA1 (excessive-agency) in .claude/skills/create-video/SKILL.md"}, "properties": {"repobilityId": "b7e7d85f9a2dab82", "scanner": "scanner-primary", "fingerprint": "ae92756523b2c519", "layer": "security", "severity": "medium", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/SKILL.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-86bd7067ac10abde", "level": "error", "message": {"text": "SkillSpector P6 (prompt-injection) in .claude/skills/create-video/references/prompt-examples.md"}, "properties": {"repobilityId": "d3dd9e5b6c80e191", "scanner": "scanner-primary", "fingerprint": "86bd7067ac10abde", "layer": "security", "severity": "high", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "prompt-injection", "P6"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/references/prompt-examples.md"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-af234b36d2b3ffbc", "level": "error", "message": {"text": "SkillSpector TM1 (tool-misuse) in .claude/skills/create-video/SKILL.md"}, "properties": {"repobilityId": "0f3621b5de9540d6", "scanner": "scanner-primary", "fingerprint": "af234b36d2b3ffbc", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "tool-misuse", "TM1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-video/SKILL.md"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 204}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 178}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 204}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 225}}}]}, {"ruleId": "scanner-52309c1d72d8715d", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "2a3be706ce250ecc", "scanner": "scanner-primary", "fingerprint": "52309c1d72d8715d", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 239}}}]}, {"ruleId": "scanner-604cfef72311531a", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "db3b4e609c1dd86e", "scanner": "scanner-primary", "fingerprint": "604cfef72311531a", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 116}}}]}, {"ruleId": "scanner-604cfef72311531a", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "db3b4e609c1dd86e", "scanner": "scanner-primary", "fingerprint": "604cfef72311531a", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-604cfef72311531a", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/faceswap/SKILL.md"}, "properties": {"repobilityId": "db3b4e609c1dd86e", "scanner": "scanner-primary", "fingerprint": "604cfef72311531a", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/faceswap/SKILL.md"}, "region": {"startLine": 240}}}]}, {"ruleId": "scanner-85964c4afdbca854", "level": "error", "message": {"text": "SkillSpector RA1 (rogue-agent) in .claude/skills/ffmpeg/SKILL.md"}, "properties": {"repobilityId": "f0c68b4459aeb5d7", "scanner": "scanner-primary", "fingerprint": "85964c4afdbca854", "layer": "security", "severity": "high", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ffmpeg/SKILL.md"}, "region": {"startLine": 429}}}]}, {"ruleId": "scanner-d21184934e59c281", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/assets.md"}, "properties": {"repobilityId": "9b872fdb082c37ef", "scanner": "scanner-primary", "fingerprint": "d21184934e59c281", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/assets.md"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-d21184934e59c281", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/assets.md"}, "properties": {"repobilityId": "9b872fdb082c37ef", "scanner": "scanner-primary", "fingerprint": "d21184934e59c281", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/assets.md"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-d21184934e59c281", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/assets.md"}, "properties": {"repobilityId": "9b872fdb082c37ef", "scanner": "scanner-primary", "fingerprint": "d21184934e59c281", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/assets.md"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-d21184934e59c281", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/assets.md"}, "properties": {"repobilityId": "9b872fdb082c37ef", "scanner": "scanner-primary", "fingerprint": "d21184934e59c281", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/assets.md"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-d21184934e59c281", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/assets.md"}, "properties": {"repobilityId": "9b872fdb082c37ef", "scanner": "scanner-primary", "fingerprint": "d21184934e59c281", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/assets.md"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-d21184934e59c281", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/assets.md"}, "properties": {"repobilityId": "9b872fdb082c37ef", "scanner": "scanner-primary", "fingerprint": "d21184934e59c281", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/assets.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-d21184934e59c281", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/assets.md"}, "properties": {"repobilityId": "9b872fdb082c37ef", "scanner": "scanner-primary", "fingerprint": "d21184934e59c281", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/assets.md"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-96c5cfd6733d11bd", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/assets.md"}, "properties": {"repobilityId": "dd840b9e7e69998b", "scanner": "scanner-primary", "fingerprint": "96c5cfd6733d11bd", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/assets.md"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-d1c80cfe7ee0d6cf", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/authentication.md"}, "properties": {"repobilityId": "05b130ce82f7ae58", "scanner": "scanner-primary", "fingerprint": "d1c80cfe7ee0d6cf", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/authentication.md"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-d1c80cfe7ee0d6cf", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/authentication.md"}, "properties": {"repobilityId": "05b130ce82f7ae58", "scanner": "scanner-primary", "fingerprint": "d1c80cfe7ee0d6cf", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/authentication.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-d1c80cfe7ee0d6cf", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/authentication.md"}, "properties": {"repobilityId": "05b130ce82f7ae58", "scanner": "scanner-primary", "fingerprint": "d1c80cfe7ee0d6cf", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/authentication.