{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-ddb1a24261d6d862", "name": "Possibly dead Python function: job_episodic_capture", "shortDescription": {"text": "Possibly dead Python function: job_episodic_capture"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9751a45649f7fad1", "name": "Possibly dead Python function: job_promote_episodes", "shortDescription": {"text": "Possibly dead Python function: job_promote_episodes"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-79a97e750b30087f", "name": "Possibly dead Python function: job_regression_check", "shortDescription": {"text": "Possibly dead Python function: job_regression_check"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3accabf58828253c", "name": "Possibly dead Python function: job_dispatch_cot_stats", "shortDescription": {"text": "Possibly dead Python function: job_dispatch_cot_stats"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2892ea42843cc4e", "name": "Possibly dead Python function: job_state_snapshot", "shortDescription": {"text": "Possibly dead Python function: job_state_snapshot"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc2f04dfa976193e", "name": "Possibly dead Python function: job_integrity_gate", "shortDescription": {"text": "Possibly dead Python function: job_integrity_gate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-928db6e15e1e8da1", "name": "Possibly dead Python function: job_compute_client_stats", "shortDescription": {"text": "Possibly dead Python function: job_compute_client_stats"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ddee1ebb4d3c06dc", "name": "Possibly dead Python function: job_snapshot_quality_daily", "shortDescription": {"text": "Possibly dead Python function: job_snapshot_quality_daily"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dae5b8e2a5dd0c3b", "name": "Possibly dead Python function: job_auto_capture_obsidian", "shortDescription": {"text": "Possibly dead Python function: job_auto_capture_obsidian"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8633f2db399b1914", "name": "Possibly dead Python function: job_delivery_rate_recompute", "shortDescription": {"text": "Possibly dead Python function: job_delivery_rate_recompute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6438d78fe1ea0e79", "name": "Possibly dead Python function: job_prompt_hints_promote", "shortDescription": {"text": "Possibly dead Python function: job_prompt_hints_promote"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-648377613faa47dc", "name": "Possibly dead Python function: job_budget_check", "shortDescription": {"text": "Possibly dead Python function: job_budget_check"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb4d310e88542733", "name": "Possibly dead Python function: job_audit_seal", "shortDescription": {"text": "Possibly dead Python function: job_audit_seal"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-64d8d599f9abb930", "name": "Possibly dead Python function: assemble_context_pack", "shortDescription": {"text": "Possibly dead Python function: assemble_context_pack"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9765283671b23b5", "name": "Possibly dead Python function: read_episode", "shortDescription": {"text": "Possibly dead Python function: read_episode"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-10056af2c176f902", "name": "Possibly dead Python function: count_episodes", "shortDescription": {"text": "Possibly dead Python function: count_episodes"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3262086056c8c7a5", "name": "Possibly dead Python function: episodes_using", "shortDescription": {"text": "Possibly dead Python function: episodes_using"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2acda8db62f672d1", "name": "Possibly dead Python function: top_memories", "shortDescription": {"text": "Possibly dead Python function: top_memories"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9618934501f38318", "name": "Possibly dead Python function: never_retrieved", "shortDescription": {"text": "Possibly dead Python function: never_retrieved"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9bd7691bca980290", "name": "Possibly dead Python function: estimate_tokens", "shortDescription": {"text": "Possibly dead Python function: estimate_tokens"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91ca08ef1758ba6f", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e0d58762ecd025fc", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8e312c4d4e0ce0c6", "name": "Possibly dead Python function: generic_text_score", "shortDescription": {"text": "Possibly dead Python function: generic_text_score"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d1c21ac5bd235bec", "name": "Possibly dead Python function: judge_metric", "shortDescription": {"text": "Possibly dead Python function: judge_metric"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-61c5175e3036d6e7", "name": "Possibly dead Python function: judge_metric", "shortDescription": {"text": "Possibly dead Python function: judge_metric"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-857091ff547871dc", "name": "Privileged port 20 in use", "shortDescription": {"text": "Privileged port 20 in use"}, "fullDescription": {"text": "Port 20 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f566016f5cb599e6", "name": "Privileged port 24 in use", "shortDescription": {"text": "Privileged port 24 in use"}, "fullDescription": {"text": "Port 24 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9bab6c8a0446293f", "name": "Privileged port 39 in use", "shortDescription": {"text": "Privileged port 39 in use"}, "fullDescription": {"text": "Port 39 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17ba13e74cb6ed3e", "name": "Dockerfile runs as root: orchestrator/license_server/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: orchestrator/license_server/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa28c9f2f092c566", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8afebbe047357694", "name": "Runtime dotenv file present in repo: runtime/config/.env", "shortDescription": {"text": "Runtime dotenv file present in repo: runtime/config/.env"}, "fullDescription": {"text": "`runtime/config/.env` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-14f321dbcf1ca46d", "name": "Insecure pattern 'cors_wildcard' in runtime/src/main.py:111", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in runtime/src/main.py:111"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f5ade56b7ba923d8", "name": "Insecure pattern 'direct_innerhtml_assignment' in runtime/src/routers/dashboard.py:105", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in runtime/src/routers/dashboard.py:105"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2ed456aa14e1583", "name": "Insecure pattern 'weak_hash' in skills-archive/verticals/seguranca-enterprise/aegis-digital-forensics/SKILL.md:29", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills-archive/verticals/seguranca-enterprise/aegis-digital-forensics/SKILL.md:29"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3dfedccaf55cf721", "name": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/agent-visualizer.html:342", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/agent-visualizer.html:342"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e92966f1a70d70df", "name": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/mission-control.html:537", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/mission-control.html:537"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a91ad186764bca99", "name": "Insecure pattern 'eval_used' in orchestrator/cron_daily.py:424", "shortDescription": {"text": "Insecure pattern 'eval_used' in orchestrator/cron_daily.py:424"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-33a3d3bba268937b", "name": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/agent_display.html:1307", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/agent_display.html:1307"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1c72ecd2b4c55413", "name": "Insecure pattern 'weak_hash' in orchestrator/enforcement/token_capture.py:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in orchestrator/enforcement/token_capture.py:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2082158fb5a168a2", "name": "Possible secret in orchestrator/tests/test_prompt_shield.py", "shortDescription": {"text": "Possible secret in orchestrator/tests/test_prompt_shield.py"}, "fullDescription": {"text": "Detected pattern matching github_token. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-2ad2e4294267933b", "name": "Insecure pattern 'python_os_system' in orchestrator/observability/generate_dashboard.py:1387", "shortDescription": {"text": "Insecure pattern 'python_os_system' in orchestrator/observability/generate_dashboard.py:1387"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cc964b3d571979cf", "name": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/observability/generate_dashboard.py:1284", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/observability/generate_dashboard.py:1284"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa8796530eb5aaa1", "name": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/observability/timeline.py:161", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/observability/timeline.py:161"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ac9962c33c5229ba", "name": "Insecure pattern 'eval_used' in orchestrator/tools/integrity_gate.py:114", "shortDescription": {"text": "Insecure pattern 'eval_used' in orchestrator/tools/integrity_gate.py:114"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1438a9d4a454b256", "name": "Insecure pattern 'private_key_in_repo' in orchestrator/safety/prompt_shield.py:111", "shortDescription": {"text": "Insecure pattern 'private_key_in_repo' in orchestrator/safety/prompt_shield.py:111"}, "fullDescription": {"text": "Found a known-risky pattern (private_key_in_repo). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-aa8b2a55f0763030", "name": "Insecure pattern 'eval_used' in orchestrator/quality/eval_drilldown.py:313", "shortDescription": {"text": "Insecure pattern 'eval_used' in orchestrator/quality/eval_drilldown.py:313"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c2b6dee8a44149be", "name": "Insecure pattern 'eval_used' in skills/obsidian-search-relevance/SKILL.md:39", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/obsidian-search-relevance/SKILL.md:39"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7f7d7ef45b9581d5", "name": "Insecure pattern 'weak_hash' in skills/builder-auth-system/SKILL.md:36", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/builder-auth-system/SKILL.md:36"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbcb4b37e23062e9", "name": "Insecure pattern 'cors_wildcard' in skills/builder-auth-system/SKILL.md:120", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in skills/builder-auth-system/SKILL.md:120"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aba2efcdef80aaba", "name": "Insecure pattern 'document_write' in skills/best-practices/SKILL.md:177", "shortDescription": {"text": "Insecure pattern 'document_write' in skills/best-practices/SKILL.md:177"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7bb1230bbfc7ed5d", "name": "Insecure pattern 'direct_innerhtml_assignment' in skills/best-practices/SKILL.md:85", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in skills/best-practices/SKILL.md:85"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9bde2334c6f16061", "name": "Insecure pattern 'local_storage_auth_token' in skills/best-practices/SKILL.md:191", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in skills/best-practices/SKILL.md:191"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b46f85bd49118a3", "name": "Insecure pattern 'dangerous_innerhtml' in skills/dario-pentest-checklist/SKILL.md:267", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/dario-pentest-checklist/SKILL.md:267"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5dbebdb3437d681", "name": "Possible secret in skills/owasp-security-check/SKILL.md", "shortDescription": {"text": "Possible secret in skills/owasp-security-check/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6d6a9b07811af300", "name": "Insecure pattern 'dangerous_innerhtml' in skills/owasp-security-check/SKILL.md:415", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/owasp-security-check/SKILL.md:415"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6698611e75625934", "name": "Insecure pattern 'cors_wildcard' in skills/owasp-security-check/SKILL.md:293", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in skills/owasp-security-check/SKILL.md:293"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-415e19727e5427e7", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/upload-artifact@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d5055d0953b759da", "name": "Very large file: orchestrator/observability/generate_dashboard.py (1394 lines)", "shortDescription": {"text": "Very large file: orchestrator/observability/generate_dashboard.py (1394 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6611ff22818b6a92", "name": "31 TODO/FIXME markers", "shortDescription": {"text": "31 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 1363 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 47 placeholder/mock markers across 22 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d79c4077342a7d0", "name": "Runtime service client appears to use placeholder configuration", "shortDescription": {"text": "Runtime service client appears to use placeholder configuration"}, "fullDescription": {"text": "A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-504bd7e7fcc28584", "name": "Agent authority lacks a verifier contract: skills-archive/verticals/risco-gestao/risco-contractual/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/risco-gestao/risco-contractual/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84681ff7b0b6db01", "name": "Agent authority lacks a verifier contract: skills-archive/verticals/risco-gestao/risco-seguros/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/risco-gestao/risco-seguros/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d7003ee636f99ac4", "name": "Agent authority lacks a verifier contract: skills-archive/verticals/risco-gestao/risco-bcp/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/risco-gestao/risco-bcp/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a3c32740d8c3efe5", "name": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-checklist/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-checklist/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c2892a99837ad5e", "name": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-venue/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-venue/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90cf6643383a2b64", "name": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-transport/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-transport/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b848be5dbc2384eb", "name": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-compliance/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-compliance/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b145899faea94fa7", "name": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-staff/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-staff/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3fee6a64bc6519fe", "name": "Agent authority lacks a verifier contract: skills-archive/verticals/supply-chain/suply-quality/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/supply-chain/suply-quality/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3518e24b81f01b17", "name": "Agent authority lacks