{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-91c449fc3c38681f", "name": "Agent instruction contains unpinned remote install: agentsfleet-install-platform-ops/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: agentsfleet-install-platform-ops/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-21303565f1f28ef2", "name": "Commented-code block (5 lines) in agentsfleet-install-platform-ops/evals/llm-judge.eval.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in agentsfleet-install-platform-ops/evals/llm-judge.eval.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fd6762f288a7aba5", "name": "Commented-code block (6 lines) in agentsfleet-install-platform-ops/evals/repo-detection.test.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in agentsfleet-install-platform-ops/evals/repo-detection.test.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bb36da83fc972c86", "name": "Commented-code block (6 lines) in agentsfleet-install-platform-ops/evals/skill-runtime.test.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in agentsfleet-install-platform-ops/evals/skill-runtime.test.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23948"}, "properties": {"repository": "agentsfleet/skills", "repoUrl": "https://github.com/agentsfleet/skills", "branch": "main"}, "results": [{"ruleId": "scanner-91c449fc3c38681f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: agentsfleet-install-platform-ops/SKILL.md"}, "properties": {"repobilityId": "0f8de1b2f6884e27", "scanner": "scanner-primary", "fingerprint": "91c449fc3c38681f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agentsfleet-install-platform-ops/SKILL.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-21303565f1f28ef2", "level": "none", "message": {"text": "Commented-code block (5 lines) in agentsfleet-install-platform-ops/evals/llm-judge.eval.ts:1"}, "properties": {"repobilityId": "7db35c361148d162", "scanner": "scanner-primary", "fingerprint": "21303565f1f28ef2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fd6762f288a7aba5", "level": "none", "message": {"text": "Commented-code block (6 lines) in agentsfleet-install-platform-ops/evals/repo-detection.test.ts:1"}, "properties": {"repobilityId": "1c7bdba5f981aeb1", "scanner": "scanner-primary", "fingerprint": "fd6762f288a7aba5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bb36da83fc972c86", "level": "none", "message": {"text": "Commented-code block (6 lines) in agentsfleet-install-platform-ops/evals/skill-runtime.test.ts:1"}, "properties": {"repobilityId": "2dbe9396a3154731", "scanner": "scanner-primary", "fingerprint": "bb36da83fc972c86", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}]}]}