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-d1c80cfe7ee0d6cf", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/authentication.md"}, "properties": {"repobilityId": "05b130ce82f7ae58", "scanner": "scanner-primary", "fingerprint": "d1c80cfe7ee0d6cf", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/authentication.md"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-d06f82cdb3b90421", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/authentication.md"}, "properties": {"repobilityId": "6ba525b39a3d1ce8", "scanner": "scanner-primary", "fingerprint": "d06f82cdb3b90421", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/authentication.md"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-d06f82cdb3b90421", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/authentication.md"}, "properties": {"repobilityId": "6ba525b39a3d1ce8", "scanner": "scanner-primary", "fingerprint": "d06f82cdb3b90421", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/authentication.md"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-7081042c7567dc0a", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "62e0ab60976c7baa", "scanner": "scanner-primary", "fingerprint": "7081042c7567dc0a", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-7081042c7567dc0a", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "62e0ab60976c7baa", "scanner": "scanner-primary", "fingerprint": "7081042c7567dc0a", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-7081042c7567dc0a", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "62e0ab60976c7baa", "scanner": "scanner-primary", "fingerprint": "7081042c7567dc0a", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-7081042c7567dc0a", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "62e0ab60976c7baa", "scanner": "scanner-primary", "fingerprint": "7081042c7567dc0a", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 104}}}]}, {"ruleId": "scanner-7081042c7567dc0a", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "62e0ab60976c7baa", "scanner": "scanner-primary", "fingerprint": "7081042c7567dc0a", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 258}}}]}, {"ruleId": "scanner-7081042c7567dc0a", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "62e0ab60976c7baa", "scanner": "scanner-primary", "fingerprint": "7081042c7567dc0a", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 297}}}]}, {"ruleId": "scanner-7081042c7567dc0a", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "62e0ab60976c7baa", "scanner": "scanner-primary", "fingerprint": "7081042c7567dc0a", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 314}}}]}, {"ruleId": "scanner-7081042c7567dc0a", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "62e0ab60976c7baa", "scanner": "scanner-primary", "fingerprint": "7081042c7567dc0a", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 392}}}]}, {"ruleId": "scanner-7081042c7567dc0a", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "62e0ab60976c7baa", "scanner": "scanner-primary", "fingerprint": "7081042c7567dc0a", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 434}}}]}, {"ruleId": "scanner-dcf0a8e29126a8b9", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "fb726fdf27115db0", "scanner": "scanner-primary", "fingerprint": "dcf0a8e29126a8b9", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-925bd942fa751f1f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/dimensions.md"}, "properties": {"repobilityId": "19bcce4d3972e4cf", "scanner": "scanner-primary", "fingerprint": "925bd942fa751f1f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/dimensions.md"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-925bd942fa751f1f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/dimensions.md"}, "properties": {"repobilityId": "19bcce4d3972e4cf", "scanner": "scanner-primary", "fingerprint": "925bd942fa751f1f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/dimensions.md"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 267}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 283}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 283}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 155}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 172}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 353}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 447}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 607}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 678}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 321}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 516}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 91}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 173}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 200}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 284}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 301}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 318}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 321}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 345}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 354}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 380}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 383}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 391}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 397}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 400}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 448}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 498}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 519}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 546}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 608}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 633}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 679}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 748}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 753}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 762}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 767}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 782}}}]}, {"ruleId": "scanner-a0a2258c1d2ece4f", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "f307f668f1a78fea", "scanner": "scanner-primary", "fingerprint": "a0a2258c1d2ece4f", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 787}}}]}, {"ruleId": "scanner-c24a2b4d8c1abdf8", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/photo-avatars.md"}, "properties": {"repobilityId": "1df2f1ca2c2d79bb", "scanner": "scanner-primary", "fingerprint": "c24a2b4d8c1abdf8", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/photo-avatars.md"}, "region": {"startLine": 263}}}]}, {"ruleId": "scanner-1db14256232189c2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/quota.md"}, "properties": {"repobilityId": "70704bd74b05d936", "scanner": "scanner-primary", "fingerprint": "1db14256232189c2", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/quota.