a verifier contract: skills/diva-client-onboard/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-client-onboard/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d873e5d7c98b0f69", "name": "Agent authority lacks a verifier contract: skills/dario-diagnose/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-diagnose/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d0245a3071cbd4e8", "name": "Agent authority lacks a verifier contract: skills/dario-offer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-offer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5dd2b74c4bc07754", "name": "Agent authority lacks a verifier contract: skills/vitest/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/vitest/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-494b9b00de460e1f", "name": "Agent instruction/config may expose a secret: skills/cfo-token-roi/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/cfo-token-roi/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b01d1778aa19c2b2", "name": "Agent authority lacks a verifier contract: skills/nexus-database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/nexus-database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e9262c31870c2a4b", "name": "Agent instruction/config may expose a secret: skills/builder-nextjs-monorepo/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/builder-nextjs-monorepo/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-30907009adbc45eb", "name": "Agent authority lacks a verifier contract: skills/nexus-cicd/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/nexus-cicd/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-95098a5ca0169af8", "name": "Agent authority lacks a verifier contract: skills/builder-orpc-api/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/builder-orpc-api/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-91f7dc42af404413", "name": "Agent authority lacks a verifier contract: skills/diva-planradar/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-planradar/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-13b2d8250b4a4e96", "name": "Agent authority lacks a verifier contract: skills/dario-client-onboard/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-client-onboard/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ab153011456e88a6", "name": "Agent authority lacks a verifier contract: skills/dario-movement/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-movement/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-531c1ca7c7d17d2c", "name": "Agent instruction/config may expose a secret: skills/builder-ci-cd/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/builder-ci-cd/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0271d2597ee78b0c", "name": "Agent instruction/config may expose a secret: skills/dario-cfo/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/dario-cfo/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-12ac5039fda698aa", "name": "Agent authority lacks a verifier contract: skills/diva-ffe/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-ffe/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ebd4352102a9a85", "name": "Agent authority lacks a verifier contract: skills/diva-licensing/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-licensing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3314061aca73c43b", "name": "Agent authority lacks a verifier contract: skills/diva-bim/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-bim/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b6cf402e0b9e226", "name": "Agent instruction contains unpinned remote install: skills/builder-coolify-deploy/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/builder-coolify-deploy/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a951d8fdff16e96b", "name": "Agent instruction/config may expose a secret: skills/dario-layout-visual/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/dario-layout-visual/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4b308ace8f4259bc", "name": "Agent authority lacks a verifier contract: skills/dario-layout-visual/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-layout-visual/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69e175c3a8f11d29", "name": "Agent instruction/config may expose a secret: skills/builder-architecture-doc/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/builder-architecture-doc/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0045a20277520c7b", "name": "Agent authority lacks a verifier contract: skills/diva-floor-plan/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-floor-plan/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2675d6b8b5a77010", "name": "Agent authority lacks a verifier contract: skills/a360-case-study/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/a360-case-study/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-827e1e96f36e77ee", "name": "Agent authority lacks a verifier contract: skills/lucas-heartbeat/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/lucas-heartbeat/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe3bc7fbbc486692", "name": "Agent authority lacks a verifier contract: skills/banana/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/banana/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f23596b8a5d9850e", "name": "Agent authority lacks a verifier contract: skills/dario-ai-engineering/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-ai-engineering/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc65ecfdd32057a9", "name": "Agent authority lacks a verifier contract: skills/dario-financial-model-polished/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-financial-model-polished/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5368c4c71d208578", "name": "Agent instruction/config may expose a secret: skills/builder-auth-system/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/builder-auth-system/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-571fdc9e30b86b28", "name": "Agent instruction/config may expose a secret: skills/builder-vercel-deploy/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/builder-vercel-deploy/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6c84a4c41790869b", "name": "Agent authority lacks a verifier contract: skills/dario-funnel/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-funnel/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b2a9a21bd94e323", "name": "Agent authority lacks a verifier contract: skills/builder-visual-to-code/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/builder-visual-to-code/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a7ce274d9832318", "name": "Agent authority lacks a verifier contract: skills/diva-calc/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-calc/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8233a9f31a4b00c1", "name": "Agent authority lacks a verifier contract: skills/dario-product-mgmt/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-product-mgmt/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eca24924c3cee18b", "name": "Agent instruction/config may expose a secret: skills/builder-api-design/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/builder-api-design/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-201c8d063a9021da", "name": "Agent authority lacks a verifier contract: skills/builder-api-design/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/builder-api-design/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3462a9250c42a802", "name": "Agent authority lacks a verifier contract: skills/seo-local/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/seo-local/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-add47843befeed50", "name": "Agent authority lacks a verifier contract: skills/dario-legal/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-legal/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b22b639345b450c", "name": "Agent authority lacks a verifier contract: skills/diva-acoustics/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-acoustics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9002314a246b3182", "name": "Agent authority lacks a verifier contract: skills/dario-dispatch/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-dispatch/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aff5ed4bdcc9ef89", "name": "Agent authority lacks a verifier contract: skills/dario-data/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-data/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-06cc3bc54f21e01d", "name": "Agent authority lacks a verifier contract: skills/a360-validacao/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/a360-validacao/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8d9945dacf64c331", "name": "Agent authority lacks a verifier contract: skills/diva-comparador/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-comparador/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3b3eb6693a5bd87", "name": "Agent authority lacks a verifier contract: skills/diva-mep/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-mep/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12b3f0028d6f4170", "name": "Agent authority lacks a verifier contract: skills/diva-materials/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-materials/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d90c25cfe84ca4fe", "name": "Agent authority lacks a verifier contract: skills/dario-hr/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-hr/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed5cdb6bb3cb903a", "name": "Agent authority lacks a verifier contract: skills/diva-portfolio/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-portfolio/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30e9092fa1b9185f", "name": "Agent authority lacks a verifier contract: skills/a360-director/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/a360-director/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-626931da4d93a71d", "name": "Agent instruction/config may expose a secret: skills/dario-make-blueprint/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/dario-make-blueprint/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-457f19c9c0cb5425", "name": "Agent authority lacks a verifier contract: skills/dario-make-blueprint/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-make-blueprint/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1154532c8ede29cc", "name": "Agent authority lacks a verifier contract: skills/diva-roadmap/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-roadmap/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-86c7f5d4b77e2187", "name": "Agent authority lacks a verifier contract: skills/builder-component-docs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/builder-component-docs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-869c41fa73dbfac6", "name": "Agent authority lacks a verifier contract: skills/dario-design-shotgun/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-design-shotgun/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1abc1085f8dd7789", "name": "Agent instruction/config may expose a secret: skills/builder-nextjs-app/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/builder-nextjs-app/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5def231c7d5a2b6a", "name": "Agent authority lacks a verifier contract: skills/diva-render/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-render/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7d00797cf2de3f7", "name": "Agent instruction/config may expose a secret: skills/diva-smart-home/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/diva-smart-home/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-675fe855b9a174ec", "name": "Agent authority lacks a verifier contract: skills/diva-energy/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/diva-energy/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6109258deed17b7f", "name": "Agent authority lacks a verifier contract: skills/nexus-backup/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/nexus-backup/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb5cf196a30172b7", "name": "Agent instruction/config may expose a secret: skills/lucas-analytics/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/lucas-analytics/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-42748920fd8677c9", "name": "Agent authority lacks a verifier contract: skills/lucas-analytics/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/lucas-analytics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b1c91188b6d74e65", "name": "Agent authority lacks a verifier contract: skills/dario-pentest-checklist/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-pentest-checklist/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-95b03e0c1776fb3a", "name": "Agent instruction/config may expose a secret: skills/lucas-autopilot/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/lucas-autopilot/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0bf6d3bb336e83f8", "name": "Agent authority lacks a verifier contract: skills/dario-cro/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-cro/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6002e3b71d9b5954", "name": "Agent instruction/config may expose a secret: skills/owasp-security-check/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/owasp-security-check/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b6d687a86e284e60", "name": "Agent instruction/config may expose a secret: skills/builder-sst-deploy/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/builder-sst-deploy/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ddb88b79426b268c", "name": "Agent authority lacks a verifier contract: skills/seo-programmatic/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/seo-programmatic/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f472cb7ed9f3f297", "name": "Agent authority lacks a verifier contract: skills/conta-ativos/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/conta-ativos/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-479303c201dc049b", "name": "Agent authority lacks a verifier contract: skills/builder-docker-compose/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/builder-docker-compose/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c09fe51e3adfceb", "name": "Agent authority lacks a verifier contract: skills/dario-saas-metrics/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dario-saas-metrics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3e08e386548bcdd5", "name": "Agent authority lacks a verifier contract: skills/builder-brand-identity/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/builder-brand-identity/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-63670f5b02a7a0ac", "name": "Legacy-named symbol `imported_from_legacy` in orchestrator/memory/procedural.py:155", "shortDescription": {"text": "Legacy-named symbol `imported_from_legacy` in orchestrator/memory/procedural.py:155"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c6650aa145910acd", "name": "Commented-code block (5 lines) in orchestrator/enforcement/token_capture.py:32", "shortDescription": {"text": "Commented-code block (5 lines) in orchestrator/enforcement/token_capture.