{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-769131e88ecaaada", "name": "Possibly dead Python function: format_text_results", "shortDescription": {"text": "Possibly dead Python function: format_text_results"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3f7504ac01bc8331", "name": "Possibly dead Python function: format_news_results", "shortDescription": {"text": "Possibly dead Python function: format_news_results"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ca47f71b583d676e", "name": "Possibly dead Python function: format_image_results", "shortDescription": {"text": "Possibly dead Python function: format_image_results"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f464dee922da95a", "name": "Possibly dead Python function: format_video_results", "shortDescription": {"text": "Possibly dead Python function: format_video_results"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bead75b0f9233e05", "name": "No API endpoints detected", "shortDescription": {"text": "No API endpoints detected"}, "fullDescription": {"text": "The scanner did not find FastAPI/Flask/Express/NestJS/GraphQL/gRPC routes. If this repo exposes APIs, the framework may be unsupported."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cedf352bbee3574f", "name": "Stray `console.log` in TS/JS \u2014 genes/solidity-parser/index.ts:190", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/solidity-parser/index.ts:190"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d66514f6174955ce", "name": "Stray `console.log` in TS/JS \u2014 genes/data-formatter/index.ts:150", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/data-formatter/index.ts:150"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ee2c56bac31913f", "name": "Stray `console.log` in TS/JS \u2014 genes/content-quality-analyzer/index.ts:522", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/content-quality-analyzer/index.ts:522"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8973109b8abe04db", "name": "Stray `console.log` in TS/JS \u2014 genes/audit-reporter/index.ts:204", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/audit-reporter/index.ts:204"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc6d362a4efaa247", "name": "Stray `console.log` in TS/JS \u2014 genes/gene-health-scanner/index.ts:442", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/gene-health-scanner/index.ts:442"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a0557737ac5a1a6", "name": "Stray `console.log` in TS/JS \u2014 genes/content-optimizer/index.ts:270", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/content-optimizer/index.ts:270"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3cae2ad48f58db9", "name": "Stray `console.log` in TS/JS \u2014 genes/vuln-detector/index.ts:275", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/vuln-detector/index.ts:275"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-104f324743478fcb", "name": "Stray `console.log` in TS/JS \u2014 genes/uiux-reporter/index.ts:204", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/uiux-reporter/index.ts:204"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0cd18a642878fee1", "name": "Stray `console.log` in TS/JS \u2014 genes/chain-reader/index.ts:90", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/chain-reader/index.ts:90"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71ecf49210e43dde", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 genes/security-auditor/index.ts:21", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 genes/security-auditor/index.ts:21"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49f28d10f9e34b12", "name": "Stray `console.log` in TS/JS \u2014 genes/security-scanner/index.ts:336", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/security-scanner/index.ts:336"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ebf3607518815b3", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 genes/security-scanner/index.ts:63", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 genes/security-scanner/index.ts:63"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b38b8bedb355b50", "name": "Stray `console.log` in TS/JS \u2014 genes/uiux-analyzer/index.ts:589", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 genes/uiux-analyzer/index.ts:589"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c18804e4be4f8c7", "name": "Stray `console.log` in TS/JS \u2014 tests/run-citation-manager-gene.test.ts:38", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/run-citation-manager-gene.test.ts:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d114a1f1d19df74c", "name": "Stray `console.log` in TS/JS \u2014 tests/demo/content-pipeline-demo.ts:49", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/demo/content-pipeline-demo.ts:49"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-16984d8c4309cafd", "name": "Stray `console.log` in TS/JS \u2014 tests/unit/development-genome-eval.test.ts:250", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/unit/development-genome-eval.test.ts:250"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2ffcbc1af92e6027", "name": "Stray `console.log` in TS/JS \u2014 scripts/postinstall.js:27", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/postinstall.js:27"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-37beeddc3d76194c", "name": "Stray `console.log` in TS/JS \u2014 scripts/verify-all-native.ts:12", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-all-native.ts:12"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf98ce1f00ec1d90", "name": "Stray `console.log` in TS/JS \u2014 scripts/verify-content-hashes.ts:40", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-content-hashes.ts:40"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ca91e9393d264a6c", "name": "Stray `console.log` in TS/JS \u2014 scripts/calc-fitness.ts:50", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/calc-fitness.ts:50"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7619f46113332e44", "name": "Stray `console.log` in TS/JS \u2014 scripts/verify-native-genes.ts:89", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-native-genes.ts:89"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8529feb8f2dac599", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-content-hashes.ts:60", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-content-hashes.ts:60"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc260819bd952605", "name": "Stray `console.log` in TS/JS \u2014 scripts/demo-tasks.ts:34", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/demo-tasks.ts:34"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b0f47a7196b308b", "name": "Stray `console.log` in TS/JS \u2014 scripts/recompute-local-gene-ids.ts:54", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/recompute-local-gene-ids.ts:54"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ded068caca4556b", "name": "TODO/FIXME marker in shipping code \u2014 scripts/index-docs.ts:10", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 scripts/index-docs.ts:10"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d044393295af4479", "name": "Stray `console.log` in TS/JS \u2014 scripts/index-docs.ts:156", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/index-docs.ts:156"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18cd802d680f97bc", "name": "Stray `console.log` in TS/JS \u2014 scripts/verify-all-natives.ts:28", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-all-natives.ts:28"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6737d8891d072db6", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-content-hash.ts:45", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-content-hash.ts:45"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f46958555e61b41", "name": "Stray `console.log` in TS/JS \u2014 scripts/post-deploy-smoke-test.ts:256", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/post-deploy-smoke-test.ts:256"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-281ac180afb170db", "name": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/run.ts:240", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/run.ts:240"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-de142a3faacbfe60", "name": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/generate-svg.ts:409", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/generate-svg.ts:409"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-347ad1a124b78689", "name": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/demo.ts:124", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/demo.ts:124"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ff9f362bde26964", "name": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/mock-server.ts:162", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/mock-server.ts:162"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa81d825493c92ff", "name": "Stray `console.log` in TS/JS \u2014 supabase/functions/chat/rate-limiter.ts:53", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 supabase/functions/chat/rate-limiter.ts:53"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9b82d29b1cb7de75", "name": "Stray `console.log` in TS/JS \u2014 src/commands/run.ts:70", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/run.ts:70"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fba127c1285f8360", "name": "Stray `console.log` in TS/JS \u2014 src/commands/login.ts:65", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/login.ts:65"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-738b695d5093094e", "name": "Stray `console.log` in TS/JS \u2014 src/commands/agent-run.ts:80", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/agent-run.ts:80"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf473f90a018161a", "name": "Stray `console.log` in TS/JS \u2014 src/commands/doctor.ts:17", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/doctor.ts:17"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c80585293e83b921", "name": "Stray `console.log` in TS/JS \u2014 src/commands/wrap.ts:147", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/wrap.ts:147"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a960713648cb2ad3", "name": "Stray `console.log` in TS/JS \u2014 src/commands/init.ts:137", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/init.ts:137"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b7eb4fb56a0d935", "name": "Stray `console.log` in TS/JS \u2014 src/commands/compare.ts:34", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/compare.ts:34"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-88fce84263c6b2c6", "name": "Stray `console.log` in TS/JS \u2014 src/commands/compile.ts:111", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/compile.ts:111"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed7401aa5aba92ca", "name": "Stray `console.log` in TS/JS \u2014 src/commands/stats.ts:17", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/stats.ts:17"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dd2f2af01cd96559", "name": "Stray `console.log` in TS/JS \u2014 src/commands/arena-watch.ts:116", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/arena-watch.ts:116"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80de5b6307db84d9", "name": "Stray `console.log` in TS/JS \u2014 src/commands/vg.ts:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/vg.ts:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5344960345912bf3", "name": "Stray `console.log` in TS/JS \u2014 src/commands/test.ts:243", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/test.ts:243"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db79e9536a9ae536", "name": "Stray `console.log` in TS/JS \u2014 src/commands/search.ts:118", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/search.ts:118"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d5bb4da04a876cd", "name": "Stray `console.log` in TS/JS \u2014 src/commands/agent-create.ts:57", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/agent-create.ts:57"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e2a134c947613e67", "name": "Stray `console.log` in TS/JS \u2014 src/commands/network.ts:87", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/network.ts:87"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dbfed586a3f530ba", "name": "Stray `console.log` in TS/JS \u2014 src/commands/reputation.ts:67", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/reputation.ts:67"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d22aaff5ef71ad2", "name": "Stray `console.log` in TS/JS \u2014 src/commands/list.ts:170", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/list.ts:170"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4810ca048c8a3ed", "name": "Stray `console.log` in TS/JS \u2014 src/commands/versions.ts:60", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/versions.ts:60"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-562b13d966112327", "name": "Stray `console.log` in TS/JS \u2014 src/commands/install.ts:102", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/install.ts:102"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc8003c63caa9ee3", "name": "Stray `console.log` in TS/JS \u2014 src/commands/scan.ts:83", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/scan.ts:83"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9c3843b7d0258664", "name": "Stray `console.log` in TS/JS \u2014 src/commands/api-key.ts:125", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/api-key.ts:125"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-486cb81c450824a3", "name": "Stray `console.log` in TS/JS \u2014 src/commands/arena-list.ts:127", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/arena-list.ts:127"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2611b73c1225b402", "name": "Stray `console.log` in TS/JS \u2014 src/commands/info.ts:93", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/info.ts:93"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b7da1ea64593371", "name": "Stray `console.log` in TS/JS \u2014 src/commands/hello.ts:209", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/hello.ts:209"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2272121bea7f5bde", "name": "Stray `console.log` in TS/JS \u2014 src/commands/whoami.ts:20", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/whoami.ts:20"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-67ffd42fe075b43d", "name": "Stray `console.log` in TS/JS \u2014 src/commands/self-update.ts:85", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/self-update.ts:85"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-61af14a754c568ba", "name": "TODO/FIXME marker in shipping code \u2014 src/commands/arena-submit.ts:172", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 src/commands/arena-submit.ts:172"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-28a219c0b38bedd1", "name": "Stray `console.log` in TS/JS \u2014 src/commands/arena-submit.ts:245", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/arena-submit.ts:245"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c2106308991423a", "name": "Stray `console.log` in TS/JS \u2014 src/commands/publish.ts:73", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/publish.ts:73"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fe55f0831d54f8d3", "name": "Stray `console.log` in TS/JS \u2014 src/utils/display.ts:29", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/utils/display.ts:29"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d8ca49571d7ca439", "name": "Insecure pattern 'eval_used' in genes/gene-health-scanner/index.ts:175", "shortDescription": {"text": "Insecure pattern 'eval_used' in genes/gene-health-scanner/index.ts:175"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e9ddacfd6043211c", "name": "Insecure pattern 'new_function_used' in genes/gene-health-scanner/index.ts:176", "shortDescription": {"text": "Insecure pattern 'new_function_used' in genes/gene-health-scanner/index.ts:176"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-eb23d4c2f56aef8b", "name": "Insecure pattern 'eval_used' in genes/security-auditor/index.ts:20", "shortDescription": {"text": "Insecure pattern 'eval_used' in genes/security-auditor/index.ts:20"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1449440076ba3ad7", "name": "Insecure pattern 'new_function_used' in genes/security-auditor/index.ts:22", "shortDescription": {"text": "Insecure pattern 'new_function_used' in genes/security-auditor/index.ts:22"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bf99c9c0bbe60007", "name": "Insecure pattern 'dangerous_innerhtml' in genes/security-auditor/index.ts:21", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in genes/security-auditor/index.ts:21"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afe014bb92fdd7e3", "name": "Insecure pattern 'dangerous_innerhtml' in genes/security-auditor/SKILL.md:288", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in genes/security-auditor/SKILL.md:288"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8a81540a872f74db", "name": "Insecure pattern 'eval_used' in genes/security-scanner/index.ts:116", "shortDescription": {"text": "Insecure pattern 'eval_used' in genes/security-scanner/index.ts:116"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-44cf7ca3a607d038", "name": "Insecure pattern 'new_function_used' in genes/security-scanner/index.ts:117", "shortDescription": {"text": "Insecure pattern 'new_function_used' in genes/security-scanner/index.ts:117"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-531e7e0df825cbd3", "name": "Insecure pattern 'node_child_process' in genes/security-scanner/index.ts:82", "shortDescription": {"text": "Insecure pattern 'node_child_process' in genes/security-scanner/index.ts:82"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc824c3b9ba7e5c5", "name": "Insecure pattern 'document_write' in genes/security-scanner/index.ts:62", "shortDescription": {"text": "Insecure pattern 'document_write' in genes/security-scanner/index.ts:62"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4974639cf746aa4b", "name": "Insecure pattern 'dangerous_innerhtml' in genes/security-scanner/index.ts:63", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in genes/security-scanner/index.ts:63"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3092e3d64ecbd7fb", "name": "Insecure pattern 'private_key_in_repo' in genes/security-scanner/index.ts:149", "shortDescription": {"text": "Insecure pattern 'private_key_in_repo' in genes/security-scanner/index.ts:149"}, "fullDescription": {"text": "Found a known-risky pattern (private_key_in_repo). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6aa1c0be972bdc66", "name": "Insecure pattern 'node_child_process' in scripts/republish-native.mjs:4", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/republish-native.mjs:4"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5330b93c194e0565", "name": "Insecure pattern 'node_child_process' in src/commands/wrap.ts:6", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/commands/wrap.ts:6"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b3b4038dc6e50e39", "name": "Insecure pattern 'node_child_process' in src/commands/network.ts:7", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/commands/network.ts:7"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-26853b40b82fc75a", "name": "Insecure pattern 'node_child_process' in src/commands/self-update.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/commands/self-update.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-076c909d1e9ae2de", "name": "Insecure pattern 'node_child_process' in src/utils/javy-compiler.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/utils/javy-compiler.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f90d3cdff572d72", "name": "Insecure pattern 'node_child_process' in src/utils/open-browser.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/utils/open-browser.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c513c8adf5c61f25", "name": "Insecure pattern 'direct_innerhtml_assignment' in src/cloud/auth.ts:224", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/cloud/auth.ts:224"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b7d15912ee1f44c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1838a141491ce38c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-697bee7831698209", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb639d9a10a47b23", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 503 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 27 placeholder/mock markers across 15 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b54919b425a8ee01", "name": "Agent authority lacks a verifier contract: mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-235612866b3a164f", "name": "Agent instruction/config may expose a secret: genes/debugger/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: genes/debugger/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-11c53847c689a45e", "name": "Agent authority lacks a verifier contract: genes/debugger/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: genes/debugger/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c1c699965c244512", "name": "Agent authority lacks a verifier contract: genes/grammar-checker/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: genes/grammar-checker/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e85076f912f315e", "name": "Agent authority lacks a verifier contract: genes/auto-coder/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: genes/auto-coder/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1927a56c1d09cbc7", "name": "Agent instruction contains unpinned remote install: genes/rotifer-protocol/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: genes/rotifer-protocol/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-caa624353b3b851b", "name": "Agent authority lacks a verifier contract: genes/auto-writer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: genes/auto-writer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afdfcbd973ae6aaf", "name": "Agent instruction/config may expose a secret: genes/docs-writer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: genes/docs-writer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-965dda96506fee94", "name": "Agent authority lacks a verifier contract: genes/uiux-designer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: genes/uiux-designer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-68d330f83793554a", "name": "Agent instruction/config may expose a secret: genes/devops-automator/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: genes/devops-automator/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f5e54b05f29b1960", "name": "Agent instruction/config may expose a secret: genes/api-designer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: genes/api-designer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d3d3bb3c0dc0601c", "name": "Agent authority lacks a verifier contract: genes/data-modeler/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: genes/data-modeler/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ace9c316765c4260", "name": "Agent instruction/config may expose a secret: genes/security-auditor/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: genes/security-auditor/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-311a960e86833e23", "name": "Agent authority lacks a verifier contract: plugin-source/content/root/evolve/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugin-source/content/root/evolve/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bdd84ddba7816b5d", "name": "Agent authority lacks a verifier contract: plugins/rotifer/skills/evolve/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/rotifer/skills/evolve/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a297cde77bd4b86", "name": "`fetch()` without try/.catch or AbortSignal \u2014 genes/chain-reader/index.ts:29", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 genes/chain-reader/index.ts:29"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1acb3de4a1e70d16", "name": "`fetch()` without try/.catch or AbortSignal \u2014 genes/clawhub-web-search/index.ts:94", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 genes/clawhub-web-search/index.ts:94"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0116348645a7e3ea", "name": "Legacy-named symbol `foundDeprecated` in genes/uiux-analyzer/index.ts:199", "shortDescription": {"text": "Legacy-named symbol `foundDeprecated` in genes/uiux-analyzer/index.ts:199"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-263ee5cc8d252320", "name": "`fetch()` without try/.catch or AbortSignal \u2014 rotifer-vscode/src/auth.ts:147", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 rotifer-vscode/src/auth.ts:147"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-63c23b8ec93c81f3", "name": "`fetch()` without try/.catch or AbortSignal \u2014 rotifer-vscode/src/cloud-client.ts:135", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 rotifer-vscode/src/cloud-client.ts:135"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b5ea04dd00e04ad", "name": "Commented-code block (5 lines) in tests/fixtures/polyglot/build-fixtures.mjs:59", "shortDescription": {"text": "Commented-code block (5 lines) in tests/fixtures/polyglot/build-fixtures.mjs:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cbba357f854452ef", "name": "Commented-code block (5 lines) in tests/fixtures/polyglot/as-style/source/index.ts:10", "shortDescription": {"text": "Commented-code block (5 lines) in tests/fixtures/polyglot/as-style/source/index.ts:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e4820da3a96bcad6", "name": "Commented-code block (6 lines) in tests/e2e/network.test.ts:30", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/network.test.ts:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f00d5b93f36a76ec", "name": "Commented-code block (6 lines) in tests/e2e/seasons-rpc.test.ts:6", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/seasons-rpc.test.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-beb946e31eba8741", "name": "Commented-code block (6 lines) in tests/e2e/polyglot-byo-wasm.test.ts:3", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/polyglot-byo-wasm.test.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-477709467d6d2ec8", "name": "Commented-code block (5 lines) in tests/e2e/network-v09.test.ts:9", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/network-v09.test.