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-1db14256232189c2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/quota.md"}, "properties": {"repobilityId": "70704bd74b05d936", "scanner": "scanner-primary", "fingerprint": "1db14256232189c2", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/quota.md"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-1db14256232189c2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/quota.md"}, "properties": {"repobilityId": "70704bd74b05d936", "scanner": "scanner-primary", "fingerprint": "1db14256232189c2", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/quota.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-1db14256232189c2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/quota.md"}, "properties": {"repobilityId": "70704bd74b05d936", "scanner": "scanner-primary", "fingerprint": "1db14256232189c2", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/quota.md"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-1db14256232189c2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/quota.md"}, "properties": {"repobilityId": "70704bd74b05d936", "scanner": "scanner-primary", "fingerprint": "1db14256232189c2", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/quota.md"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-1db14256232189c2", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/quota.md"}, "properties": {"repobilityId": "70704bd74b05d936", "scanner": "scanner-primary", "fingerprint": "1db14256232189c2", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/quota.md"}, "region": {"startLine": 137}}}]}, {"ruleId": "scanner-b47000321a8ce600", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/quota.md"}, "properties": {"repobilityId": "ff2649248c028eed", "scanner": "scanner-primary", "fingerprint": "b47000321a8ce600", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/quota.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-2e014cbc71571754", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/remotion-integration.md"}, "properties": {"repobilityId": "7aafd5a5d562d83d", "scanner": "scanner-primary", "fingerprint": "2e014cbc71571754", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/remotion-integration.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-2e014cbc71571754", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/remotion-integration.md"}, "properties": {"repobilityId": "7aafd5a5d562d83d", "scanner": "scanner-primary", "fingerprint": "2e014cbc71571754", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/remotion-integration.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-2e014cbc71571754", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/remotion-integration.md"}, "properties": {"repobilityId": "7aafd5a5d562d83d", "scanner": "scanner-primary", "fingerprint": "2e014cbc71571754", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/remotion-integration.md"}, "region": {"startLine": 218}}}]}, {"ruleId": "scanner-2e014cbc71571754", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/remotion-integration.md"}, "properties": {"repobilityId": "7aafd5a5d562d83d", "scanner": "scanner-primary", "fingerprint": "2e014cbc71571754", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/remotion-integration.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-2e014cbc71571754", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/remotion-integration.md"}, "properties": {"repobilityId": "7aafd5a5d562d83d", "scanner": "scanner-primary", "fingerprint": "2e014cbc71571754", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/remotion-integration.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-2e014cbc71571754", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/remotion-integration.md"}, "properties": {"repobilityId": "7aafd5a5d562d83d", "scanner": "scanner-primary", "fingerprint": "2e014cbc71571754", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/remotion-integration.md"}, "region": {"startLine": 218}}}]}, {"ruleId": "scanner-5901dbf205169269", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "f8d8deccea1f70d8", "scanner": "scanner-primary", "fingerprint": "5901dbf205169269", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 223}}}]}, {"ruleId": "scanner-5901dbf205169269", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "f8d8deccea1f70d8", "scanner": "scanner-primary", "fingerprint": "5901dbf205169269", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-5901dbf205169269", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "f8d8deccea1f70d8", "scanner": "scanner-primary", "fingerprint": "5901dbf205169269", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-5901dbf205169269", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "f8d8deccea1f70d8", "scanner": "scanner-primary", "fingerprint": "5901dbf205169269", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-5901dbf205169269", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "f8d8deccea1f70d8", "scanner": "scanner-primary", "fingerprint": "5901dbf205169269", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-5901dbf205169269", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "f8d8deccea1f70d8", "scanner": "scanner-primary", "fingerprint": "5901dbf205169269", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-5901dbf205169269", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "f8d8deccea1f70d8", "scanner": "scanner-primary", "fingerprint": "5901dbf205169269", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-5901dbf205169269", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "f8d8deccea1f70d8", "scanner": "scanner-primary", "fingerprint": "5901dbf205169269", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-5901dbf205169269", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "f8d8deccea1f70d8", "scanner": "scanner-primary", "fingerprint": "5901dbf205169269", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 