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-114a87ee8a9e352d", "name": "Legacy-named symbol `signatures_v2` in orchestrator/optimization/compile_sprint3.py:26", "shortDescription": {"text": "Legacy-named symbol `signatures_v2` in orchestrator/optimization/compile_sprint3.py:26"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-97f0cc62abfef485", "name": "Commented-code block (6 lines) in orchestrator/optimization/compile_sprint3.py:377", "shortDescription": {"text": "Commented-code block (6 lines) in orchestrator/optimization/compile_sprint3.py:377"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6efbb193b9fef0e0", "name": "Legacy-named symbol `compile_sprint3_v2` in orchestrator/optimization/compile_sprint3_v2.py:22", "shortDescription": {"text": "Legacy-named symbol `compile_sprint3_v2` in orchestrator/optimization/compile_sprint3_v2.py:22"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b20ae1eaca18af81", "name": "Commented-code block (6 lines) in orchestrator/optimization/compile_sprint3_v2.py:196", "shortDescription": {"text": "Commented-code block (6 lines) in orchestrator/optimization/compile_sprint3_v2.py:196"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1a1dabb66f1bd0a7", "name": "Commented-code block (7 lines) in orchestrator/tests/conftest.py:41", "shortDescription": {"text": "Commented-code block (7 lines) in orchestrator/tests/conftest.py:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0fbf928e32b701d4", "name": "Legacy-named symbol `ship_v1` in orchestrator/tests/test_db_v3_polished_and_spend.py:101", "shortDescription": {"text": "Legacy-named symbol `ship_v1` in orchestrator/tests/test_db_v3_polished_and_spend.py:101"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-10bfd54d7f1fd295", "name": "Legacy-named symbol `diff_against_legacy` in orchestrator/tests/test_company_loader.py:15", "shortDescription": {"text": "Legacy-named symbol `diff_against_legacy` in orchestrator/tests/test_company_loader.py:15"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-00ee16997a4fa1af", "name": "Legacy-named symbol `eff_unused` in orchestrator/tests/test_memory_decay_retrieval.py:127", "shortDescription": {"text": "Legacy-named symbol `eff_unused` in orchestrator/tests/test_memory_decay_retrieval.py:127"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eb2028a98356f2e3", "name": "Legacy-named symbol `ship_v1` in orchestrator/tests/test_polished_telemetry.py:48", "shortDescription": {"text": "Legacy-named symbol `ship_v1` in orchestrator/tests/test_polished_telemetry.py:48"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a22ab197bfaa1845", "name": "Legacy-named symbol `ship_v1` in orchestrator/scripts/record_polished_run.py:23", "shortDescription": {"text": "Legacy-named symbol `ship_v1` in orchestrator/scripts/record_polished_run.py:23"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e738151579a2f33c", "name": "Commented-code block (6 lines) in orchestrator/providers/anthropic.py:342", "shortDescription": {"text": "Commented-code block (6 lines) in orchestrator/providers/anthropic.py:342"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-381fd29bcb23d41d", "name": "Legacy-named symbol `about_page_copy` in orchestrator/execution/chain_schemas.py:125", "shortDescription": {"text": "Legacy-named symbol `about_page_copy` in orchestrator/execution/chain_schemas.py:125"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25ec96f03930c866", "name": "Commented-code block (5 lines) in orchestrator/execution/lifecycle.py:437", "shortDescription": {"text": "Commented-code block (5 lines) in orchestrator/execution/lifecycle.py:437"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-103adae0e27bc1cc", "name": "Stub function `shutdown` (body is just `pass`/`return`) \u2014 orchestrator/observability/otel_setup.py:101", "shortDescription": {"text": "Stub function `shutdown` (body is just `pass`/`return`) \u2014 orchestrator/observability/otel_setup.py:101"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d78f5249e72c323c", "name": "Commented-code block (6 lines) in orchestrator/observability/token_meter.py:87", "shortDescription": {"text": "Commented-code block (6 lines) in orchestrator/observability/token_meter.py:87"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-07e8014bbe1acb2b", "name": "Legacy-named symbol `brand_v1_vs_v2` in orchestrator/upgrades/observability.py:226", "shortDescription": {"text": "Legacy-named symbol `brand_v1_vs_v2` in orchestrator/upgrades/observability.py:226"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1dda8284409d3f4a", "name": "Commented-code block (5 lines) in orchestrator/schemas/contracts.py:362", "shortDescription": {"text": "Commented-code block (5 lines) in orchestrator/schemas/contracts.py:362"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e7894374c3baa678", "name": "Legacy-named symbol `_cleanup_legacy` in orchestrator/dream/engine.py:95", "shortDescription": {"text": "Legacy-named symbol `_cleanup_legacy` in orchestrator/dream/engine.py:95"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71ad2aa5f4bbac71", "name": "Commented-code block (5 lines) in orchestrator/dream/engine.py:105", "shortDescription": {"text": "Commented-code block (5 lines) in orchestrator/dream/engine.py:105"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-06eacaba3da5aadf", "name": "Stub function `init_trial_remote` (body is just `pass`/`return`) \u2014 orchestrator/licensing/license_manager.py:59", "shortDescription": {"text": "Stub function `init_trial_remote` (body is just `pass`/`return`) \u2014 orchestrator/licensing/license_manager.py:59"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-99407c15ee2a4c7b", "name": "Commented-code block (7 lines) in orchestrator/core/audit_signing.py:85", "shortDescription": {"text": "Commented-code block (7 lines) in orchestrator/core/audit_signing.py:85"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a9ed4b1a6c5e287d", "name": "Legacy-named symbol `about_page_copy` in orchestrator/core/task_spec.py:119", "shortDescription": {"text": "Legacy-named symbol `about_page_copy` in orchestrator/core/task_spec.py:119"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fae7146f66914f94", "name": "Commented-code block (5 lines) in orchestrator/core/runtime.py:266", "shortDescription": {"text": "Commented-code block (5 lines) in orchestrator/core/runtime.py:266"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b0782f2c2dcc1160", "name": "Blocking `urllib.request.urlopen(...)` inside `async def fire_webhooks` \u2014 orchestrator/core/runtime.py:763", "shortDescription": {"text": "Blocking `urllib.request.urlopen(...)` inside `async def fire_webhooks` \u2014 orchestrator/core/runtime.py:763"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `urllib.request.urlopen(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bd91d03cb956a511", "name": "Commented-code block (5 lines) in orchestrator/core/session_boot.py:56", "shortDescription": {"text": "Commented-code block (5 lines) in orchestrator/core/session_boot.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-12abcef4f12ccd4a", "name": "Legacy-named symbol `ship_v1` in orchestrator/core/db.py:646", "shortDescription": {"text": "Legacy-named symbol `ship_v1` in orchestrator/core/db.py:646"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2299e9f0f8cea0b7", "name": "Commented-code block (5 lines) in orchestrator/core/db.py:214", "shortDescription": {"text": "Commented-code block (5 lines) in orchestrator/core/db.py:214"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d17a651cd3b7901b", "name": "Commented-code block (6 lines) in orchestrator/runners/evolution.py:263", "shortDescription": {"text": "Commented-code block (6 lines) in orchestrator/runners/evolution.py:263"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8483379123d7a689", "name": "Network/subprocess call without timeout or try/except \u2014 orchestrator/runners/evolution.py:477", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 orchestrator/runners/evolution.py:477"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-077932b83de0450b", "name": "Commented-code block (8 lines) in orchestrator/dispatch/dispatch_engine.py:527", "shortDescription": {"text": "Commented-code block (8 lines) in orchestrator/dispatch/dispatch_engine.py:527"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5f4fb870f1d76f2f", "name": "Commented-code block (5 lines) in orchestrator/dispatch/dispatch_cot.py:190", "shortDescription": {"text": "Commented-code block (5 lines) in orchestrator/dispatch/dispatch_cot.py:190"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3762369df2988a0a", "name": "Network/subprocess call without timeout or try/except \u2014 orchestrator/quality/score_real_output.py:289", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 orchestrator/quality/score_real_output.py:289"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-819245de9c90fce2", "name": "Commented-code block (6 lines) in orchestrator/quality/quality_scorer.py:53", "shortDescription": {"text": "Commented-code block (6 lines) in orchestrator/quality/quality_scorer.py:53"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d3f1ad1b49a27b5a", "name": "Network/subprocess call without timeout or try/except \u2014 orchestrator/quality/quality_scorer.py:227", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 orchestrator/quality/quality_scorer.py:227"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6185f395124bea95", "name": "Legacy-named symbol `diff_against_legacy` in orchestrator/config/company_loader.py:95", "shortDescription": {"text": "Legacy-named symbol `diff_against_legacy` in orchestrator/config/company_loader.py:95"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6660e93123cdfb57", "name": "Network/subprocess call without timeout or try/except \u2014 orchestrator/meta/assemble_bundle.py:326", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 orchestrator/meta/assemble_bundle.py:326"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nruntime/src/routers/dashboard.py:dashboard_data, runtime/src/routers/dashboard.py:dashboard\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33a6b62e30ce7ab4", "name": "Near-duplicate function bodies in 6 places", "shortDescription": {"text": "Near-duplicate function bodies in 6 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\norchestrator/optimization/compile_sprint3.py:load_y, orchestrator/optimization/compile_sprint3.py:load_y, orchestrator/optimization/compile_sprint3_v2.py:load_y, orchestrator/optimization/compile_sprint3_v2.py:load_y\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\norchestrator/optimization/compile_sprint3.py:forward, orchestrator/optimization/compile_sprint3.py:forward, orchestrator/optimization/compile_sprint3.py:forward\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\norchestrator/scripts/auto_capture_obsidian.py:load_y, orchestrator/scripts/auto_capture_obsidian.py:load_y, orchestrator/scripts/compute_client_stats.py:load_y, orchestrator/scripts/compute_client_stats.py:load_y\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-76a2f6818267a9a8", "name": "Near-duplicate function bodies in 8 places", "shortDescription": {"text": "Near-duplicate function bodies in 8 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\norchestrator/scripts/sprint2_rescore.py:load_y, orchestrator/scripts/sprint2_rescore.py:load_y, orchestrator/cognitive/human_review_queue.py:load_y, orchestrator/cognitive/human_review_queue.py:load_y\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78f5d280092183b0", "name": "FastAPI POST `trigger_sync` without auth dependency \u2014 runtime/src/routers/tasks.py:76", "shortDescription": {"text": "FastAPI POST `trigger_sync` without auth dependency \u2014 runtime/src/routers/tasks.py:76"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b9126bfa2243a092", "name": "FastAPI POST `reinforce_pair` without auth dependency \u2014 runtime/src/routers/weights.py:46", "shortDescription": {"text": "FastAPI POST `reinforce_pair` without auth dependency \u2014 runtime/src/routers/weights.py:46"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d91b994823cebc7e", "name": "FastAPI POST `session_start` without auth dependency \u2014 runtime/src/routers/hooks.py:18", "shortDescription": {"text": "FastAPI POST `session_start` without auth dependency \u2014 runtime/src/routers/hooks.py:18"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7a3cf7404530df27", "name": "FastAPI POST `session_end` without auth dependency \u2014 runtime/src/routers/hooks.py:32", "shortDescription": {"text": "FastAPI POST `session_end` without auth dependency \u2014 runtime/src/routers/hooks.py:32"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c7725d0f91a4c1af", "name": "FastAPI POST `task_complete` without auth dependency \u2014 runtime/src/routers/hooks.py:45", "shortDescription": {"text": "FastAPI POST `task_complete` without auth dependency \u2014 runtime/src/routers/hooks.py:45"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f5e70b93e3427b57", "name": "FastAPI POST `add_tokens` without auth dependency \u2014 runtime/src/routers/budget.py:29", "shortDescription": {"text": "FastAPI POST `add_tokens` without auth dependency \u2014 runtime/src/routers/budget.py:29"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4f78b0a305bc4f53", "name": "FastAPI POST `trigger_pulse` without auth dependency \u2014 runtime/src/routers/evolution.py:67", "shortDescription": {"text": "FastAPI POST `trigger_pulse` without auth dependency \u2014 runtime/src/routers/evolution.py:67"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b493eb187f9b59e0", "name": "FastAPI POST `worker_permissions` without auth dependency \u2014 orchestrator/upgrades/security.py:203", "shortDescription": {"text": "FastAPI POST `worker_permissions` without auth dependency \u2014 orchestrator/upgrades/security.py:203"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-df043ee24a81f81f", "name": "FastAPI POST `compute_wave_schedule` without auth dependency \u2014 orchestrator/upgrades/execution.py:786", "shortDescription": {"text": "FastAPI POST `compute_wave_schedule` without auth dependency \u2014 orchestrator/upgrades/execution.py:786"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3888255344660318", "name": "FastAPI POST `route_task` without auth dependency \u2014 orchestrator/upgrades/intelligence.py:142", "shortDescription": {"text": "FastAPI POST `route_task` without auth dependency \u2014 orchestrator/upgrades/intelligence.py:142"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1e04b6658e5f1be6", "name": "FastAPI POST `list_interrupts` without auth dependency \u2014 orchestrator/upgrades/state.py:220", "shortDescription": {"text": "FastAPI POST `list_interrupts` without auth dependency \u2014 orchestrator/upgrades/state.py:220"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f59905517596f06e", "name": "FastAPI POST `trial_activate` without auth dependency \u2014 orchestrator/license_server/app.py:167", "shortDescription": {"text": "FastAPI POST `trial_activate` without auth dependency \u2014 orchestrator/license_server/app.py:167"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9b5c17c3d227440", "name": "FastAPI POST `trial_validate` without auth dependency \u2014 orchestrator/license_server/app.py:193", "shortDescription": {"text": "FastAPI POST `trial_validate` without auth dependency \u2014 orchestrator/license_server/app.py:193"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2a2ad141defa4c2f", "name": "FastAPI POST `vip_activate` without auth dependency \u2014 orchestrator/license_server/app.py:287", "shortDescription": {"text": "FastAPI POST `vip_activate` without auth dependency \u2014 orchestrator/license_server/app.py:287"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0cb9a1cef9fdca35", "name": "FastAPI POST `create_task` without auth dependency \u2014 orchestrator/core/runtime.py:401", "shortDescription": {"text": "FastAPI POST `create_task` without auth dependency \u2014 orchestrator/core/runtime.py:401"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1483bbe372b40c4f", "name": "FastAPI POST `assign_task` without auth dependency \u2014 orchestrator/core/runtime.py:412", "shortDescription": {"text": "FastAPI POST `assign_task` without auth dependency \u2014 