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f5696b4273a2d40a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/backfill-content-hashes.ts:41", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/backfill-content-hashes.ts:41"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a566e02b55b1f580", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/index-docs.ts:91", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/index-docs.ts:91"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-971633dc04639228", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/backfill-content-hash.ts:25", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/backfill-content-hash.ts:25"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-015b77e5bfa3b73d", "name": "Commented-code block (5 lines) in scripts/post-deploy-smoke-test.ts:54", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/post-deploy-smoke-test.ts:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-99c296f2ceaa2aa8", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/post-deploy-smoke-test.ts:87", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/post-deploy-smoke-test.ts:87"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-466ba184dfa6ca2d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 supabase/functions/chat/analytics.ts:81", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 supabase/functions/chat/analytics.ts:81"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-980fbaa81d49282a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 supabase/functions/chat/index.ts:181", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 supabase/functions/chat/index.ts:181"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-07d179c548305234", "name": "Commented-code block (5 lines) in src/types/phenotype.ts:268", "shortDescription": {"text": "Commented-code block (5 lines) in src/types/phenotype.ts:268"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2941e0b11695d602", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/commands/login.ts:85", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/commands/login.ts:85"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6abb0a4c8a5c35ab", "name": "Commented-code block (6 lines) in src/commands/versions.ts:13", "shortDescription": {"text": "Commented-code block (6 lines) in src/commands/versions.ts:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3a46c180b5afadc1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/commands/api-key.ts:36", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/commands/api-key.ts:36"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-616ba0dc4beb3488", "name": "Commented-code block (5 lines) in src/commands/whoami.ts:9", "shortDescription": {"text": "Commented-code block (5 lines) in src/commands/whoami.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9e2d477dfcff32db", "name": "Commented-code block (5 lines) in src/utils/javy-compiler.ts:37", "shortDescription": {"text": "Commented-code block (5 lines) in src/utils/javy-compiler.ts:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2f97afa5d2ba31da", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/utils/domain-suggest.ts:121", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/utils/domain-suggest.ts:121"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5cd19b1b69672239", "name": "Legacy-named symbol `isDbLegacy` in src/utils/phenotype-validator.ts:243", "shortDescription": {"text": "Legacy-named symbol `isDbLegacy` in src/utils/phenotype-validator.ts:243"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d81101a724d1784", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/cloud/client.ts:159", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/cloud/client.ts:159"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-842c3824902cd25e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/runtime/network-gateway.ts:6", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/runtime/network-gateway.ts:6"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a82cf7d16234d20", "name": "21 env vars used in code but missing from .env.example", "shortDescription": {"text": "21 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `CI`, `CONTINUOUS_INTEGRATION`, `DURATION_MS`, `HOME`, `NO_UPDATE_NOTIFIER`, `POLYMARKET_PROXY_URL`, `ROTIFER_AUTO_PUBLISH`, `ROTIFER_CLOUD_SERVICE_KEY` + 13 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ngenes/clawhub-web-search/scripts/search.py:search_text, genes/clawhub-web-search/scripts/search.py:search_news\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/18492"}, "properties": {"repository": "rotifer-protocol/rotifer-playground", "repoUrl": "https://github.com/rotifer-protocol/rotifer-playground", "branch": "main"}, "results": [{"ruleId": "scanner-769131e88ecaaada", "level": "note", "message": {"text": "Possibly dead Python function: format_text_results"}, "properties": {"repobilityId": "210148592f46f883", "scanner": "scanner-primary", "fingerprint": "769131e88ecaaada", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/clawhub-web-search/scripts/search.py:186"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f7504ac01bc8331", "level": "note", "message": {"text": "Possibly dead Python function: format_news_results"}, "properties": {"repobilityId": "7e272d5432d98705", "scanner": "scanner-primary", "fingerprint": "3f7504ac01bc8331", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/clawhub-web-search/scripts/search.py:233"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ca47f71b583d676e", "level": "note", "message": {"text": "Possibly dead Python function: format_image_results"}, "properties": {"repobilityId": "66edb1f65999e9d2", "scanner": "scanner-primary", "fingerprint": "ca47f71b583d676e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/clawhub-web-search/scripts/search.py:284"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1f464dee922da95a", "level": "note", "message": {"text": "Possibly dead Python function: format_video_results"}, "properties": {"repobilityId": "0f0ea6c9b1e017c0", "scanner": "scanner-primary", "fingerprint": "1f464dee922da95a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/clawhub-web-search/scripts/search.py:332"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bead75b0f9233e05", "level": "none", "message": {"text": "No API endpoints detected"}, "properties": {"repobilityId": "0f8bb852027c38f8", "scanner": "scanner-primary", "fingerprint": "bead75b0f9233e05", "layer": "api", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-cedf352bbee3574f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/solidity-parser/index.ts:190"}, "properties": {"repobilityId": "6c7636b1a5c41c21", "scanner": "scanner-primary", "fingerprint": "cedf352bbee3574f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d66514f6174955ce", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/data-formatter/index.ts:150"}, "properties": {"repobilityId": "470a9d7a548695f3", "scanner": "scanner-primary", "fingerprint": "d66514f6174955ce", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7ee2c56bac31913f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/content-quality-analyzer/index.ts:522"}, "properties": {"repobilityId": "40ea069da8828621", "scanner": "scanner-primary", "fingerprint": "7ee2c56bac31913f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8973109b8abe04db", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/audit-reporter/index.ts:204"}, "properties": {"repobilityId": "7add633e03972d97", "scanner": "scanner-primary", "fingerprint": "8973109b8abe04db", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fc6d362a4efaa247", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/gene-health-scanner/index.ts:442"}, "properties": {"repobilityId": "35d4c21584555ed4", "scanner": "scanner-primary", "fingerprint": "fc6d362a4efaa247", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6a0557737ac5a1a6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/content-optimizer/index.ts:270"}, "properties": {"repobilityId": "2a5cc0903b2c7419", "scanner": "scanner-primary", "fingerprint": "6a0557737ac5a1a6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e3cae2ad48f58db9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/vuln-detector/index.ts:275"}, "properties": {"repobilityId": "2eff3a065bbed7e4", "scanner": "scanner-primary", "fingerprint": "e3cae2ad48f58db9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-104f324743478fcb", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/uiux-reporter/index.ts:204"}, "properties": {"repobilityId": "5f327430472810a8", "scanner": "scanner-primary", "fingerprint": "104f324743478fcb", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0cd18a642878fee1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/chain-reader/index.ts:90"}, "properties": {"repobilityId": "530646007fe1ff11", "scanner": "scanner-primary", "fingerprint": "0cd18a642878fee1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-71ecf49210e43dde", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 