198}}}]}, {"ruleId": "scanner-5901dbf205169269", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "f8d8deccea1f70d8", "scanner": "scanner-primary", "fingerprint": "5901dbf205169269", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-e1c220710990a8c7", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "ad70981ae29b6efe", "scanner": "scanner-primary", "fingerprint": "e1c220710990a8c7", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-e1c220710990a8c7", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/templates.md"}, "properties": {"repobilityId": "ad70981ae29b6efe", "scanner": "scanner-primary", "fingerprint": "e1c220710990a8c7", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/templates.md"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-22230a2a775ae989", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "71dacb735a367a2d", "scanner": "scanner-primary", "fingerprint": "22230a2a775ae989", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 189}}}]}, {"ruleId": "scanner-22230a2a775ae989", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "71dacb735a367a2d", "scanner": "scanner-primary", "fingerprint": "22230a2a775ae989", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 189}}}]}, {"ruleId": "scanner-22230a2a775ae989", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "71dacb735a367a2d", "scanner": "scanner-primary", "fingerprint": "22230a2a775ae989", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-22230a2a775ae989", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "71dacb735a367a2d", "scanner": "scanner-primary", "fingerprint": "22230a2a775ae989", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 250}}}]}, {"ruleId": "scanner-22230a2a775ae989", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "71dacb735a367a2d", "scanner": "scanner-primary", "fingerprint": "22230a2a775ae989", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-22230a2a775ae989", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "71dacb735a367a2d", "scanner": "scanner-primary", "fingerprint": "22230a2a775ae989", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-22230a2a775ae989", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "71dacb735a367a2d", "scanner": "scanner-primary", "fingerprint": "22230a2a775ae989", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-22230a2a775ae989", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "71dacb735a367a2d", "scanner": "scanner-primary", "fingerprint": "22230a2a775ae989", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-22230a2a775ae989", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "71dacb735a367a2d", "scanner": "scanner-primary", "fingerprint": "22230a2a775ae989", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-22230a2a775ae989", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "71dacb735a367a2d", "scanner": "scanner-primary", "fingerprint": "22230a2a775ae989", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 251}}}]}, {"ruleId": "scanner-b27e61f54644a84a", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/video-agent.md"}, "properties": {"repobilityId": "a248dcf21abb81f6", "scanner": "scanner-primary", "fingerprint": "b27e61f54644a84a", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-agent.md"}, "region": {"startLine": 192}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 164}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 665}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 702}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 630}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 164}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 413}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 518}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 532}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 633}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 665}}}]}, {"ruleId": "scanner-04ce0266d7d3a6f0", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "40e4278420c430f3", "scanner": "scanner-primary", "fingerprint": "04ce0266d7d3a6f0", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 702}}}]}, {"ruleId": "scanner-56f155b3b09448ca", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/video-generation.md"}, "properties": {"repobilityId": "d0e22ed339263e5b", "scanner": "scanner-primary", "fingerprint": "56f155b3b09448ca", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-generation.md"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-2ee448bb4dc53679", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-status.md"}, "properties": {"repobilityId": "f158c3d9e7b51bf5", "scanner": "scanner-primary", "fingerprint": "2ee448bb4dc53679", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-status.md"}, "region": {"startLine": 354}}}]}, {"ruleId": "scanner-2ee448bb4dc53679", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-status.md"}, "properties": {"repobilityId": "f158c3d9e7b51bf5", "scanner": "scanner-primary", "fingerprint": "2ee448bb4dc53679", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-status.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-2ee448bb4dc53679", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-status.md"}, "properties": {"repobilityId": "f158c3d9e7b51bf5", "scanner": "scanner-primary", "fingerprint": "2ee448bb4dc53679", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-status.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-2ee448bb4dc53679", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-status.md"}, "properties": {"repobilityId": "f158c3d9e7b51bf5", "scanner": "scanner-primary", "fingerprint": "2ee448bb4dc53679", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-status.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-2ee448bb4dc53679", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/video-status.md"}, "properties": {"repobilityId": "f158c3d9e7b51bf5", "scanner": "scanner-primary", "fingerprint": "2ee448bb4dc53679", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-status.md"}, "region": {"startLine": 355}}}]}, {"ruleId": "scanner-f2503df547350481", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/video-status.md"}, "properties": {"repobilityId": "3161b2a723155bea", "scanner": "scanner-primary", "fingerprint": "f2503df547350481", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/video-status.