orchestrator/core/runtime.py:412"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-de2786e6d82b5092", "name": "FastAPI POST `checkout_task` without auth dependency \u2014 orchestrator/core/runtime.py:420", "shortDescription": {"text": "FastAPI POST `checkout_task` without auth dependency \u2014 orchestrator/core/runtime.py:420"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a1a6d7c0db447797", "name": "FastAPI POST `complete_task` without auth dependency \u2014 orchestrator/core/runtime.py:428", "shortDescription": {"text": "FastAPI POST `complete_task` without auth dependency \u2014 orchestrator/core/runtime.py:428"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-02da074ee3612dfa", "name": "FastAPI POST `dispatch_execute` without auth dependency \u2014 orchestrator/core/runtime.py:446", "shortDescription": {"text": "FastAPI POST `dispatch_execute` without auth dependency \u2014 orchestrator/core/runtime.py:446"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c63120c284120f08", "name": "FastAPI POST `force_transition` without auth dependency \u2014 orchestrator/core/runtime.py:472", "shortDescription": {"text": "FastAPI POST `force_transition` without auth dependency \u2014 orchestrator/core/runtime.py:472"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ef6a8f94072844b8", "name": "FastAPI POST `trigger_pulse` without auth dependency \u2014 orchestrator/core/runtime.py:496", "shortDescription": {"text": "FastAPI POST `trigger_pulse` without auth dependency \u2014 orchestrator/core/runtime.py:496"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c6655e0ccdac20e5", "name": "FastAPI POST `start_chain` without auth dependency \u2014 orchestrator/core/runtime.py:516", "shortDescription": {"text": "FastAPI POST `start_chain` without auth dependency \u2014 orchestrator/core/runtime.py:516"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e1628d96040c10de", "name": "FastAPI POST `complete_task_with_event` without auth dependency \u2014 orchestrator/core/runtime.py:625", "shortDescription": {"text": "FastAPI POST `complete_task_with_event` without auth dependency \u2014 orchestrator/core/runtime.py:625"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-258b494746787b19", "name": "FastAPI POST `compose_chain` without auth dependency \u2014 orchestrator/core/runtime.py:643", "shortDescription": {"text": "FastAPI POST `compose_chain` without auth dependency \u2014 orchestrator/core/runtime.py:643"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ba921570f3f3d7e1", "name": "FastAPI POST `test_webhook` without auth dependency \u2014 orchestrator/core/runtime.py:776", "shortDescription": {"text": "FastAPI POST `test_webhook` without auth dependency \u2014 orchestrator/core/runtime.py:776"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0464c8fb58ba9267", "name": "FastAPI POST `instantiate_template` without auth dependency \u2014 orchestrator/core/runtime.py:837", "shortDescription": {"text": "FastAPI POST `instantiate_template` without auth dependency \u2014 orchestrator/core/runtime.py:837"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4eb3d24fb3baac72", "name": "FastAPI POST `parse_bank_statement` without auth dependency \u2014 orchestrator/core/runtime.py:918", "shortDescription": {"text": "FastAPI POST `parse_bank_statement` without auth dependency \u2014 orchestrator/core/runtime.py:918"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-90759458f5b3df99", "name": "FastAPI POST `parse_saft` without auth dependency \u2014 orchestrator/core/runtime.py:931", "shortDescription": {"text": "FastAPI POST `parse_saft` without auth dependency \u2014 orchestrator/core/runtime.py:931"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e3e110973869aaeb", "name": "FastAPI POST `validate_pt` without auth dependency \u2014 orchestrator/core/runtime.py:954", "shortDescription": {"text": "FastAPI POST `validate_pt` without auth dependency \u2014 orchestrator/core/runtime.py:954"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6bce6c3fd26eac7d", "name": "FastAPI POST `create_agent` without auth dependency \u2014 orchestrator/core/tier3.py:654", "shortDescription": {"text": "FastAPI POST `create_agent` without auth dependency \u2014 orchestrator/core/tier3.py:654"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d0077ceb712e562a", "name": "FastAPI POST `create_tenant` without auth dependency \u2014 orchestrator/core/tier3.py:659", "shortDescription": {"text": "FastAPI POST `create_tenant` without auth dependency \u2014 orchestrator/core/tier3.py:659"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f430edb143ab3387", "name": "FastAPI POST `install_plugin` without auth dependency \u2014 orchestrator/core/tier3.py:682", "shortDescription": {"text": "FastAPI POST `install_plugin` without auth dependency \u2014 orchestrator/core/tier3.py:682"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6b37712c2e0e64b2", "name": "FastAPI DELETE `uninstall_plugin` without auth dependency \u2014 orchestrator/core/tier3.py:686", "shortDescription": {"text": "FastAPI DELETE `uninstall_plugin` without auth dependency \u2014 orchestrator/core/tier3.py:686"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2c086ed9fe935383", "name": "FastAPI POST `create_workflow` without auth dependency \u2014 orchestrator/core/tier3.py:691", "shortDescription": {"text": "FastAPI POST `create_workflow` without auth dependency \u2014 orchestrator/core/tier3.py:691"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24484"}, "properties": {"repository": "bardapraiacaraiva/dario-orchestrator", "repoUrl": "https://github.com/bardapraiacaraiva/dario-orchestrator", "branch": "main"}, "results": [{"ruleId": "scanner-ddb1a24261d6d862", "level": "note", "message": {"text": "Possibly dead Python function: job_episodic_capture"}, "properties": {"repobilityId": "e9fa19c24a94cdca", "scanner": "scanner-primary", "fingerprint": "ddb1a24261d6d862", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:145"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9751a45649f7fad1", "level": "note", "message": {"text": "Possibly dead Python function: job_promote_episodes"}, "properties": {"repobilityId": "1629a4b52b8727e6", "scanner": "scanner-primary", "fingerprint": "9751a45649f7fad1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:166"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79a97e750b30087f", "level": "note", "message": {"text": "Possibly dead Python function: job_regression_check"}, "properties": {"repobilityId": "762f2c6b98257a7a", "scanner": "scanner-primary", "fingerprint": "79a97e750b30087f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:183"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3accabf58828253c", "level": "note", "message": {"text": "Possibly dead Python function: job_dispatch_cot_stats"}, "properties": {"repobilityId": "c2a024a2bbfa06fc", "scanner": "scanner-primary", "fingerprint": "3accabf58828253c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:200"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2892ea42843cc4e", "level": "note", "message": {"text": "Possibly dead Python function: job_state_snapshot"}, "properties": {"repobilityId": "4671e4b78a64f245", "scanner": "scanner-primary", "fingerprint": "a2892ea42843cc4e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:214"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc2f04dfa976193e", "level": "note", "message": {"text": "Possibly dead Python function: job_integrity_gate"}, "properties": {"repobilityId": "28a220b67f295139", "scanner": "scanner-primary", "fingerprint": "cc2f04dfa976193e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:241"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-928db6e15e1e8da1", "level": "note", "message": {"text": "Possibly dead Python function: job_compute_client_stats"}, "properties": {"repobilityId": "51ee7b789220c20a", "scanner": "scanner-primary", "fingerprint": "928db6e15e1e8da1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:260"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ddee1ebb4d3c06dc", "level": "note", "message": {"text": "Possibly dead Python function: job_snapshot_quality_daily"}, "properties": {"repobilityId": "0e7610bce3cf9980", "scanner": "scanner-primary", "fingerprint": "ddee1ebb4d3c06dc", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:292"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dae5b8e2a5dd0c3b", "level": "note", "message": {"text": "Possibly dead Python function: job_auto_capture_obsidian"}, "properties": {"repobilityId": "5b181e25c66d1370", "scanner": "scanner-primary", "fingerprint": "dae5b8e2a5dd0c3b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:319"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8633f2db399b1914", "level": "note", "message": {"text": "Possibly dead Python function: job_delivery_rate_recompute"}, "properties": {"repobilityId": "7e71aa5b0c0ac824", "scanner": "scanner-primary", "fingerprint": "8633f2db399b1914", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:362"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6438d78fe1ea0e79", "level": "note", "message": {"text": "Possibly dead Python function: job_prompt_hints_promote"}, "properties": {"repobilityId": "a42101bd5405e3f0", "scanner": "scanner-primary", "fingerprint": "6438d78fe1ea0e79", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:394"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-648377613faa47dc", "level": "note", "message": {"text": "Possibly dead Python function: job_budget_check"}, "properties": {"repobilityId": "b83b543823c0bb83", "scanner": "scanner-primary", "fingerprint": "648377613faa47dc", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:519"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb4d310e88542733", "level": "note", "message": {"text": "Possibly dead Python function: job_audit_seal"}, "properties": {"repobilityId": "24808e70a6066afd", "scanner": "scanner-primary", "fingerprint": "fb4d310e88542733", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py:546"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-64d8d599f9abb930", "level": "note", "message": {"text": "Possibly dead Python function: assemble_context_pack"}, "properties": {"repobilityId": "130b12c837529f99", "scanner": "scanner-primary", "fingerprint": "64d8d599f9abb930", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/memory/hooks.py:63"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9765283671b23b5", "level": "note", "message": {"text": "Possibly dead Python function: read_episode"}, "properties": {"repobilityId": "8d14de4ed233fe91", "scanner": "scanner-primary", "fingerprint": "b9765283671b23b5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/memory/episodic.py:74"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-10056af2c176f902", "level": "note", "message": {"text": "Possibly dead Python function: count_episodes"}, "properties": {"repobilityId": "69a7fcdfc846d3d0", "scanner": "scanner-primary", "fingerprint": "10056af2c176f902", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/memory/episodic.py:105"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3262086056c8c7a5", "level": "note", "message": {"text": "Possibly dead Python function: episodes_using"}, "properties": {"repobilityId": "6e5fce61b699e706", "scanner": "scanner-primary", "fingerprint": "3262086056c8c7a5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/memory/retrieval.py:117"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2acda8db62f672d1", "level": "note", "message": {"text": "Possibly dead Python function: top_memories"}, "properties": {"repobilityId": "1bb325dddf36838e", "scanner": "scanner-primary", "fingerprint": "2acda8db62f672d1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/memory/retrieval.py:125"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9618934501f38318", "level": "note", "message": {"text": "Possibly dead Python function: never_retrieved"}, "properties": {"repobilityId": "27f3ae947c628ed0", "scanner": "scanner-primary", "fingerprint": "9618934501f38318", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/memory/retrieval.py:130"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9bd7691bca980290", "level": "note", "message": {"text": "Possibly dead Python function: estimate_tokens"}, "properties": {"repobilityId": "2f3c83692bdba83e", "scanner": "scanner-primary", "fingerprint": "9bd7691bca980290", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/finance/budget_tracker.py:221"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-91ca08ef1758ba6f", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "91ca08ef1758ba6f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/optimization/programs.py:27"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e0d58762ecd025fc", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "e0d58762ecd025fc", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/optimization/compile_sprint3.py:233"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8e312c4d4e0ce0c6", "level": "note", "message": {"text": "Possibly dead Python function: generic_text_score"}, "properties": {"repobilityId": "a73102202259f212", "scanner": "scanner-primary", "fingerprint": "8e312c4d4e0ce0c6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/optimization/compile_sprint3.py:237"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d1c21ac5bd235bec", "level": "note", "message": {"text": "Possibly dead Python function: judge_metric"}, "properties": {"repobilityId": "255d5d8c1efb557d", "scanner": "scanner-primary", "fingerprint": "d1c21ac5bd235bec", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/optimization/compile_sprint3_v2.py:116"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-61c5175e3036d6e7", "level": "note", "message": {"text": "Possibly dead Python function: judge_metric"}, "properties": {"repobilityId": "255d5d8c1efb557d", "scanner": "scanner-primary", "fingerprint": "61c5175e3036d6e7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/optimization/compile_sprint4.py:546"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-857091ff547871dc", "level": "warning", "message": {"text": "Privileged port 20 in use"}, "properties": {"repobilityId": "a59f3e53d617e0f8", "scanner": "scanner-primary", "fingerprint": "857091ff547871dc", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/lex-br/memory/compliance_log/2026-05-19.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f566016f5cb599e6", "level": "warning", "message": {"text": "Privileged port 24 in use"}, "properties": {"repobilityId": "a6356ba91a17fcb8", "scanner": "scanner-primary", "fingerprint": "f566016f5cb599e6", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/lex-br/memory/compliance_log/2026-05-19.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9bab6c8a0446293f", "level": "warning", "message": {"text": "Privileged port 39 in use"}, "properties": {"repobilityId": "9b982a253b897533", "scanner": "scanner-primary", "fingerprint": "9bab6c8a0446293f", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/lex-br/memory/compliance_log/2026-05-19.