genes/security-auditor/index.ts:21"}, "properties": {"repobilityId": "6ddd530f32b8edcb", "scanner": "scanner-primary", "fingerprint": "71ecf49210e43dde", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-49f28d10f9e34b12", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/security-scanner/index.ts:336"}, "properties": {"repobilityId": "05fe4b2048eeb32e", "scanner": "scanner-primary", "fingerprint": "49f28d10f9e34b12", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9ebf3607518815b3", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 genes/security-scanner/index.ts:63"}, "properties": {"repobilityId": "8b59438c6806e8bb", "scanner": "scanner-primary", "fingerprint": "9ebf3607518815b3", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-6b38b8bedb355b50", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 genes/uiux-analyzer/index.ts:589"}, "properties": {"repobilityId": "9db601ad01d28b57", "scanner": "scanner-primary", "fingerprint": "6b38b8bedb355b50", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0c18804e4be4f8c7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/run-citation-manager-gene.test.ts:38"}, "properties": {"repobilityId": "76223b07cf1541a8", "scanner": "scanner-primary", "fingerprint": "0c18804e4be4f8c7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d114a1f1d19df74c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/demo/content-pipeline-demo.ts:49"}, "properties": {"repobilityId": "7ea9be5850c4675c", "scanner": "scanner-primary", "fingerprint": "d114a1f1d19df74c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-16984d8c4309cafd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/unit/development-genome-eval.test.ts:250"}, "properties": {"repobilityId": "1229a351c9394d58", "scanner": "scanner-primary", "fingerprint": "16984d8c4309cafd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2ffcbc1af92e6027", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/postinstall.js:27"}, "properties": {"repobilityId": "91a7d9e02ea7caf9", "scanner": "scanner-primary", "fingerprint": "2ffcbc1af92e6027", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-37beeddc3d76194c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-all-native.ts:12"}, "properties": {"repobilityId": "9b5d08daee680a8d", "scanner": "scanner-primary", "fingerprint": "37beeddc3d76194c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bf98ce1f00ec1d90", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-content-hashes.ts:40"}, "properties": {"repobilityId": "49c81b1f66a39f71", "scanner": "scanner-primary", "fingerprint": "bf98ce1f00ec1d90", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ca91e9393d264a6c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/calc-fitness.ts:50"}, "properties": {"repobilityId": "b32adec2aab85bcf", "scanner": "scanner-primary", "fingerprint": "ca91e9393d264a6c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7619f46113332e44", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-native-genes.ts:89"}, "properties": {"repobilityId": "15aed487b2c1ad28", "scanner": "scanner-primary", "fingerprint": "7619f46113332e44", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8529feb8f2dac599", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-content-hashes.ts:60"}, "properties": {"repobilityId": "b55685982a9d3683", "scanner": "scanner-primary", "fingerprint": "8529feb8f2dac599", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fc260819bd952605", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/demo-tasks.ts:34"}, "properties": {"repobilityId": "8d103b10345ac6fd", "scanner": "scanner-primary", "fingerprint": "fc260819bd952605", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8b0f47a7196b308b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/recompute-local-gene-ids.ts:54"}, "properties": {"repobilityId": "ec22d25c0ffdcf12", "scanner": "scanner-primary", "fingerprint": "8b0f47a7196b308b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5ded068caca4556b", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 scripts/index-docs.ts:10"}, "properties": {"repobilityId": "2e0426773fe29f08", "scanner": "scanner-primary", "fingerprint": "5ded068caca4556b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-d044393295af4479", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/index-docs.ts:156"}, "properties": {"repobilityId": "fd1ae1c31a2cdcf0", "scanner": "scanner-primary", "fingerprint": "d044393295af4479", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-18cd802d680f97bc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-all-natives.ts:28"}, "properties": {"repobilityId": "dba971d88393251c", "scanner": "scanner-primary", "fingerprint": "18cd802d680f97bc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6737d8891d072db6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-content-hash.ts:45"}, "properties": {"repobilityId": "2eb42abca2909d0a", "scanner": "scanner-primary", "fingerprint": "6737d8891d072db6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0f46958555e61b41", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/post-deploy-smoke-test.ts:256"}, "properties": {"repobilityId": "8dda48bcc2845527", "scanner": "scanner-primary", "fingerprint": "0f46958555e61b41", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-281ac180afb170db", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/run.ts:240"}, "properties": {"repobilityId": "a56fa6c355cb9381", "scanner": "scanner-primary", "fingerprint": "281ac180afb170db", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-de142a3faacbfe60", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/generate-svg.ts:409"}, "properties": {"repobilityId": "ef509683dcce204f", "scanner": "scanner-primary", "fingerprint": "de142a3faacbfe60", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-347ad1a124b78689", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/demo.ts:124"}, "properties": {"repobilityId": "9bf7b56707040473", "scanner": "scanner-primary", "fingerprint": "347ad1a124b78689", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5ff9f362bde26964", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 examples/api-apocalypse/mock-server.ts:162"}, "properties": {"repobilityId": "98bda9d6c90e3221", "scanner": "scanner-primary", "fingerprint": "5ff9f362bde26964", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fa81d825493c92ff", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 supabase/functions/chat/rate-limiter.ts:53"}, "properties": {"repobilityId": "e6c5d5451fad0741", "scanner": "scanner-primary", "fingerprint": "fa81d825493c92ff", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9b82d29b1cb7de75", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/run.ts:70"}, "properties": {"repobilityId": "3eb792801c5818ec", "scanner": "scanner-primary", "fingerprint": "9b82d29b1cb7de75", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fba127c1285f8360", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/login.ts:65"}, "properties": {"repobilityId": "fc97475fcc1798e2", "scanner": "scanner-primary", "fingerprint": "fba127c1285f8360", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-738b695d5093094e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/agent-run.ts:80"}, "properties": {"repobilityId": "6c84442e8e07ea8d", "scanner": "scanner-primary", "fingerprint": "738b695d5093094e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-cf473f90a018161a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/doctor.ts:17"}, "properties": {"repobilityId": "5d621c7e12723d38", "scanner": "scanner-primary", "fingerprint": "cf473f90a018161a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c80585293e83b921", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/wrap.ts:147"}, "properties": {"repobilityId": "05a959db88b92856", "scanner": "scanner-primary", "fingerprint": "c80585293e83b921", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a960713648cb2ad3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/init.ts:137"}, "properties": {"repobilityId": "a58e0c60bc8cfde9", "scanner": "scanner-primary", "fingerprint": "a960713648cb2ad3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7b7eb4fb56a0d935", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/compare.ts:34"}, "properties": {"repobilityId": "0a06e2b91f25250c", "scanner": "scanner-primary", "fingerprint": "7b7eb4fb56a0d935", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-88fce84263c6b2c6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/compile.ts:111"}, "properties": {"repobilityId": "eecb27cc2af2d0ef", "scanner": "scanner-primary", "fingerprint": "88fce84263c6b2c6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ed7401aa5aba92ca", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/stats.ts:17"}, "properties": {"repobilityId": "83c20c38b02d646f", "scanner": "scanner-primary", "fingerprint": "ed7401aa5aba92ca", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-dd2f2af01cd96559", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/arena-watch.ts:116"}, "properties": {"repobilityId": "4a1bcd207312e98e", "scanner": "scanner-primary", "fingerprint": "dd2f2af01cd96559", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-80de5b6307db84d9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/vg.ts:26"}, "properties": {"repobilityId": "5372a216dab702b8", "scanner": "scanner-primary", "fingerprint": "80de5b6307db84d9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5344960345912bf3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/test.ts:243"}, "properties": {"repobilityId": "974406f5b5982923", "scanner": "scanner-primary", "fingerprint": "5344960345912bf3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-db79e9536a9ae536", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/search.ts:118"}, "properties": {"repobilityId": "2c22fcabe3e5770a", "scanner": "scanner-primary", "fingerprint": "db79e9536a9ae536", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2d5bb4da04a876cd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/agent-create.ts:57"}, "properties": {"repobilityId": "3217b0487b5f1509", "scanner": "scanner-primary", "fingerprint": "2d5bb4da04a876cd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e2a134c947613e67", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/network.ts:87"}, "properties": {"repobilityId": "00df6df789021062", "scanner": "scanner-primary", "fingerprint": "e2a134c947613e67", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-dbfed586a3f530ba", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/reputation.ts:67"}, "properties": {"repobilityId": "ee3cf2f625afc132", "scanner": "scanner-primary", "fingerprint": "dbfed586a3f530ba", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6d22aaff5ef71ad2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/list.ts:170"}, "properties": {"repobilityId": "7737f4cad84607bd", "scanner": "scanner-primary", "fingerprint": "6d22aaff5ef71ad2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e4810ca048c8a3ed", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/versions.ts:60"}, "properties": {"repobilityId": "1386b7262ce00a35", "scanner": "scanner-primary", "fingerprint": "e4810ca048c8a3ed", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-562b13d966112327", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/install.ts:102"}, "properties": {"repobilityId": "a80bd970592fbf05", "scanner": "scanner-primary", "fingerprint": "562b13d966112327", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bc8003c63caa9ee3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/scan.ts:83"}, "properties": {"repobilityId": "b2b8ea9b791b5d0d", "scanner": "scanner-primary", "fingerprint": "bc8003c63caa9ee3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9c3843b7d0258664", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/api-key.ts:125"}, "properties": {"repobilityId": "343e5efd4dfe7ecf", "scanner": "scanner-primary", "fingerprint": "9c3843b7d0258664", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-486cb81c450824a3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/arena-list.ts:127"}, "properties": {"repobilityId": "fba4837162a676f2", "scanner": "scanner-primary", "fingerprint": "486cb81c450824a3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2611b73c1225b402", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/info.ts:93"}, "properties": {"repobilityId": "cbcc956c21b150e0", "scanner": "scanner-primary", "fingerprint": "2611b73c1225b402", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8b7da1ea64593371", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/hello.ts:209"}, "properties": {"repobilityId": "c812a9d3600fdf9c", "scanner": "scanner-primary", "fingerprint": "8b7da1ea64593371", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2272121bea7f5bde", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/whoami.ts:20"}, "properties": {"repobilityId": "ed7fc7285706d632", "scanner": "scanner-primary", "fingerprint": "2272121bea7f5bde", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-67ffd42fe075b43d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/self-update.ts:85"}, "properties": {"repobilityId": "1c924932b24ae948", "scanner": "scanner-primary", "fingerprint": "67ffd42fe075b43d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-61af14a754c568ba", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 src/commands/arena-submit.ts:172"}, "properties": {"repobilityId": "4859352a0168c8af", "scanner": "scanner-primary", "fingerprint": "61af14a754c568ba", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-28a219c0b38bedd1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/arena-submit.ts:245"}, "properties": {"repobilityId": "d2dc8508610d4612", "scanner": "scanner-primary", "fingerprint": "28a219c0b38bedd1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6c2106308991423a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/publish.ts:73"}, "properties": {"repobilityId": "b81f67c1577fc7ae", "scanner": "scanner-primary", "fingerprint": "6c2106308991423a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fe55f0831d54f8d3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/utils/display.ts:29"}, "properties": {"repobilityId": "57f8c7af455e2f95", "scanner": "scanner-primary", "fingerprint": "fe55f0831d54f8d3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d8ca49571d7ca439", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in genes/gene-health-scanner/index.ts:175"}, "properties": {"repobilityId": "130028d985f0147a", "scanner": "scanner-primary", "fingerprint": "d8ca49571d7ca439", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/gene-health-scanner/index.ts"}, "region": {"startLine": 175}}}]}, {"ruleId": "scanner-e9ddacfd6043211c", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in genes/gene-health-scanner/index.ts:176"}, "properties": {"repobilityId": "7aacfa70dad29ce7", "scanner": "scanner-primary", "fingerprint": "e9ddacfd6043211c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/gene-health-scanner/index.ts"}, "region": {"startLine": 176}}}]}, {"ruleId": "scanner-eb23d4c2f56aef8b", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in genes/security-auditor/index.ts:20"}, "properties": {"repobilityId": "11f79bc387555f52", "scanner": "scanner-primary", "fingerprint": "eb23d4c2f56aef8b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-auditor/index.ts"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-1449440076ba3ad7", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in genes/security-auditor/index.ts:22"}, "properties": {"repobilityId": "afd4efd0f546d8ad", "scanner": "scanner-primary", "fingerprint": "1449440076ba3ad7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-auditor/index.ts"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-bf99c9c0bbe60007", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in genes/security-auditor/index.ts:21"}, "properties": {"repobilityId": "caeddfcb0fc66235", "scanner": "scanner-primary", "fingerprint": "bf99c9c0bbe60007", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-auditor/index.ts"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-afe014bb92fdd7e3", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in genes/security-auditor/SKILL.md:288"}, "properties": {"repobilityId": "51c87b5af9746e50", "scanner": "scanner-primary", "fingerprint": "afe014bb92fdd7e3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-auditor/SKILL.md"}, "region": {"startLine": 288}}}]}, {"ruleId": "scanner-8a81540a872f74db", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in genes/security-scanner/index.ts:116"}, "properties": {"repobilityId": "e29ce4e0c011b62e", "scanner": "scanner-primary", "fingerprint": "8a81540a872f74db", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-scanner/index.ts"}, "region": {"startLine": 116}}}]}, {"ruleId": "scanner-44cf7ca3a607d038", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in genes/security-scanner/index.ts:117"}, "properties": {"repobilityId": "07bdfe97210250cb", "scanner": "scanner-primary", "fingerprint": "44cf7ca3a607d038", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-scanner/index.ts"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-531e7e0df825cbd3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in genes/security-scanner/index.ts:82"}, "properties": {"repobilityId": "e0d70fef5c105861", "scanner": "scanner-primary", "fingerprint": "531e7e0df825cbd3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-scanner/index.ts"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-cc824c3b9ba7e5c5", "level": "note", "message": {"text": "Insecure