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-31ce4b1b601a0f0c", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/voices.md"}, "properties": {"repobilityId": "735c2d28819e5b15", "scanner": "scanner-primary", "fingerprint": "31ce4b1b601a0f0c", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/voices.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-31ce4b1b601a0f0c", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/voices.md"}, "properties": {"repobilityId": "735c2d28819e5b15", "scanner": "scanner-primary", "fingerprint": "31ce4b1b601a0f0c", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/voices.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-31ce4b1b601a0f0c", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/voices.md"}, "properties": {"repobilityId": "735c2d28819e5b15", "scanner": "scanner-primary", "fingerprint": "31ce4b1b601a0f0c", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/voices.md"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-31ce4b1b601a0f0c", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/voices.md"}, "properties": {"repobilityId": "735c2d28819e5b15", "scanner": "scanner-primary", "fingerprint": "31ce4b1b601a0f0c", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/voices.md"}, "region": {"startLine": 429}}}]}, {"ruleId": "scanner-46bb51f4e538f81d", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in .claude/skills/heygen/references/voices.md"}, "properties": {"repobilityId": "9c5f73d36c763a81", "scanner": "scanner-primary", "fingerprint": "46bb51f4e538f81d", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/voices.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-247ae11c9b052dda", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/webhooks.md"}, "properties": {"repobilityId": "c09090c39b91cca0", "scanner": "scanner-primary", "fingerprint": "247ae11c9b052dda", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/webhooks.md"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-247ae11c9b052dda", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/webhooks.md"}, "properties": {"repobilityId": "c09090c39b91cca0", "scanner": "scanner-primary", "fingerprint": "247ae11c9b052dda", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/webhooks.md"}, "region": {"startLine": 362}}}]}, {"ruleId": "scanner-247ae11c9b052dda", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/webhooks.md"}, "properties": {"repobilityId": "c09090c39b91cca0", "scanner": "scanner-primary", "fingerprint": "247ae11c9b052dda", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/webhooks.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-247ae11c9b052dda", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/webhooks.md"}, "properties": {"repobilityId": "c09090c39b91cca0", "scanner": "scanner-primary", "fingerprint": "247ae11c9b052dda", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/webhooks.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-247ae11c9b052dda", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/heygen/references/webhooks.md"}, "properties": {"repobilityId": "c09090c39b91cca0", "scanner": "scanner-primary", "fingerprint": "247ae11c9b052dda", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/webhooks.md"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-af1684e8770445cb", "level": "warning", "message": {"text": "SkillSpector EA1 (excessive-agency) in .claude/skills/heygen/SKILL.md"}, "properties": {"repobilityId": "df708f339c24f87b", "scanner": "scanner-primary", "fingerprint": "af1684e8770445cb", "layer": "security", "severity": "medium", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/SKILL.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-d8c8b8618fbeb317", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "57e48f531108446f", "scanner": "scanner-primary", "fingerprint": "d8c8b8618fbeb317", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 282}}}]}, {"ruleId": "scanner-d8c8b8618fbeb317", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "57e48f531108446f", "scanner": "scanner-primary", "fingerprint": "d8c8b8618fbeb317", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 291}}}]}, {"ruleId": "scanner-d8c8b8618fbeb317", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/heygen/references/avatars.md"}, "properties": {"repobilityId": "57e48f531108446f", "scanner": "scanner-primary", "fingerprint": "d8c8b8618fbeb317", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/avatars.md"}, "region": {"startLine": 301}}}]}, {"ruleId": "scanner-aa9bdc38ef504bbd", "level": "error", "message": {"text": "SkillSpector P6 (prompt-injection) in .claude/skills/heygen/references/prompt-examples.md"}, "properties": {"repobilityId": "ee623abd22fbd0a1", "scanner": "scanner-primary", "fingerprint": "aa9bdc38ef504bbd", "layer": "security", "severity": "high", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "prompt-injection", "P6"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/references/prompt-examples.md"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-1737e89ac4dfd1a3", "level": "error", "message": {"text": "SkillSpector TM1 (tool-misuse) in .claude/skills/heygen/SKILL.md"}, "properties": {"repobilityId": "5d356bb31e594add", "scanner": "scanner-primary", "fingerprint": "1737e89ac4dfd1a3", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "tool-misuse", "TM1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/heygen/SKILL.md"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-9a64d348a618945e", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in .claude/skills/ltx2/SKILL.md"}, "properties": {"repobilityId": "b5f09359aa579493", "scanner": "scanner-primary", "fingerprint": "9a64d348a618945e", "layer": "security", "severity": "high", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ltx2/SKILL.