{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-6334e2691b894580", "name": "Possibly dead Python function: chave", "shortDescription": {"text": "Possibly dead Python function: chave"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-de626c4dacab1a4c", "name": "Insecure pattern 'direct_innerhtml_assignment' in arquitetura/arquitetura.html:273", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in arquitetura/arquitetura.html:273"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "1 tests / 9 src (ratio 0.11)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 34 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eddef98fa0d43f49", "name": "Agent authority lacks a verifier contract: gera-ai/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: gera-ai/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa7ab480b29adc0c", "name": "Agent authority lacks a verifier contract: aft-doctor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: aft-doctor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce21865243196b28", "name": "Agent authority lacks a verifier contract: jornada-analise/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: jornada-analise/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe4ec9c67ab38c19", "name": "Agent authority lacks a verifier contract: tn-nco/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tn-nco/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e2d546c56bf1a60d", "name": "Agent authority lacks a verifier contract: inspecao-fisica/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: inspecao-fisica/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c93fc3f9142b4926", "name": "Agent authority lacks a verifier contract: inspecao-inicial/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: inspecao-inicial/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c028592b564ac2ef", "name": "Agent authority lacks a verifier contract: aft-rt-rgi/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: aft-rt-rgi/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6aa44b469777ffe5", "name": "Agent authority lacks a verifier contract: PGR-analise/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: PGR-analise/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-98b37177f9482214", "name": "Agent authority lacks a verifier contract: jornada-valida-afd-aej/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: jornada-valida-afd-aej/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4dfc1879382c715b", "name": "Agent authority lacks a verifier contract: autos-lavrados/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: autos-lavrados/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c265043a80b3d148", "name": "Agent authority lacks a verifier contract: NR12/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: NR12/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27f70602c9521983", "name": "Agent authority lacks a verifier contract: painel/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: painel/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0e2d5b9ffe14b97", "name": "Agent authority lacks a verifier contract: aft-setup/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: aft-setup/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-540637fac5306451", "name": "Agent authority lacks a verifier contract: nova-os/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: nova-os/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f69dc0ab5a526fa5", "name": "Agent authority lacks a verifier contract: jornada-atestado/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: jornada-atestado/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8a75767708f2d7a", "name": "Agent authority lacks a verifier contract: notebooklm-login/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: notebooklm-login/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dcb4f13cbda54283", "name": "Agent authority lacks a verifier contract: NR18/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: NR18/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb3a66a4a202dacf", "name": "Network/subprocess call without timeout or try/except \u2014 _scripts/comprimir_pdf.py:43", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 _scripts/comprimir_pdf.py:43"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n_scripts/docx_pack.py:fail, _scripts/fotos_para_pdf.py:fail\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/18649"}, "properties": {"repository": "ryckardo42/aft-toolkit", "repoUrl": "https://github.com/ryckardo42/aft-toolkit", "branch": "main"}, "results": [{"ruleId": "scanner-6334e2691b894580", "level": "note", "message": {"text": "Possibly dead Python function: chave"}, "properties": {"repobilityId": "0048cd03560820b1", "scanner": "scanner-primary", "fingerprint": "6334e2691b894580", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_scripts/gerar_painel.py:180"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-de626c4dacab1a4c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in arquitetura/arquitetura.html:273"}, "properties": {"repobilityId": "194a005300a7f155", "scanner": "scanner-primary", "fingerprint": "de626c4dacab1a4c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arquitetura/arquitetura.html"}, "region": {"startLine": 273}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "a9d50afd033696f6", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "44e28ae41cd59c6e", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "85736f9e97f253a2", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "15d27c4befe9525d", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "4d78315173b78194", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-eddef98fa0d43f49", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: gera-ai/SKILL.md"}, "properties": {"repobilityId": "9768f006a4928bd8", "scanner": "scanner-primary", "fingerprint": "eddef98fa0d43f49", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "gera-ai/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa7ab480b29adc0c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: aft-doctor/SKILL.md"}, "properties": {"repobilityId": "822ad169a1ec85ee", "scanner": "scanner-primary", "fingerprint": "fa7ab480b29adc0c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aft-doctor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce21865243196b28", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: jornada-analise/SKILL.md"}, "properties": {"repobilityId": "eed2dbd02bde5c17", "scanner": "scanner-primary", "fingerprint": "ce21865243196b28", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "jornada-analise/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fe4ec9c67ab38c19", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tn-nco/SKILL.md"}, "properties": {"repobilityId": "6c5278a92a1d64ca", "scanner": "scanner-primary", "fingerprint": "fe4ec9c67ab38c19", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tn-nco/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e2d546c56bf1a60d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: inspecao-fisica/SKILL.md"}, "properties": {"repobilityId": "b80f630fb46439e1", "scanner": "scanner-primary", "fingerprint": "e2d546c56bf1a60d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "inspecao-fisica/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c93fc3f9142b4926", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: inspecao-inicial/SKILL.md"}, "properties": {"repobilityId": "e8698e1bfecb7e7c", "scanner": "scanner-primary", "fingerprint": "c93fc3f9142b4926", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "inspecao-inicial/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c028592b564ac2ef", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: aft-rt-rgi/SKILL.md"}, "properties": {"repobilityId": "c09a66b857fff284", "scanner": "scanner-primary", "fingerprint": "c028592b564ac2ef", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aft-rt-rgi/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6aa44b469777ffe5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: PGR-analise/SKILL.md"}, "properties": {"repobilityId": "d740b097c12884d0", "scanner": "scanner-primary", "fingerprint": "6aa44b469777ffe5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "PGR-analise/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-98b37177f9482214", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: jornada-valida-afd-aej/SKILL.md"}, "properties": {"repobilityId": "c020fa5b8828c731", "scanner": "scanner-primary", "fingerprint": "98b37177f9482214", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "jornada-valida-afd-aej/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4dfc1879382c715b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: autos-lavrados/SKILL.md"}, "properties": {"repobilityId": "00fd1fb598de24e2", "scanner": "scanner-primary", "fingerprint": "4dfc1879382c715b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "autos-lavrados/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c265043a80b3d148", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: NR12/SKILL.md"}, "properties": {"repobilityId": "6ee168af4fc4c2f0", "scanner": "scanner-primary", "fingerprint": "c265043a80b3d148", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "NR12/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27f70602c9521983", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: painel/SKILL.md"}, "properties": {"repobilityId": "a3ccd9bccd5bf895", "scanner": "scanner-primary", "fingerprint": "27f70602c9521983", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "painel/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c0e2d5b9ffe14b97", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: aft-setup/SKILL.md"}, "properties": {"repobilityId": "564728606ae21f74", "scanner": "scanner-primary", "fingerprint": "c0e2d5b9ffe14b97", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aft-setup/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-540637fac5306451", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: nova-os/SKILL.md"}, "properties": {"repobilityId": "65fb9a5bb69f4d51", "scanner": "scanner-primary", "fingerprint": "540637fac5306451", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nova-os/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f69dc0ab5a526fa5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: jornada-atestado/SKILL.md"}, "properties": {"repobilityId": "cddb08b76cd3c6d5", "scanner": "scanner-primary", "fingerprint": "f69dc0ab5a526fa5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "jornada-atestado/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c8a75767708f2d7a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: notebooklm-login/SKILL.md"}, "properties": {"repobilityId": "d2389de7d7312d5d", "scanner": "scanner-primary", "fingerprint": "c8a75767708f2d7a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "notebooklm-login/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dcb4f13cbda54283", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: NR18/SKILL.md"}, "properties": {"repobilityId": "09341cfa1a73f285", "scanner": "scanner-primary", "fingerprint": "dcb4f13cbda54283", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "NR18/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb3a66a4a202dacf", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 _scripts/comprimir_pdf.py:43"}, "properties": {"repobilityId": "69d26231e3bae64f", "scanner": "scanner-primary", "fingerprint": "eb3a66a4a202dacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "94c32e42098e1620", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}