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-17ba13e74cb6ed3e", "level": "warning", "message": {"text": "Dockerfile runs as root: orchestrator/license_server/Dockerfile"}, "properties": {"repobilityId": "1d2614f56a017505", "scanner": "scanner-primary", "fingerprint": "17ba13e74cb6ed3e", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-aa28c9f2f092c566", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim"}, "properties": {"repobilityId": "0dedfdf8302806be", "scanner": "scanner-primary", "fingerprint": "aa28c9f2f092c566", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/license_server/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8afebbe047357694", "level": "error", "message": {"text": "Runtime dotenv file present in repo: runtime/config/.env"}, "properties": {"repobilityId": "812ea7ab1c7ea5ac", "scanner": "scanner-primary", "fingerprint": "8afebbe047357694", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/config/.env"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-14f321dbcf1ca46d", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in runtime/src/main.py:111"}, "properties": {"repobilityId": "ca7046e804eba036", "scanner": "scanner-primary", "fingerprint": "14f321dbcf1ca46d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/src/main.py"}, "region": {"startLine": 111}}}]}, {"ruleId": "scanner-f5ade56b7ba923d8", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in runtime/src/routers/dashboard.py:105"}, "properties": {"repobilityId": "8a0c49ffd46c8576", "scanner": "scanner-primary", "fingerprint": "f5ade56b7ba923d8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/src/routers/dashboard.py"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-f2ed456aa14e1583", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills-archive/verticals/seguranca-enterprise/aegis-digital-forensics/SKILL.md:29"}, "properties": {"repobilityId": "4555f7bd80c13231", "scanner": "scanner-primary", "fingerprint": "f2ed456aa14e1583", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-archive/verticals/seguranca-enterprise/aegis-digital-forensics/SKILL.md"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-3dfedccaf55cf721", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/agent-visualizer.html:342"}, "properties": {"repobilityId": "e6255ea0c6e7bd69", "scanner": "scanner-primary", "fingerprint": "3dfedccaf55cf721", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/agent-visualizer.html"}, "region": {"startLine": 342}}}]}, {"ruleId": "scanner-e92966f1a70d70df", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/mission-control.html:537"}, "properties": {"repobilityId": "20a58cfed658cf7e", "scanner": "scanner-primary", "fingerprint": "e92966f1a70d70df", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/mission-control.html"}, "region": {"startLine": 537}}}]}, {"ruleId": "scanner-a91ad186764bca99", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in orchestrator/cron_daily.py:424"}, "properties": {"repobilityId": "faa270eff3d7382a", "scanner": "scanner-primary", "fingerprint": "a91ad186764bca99", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/cron_daily.py"}, "region": {"startLine": 424}}}]}, {"ruleId": "scanner-33a3d3bba268937b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/agent_display.html:1307"}, "properties": {"repobilityId": "157bef8277ba2b4d", "scanner": "scanner-primary", "fingerprint": "33a3d3bba268937b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/agent_display.html"}, "region": {"startLine": 1307}}}]}, {"ruleId": "scanner-1c72ecd2b4c55413", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in orchestrator/enforcement/token_capture.py:88"}, "properties": {"repobilityId": "7b96bb9a9f471f9b", "scanner": "scanner-primary", "fingerprint": "1c72ecd2b4c55413", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/enforcement/token_capture.py"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-2082158fb5a168a2", "level": "error", "message": {"text": "Possible secret in orchestrator/tests/test_prompt_shield.py"}, "properties": {"repobilityId": "dfb523f13c308038", "scanner": "scanner-primary", "fingerprint": "2082158fb5a168a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/tests/test_prompt_shield.py"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-2ad2e4294267933b", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in orchestrator/observability/generate_dashboard.py:1387"}, "properties": {"repobilityId": "c478240e0e82cf13", "scanner": "scanner-primary", "fingerprint": "2ad2e4294267933b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/observability/generate_dashboard.py"}, "region": {"startLine": 1387}}}]}, {"ruleId": "scanner-cc964b3d571979cf", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/observability/generate_dashboard.py:1284"}, "properties": {"repobilityId": "4aeb185670b32447", "scanner": "scanner-primary", "fingerprint": "cc964b3d571979cf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/observability/generate_dashboard.py"}, "region": {"startLine": 1284}}}]}, {"ruleId": "scanner-fa8796530eb5aaa1", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in orchestrator/observability/timeline.py:161"}, "properties": {"repobilityId": "93dfbce4601bfadd", "scanner": "scanner-primary", "fingerprint": "fa8796530eb5aaa1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/observability/timeline.py"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-ac9962c33c5229ba", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in orchestrator/tools/integrity_gate.py:114"}, "properties": {"repobilityId": "ea2ab164f547fcd1", "scanner": "scanner-primary", "fingerprint": "ac9962c33c5229ba", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/tools/integrity_gate.py"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-1438a9d4a454b256", "level": "error", "message": {"text": "Insecure pattern 'private_key_in_repo' in orchestrator/safety/prompt_shield.py:111"}, "properties": {"repobilityId": "1cb39a38ab65f246", "scanner": "scanner-primary", "fingerprint": "1438a9d4a454b256", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["owasp", "private_key_in_repo"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/safety/prompt_shield.py"}, "region": {"startLine": 111}}}]}, {"ruleId": "scanner-aa8b2a55f0763030", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in orchestrator/quality/eval_drilldown.py:313"}, "properties": {"repobilityId": "979b525d02c4e1de", "scanner": "scanner-primary", "fingerprint": "aa8b2a55f0763030", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/quality/eval_drilldown.py"}, "region": {"startLine": 313}}}]}, {"ruleId": "scanner-c2b6dee8a44149be", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/obsidian-search-relevance/SKILL.md:39"}, "properties": {"repobilityId": "309a168ee8247b1f", "scanner": "scanner-primary", "fingerprint": "c2b6dee8a44149be", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/obsidian-search-relevance/SKILL.md"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-7f7d7ef45b9581d5", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/builder-auth-system/SKILL.md:36"}, "properties": {"repobilityId": "01e1ff2b3604e132", "scanner": "scanner-primary", "fingerprint": "7f7d7ef45b9581d5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-auth-system/SKILL.md"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-bbcb4b37e23062e9", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in skills/builder-auth-system/SKILL.md:120"}, "properties": {"repobilityId": "bc43681a1ba47d37", "scanner": "scanner-primary", "fingerprint": "bbcb4b37e23062e9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-auth-system/SKILL.md"}, "region": {"startLine": 120}}}]}, {"ruleId": "scanner-aba2efcdef80aaba", "level": "note", "message": {"text": "Insecure pattern 'document_write' in skills/best-practices/SKILL.md:177"}, "properties": {"repobilityId": "a1d4106ad1a6c726", "scanner": "scanner-primary", "fingerprint": "aba2efcdef80aaba", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/best-practices/SKILL.md"}, "region": {"startLine": 177}}}]}, {"ruleId": "scanner-7bb1230bbfc7ed5d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in skills/best-practices/SKILL.md:85"}, "properties": {"repobilityId": "4dab6623cb8ee501", "scanner": "scanner-primary", "fingerprint": "7bb1230bbfc7ed5d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/best-practices/SKILL.md"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-9bde2334c6f16061", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in skills/best-practices/SKILL.md:191"}, "properties": {"repobilityId": "f294d723dda6e375", "scanner": "scanner-primary", "fingerprint": "9bde2334c6f16061", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/best-practices/SKILL.md"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-5b46f85bd49118a3", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/dario-pentest-checklist/SKILL.md:267"}, "properties": {"repobilityId": "c10a62944aad0c7c", "scanner": "scanner-primary", "fingerprint": "5b46f85bd49118a3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-pentest-checklist/SKILL.md"}, "region": {"startLine": 267}}}]}, {"ruleId": "scanner-e5dbebdb3437d681", "level": "error", "message": {"text": "Possible secret in skills/owasp-security-check/SKILL.md"}, "properties": {"repobilityId": "4c7d0d758607afb1", "scanner": "scanner-primary", "fingerprint": "e5dbebdb3437d681", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/owasp-security-check/SKILL.md"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-6d6a9b07811af300", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/owasp-security-check/SKILL.md:415"}, "properties": {"repobilityId": "85b0a12bbfd4a2e7", "scanner": "scanner-primary", "fingerprint": "6d6a9b07811af300", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/owasp-security-check/SKILL.md"}, "region": {"startLine": 415}}}]}, {"ruleId": "scanner-6698611e75625934", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in skills/owasp-security-check/SKILL.md:293"}, "properties": {"repobilityId": "cc1555aa1aae486b", "scanner": "scanner-primary", "fingerprint": "6698611e75625934", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/owasp-security-check/SKILL.md"}, "region": {"startLine": 293}}}]}, {"ruleId": "scanner-415e19727e5427e7", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "96c7650369892b35", "scanner": "scanner-primary", "fingerprint": "415e19727e5427e7", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/orchestrator-ci.yml"}, "region": {"startLine": 199}}}]}, {"ruleId": "scanner-d5055d0953b759da", "level": "note", "message": {"text": "Very large file: orchestrator/observability/generate_dashboard.py (1394 lines)"}, "properties": {"repobilityId": "6fa909eb25bf8385", "scanner": "scanner-primary", "fingerprint": "d5055d0953b759da", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6611ff22818b6a92", "level": "note", "message": {"text": "31 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "6611ff22818b6a92", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "92a043f562c105a2", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "ddf5868207e243a7", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-9d79c4077342a7d0", "level": "warning", "message": {"text": "Runtime service client appears to use placeholder configuration"}, "properties": {"repobilityId": "b79c96a1a891a001", "scanner": "scanner-primary", "fingerprint": "9d79c4077342a7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "runtime-config", "service-client", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "5370be0632aae898", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-504bd7e7fcc28584", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/risco-gestao/risco-contractual/SKILL.md"}, "properties": {"repobilityId": "6d1f9d91c18d64af", "scanner": "scanner-primary", "fingerprint": "504bd7e7fcc28584", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-archive/verticals/risco-gestao/risco-contractual/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-84681ff7b0b6db01", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/risco-gestao/risco-seguros/SKILL.md"}, "properties": {"repobilityId": "7dd8770878ca3429", "scanner": "scanner-primary", "fingerprint": "84681ff7b0b6db01", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-archive/verticals/risco-gestao/risco-seguros/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d7003ee636f99ac4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/risco-gestao/risco-bcp/SKILL.md"}, "properties": {"repobilityId": "3d0cbc23561e19fc", "scanner": "scanner-primary", "fingerprint": "d7003ee636f99ac4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-archive/verticals/risco-gestao/risco-bcp/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a3c32740d8c3efe5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-checklist/SKILL.md"}, "properties": {"repobilityId": "665f94f5675016f6", "scanner": "scanner-primary", "fingerprint": "a3c32740d8c3efe5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-archive/verticals/eventos/atlas-checklist/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c2892a99837ad5e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-venue/SKILL.md"}, "properties": {"repobilityId": "2711f0e9758a1d09", "scanner": "scanner-primary", "fingerprint": "8c2892a99837ad5e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-archive/verticals/eventos/atlas-venue/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90cf6643383a2b64", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-transport/SKILL.md"}, "properties": {"repobilityId": "c8ae370d4dc8f604", "scanner": "scanner-primary", "fingerprint": "90cf6643383a2b64", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-archive/verticals/eventos/atlas-transport/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b848be5dbc2384eb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-compliance/SKILL.md"}, "properties": {"repobilityId": "968577fae1559434", "scanner": "scanner-primary", "fingerprint": "b848be5dbc2384eb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-archive/verticals/eventos/atlas-compliance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b145899faea94fa7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/eventos/atlas-staff/SKILL.md"}, "properties": {"repobilityId": "a16f17fca987e596", "scanner": "scanner-primary", "fingerprint": "b145899faea94fa7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-archive/verticals/eventos/atlas-staff/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3fee6a64bc6519fe", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills-archive/verticals/supply-chain/suply-quality/SKILL.md"}, "properties": {"repobilityId": "d659b979b1ff78ae", "scanner": "scanner-primary", "fingerprint": "3fee6a64bc6519fe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills-archive/verticals/supply-chain/suply-quality/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3518e24b81f01b17", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-client-onboard/SKILL.md"}, "properties": {"repobilityId": "6a14a6a38308d348", "scanner": "scanner-primary", "fingerprint": "3518e24b81f01b17", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-client-onboard/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d873e5d7c98b0f69", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-diagnose/SKILL.md"}, "properties": {"repobilityId": "fbf9399bfc0683e2", "scanner": "scanner-primary", "fingerprint": "d873e5d7c98b0f69", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-diagnose/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d0245a3071cbd4e8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-offer/SKILL.md"}, "properties": {"repobilityId": "eefce67f7f8705a4", "scanner": "scanner-primary", "fingerprint": "d0245a3071cbd4e8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-offer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5dd2b74c4bc07754", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/vitest/SKILL.md"}, "properties": {"repobilityId": "a4a1754839ca506b", "scanner": "scanner-primary", "fingerprint": "5dd2b74c4bc07754", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/vitest/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-494b9b00de460e1f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/cfo-token-roi/SKILL.md"}, "properties": {"repobilityId": "9c35a1d9ede4b0b3", "scanner": "scanner-primary", "fingerprint": "494b9b00de460e1f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/cfo-token-roi/SKILL.md"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-b01d1778aa19c2b2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/nexus-database/SKILL.md"}, "properties": {"repobilityId": "6c6f631f5a231afd", "scanner": "scanner-primary", "fingerprint": "b01d1778aa19c2b2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/nexus-database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e9262c31870c2a4b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/builder-nextjs-monorepo/SKILL.md"}, "properties": {"repobilityId": "7c5b11487c2f4603", "scanner": "scanner-primary", "fingerprint": "e9262c31870c2a4b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-nextjs-monorepo/SKILL.md"}, "region": {"startLine": 