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-9a64d348a618945e", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in .claude/skills/ltx2/SKILL.md"}, "properties": {"repobilityId": "b5f09359aa579493", "scanner": "scanner-primary", "fingerprint": "9a64d348a618945e", "layer": "security", "severity": "high", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ltx2/SKILL.md"}, "region": {"startLine": 170}}}]}, {"ruleId": "scanner-6b1da4c5acc1ab00", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in .claude/skills/manimce-best-practices/LICENSE.txt"}, "properties": {"repobilityId": "ad56a2659b35f9f7", "scanner": "scanner-primary", "fingerprint": "6b1da4c5acc1ab00", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimce-best-practices/LICENSE.txt"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-58d5de08b35bd2ac", "level": "error", "message": {"text": "SkillSpector AST5 (behavioral-ast) in .claude/skills/manimgl-best-practices/templates/3d_scene.py"}, "properties": {"repobilityId": "b2917c5fa3d220a3", "scanner": "scanner-primary", "fingerprint": "58d5de08b35bd2ac", "layer": "security", "severity": "high", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST5", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/templates/3d_scene.py"}, "region": {"startLine": 258}}}]}, {"ruleId": "scanner-343714097e02ecb7", "level": "error", "message": {"text": "SkillSpector AST5 (behavioral-ast) in .claude/skills/manimgl-best-practices/templates/basic_scene.py"}, "properties": {"repobilityId": "6596783c79f05a4a", "scanner": "scanner-primary", "fingerprint": "343714097e02ecb7", "layer": "security", "severity": "high", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST5", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/templates/basic_scene.py"}, "region": {"startLine": 134}}}]}, {"ruleId": "scanner-2a5b52203a0db6f8", "level": "error", "message": {"text": "SkillSpector AST5 (behavioral-ast) in .claude/skills/manimgl-best-practices/templates/math_scene.py"}, "properties": {"repobilityId": "c48753074ac455f8", "scanner": "scanner-primary", "fingerprint": "2a5b52203a0db6f8", "layer": "security", "severity": "high", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST5", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/templates/math_scene.py"}, "region": {"startLine": 333}}}]}, {"ruleId": "scanner-8b149611af4b72ee", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in .claude/skills/manimgl-best-practices/SKILL.md"}, "properties": {"repobilityId": "6ec67d46262134c8", "scanner": "scanner-primary", "fingerprint": "8b149611af4b72ee", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/manimgl-best-practices/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f04cfb44390325a1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/music/SKILL.md"}, "properties": {"repobilityId": "c46c74bbde62e23a", "scanner": "scanner-primary", "fingerprint": "f04cfb44390325a1", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/music/SKILL.md"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-f04cfb44390325a1", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/music/SKILL.md"}, "properties": {"repobilityId": "c46c74bbde62e23a", "scanner": "scanner-primary", "fingerprint": "f04cfb44390325a1", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/music/SKILL.md"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-3da41981bc704328", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/music/references/api_reference.md"}, "properties": {"repobilityId": "8299d012836598b2", "scanner": "scanner-primary", "fingerprint": "3da41981bc704328", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/music/references/api_reference.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-43e7c2b11624291b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/music/references/installation.md"}, "properties": {"repobilityId": "de8ac6501ca19adc", "scanner": "scanner-primary", "fingerprint": "43e7c2b11624291b", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/music/references/installation.md"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-43e7c2b11624291b", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/music/references/installation.md"}, "properties": {"repobilityId": "de8ac6501ca19adc", "scanner": "scanner-primary", "fingerprint": "43e7c2b11624291b", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/music/references/installation.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-825a77aa6116149c", "level": "error", "message": {"text": "SkillSpector RA1 (rogue-agent) in .claude/skills/playwright-recording/SKILL.md"}, "properties": {"repobilityId": "abb6b07e35794e03", "scanner": "scanner-primary", "fingerprint": "825a77aa6116149c", "layer": "security", "severity": "high", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/playwright-recording/SKILL.md"}, "region": {"startLine": 466}}}]}, {"ruleId": "scanner-c04ca308f626465c", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in .claude/skills/playwright-recording/SKILL.md"}, "properties": {"repobilityId": "30d52144bf916f1d", "scanner": "scanner-primary", "fingerprint": "c04ca308f626465c", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/playwright-recording/SKILL.md"}, "region": {"startLine": 369}}}]}, {"ruleId": "scanner-fad3bdb1b1465f4e", "level": "error", "message": {"text": "SkillSpector RA1 (rogue-agent) in .claude/skills/remotion/SKILL.md"}, "properties": {"repobilityId": "4ec98e842250a603", "scanner": "scanner-primary", "fingerprint": "fad3bdb1b1465f4e", "layer": "security", "severity": "high", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion/SKILL.md"}, "region": {"startLine": 157}}}]}, {"ruleId": "scanner-e52085340d206f57", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/remotion-best-practices/rules/compositions.md"}, "properties": {"repobilityId": "1c0ff28bb7851659", "scanner": "scanner-primary", "fingerprint": "e52085340d206f57", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/compositions.md"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-d9c7d899125d9950", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/remotion-best-practices/rules/voiceover.md"}, "properties": {"repobilityId": "4cc07ff52069d5f1", "scanner": "scanner-primary", "fingerprint": "d9c7d899125d9950", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/voiceover.md"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-682c38d7f540f27f", "level": "warning", "message": {"text": "SkillSpector EA4 (excessive-agency) in .claude/skills/remotion-best-practices/rules/gifs.md"}, "properties": {"repobilityId": "204b3b5b4121defc", "scanner": "scanner-primary", "fingerprint": "682c38d7f540f27f", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA4"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/gifs.