pattern 'document_write' in genes/security-scanner/index.ts:62"}, "properties": {"repobilityId": "5f709fd636c31581", "scanner": "scanner-primary", "fingerprint": "cc824c3b9ba7e5c5", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-scanner/index.ts"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-4974639cf746aa4b", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in genes/security-scanner/index.ts:63"}, "properties": {"repobilityId": "412adac5f03c1a27", "scanner": "scanner-primary", "fingerprint": "4974639cf746aa4b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-scanner/index.ts"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-3092e3d64ecbd7fb", "level": "error", "message": {"text": "Insecure pattern 'private_key_in_repo' in genes/security-scanner/index.ts:149"}, "properties": {"repobilityId": "f9f7b24c9779aeb5", "scanner": "scanner-primary", "fingerprint": "3092e3d64ecbd7fb", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["owasp", "private_key_in_repo"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-scanner/index.ts"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-6aa1c0be972bdc66", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/republish-native.mjs:4"}, "properties": {"repobilityId": "d7f4c29074dcd246", "scanner": "scanner-primary", "fingerprint": "6aa1c0be972bdc66", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/republish-native.mjs"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-5330b93c194e0565", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/commands/wrap.ts:6"}, "properties": {"repobilityId": "a039190d5462a684", "scanner": "scanner-primary", "fingerprint": "5330b93c194e0565", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/commands/wrap.ts"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-b3b4038dc6e50e39", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/commands/network.ts:7"}, "properties": {"repobilityId": "00c1523ec7084179", "scanner": "scanner-primary", "fingerprint": "b3b4038dc6e50e39", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/commands/network.ts"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-26853b40b82fc75a", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/commands/self-update.ts:2"}, "properties": {"repobilityId": "ee18de3d8c2555e1", "scanner": "scanner-primary", "fingerprint": "26853b40b82fc75a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/commands/self-update.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-076c909d1e9ae2de", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/utils/javy-compiler.ts:1"}, "properties": {"repobilityId": "7aaefa5efeccb38f", "scanner": "scanner-primary", "fingerprint": "076c909d1e9ae2de", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/utils/javy-compiler.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9f90d3cdff572d72", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/utils/open-browser.ts:1"}, "properties": {"repobilityId": "99e44d8f77989dc7", "scanner": "scanner-primary", "fingerprint": "9f90d3cdff572d72", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/utils/open-browser.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c513c8adf5c61f25", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/cloud/auth.ts:224"}, "properties": {"repobilityId": "5262abafc0853bf7", "scanner": "scanner-primary", "fingerprint": "c513c8adf5c61f25", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/cloud/auth.ts"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-9b7d15912ee1f44c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "15764b3b911613fe", "scanner": "scanner-primary", "fingerprint": "9b7d15912ee1f44c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-root-plugin-family.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1838a141491ce38c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b8fd4f5048f96576", "scanner": "scanner-primary", "fingerprint": "1838a141491ce38c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-697bee7831698209", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "630e9e167a389ed1", "scanner": "scanner-primary", "fingerprint": "697bee7831698209", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-vscode-family.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "edeab51902066991", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "43f54828b3a18816", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "30b4a9024127526b", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "48a58640085c0b2d", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "f6bbd765ea3645c9", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "07a4d98f1c4cff38", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-b54919b425a8ee01", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: mcp.json"}, "properties": {"repobilityId": "12c05383938aad3e", "scanner": "scanner-primary", "fingerprint": "b54919b425a8ee01", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-235612866b3a164f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: genes/debugger/SKILL.md"}, "properties": {"repobilityId": "ac6bfcd962a4f9f2", "scanner": "scanner-primary", "fingerprint": "235612866b3a164f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/debugger/SKILL.md"}, "region": {"startLine": 211}}}]}, {"ruleId": "scanner-11c53847c689a45e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: genes/debugger/SKILL.md"}, "properties": {"repobilityId": "0fc53c07718027b3", "scanner": "scanner-primary", "fingerprint": "11c53847c689a45e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/debugger/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c1c699965c244512", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: genes/grammar-checker/SKILL.md"}, "properties": {"repobilityId": "6b6600efaec5699c", "scanner": "scanner-primary", "fingerprint": "c1c699965c244512", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/grammar-checker/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6e85076f912f315e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: genes/auto-coder/SKILL.md"}, "properties": {"repobilityId": "e4969a6551aab96b", "scanner": "scanner-primary", "fingerprint": "6e85076f912f315e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/auto-coder/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1927a56c1d09cbc7", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: genes/rotifer-protocol/SKILL.md"}, "properties": {"repobilityId": "1fc8bba07fa46151", "scanner": "scanner-primary", "fingerprint": "1927a56c1d09cbc7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/rotifer-protocol/SKILL.md"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-caa624353b3b851b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: genes/auto-writer/SKILL.md"}, "properties": {"repobilityId": "a06ec3c69583f67a", "scanner": "scanner-primary", "fingerprint": "caa624353b3b851b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/auto-writer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-afdfcbd973ae6aaf", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: genes/docs-writer/SKILL.md"}, "properties": {"repobilityId": "19e0f483e538ebe8", "scanner": "scanner-primary", "fingerprint": "afdfcbd973ae6aaf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/docs-writer/SKILL.md"}, "region": {"startLine": 332}}}]}, {"ruleId": "scanner-965dda96506fee94", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: genes/uiux-designer/SKILL.md"}, "properties": {"repobilityId": "318fecc3af24b802", "scanner": "scanner-primary", "fingerprint": "965dda96506fee94", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/uiux-designer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-68d330f83793554a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: genes/devops-automator/SKILL.md"}, "properties": {"repobilityId": "3eb72f34e715c8fc", "scanner": "scanner-primary", "fingerprint": "68d330f83793554a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/devops-automator/SKILL.md"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-f5e54b05f29b1960", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: genes/api-designer/SKILL.md"}, "properties": {"repobilityId": "9c1141f06da0e9e5", "scanner": "scanner-primary", "fingerprint": "f5e54b05f29b1960", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/api-designer/SKILL.md"}, "region": {"startLine": 318}}}]}, {"ruleId": "scanner-d3d3bb3c0dc0601c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: genes/data-modeler/SKILL.md"}, "properties": {"repobilityId": "bf47c8c3d41f9d74", "scanner": "scanner-primary", "fingerprint": "d3d3bb3c0dc0601c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/data-modeler/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ace9c316765c4260", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: genes/security-auditor/SKILL.md"}, "properties": {"repobilityId": "45fddf653a1e5981", "scanner": "scanner-primary", "fingerprint": "ace9c316765c4260", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "genes/security-auditor/SKILL.md"}, "region": {"startLine": 367}}}]}, {"ruleId": "scanner-311a960e86833e23", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugin-source/content/root/evolve/SKILL.md"}, "properties": {"repobilityId": "3377fe0621187a6a", "scanner": "scanner-primary", "fingerprint": "311a960e86833e23", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugin-source/content/root/evolve/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bdd84ddba7816b5d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/rotifer/skills/evolve/SKILL.md"}, "properties": {"repobilityId": "5bcff33522b3f838", "scanner": "scanner-primary", "fingerprint": "bdd84ddba7816b5d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/rotifer/skills/evolve/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a297cde77bd4b86", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 genes/chain-reader/index.ts:29"}, "properties": {"repobilityId": "e84b3b0ec8ff7151", "scanner": "scanner-primary", "fingerprint": "7a297cde77bd4b86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1acb3de4a1e70d16", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 genes/clawhub-web-search/index.ts:94"}, "properties": {"repobilityId": "677b5ccab88d4137", "scanner": "scanner-primary", "fingerprint": "1acb3de4a1e70d16", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0116348645a7e3ea", "level": "note", "message": {"text": "Legacy-named symbol `foundDeprecated` in genes/uiux-analyzer/index.ts:199"}, "properties": {"repobilityId": "35ce2025a92a99aa", "scanner": "scanner-primary", "fingerprint": "0116348645a7e3ea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-263ee5cc8d252320", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 rotifer-vscode/src/auth.ts:147"}, "properties": {"repobilityId": "94d98de17be96e55", "scanner": "scanner-primary", "fingerprint": "263ee5cc8d252320", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-63c23b8ec93c81f3", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 rotifer-vscode/src/cloud-client.ts:135"}, "properties": {"repobilityId": "3a85545bfe1380d9", "scanner": "scanner-primary", "fingerprint": "63c23b8ec93c81f3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1b5ea04dd00e04ad", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/fixtures/polyglot/build-fixtures.mjs:59"}, "properties": {"repobilityId": "575c46a9e043b1a4", "scanner": "scanner-primary", "fingerprint": "1b5ea04dd00e04ad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cbba357f854452ef", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/fixtures/polyglot/as-style/source/index.ts:10"}, "properties": {"repobilityId": "6f9a1871483cead1", "scanner": "scanner-primary", "fingerprint": "cbba357f854452ef", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e4820da3a96bcad6", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/network.test.ts:30"}, "properties": {"repobilityId": "18aa49ea16d70947", "scanner": "scanner-primary", "fingerprint": "e4820da3a96bcad6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f00d5b93f36a76ec", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/seasons-rpc.test.ts:6"}, "properties": {"repobilityId": "0e2be046bd4c3316", "scanner": "scanner-primary", "fingerprint": "f00d5b93f36a76ec", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-beb946e31eba8741", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/polyglot-byo-wasm.test.ts:3"}, "properties": {"repobilityId": "84ad12c1529477f8", "scanner": "scanner-primary", "fingerprint": "beb946e31eba8741", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-477709467d6d2ec8", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/network-v09.test.ts:9"}, "properties": {"repobilityId": "7cbd7b3d1009a1b0", "scanner": "scanner-primary", "fingerprint": "477709467d6d2ec8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f5696b4273a2d40a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/backfill-content-hashes.ts:41"}, "properties": {"repobilityId": "72ed08d5b8c93701", "scanner": "scanner-primary", "fingerprint": "f5696b4273a2d40a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a566e02b55b1f580", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/index-docs.ts:91"}, "properties": {"repobilityId": "dcda1363f41b7727", "scanner": "scanner-primary", "fingerprint": "a566e02b55b1f580", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-971633dc04639228", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/backfill-content-hash.ts:25"}, "properties": {"repobilityId": "df8c5a7dc97b1056", "scanner": "scanner-primary", "fingerprint": "971633dc04639228", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-015b77e5bfa3b73d", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/post-deploy-smoke-test.ts:54"}, "properties": {"repobilityId": "3680def1f28907a7", "scanner": "scanner-primary", "fingerprint": "015b77e5bfa3b73d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-99c296f2ceaa2aa8", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/post-deploy-smoke-test.ts:87"}, "properties": {"repobilityId": "99605d0a02512650", "scanner": "scanner-primary", "fingerprint": "99c296f2ceaa2aa8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-466ba184dfa6ca2d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 supabase/functions/chat/analytics.ts:81"}, "properties": {"repobilityId": "58b57f408bff1214", "scanner": "scanner-primary", "fingerprint": "466ba184dfa6ca2d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-980fbaa81d49282a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 supabase/functions/chat/index.ts:181"}, "properties": {"repobilityId": "082fb2eb999fe226", "scanner": "scanner-primary", "fingerprint": "980fbaa81d49282a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-07d179c548305234", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/types/phenotype.ts:268"}, "properties": {"repobilityId": "bbc1eb34f76a282a", "scanner": "scanner-primary", "fingerprint": "07d179c548305234", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2941e0b11695d602", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/commands/login.ts:85"}, "properties": {"repobilityId": "c4a795759dedb762", "scanner": "scanner-primary", "fingerprint": "2941e0b11695d602", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6abb0a4c8a5c35ab", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/commands/versions.ts:13"}, "properties": {"repobilityId": "9fb7844c62b24bf9", "scanner": "scanner-primary", "fingerprint": "6abb0a4c8a5c35ab", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3a46c180b5afadc1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/commands/api-key.ts:36"}, "properties": {"repobilityId": "0b7e7f6e8d40e175", "scanner": "scanner-primary", "fingerprint": "3a46c180b5afadc1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-616ba0dc4beb3488", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/commands/whoami.ts:9"}, "properties": {"repobilityId": "117a26cac04b8f95", "scanner": "scanner-primary", "fingerprint": "616ba0dc4beb3488", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9e2d477dfcff32db", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/utils/javy-compiler.ts:37"}, "properties": {"repobilityId": "e84e869ed2b7ae50", "scanner": "scanner-primary", "fingerprint": "9e2d477dfcff32db", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2f97afa5d2ba31da", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/utils/domain-suggest.ts:121"}, "properties": {"repobilityId": "21a631ccc4661ed7", "scanner": "scanner-primary", "fingerprint": "2f97afa5d2ba31da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5cd19b1b69672239", "level": "note", "message": {"text": "Legacy-named symbol `isDbLegacy` in src/utils/phenotype-validator.ts:243"}, "properties": {"repobilityId": "280019e1dfcea491", "scanner": "scanner-primary", "fingerprint": "5cd19b1b69672239", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1d81101a724d1784", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/cloud/client.ts:159"}, "properties": {"repobilityId": "0a78b846e71ccdd4", "scanner": "scanner-primary", "fingerprint": "1d81101a724d1784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-842c3824902cd25e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/runtime/network-gateway.ts:6"}, "properties": {"repobilityId": "de886061e7220be3", "scanner": "scanner-primary", "fingerprint": "842c3824902cd25e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9a82cf7d16234d20", "level": "note", "message": {"text": "21 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "2fad2cbef136ee78", "scanner": "scanner-primary", "fingerprint": "9a82cf7d16234d20", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "40531db6146dddca", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}