124}}}]}, {"ruleId": "scanner-30907009adbc45eb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/nexus-cicd/SKILL.md"}, "properties": {"repobilityId": "d88bc97db9ef6bf1", "scanner": "scanner-primary", "fingerprint": "30907009adbc45eb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/nexus-cicd/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95098a5ca0169af8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/builder-orpc-api/SKILL.md"}, "properties": {"repobilityId": "a899ce3a1167eb76", "scanner": "scanner-primary", "fingerprint": "95098a5ca0169af8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-orpc-api/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-91f7dc42af404413", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-planradar/SKILL.md"}, "properties": {"repobilityId": "38023a43324a5607", "scanner": "scanner-primary", "fingerprint": "91f7dc42af404413", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-planradar/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-13b2d8250b4a4e96", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-client-onboard/SKILL.md"}, "properties": {"repobilityId": "8b3ffecbac8ed51a", "scanner": "scanner-primary", "fingerprint": "13b2d8250b4a4e96", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-client-onboard/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ab153011456e88a6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-movement/SKILL.md"}, "properties": {"repobilityId": "7a9479175088707c", "scanner": "scanner-primary", "fingerprint": "ab153011456e88a6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-movement/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-531c1ca7c7d17d2c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/builder-ci-cd/SKILL.md"}, "properties": {"repobilityId": "602c143514016da2", "scanner": "scanner-primary", "fingerprint": "531c1ca7c7d17d2c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-ci-cd/SKILL.md"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-0271d2597ee78b0c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/dario-cfo/SKILL.md"}, "properties": {"repobilityId": "035309b1eeba9080", "scanner": "scanner-primary", "fingerprint": "0271d2597ee78b0c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-cfo/SKILL.md"}, "region": {"startLine": 354}}}]}, {"ruleId": "scanner-12ac5039fda698aa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-ffe/SKILL.md"}, "properties": {"repobilityId": "e41891d909b175be", "scanner": "scanner-primary", "fingerprint": "12ac5039fda698aa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-ffe/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2ebd4352102a9a85", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-licensing/SKILL.md"}, "properties": {"repobilityId": "772811fa865bb6e2", "scanner": "scanner-primary", "fingerprint": "2ebd4352102a9a85", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-licensing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3314061aca73c43b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-bim/SKILL.md"}, "properties": {"repobilityId": "2f46f85890fce719", "scanner": "scanner-primary", "fingerprint": "3314061aca73c43b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-bim/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5b6cf402e0b9e226", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/builder-coolify-deploy/SKILL.md"}, "properties": {"repobilityId": "0b5b5604504a2a6a", "scanner": "scanner-primary", "fingerprint": "5b6cf402e0b9e226", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-coolify-deploy/SKILL.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-a951d8fdff16e96b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/dario-layout-visual/SKILL.md"}, "properties": {"repobilityId": "fd8a9472c84f5473", "scanner": "scanner-primary", "fingerprint": "a951d8fdff16e96b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-layout-visual/SKILL.md"}, "region": {"startLine": 521}}}]}, {"ruleId": "scanner-4b308ace8f4259bc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-layout-visual/SKILL.md"}, "properties": {"repobilityId": "3ab9e244de0381ea", "scanner": "scanner-primary", "fingerprint": "4b308ace8f4259bc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-layout-visual/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-69e175c3a8f11d29", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/builder-architecture-doc/SKILL.md"}, "properties": {"repobilityId": "5277f91915d1e1ba", "scanner": "scanner-primary", "fingerprint": "69e175c3a8f11d29", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-architecture-doc/SKILL.md"}, "region": {"startLine": 234}}}]}, {"ruleId": "scanner-0045a20277520c7b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-floor-plan/SKILL.md"}, "properties": {"repobilityId": "77fcad8fa40522cf", "scanner": "scanner-primary", "fingerprint": "0045a20277520c7b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-floor-plan/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2675d6b8b5a77010", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/a360-case-study/SKILL.md"}, "properties": {"repobilityId": "3f1aa42a4cb9dfe6", "scanner": "scanner-primary", "fingerprint": "2675d6b8b5a77010", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/a360-case-study/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-827e1e96f36e77ee", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/lucas-heartbeat/SKILL.md"}, "properties": {"repobilityId": "d212437f7f3639a5", "scanner": "scanner-primary", "fingerprint": "827e1e96f36e77ee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/lucas-heartbeat/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fe3bc7fbbc486692", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/banana/SKILL.md"}, "properties": {"repobilityId": "1f5a006220e21a5f", "scanner": "scanner-primary", "fingerprint": "fe3bc7fbbc486692", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/banana/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f23596b8a5d9850e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-ai-engineering/SKILL.md"}, "properties": {"repobilityId": "922704c32d55752e", "scanner": "scanner-primary", "fingerprint": "f23596b8a5d9850e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-ai-engineering/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dc65ecfdd32057a9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-financial-model-polished/SKILL.md"}, "properties": {"repobilityId": "4c2d5d14e3544d90", "scanner": "scanner-primary", "fingerprint": "dc65ecfdd32057a9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-financial-model-polished/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5368c4c71d208578", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/builder-auth-system/SKILL.md"}, "properties": {"repobilityId": "c4ed6faae80494d3", "scanner": "scanner-primary", "fingerprint": "5368c4c71d208578", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-auth-system/SKILL.md"}, "region": {"startLine": 176}}}]}, {"ruleId": "scanner-571fdc9e30b86b28", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/builder-vercel-deploy/SKILL.md"}, "properties": {"repobilityId": "26d23201d3f44821", "scanner": "scanner-primary", "fingerprint": "571fdc9e30b86b28", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-vercel-deploy/SKILL.md"}, "region": {"startLine": 183}}}]}, {"ruleId": "scanner-6c84a4c41790869b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-funnel/SKILL.md"}, "properties": {"repobilityId": "23f9d8745d0f1195", "scanner": "scanner-primary", "fingerprint": "6c84a4c41790869b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-funnel/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3b2a9a21bd94e323", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/builder-visual-to-code/SKILL.md"}, "properties": {"repobilityId": "073706d0dea7ab75", "scanner": "scanner-primary", "fingerprint": "3b2a9a21bd94e323", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-visual-to-code/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a7ce274d9832318", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-calc/SKILL.md"}, "properties": {"repobilityId": "76597cbad987c148", "scanner": "scanner-primary", "fingerprint": "2a7ce274d9832318", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-calc/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8233a9f31a4b00c1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-product-mgmt/SKILL.md"}, "properties": {"repobilityId": "91470a77bfcd9a5b", "scanner": "scanner-primary", "fingerprint": "8233a9f31a4b00c1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-product-mgmt/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eca24924c3cee18b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/builder-api-design/SKILL.md"}, "properties": {"repobilityId": "5650ff57623fe103", "scanner": "scanner-primary", "fingerprint": "eca24924c3cee18b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-api-design/SKILL.md"}, "region": {"startLine": 174}}}]}, {"ruleId": "scanner-201c8d063a9021da", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/builder-api-design/SKILL.md"}, "properties": {"repobilityId": "e7598f05a9d754c1", "scanner": "scanner-primary", "fingerprint": "201c8d063a9021da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-api-design/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3462a9250c42a802", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/seo-local/SKILL.md"}, "properties": {"repobilityId": "00d381475a7767c0", "scanner": "scanner-primary", "fingerprint": "3462a9250c42a802", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/seo-local/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-add47843befeed50", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-legal/SKILL.md"}, "properties": {"repobilityId": "82c39e909793c371", "scanner": "scanner-primary", "fingerprint": "add47843befeed50", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-legal/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b22b639345b450c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-acoustics/SKILL.md"}, "properties": {"repobilityId": "fd7e69140702fd63", "scanner": "scanner-primary", "fingerprint": "1b22b639345b450c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-acoustics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9002314a246b3182", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-dispatch/SKILL.md"}, "properties": {"repobilityId": "160075d78c15149f", "scanner": "scanner-primary", "fingerprint": "9002314a246b3182", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-dispatch/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aff5ed4bdcc9ef89", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-data/SKILL.md"}, "properties": {"repobilityId": "9c89189d6be3c564", "scanner": "scanner-primary", "fingerprint": "aff5ed4bdcc9ef89", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-data/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06cc3bc54f21e01d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/a360-validacao/SKILL.md"}, "properties": {"repobilityId": "e2d43d1542004233", "scanner": "scanner-primary", "fingerprint": "06cc3bc54f21e01d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/a360-validacao/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8d9945dacf64c331", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-comparador/SKILL.md"}, "properties": {"repobilityId": "c8ed735188273bf2", "scanner": "scanner-primary", "fingerprint": "8d9945dacf64c331", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-comparador/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3b3eb6693a5bd87", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-mep/SKILL.md"}, "properties": {"repobilityId": "50907b9050ce0162", "scanner": "scanner-primary", "fingerprint": "e3b3eb6693a5bd87", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-mep/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12b3f0028d6f4170", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-materials/SKILL.md"}, "properties": {"repobilityId": "89be24ee6201f023", "scanner": "scanner-primary", "fingerprint": "12b3f0028d6f4170", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-materials/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d90c25cfe84ca4fe", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-hr/SKILL.md"}, "properties": {"repobilityId": "15b50e2aefa14c57", "scanner": "scanner-primary", "fingerprint": "d90c25cfe84ca4fe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-hr/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed5cdb6bb3cb903a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-portfolio/SKILL.md"}, "properties": {"repobilityId": "367f4482efe6b815", "scanner": "scanner-primary", "fingerprint": "ed5cdb6bb3cb903a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-portfolio/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30e9092fa1b9185f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/a360-director/SKILL.md"}, "properties": {"repobilityId": "6cda02754a93cc29", "scanner": "scanner-primary", "fingerprint": "30e9092fa1b9185f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/a360-director/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-626931da4d93a71d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/dario-make-blueprint/SKILL.md"}, "properties": {"repobilityId": "1be28e9a9ebb482f", "scanner": "scanner-primary", "fingerprint": "626931da4d93a71d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-make-blueprint/SKILL.md"}, "region": {"startLine": 329}}}]}, {"ruleId": "scanner-457f19c9c0cb5425", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-make-blueprint/SKILL.md"}, "properties": {"repobilityId": "0a6663416e149352", "scanner": "scanner-primary", "fingerprint": "457f19c9c0cb5425", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-make-blueprint/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1154532c8ede29cc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-roadmap/SKILL.md"}, "properties": {"repobilityId": "5b30528cfbf231d6", "scanner": "scanner-primary", "fingerprint": "1154532c8ede29cc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-roadmap/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-86c7f5d4b77e2187", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/builder-component-docs/SKILL.md"}, "properties": {"repobilityId": "dd589d1a21761662", "scanner": "scanner-primary", "fingerprint": "86c7f5d4b77e2187", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-component-docs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-869c41fa73dbfac6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-design-shotgun/SKILL.md"}, "properties": {"repobilityId": "b7996afc801f0c26", "scanner": "scanner-primary", "fingerprint": "869c41fa73dbfac6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-design-shotgun/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1abc1085f8dd7789", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/builder-nextjs-app/SKILL.md"}, "properties": {"repobilityId": "064220e754cd02c6", "scanner": "scanner-primary", "fingerprint": "1abc1085f8dd7789", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-nextjs-app/SKILL.md"}, "region": {"startLine": 