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-0e9d48b04c6ef977", "level": "error", "message": {"text": "SkillSpector P2 (prompt-injection) in .claude/skills/remotion-best-practices/rules/maps.md"}, "properties": {"repobilityId": "c9ea8782575be01f", "scanner": "scanner-primary", "fingerprint": "0e9d48b04c6ef977", "layer": "security", "severity": "high", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "prompt-injection", "P2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/remotion-best-practices/rules/maps.md"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-e59e8ba1ae5cd9af", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/setup-api-key/SKILL.md"}, "properties": {"repobilityId": "c7bf0ee33195ebaf", "scanner": "scanner-primary", "fingerprint": "e59e8ba1ae5cd9af", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/setup-api-key/SKILL.md"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-e59e8ba1ae5cd9af", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/setup-api-key/SKILL.md"}, "properties": {"repobilityId": "c7bf0ee33195ebaf", "scanner": "scanner-primary", "fingerprint": "e59e8ba1ae5cd9af", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/setup-api-key/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-15aa816beacf4010", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/sound-effects/SKILL.md"}, "properties": {"repobilityId": "e206d4ddf3d26c42", "scanner": "scanner-primary", "fingerprint": "15aa816beacf4010", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/sound-effects/SKILL.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-15aa816beacf4010", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/sound-effects/SKILL.md"}, "properties": {"repobilityId": "e206d4ddf3d26c42", "scanner": "scanner-primary", "fingerprint": "15aa816beacf4010", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/sound-effects/SKILL.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-407618dcfc99c1bf", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/sound-effects/references/installation.md"}, "properties": {"repobilityId": "998e9dafb8449259", "scanner": "scanner-primary", "fingerprint": "407618dcfc99c1bf", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/sound-effects/references/installation.md"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-407618dcfc99c1bf", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in .claude/skills/sound-effects/references/installation.md"}, "properties": {"repobilityId": "998e9dafb8449259", "scanner": "scanner-primary", "fingerprint": "407618dcfc99c1bf", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/sound-effects/references/installation.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-e637c415447867e4", "level": "none", "message": {"text": "Run SkillSpector's LLM-backed analysis in your own pipeline"}, "properties": {"repobilityId": "1936f198ff5212bf", "scanner": "scanner-primary", "fingerprint": "e637c415447867e4", "layer": "security", "severity": "info", "confidence": 1.0, "tags": ["skillspector", "mcp-skill", "llm-advisory", "ai-coder"]}}, {"ruleId": "scanner-0e4f9802d7ff470d", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in .claude/skills/vercel-react-best-practices/AGENTS.md:2281"}, "properties": {"repobilityId": "08fa339a58cb4f9d", "scanner": "scanner-primary", "fingerprint": "0e4f9802d7ff470d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/vercel-react-best-practices/AGENTS.md"}, "region": {"startLine": 2281}}}]}, {"ruleId": "scanner-3cc9136e029761f1", "level": "note", "message": {"text": "Very large file: tools/video/video_compose.py (2202 lines)"}, "properties": {"repobilityId": "99c43ae852830ea5", "scanner": "scanner-primary", "fingerprint": "3cc9136e029761f1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "416b258f41f38338", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "d2b55166fad01669", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "59153112a7ee5963", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "7d3716c6f9a4ff7d", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "fcbf54dabffb421a", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-169c58be924aaaf4", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 render_demo.py:63"}, "properties": {"repobilityId": "04f53983cb9f78f5", "scanner": "scanner-primary", "fingerprint": "169c58be924aaaf4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c273db040f5bd8d0", "level": "note", "message": {"text": "Legacy-named symbol `_link_or_copy` in tests/tools/test_clip_cache.py:19"}, "properties": {"repobilityId": "4bc1bd9079e34ab7", "scanner": "scanner-primary", "fingerprint": "c273db040f5bd8d0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-446454bce21b04a8", "level": "none", "message": {"text": "Commented-code block (5 lines) in remotion-composer/src/components/EndTag.tsx:16"}, "properties": {"repobilityId": "831d4ffd2b952274", "scanner": "scanner-primary", "fingerprint": "446454bce21b04a8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1c74d7bad7fd9fb6", "level": "none", "message": {"text": "Commented-code block (5 lines) in lib/scoring.py:495"}, "properties": {"repobilityId": "87958e97b711f1eb", "scanner": "scanner-primary", "fingerprint": "1c74d7bad7fd9fb6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-58a655c85ee4a606", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/video-understand/scripts/understand_video.py:67"}, "properties": {"repobilityId": "1a1165cd96a60da9", "scanner": "scanner-primary", "fingerprint": "58a655c85ee4a606", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3b221348940faa0d", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/skills/manimgl-best-practices/templates/3d_scene.py:179"}, "properties": {"repobilityId": "f702157cce56096d", "scanner": "scanner-primary", "fingerprint": "3b221348940faa0d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b596f8830a6608d2", "level": "note", "message": {"text": "Legacy-named symbol `inp_copy` in .claude/skills/manimgl-best-practices/examples/mlp_relu_visualization.py:160"}, "properties": {"repobilityId": "47fe91eff3747050", "scanner": "scanner-primary", "fingerprint": "b596f8830a6608d2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-cf843c0f30e15cb0", "level": "note", "message": {"text": "Legacy-named symbol `text_copy` in .claude/skills/manimgl-best-practices/examples/llm_prediction_pipeline.py:97"}, "properties": {"repobilityId": "2cbfd899b1f19fff", "scanner": "scanner-primary", "fingerprint": "cf843c0f30e15cb0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-86e85cb4c47be014", "level": "note", "message": {"text": "Legacy-named symbol `text_copy` in .claude/skills/manimgl-best-practices/examples/autoregressive_flow.py:77"}, "properties": {"repobilityId": "fee861d8eb891e2a", "scanner": "scanner-primary", "fingerprint": "86e85cb4c47be014", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a3961e4041c00a8e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/base_tool.py:318"}, "properties": {"repobilityId": "d381d0bcaebc7ded", "scanner": "scanner-primary", "fingerprint": "a3961e4041c00a8e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f8af1b9a972fc32f", "level": "none", "message": {"text": "Commented-code block (6 lines) in tools/tool_registry.py:356"}, "properties": {"repobilityId": "a6dac9fef265b99a", "scanner": "scanner-primary", "fingerprint": "f8af1b9a972fc32f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c9192f608a9442ed", "level": "none", "message": {"text": "Commented-code block (8 lines) in tools/audio/audio_mixer.py:537"}, "properties": {"repobilityId": "a0177688cd80fe60", "scanner": "scanner-primary", "fingerprint": "c9192f608a9442ed", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b19f3863856eb054", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/audio/piper_tts.py:127"}, "properties": {"repobilityId": "0291b4d9b0236104", "scanner": "scanner-primary", "fingerprint": "b19f3863856eb054", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4a62407b5c85fd43", "level": "note", "message": {"text": "Legacy-named symbol `eleven_multilingual_v2` in tools/audio/elevenlabs_tts.py:78"}, "properties": {"repobilityId": "eec1cf6c2722d429", "scanner": "scanner-primary", "fingerprint": "4a62407b5c85fd43", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-eaa57c62847127bc", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/audio/elevenlabs_tts.py:149"}, "properties": {"repobilityId": "596845e4e6a65136", "scanner": "scanner-primary", "fingerprint": "eaa57c62847127bc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-90b5a04be7fa0be1", "level": "note", "message": {"text": "Legacy-named symbol `eleven_multilingual_v2` in tools/audio/tts_selector.py:50"}, "properties": {"repobilityId": "423553f1cb6ddb67", "scanner": "scanner-primary", "fingerprint": "90b5a04be7fa0be1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0764f302d4d42a2d", "level": "none", "message": {"text": "Commented-code block (8 lines) in tools/graphics/recraft_image.py:147"}, "properties": {"repobilityId": "23ff97eb953cd8e5", "scanner": "scanner-primary", "fingerprint": "0764f302d4d42a2d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3dc2c6db4b746998", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/character/character_animation.py:104"}, "properties": {"repobilityId": "920ce6bedacca173", "scanner": "scanner-primary", "fingerprint": "3dc2c6db4b746998", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ce1eb7ac2e5f0498", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/video/corpus_builder.py:305"}, "properties": {"repobilityId": "cb853c273ab27c6e", "scanner": "scanner-primary", "fingerprint": "ce1eb7ac2e5f0498", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8177bb2e5ee54340", "level": "note", "message": {"text": "Legacy-named symbol `kling_v2` in tools/video/_shared.py:22"}, "properties": {"repobilityId": "758381d5b4b17f48", "scanner": "scanner-primary", "fingerprint": "8177bb2e5ee54340", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0587ee75d7c3376d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/video/hyperframes_compose.py:223"}, "properties": {"repobilityId": "80faffea66534104", "scanner": "scanner-primary", "fingerprint": "0587ee75d7c3376d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-890b3088219397ee", "level": "note", "message": {"text": "Legacy-named symbol `_link_or_copy` in tools/video/clip_cache.py:354"}, "properties": {"repobilityId": "ff2c64b85c8b0ba5", "scanner": "scanner-primary", "fingerprint": "890b3088219397ee", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e3268ef55a580182", "level": "none", "message": {"text": "Commented-code block (7 lines) in tools/video/video_compose.py:451"}, "properties": {"repobilityId": "a4b7b2420b9f3bd6", "scanner": "scanner-primary", "fingerprint": "e3268ef55a580182", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6258cdf0835040ce", "level": "none", "message": {"text": "Commented-code block (7 lines) in tools/video/stock_sources/archive_org.py:65"}, "properties": {"repobilityId": "ad9ef86bd1ea8bb2", "scanner": "scanner-primary", "fingerprint": "6258cdf0835040ce", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d785c17821858dcb", "level": "note", "message": {"text": "22 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "f5222babac44ad42", "scanner": "scanner-primary", "fingerprint": "d785c17821858dcb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2260eae79399b6f4", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "5d11b52b0ae5aed0", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "31eee1ec6906fab8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "520e72d5a3c4e02b", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "164d67e84bb87ddf", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-0027e313ade46c8f", "level": "note", "message": {"text": "Near-duplicate function bodies in 7 places"}, "properties": {"repobilityId": "ef50218d1889a5b3", "scanner": "scanner-primary", "fingerprint": "0027e313ade46c8f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8180f3bdf90f8eaa", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "1e3f5e0cd2e65099", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2b40c001343995c8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e666db5b9a23497c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ce714735caa79141", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "921e1d7b8cd2bac6", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "af843563637bdab0", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-6297377883dd7783", "level": "note", "message": {"text": "Near-duplicate function bodies in 13 places"}, "properties": {"repobilityId": "678a7cdcb3f2d90a", "scanner": "scanner-primary", "fingerprint": "6297377883dd7783", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "de7b630b3aff4671", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "38d483889764c255", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "427fdaf2f081ad6b", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "fc138e91d707b27b", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d1cf80b040c9f6ee", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "482f98fcccf44616", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}