219}}}]}, {"ruleId": "scanner-5def231c7d5a2b6a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-render/SKILL.md"}, "properties": {"repobilityId": "a9ff68775d194380", "scanner": "scanner-primary", "fingerprint": "5def231c7d5a2b6a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-render/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f7d00797cf2de3f7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/diva-smart-home/SKILL.md"}, "properties": {"repobilityId": "81ee1ac44514efad", "scanner": "scanner-primary", "fingerprint": "f7d00797cf2de3f7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-smart-home/SKILL.md"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-675fe855b9a174ec", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/diva-energy/SKILL.md"}, "properties": {"repobilityId": "87da533035e464e4", "scanner": "scanner-primary", "fingerprint": "675fe855b9a174ec", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/diva-energy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6109258deed17b7f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/nexus-backup/SKILL.md"}, "properties": {"repobilityId": "7fd7480b12d50e0c", "scanner": "scanner-primary", "fingerprint": "6109258deed17b7f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/nexus-backup/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bb5cf196a30172b7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/lucas-analytics/SKILL.md"}, "properties": {"repobilityId": "20b99d8b29e3125b", "scanner": "scanner-primary", "fingerprint": "bb5cf196a30172b7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/lucas-analytics/SKILL.md"}, "region": {"startLine": 598}}}]}, {"ruleId": "scanner-42748920fd8677c9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/lucas-analytics/SKILL.md"}, "properties": {"repobilityId": "4dcc04dab1dcdcca", "scanner": "scanner-primary", "fingerprint": "42748920fd8677c9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/lucas-analytics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b1c91188b6d74e65", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-pentest-checklist/SKILL.md"}, "properties": {"repobilityId": "e888831a01a7e460", "scanner": "scanner-primary", "fingerprint": "b1c91188b6d74e65", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-pentest-checklist/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95b03e0c1776fb3a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/lucas-autopilot/SKILL.md"}, "properties": {"repobilityId": "c450dcc4c8e4b1bd", "scanner": "scanner-primary", "fingerprint": "95b03e0c1776fb3a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/lucas-autopilot/SKILL.md"}, "region": {"startLine": 201}}}]}, {"ruleId": "scanner-0bf6d3bb336e83f8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-cro/SKILL.md"}, "properties": {"repobilityId": "c324d601670d9eae", "scanner": "scanner-primary", "fingerprint": "0bf6d3bb336e83f8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-cro/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6002e3b71d9b5954", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/owasp-security-check/SKILL.md"}, "properties": {"repobilityId": "132605314adbc4c1", "scanner": "scanner-primary", "fingerprint": "6002e3b71d9b5954", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/owasp-security-check/SKILL.md"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-b6d687a86e284e60", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/builder-sst-deploy/SKILL.md"}, "properties": {"repobilityId": "27f097b378206a7b", "scanner": "scanner-primary", "fingerprint": "b6d687a86e284e60", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-sst-deploy/SKILL.md"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-ddb88b79426b268c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/seo-programmatic/SKILL.md"}, "properties": {"repobilityId": "e35795eb46b87cf6", "scanner": "scanner-primary", "fingerprint": "ddb88b79426b268c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/seo-programmatic/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f472cb7ed9f3f297", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/conta-ativos/SKILL.md"}, "properties": {"repobilityId": "420c783685da77c6", "scanner": "scanner-primary", "fingerprint": "f472cb7ed9f3f297", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conta-ativos/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-479303c201dc049b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/builder-docker-compose/SKILL.md"}, "properties": {"repobilityId": "7c053a5d85930824", "scanner": "scanner-primary", "fingerprint": "479303c201dc049b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-docker-compose/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c09fe51e3adfceb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dario-saas-metrics/SKILL.md"}, "properties": {"repobilityId": "bb27ef2e7b20ca10", "scanner": "scanner-primary", "fingerprint": "9c09fe51e3adfceb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dario-saas-metrics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3e08e386548bcdd5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/builder-brand-identity/SKILL.md"}, "properties": {"repobilityId": "9d1a9eeb182fb6a9", "scanner": "scanner-primary", "fingerprint": "3e08e386548bcdd5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-brand-identity/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-63670f5b02a7a0ac", "level": "note", "message": {"text": "Legacy-named symbol `imported_from_legacy` in orchestrator/memory/procedural.py:155"}, "properties": {"repobilityId": "a5d217e0d68cc950", "scanner": "scanner-primary", "fingerprint": "63670f5b02a7a0ac", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c6650aa145910acd", "level": "none", "message": {"text": "Commented-code block (5 lines) in orchestrator/enforcement/token_capture.py:32"}, "properties": {"repobilityId": "336e41d280c3fccb", "scanner": "scanner-primary", "fingerprint": "c6650aa145910acd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-114a87ee8a9e352d", "level": "note", "message": {"text": "Legacy-named symbol `signatures_v2` in orchestrator/optimization/compile_sprint3.py:26"}, "properties": {"repobilityId": "a5e684377976f7a5", "scanner": "scanner-primary", "fingerprint": "114a87ee8a9e352d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-97f0cc62abfef485", "level": "none", "message": {"text": "Commented-code block (6 lines) in orchestrator/optimization/compile_sprint3.py:377"}, "properties": {"repobilityId": "1210cb945b75e3a5", "scanner": "scanner-primary", "fingerprint": "97f0cc62abfef485", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6efbb193b9fef0e0", "level": "note", "message": {"text": "Legacy-named symbol `compile_sprint3_v2` in orchestrator/optimization/compile_sprint3_v2.py:22"}, "properties": {"repobilityId": "0012693a868e65ac", "scanner": "scanner-primary", "fingerprint": "6efbb193b9fef0e0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b20ae1eaca18af81", "level": "none", "message": {"text": "Commented-code block (6 lines) in orchestrator/optimization/compile_sprint3_v2.py:196"}, "properties": {"repobilityId": "c8c500711ba7003b", "scanner": "scanner-primary", "fingerprint": "b20ae1eaca18af81", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1a1dabb66f1bd0a7", "level": "none", "message": {"text": "Commented-code block (7 lines) in orchestrator/tests/conftest.py:41"}, "properties": {"repobilityId": "be73d6c281e0ed42", "scanner": "scanner-primary", "fingerprint": "1a1dabb66f1bd0a7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0fbf928e32b701d4", "level": "note", "message": {"text": "Legacy-named symbol `ship_v1` in orchestrator/tests/test_db_v3_polished_and_spend.py:101"}, "properties": {"repobilityId": "3f374f5d5cf15c81", "scanner": "scanner-primary", "fingerprint": "0fbf928e32b701d4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-10bfd54d7f1fd295", "level": "note", "message": {"text": "Legacy-named symbol `diff_against_legacy` in orchestrator/tests/test_company_loader.py:15"}, "properties": {"repobilityId": "9ba9d98277db5fba", "scanner": "scanner-primary", "fingerprint": "10bfd54d7f1fd295", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-00ee16997a4fa1af", "level": "note", "message": {"text": "Legacy-named symbol `eff_unused` in orchestrator/tests/test_memory_decay_retrieval.py:127"}, "properties": {"repobilityId": "38dabaf56191832a", "scanner": "scanner-primary", "fingerprint": "00ee16997a4fa1af", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-eb2028a98356f2e3", "level": "note", "message": {"text": "Legacy-named symbol `ship_v1` in orchestrator/tests/test_polished_telemetry.py:48"}, "properties": {"repobilityId": "3d2ffba5dbb2d4b6", "scanner": "scanner-primary", "fingerprint": "eb2028a98356f2e3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a22ab197bfaa1845", "level": "note", "message": {"text": "Legacy-named symbol `ship_v1` in orchestrator/scripts/record_polished_run.py:23"}, "properties": {"repobilityId": "a4ffe10d3a0abf45", "scanner": "scanner-primary", "fingerprint": "a22ab197bfaa1845", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e738151579a2f33c", "level": "none", "message": {"text": "Commented-code block (6 lines) in orchestrator/providers/anthropic.py:342"}, "properties": {"repobilityId": "eb6ab4b541e5ad4d", "scanner": "scanner-primary", "fingerprint": "e738151579a2f33c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-381fd29bcb23d41d", "level": "note", "message": {"text": "Legacy-named symbol `about_page_copy` in orchestrator/execution/chain_schemas.py:125"}, "properties": {"repobilityId": "cc0222d4869e8edc", "scanner": "scanner-primary", "fingerprint": "381fd29bcb23d41d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-25ec96f03930c866", "level": "none", "message": {"text": "Commented-code block (5 lines) in orchestrator/execution/lifecycle.py:437"}, "properties": {"repobilityId": "1b5575e16251c499", "scanner": "scanner-primary", "fingerprint": "25ec96f03930c866", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-103adae0e27bc1cc", "level": "note", "message": {"text": "Stub function `shutdown` (body is just `pass`/`return`) \u2014 orchestrator/observability/otel_setup.py:101"}, "properties": {"repobilityId": "a5fec3ddb905665c", "scanner": "scanner-primary", "fingerprint": "103adae0e27bc1cc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-d78f5249e72c323c", "level": "none", "message": {"text": "Commented-code block (6 lines) in orchestrator/observability/token_meter.py:87"}, "properties": {"repobilityId": "633549c9fbd5c978", "scanner": "scanner-primary", "fingerprint": "d78f5249e72c323c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-07e8014bbe1acb2b", "level": "note", "message": {"text": "Legacy-named symbol `brand_v1_vs_v2` in orchestrator/upgrades/observability.py:226"}, "properties": {"repobilityId": "699c1036f137eb42", "scanner": "scanner-primary", "fingerprint": "07e8014bbe1acb2b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1dda8284409d3f4a", "level": "none", "message": {"text": "Commented-code block (5 lines) in orchestrator/schemas/contracts.py:362"}, "properties": {"repobilityId": "09766ac4b4b505e5", "scanner": "scanner-primary", "fingerprint": "1dda8284409d3f4a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e7894374c3baa678", "level": "note", "message": {"text": "Legacy-named symbol `_cleanup_legacy` in orchestrator/dream/engine.py:95"}, "properties": {"repobilityId": "21be52c6255c5dd7", "scanner": "scanner-primary", "fingerprint": "e7894374c3baa678", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-71ad2aa5f4bbac71", "level": "none", "message": {"text": "Commented-code block (5 lines) in orchestrator/dream/engine.py:105"}, "properties": {"repobilityId": "6ddb7e06a23f7160", "scanner": "scanner-primary", "fingerprint": "71ad2aa5f4bbac71", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-06eacaba3da5aadf", "level": "note", "message": {"text": "Stub function `init_trial_remote` (body is just `pass`/`return`) \u2014 orchestrator/licensing/license_manager.py:59"}, "properties": {"repobilityId": "7f2c1dfc3ddd3b99", "scanner": "scanner-primary", "fingerprint": "06eacaba3da5aadf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-99407c15ee2a4c7b", "level": "none", "message": {"text": "Commented-code block (7 lines) in orchestrator/core/audit_signing.py:85"}, "properties": {"repobilityId": "009a1c1b818fbab1", "scanner": "scanner-primary", "fingerprint": "99407c15ee2a4c7b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a9ed4b1a6c5e287d", "level": "note", "message": {"text": "Legacy-named symbol `about_page_copy` in orchestrator/core/task_spec.py:119"}, "properties": {"repobilityId": "f1fac5c14d016ff5", "scanner": "scanner-primary", "fingerprint": "a9ed4b1a6c5e287d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fae7146f66914f94", "level": "none", "message": {"text": "Commented-code block (5 lines) in orchestrator/core/runtime.py:266"}, "properties": {"repobilityId": "81ab6f86e7d866d6", "scanner": "scanner-primary", "fingerprint": "fae7146f66914f94", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b0782f2c2dcc1160", "level": "error", "message": {"text": "Blocking `urllib.request.urlopen(...)` inside `async def fire_webhooks` \u2014 orchestrator/core/runtime.py:763"}, "properties": {"repobilityId": "38c5169ba3b5fa5a", "scanner": "scanner-primary", "fingerprint": "b0782f2c2dcc1160", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 763}}}]}, {"ruleId": "scanner-bd91d03cb956a511", "level": "none", "message": {"text": "Commented-code block (5 lines) in orchestrator/core/session_boot.py:56"}, "properties": {"repobilityId": "8f66b0a1dd131b53", "scanner": "scanner-primary", "fingerprint": "bd91d03cb956a511", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-12abcef4f12ccd4a", "level": "note", "message": {"text": "Legacy-named symbol `ship_v1` in orchestrator/core/db.py:646"}, "properties": {"repobilityId": "bde9190a1f40dd9a", "scanner": "scanner-primary", "fingerprint": "12abcef4f12ccd4a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2299e9f0f8cea0b7", "level": "none", "message": {"text": "Commented-code block (5 lines) in orchestrator/core/db.py:214"}, "properties": {"repobilityId": "04f2baabeadb8fb9", "scanner": "scanner-primary", "fingerprint": "2299e9f0f8cea0b7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d17a651cd3b7901b", "level": "none", "message": {"text": "Commented-code block (6 lines) in orchestrator/runners/evolution.py:263"}, "properties": {"repobilityId": "17462a1437eeb8d1", "scanner": "scanner-primary", "fingerprint": "d17a651cd3b7901b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8483379123d7a689", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 orchestrator/runners/evolution.py:477"}, "properties": {"repobilityId": "f4eed22e32ec698b", "scanner": "scanner-primary", "fingerprint": "8483379123d7a689", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-077932b83de0450b", "level": "none", "message": {"text": "Commented-code block (8 lines) in orchestrator/dispatch/dispatch_engine.py:527"}, "properties": {"repobilityId": "82275cd4c05d774f", "scanner": "scanner-primary", "fingerprint": "077932b83de0450b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5f4fb870f1d76f2f", "level": "none", "message": {"text": "Commented-code block (5 lines) in orchestrator/dispatch/dispatch_cot.py:190"}, "properties": {"repobilityId": "a2bbccde33eda942", "scanner": "scanner-primary", "fingerprint": "5f4fb870f1d76f2f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3762369df2988a0a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 orchestrator/quality/score_real_output.py:289"}, "properties": {"repobilityId": "a4120ba0f1342aec", "scanner": "scanner-primary", "fingerprint": "3762369df2988a0a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-819245de9c90fce2", "level": "none", "message": {"text": "Commented-code block (6 lines) in orchestrator/quality/quality_scorer.py:53"}, "properties": {"repobilityId": "252196761426c466", "scanner": "scanner-primary", "fingerprint": "819245de9c90fce2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d3f1ad1b49a27b5a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 orchestrator/quality/quality_scorer.py:227"}, "properties": {"repobilityId": "d8dd722b11d47583", "scanner": "scanner-primary", "fingerprint": "d3f1ad1b49a27b5a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6185f395124bea95", "level": "note", "message": {"text": "Legacy-named symbol `diff_against_legacy` in orchestrator/config/company_loader.py:95"}, "properties": {"repobilityId": "55e0c0653a8a9ded", "scanner": "scanner-primary", "fingerprint": "6185f395124bea95", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6660e93123cdfb57", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 orchestrator/meta/assemble_bundle.py:326"}, "properties": {"repobilityId": "081c30e71784418f", "scanner": "scanner-primary", "fingerprint": "6660e93123cdfb57", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b1c2f44e71024a15", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e759b3b29312430d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d2c761709b2350cc", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "a49275954cc64d26", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "6a5a0192fa85cf20", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "25302814c80f79d2", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "714ff2a0549dae90", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9bc2934152f7f14c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "a2fb64001552a591", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "4e8b372e985aa366", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "14a89a970c5e5e41", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6ffbd185f7c95506", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-76a2f6818267a9a8", "level": "note", "message": {"text": "Near-duplicate function bodies in 8 places"}, "properties": {"repobilityId": "17ce7e2f42f3965d", "scanner": "scanner-primary", "fingerprint": "76a2f6818267a9a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-76a2f6818267a9a8", "level": "note", "message": {"text": "Near-duplicate function bodies in 8 places"}, "properties": {"repobilityId": "a30356d2f8f72f0d", "scanner": "scanner-primary", "fingerprint": "76a2f6818267a9a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "37c35c560b04e156", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "a0ac201fd7732ded", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bb3537e56067d29d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e6c424cf88b79809", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8cb38270251d5f71", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "babbc47c017337d3", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-78f5d280092183b0", "level": "error", "message": {"text": "FastAPI POST `trigger_sync` without auth dependency \u2014 runtime/src/routers/tasks.py:76"}, "properties": {"repobilityId": "343cbe9222b76f0d", "scanner": "scanner-primary", "fingerprint": "78f5d280092183b0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/src/routers/tasks.py"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-b9126bfa2243a092", "level": "error", "message": {"text": "FastAPI POST `reinforce_pair` without auth dependency \u2014 runtime/src/routers/weights.py:46"}, "properties": {"repobilityId": "5765abdf7ff74e23", "scanner": "scanner-primary", "fingerprint": "b9126bfa2243a092", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/src/routers/weights.py"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-d91b994823cebc7e", "level": "error", "message": {"text": "FastAPI POST `session_start` without auth dependency \u2014 runtime/src/routers/hooks.py:18"}, "properties": {"repobilityId": "36f8591db0e17e55", "scanner": "scanner-primary", "fingerprint": "d91b994823cebc7e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/src/routers/hooks.py"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-7a3cf7404530df27", "level": "error", "message": {"text": "FastAPI POST `session_end` without auth dependency \u2014 runtime/src/routers/hooks.py:32"}, "properties": {"repobilityId": "f0625e986494c743", "scanner": "scanner-primary", "fingerprint": "7a3cf7404530df27", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/src/routers/hooks.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-c7725d0f91a4c1af", "level": "error", "message": {"text": "FastAPI POST `task_complete` without auth dependency \u2014 runtime/src/routers/hooks.py:45"}, "properties": {"repobilityId": "72c9fd5b81217f81", "scanner": "scanner-primary", "fingerprint": "c7725d0f91a4c1af", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/src/routers/hooks.py"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-f5e70b93e3427b57", "level": "error", "message": {"text": "FastAPI POST `add_tokens` without auth dependency \u2014 runtime/src/routers/budget.py:29"}, "properties": {"repobilityId": "3b623c0fe10ce837", "scanner": "scanner-primary", "fingerprint": "f5e70b93e3427b57", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/src/routers/budget.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-4f78b0a305bc4f53", "level": "error", "message": {"text": "FastAPI POST `trigger_pulse` without auth dependency \u2014 runtime/src/routers/evolution.py:67"}, "properties": {"repobilityId": "29ace47fd691f274", "scanner": "scanner-primary", "fingerprint": "4f78b0a305bc4f53", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/src/routers/evolution.py"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-b493eb187f9b59e0", "level": "error", "message": {"text": "FastAPI POST `worker_permissions` without auth dependency \u2014 orchestrator/upgrades/security.py:203"}, "properties": {"repobilityId": "501c9a422ef17428", "scanner": "scanner-primary", "fingerprint": "b493eb187f9b59e0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/upgrades/security.py"}, "region": {"startLine": 203}}}]}, {"ruleId": "scanner-df043ee24a81f81f", "level": "error", "message": {"text": "FastAPI POST `compute_wave_schedule` without auth dependency \u2014 orchestrator/upgrades/execution.py:786"}, "properties": {"repobilityId": "15b63d0a0f471045", "scanner": "scanner-primary", "fingerprint": "df043ee24a81f81f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/upgrades/execution.py"}, "region": {"startLine": 786}}}]}, {"ruleId": "scanner-3888255344660318", "level": "error", "message": {"text": "FastAPI POST `route_task` without auth dependency \u2014 orchestrator/upgrades/intelligence.py:142"}, "properties": {"repobilityId": "358fd6fe9c3a2cce", "scanner": "scanner-primary", "fingerprint": "3888255344660318", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/upgrades/intelligence.py"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-1e04b6658e5f1be6", "level": "error", "message": {"text": "FastAPI POST `list_interrupts` without auth dependency \u2014 orchestrator/upgrades/state.py:220"}, "properties": {"repobilityId": "e646a83807ac8ca0", "scanner": "scanner-primary", "fingerprint": "1e04b6658e5f1be6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/upgrades/state.py"}, "region": {"startLine": 220}}}]}, {"ruleId": "scanner-f59905517596f06e", "level": "error", "message": {"text": "FastAPI POST `trial_activate` without auth dependency \u2014 orchestrator/license_server/app.py:167"}, "properties": {"repobilityId": "fece25d2605654fb", "scanner": "scanner-primary", "fingerprint": "f59905517596f06e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/license_server/app.py"}, "region": {"startLine": 167}}}]}, {"ruleId": "scanner-d9b5c17c3d227440", "level": "error", "message": {"text": "FastAPI POST `trial_validate` without auth dependency \u2014 orchestrator/license_server/app.py:193"}, "properties": {"repobilityId": "b161415f57378970", "scanner": "scanner-primary", "fingerprint": "d9b5c17c3d227440", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/license_server/app.py"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-2a2ad141defa4c2f", "level": "error", "message": {"text": "FastAPI POST `vip_activate` without auth dependency \u2014 orchestrator/license_server/app.py:287"}, "properties": {"repobilityId": "a9846f32bb839ff3", "scanner": "scanner-primary", "fingerprint": "2a2ad141defa4c2f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/license_server/app.py"}, "region": {"startLine": 287}}}]}, {"ruleId": "scanner-0cb9a1cef9fdca35", "level": "error", "message": {"text": "FastAPI POST `create_task` without auth dependency \u2014 orchestrator/core/runtime.py:401"}, "properties": {"repobilityId": "b3cde3bd10df6980", "scanner": "scanner-primary", "fingerprint": "0cb9a1cef9fdca35", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 401}}}]}, {"ruleId": "scanner-1483bbe372b40c4f", "level": "error", "message": {"text": "FastAPI POST `assign_task` without auth dependency \u2014 orchestrator/core/runtime.py:412"}, "properties": {"repobilityId": "4f9befa67457baf5", "scanner": "scanner-primary", "fingerprint": "1483bbe372b40c4f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 412}}}]}, {"ruleId": "scanner-de2786e6d82b5092", "level": "error", "message": {"text": "FastAPI POST `checkout_task` without auth dependency \u2014 orchestrator/core/runtime.py:420"}, "properties": {"repobilityId": "2738fe5ad70e36ba", "scanner": "scanner-primary", "fingerprint": "de2786e6d82b5092", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 420}}}]}, {"ruleId": "scanner-a1a6d7c0db447797", "level": "error", "message": {"text": "FastAPI POST `complete_task` without auth dependency \u2014 orchestrator/core/runtime.py:428"}, "properties": {"repobilityId": "33fb7fc38d1e13c7", "scanner": "scanner-primary", "fingerprint": "a1a6d7c0db447797", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 428}}}]}, {"ruleId": "scanner-02da074ee3612dfa", "level": "error", "message": {"text": "FastAPI POST `dispatch_execute` without auth dependency \u2014 orchestrator/core/runtime.py:446"}, "properties": {"repobilityId": "bdd9a50da7f4c085", "scanner": "scanner-primary", "fingerprint": "02da074ee3612dfa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 446}}}]}, {"ruleId": "scanner-c63120c284120f08", "level": "error", "message": {"text": "FastAPI POST `force_transition` without auth dependency \u2014 orchestrator/core/runtime.py:472"}, "properties": {"repobilityId": "58bceebaffdbff89", "scanner": "scanner-primary", "fingerprint": "c63120c284120f08", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 472}}}]}, {"ruleId": "scanner-ef6a8f94072844b8", "level": "error", "message": {"text": "FastAPI POST `trigger_pulse` without auth dependency \u2014 orchestrator/core/runtime.py:496"}, "properties": {"repobilityId": "638a1017f6b4d184", "scanner": "scanner-primary", "fingerprint": "ef6a8f94072844b8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 496}}}]}, {"ruleId": "scanner-c6655e0ccdac20e5", "level": "error", "message": {"text": "FastAPI POST `start_chain` without auth dependency \u2014 orchestrator/core/runtime.py:516"}, "properties": {"repobilityId": "bf915ae5ab3b65d8", "scanner": "scanner-primary", "fingerprint": "c6655e0ccdac20e5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 516}}}]}, {"ruleId": "scanner-e1628d96040c10de", "level": "error", "message": {"text": "FastAPI POST `complete_task_with_event` without auth dependency \u2014 orchestrator/core/runtime.py:625"}, "properties": {"repobilityId": "82005034e12fb036", "scanner": "scanner-primary", "fingerprint": "e1628d96040c10de", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 625}}}]}, {"ruleId": "scanner-258b494746787b19", "level": "error", "message": {"text": "FastAPI POST `compose_chain` without auth dependency \u2014 orchestrator/core/runtime.py:643"}, "properties": {"repobilityId": "315ca5e12656a8cf", "scanner": "scanner-primary", "fingerprint": "258b494746787b19", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 643}}}]}, {"ruleId": "scanner-ba921570f3f3d7e1", "level": "error", "message": {"text": "FastAPI POST `test_webhook` without auth dependency \u2014 orchestrator/core/runtime.py:776"}, "properties": {"repobilityId": "3993571a3f80deab", "scanner": "scanner-primary", "fingerprint": "ba921570f3f3d7e1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 776}}}]}, {"ruleId": "scanner-0464c8fb58ba9267", "level": "error", "message": {"text": "FastAPI POST `instantiate_template` without auth dependency \u2014 orchestrator/core/runtime.py:837"}, "properties": {"repobilityId": "179dcc6ce105ba51", "scanner": "scanner-primary", "fingerprint": "0464c8fb58ba9267", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 837}}}]}, {"ruleId": "scanner-4eb3d24fb3baac72", "level": "error", "message": {"text": "FastAPI POST `parse_bank_statement` without auth dependency \u2014 orchestrator/core/runtime.py:918"}, "properties": {"repobilityId": "9132eed3bf4e229f", "scanner": "scanner-primary", "fingerprint": "4eb3d24fb3baac72", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 918}}}]}, {"ruleId": "scanner-90759458f5b3df99", "level": "error", "message": {"text": "FastAPI POST `parse_saft` without auth dependency \u2014 orchestrator/core/runtime.py:931"}, "properties": {"repobilityId": "ee6d32ce4f04f08a", "scanner": "scanner-primary", "fingerprint": "90759458f5b3df99", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 931}}}]}, {"ruleId": "scanner-e3e110973869aaeb", "level": "error", "message": {"text": "FastAPI POST `validate_pt` without auth dependency \u2014 orchestrator/core/runtime.py:954"}, "properties": {"repobilityId": "6fe091e23131cb34", "scanner": "scanner-primary", "fingerprint": "e3e110973869aaeb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/runtime.py"}, "region": {"startLine": 954}}}]}, {"ruleId": "scanner-6bce6c3fd26eac7d", "level": "error", "message": {"text": "FastAPI POST `create_agent` without auth dependency \u2014 orchestrator/core/tier3.py:654"}, "properties": {"repobilityId": "ee6f6446d25004f3", "scanner": "scanner-primary", "fingerprint": "6bce6c3fd26eac7d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/tier3.py"}, "region": {"startLine": 654}}}]}, {"ruleId": "scanner-d0077ceb712e562a", "level": "error", "message": {"text": "FastAPI POST `create_tenant` without auth dependency \u2014 orchestrator/core/tier3.py:659"}, "properties": {"repobilityId": "f2d9302b8b925475", "scanner": "scanner-primary", "fingerprint": "d0077ceb712e562a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/tier3.py"}, "region": {"startLine": 659}}}]}, {"ruleId": "scanner-f430edb143ab3387", "level": "error", "message": {"text": "FastAPI POST `install_plugin` without auth dependency \u2014 orchestrator/core/tier3.py:682"}, "properties": {"repobilityId": "6452350d3a40e789", "scanner": "scanner-primary", "fingerprint": "f430edb143ab3387", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/tier3.py"}, "region": {"startLine": 682}}}]}, {"ruleId": "scanner-6b37712c2e0e64b2", "level": "error", "message": {"text": "FastAPI DELETE `uninstall_plugin` without auth dependency \u2014 orchestrator/core/tier3.py:686"}, "properties": {"repobilityId": "cd530e6b6d49a4e7", "scanner": "scanner-primary", "fingerprint": "6b37712c2e0e64b2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/tier3.py"}, "region": {"startLine": 686}}}]}, {"ruleId": "scanner-2c086ed9fe935383", "level": "error", "message": {"text": "FastAPI POST `create_workflow` without auth dependency \u2014 orchestrator/core/tier3.py:691"}, "properties": {"repobilityId": "1d3ea9cc28bc36cc", "scanner": "scanner-primary", "fingerprint": "2c086ed9fe935383", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "orchestrator/core/tier3.py"}, "region": {"startLine": 691}}}]}]}]}