{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-6e9c9d8b8115db9b", "name": "Insecure pattern 'node_child_process' in scripts/sync-shared-logic.mjs:11", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/sync-shared-logic.mjs:11"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-508c71dd341ee0b3", "name": "Insecure pattern 'cors_wildcard' in .claude/skills/cloudbase/references/cloud-functions/SKILL.md:103", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in .claude/skills/cloudbase/references/cloud-functions/SKILL.md:103"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-52964415dff082f5", "name": "Possible secret in .claude/skills/cloudbase/references/auth-web/SKILL.md", "shortDescription": {"text": "Possible secret in .claude/skills/cloudbase/references/auth-web/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "13 tests / 71 src (ratio 0.18)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d1c21d85f86d6468", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_add/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_add/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-10919a7dd235b84a", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/profile_get_by_handle/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/profile_get_by_handle/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28bd56161a12d342", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/room_claim_seat/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/room_claim_seat/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7ae774c81559bef", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/room_write/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/room_write/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0300865ac1009b00", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/vote_reset/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/vote_reset/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c994526ec08f635", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/vote_submit/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/vote_submit/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44aa378083c419ff", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/profile_sync/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/profile_sync/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ff7ca2e19022da45", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_list/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_list/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db3012a2746dab2e", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/admin/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/admin/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-513e4a5df684201b", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/profile_get/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/profile_get/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d92da62f9172809", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/room_create/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/room_create/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33f0031ce85808bf", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_prune/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_prune/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-51a5a7575bfea3f8", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_bind/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_bind/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b15a49974f469089", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/vote_tally/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/vote_tally/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c97ba2bdb01afb13", "name": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_import/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_import/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 120 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, lockfile. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci, lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-38c3fb49d2c505c5", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/complex-queries.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/complex-queries.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e6f12840bdce838", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/pagination.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/pagination.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb065e2dc8b06037", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/geolocation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/geolocation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-28b453e5ea73dfba", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/crud-operations.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/crud-operations.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9bfbf18d6e8e7926", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/aggregation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/aggregation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4e038c978459579", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/miniprogram-development/references/cloudb", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/miniprogram-development/references/cloudbase-integration.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-934446a000bbb636", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/complex-queries.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/complex-queries.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c349ed58597da44", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/pagination.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/pagination.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-addd7c43482af905", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/geolocation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/geolocation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a89cde19e858fbe3", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/aggregation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/aggregation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-75e9f33ccacc2471", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/relational-database-web/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/relational-database-web/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5487a0b6ecefde8", "name": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/py/server-quickstart.m", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/py/server-quickstart.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a6991004810a155", "name": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/py/adapter-coze.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/py/adapter-coze.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-71431e45c2a328c6", "name": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/py/authentication.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/py/authentication.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-230d85244d3a881e", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/observabili", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/observability.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0c2d5fd7f01eb00b", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/storage.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/storage.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c0aa8ac3d61c1a3", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/tools.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/tools.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-628456ce969e6d0d", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/recipes.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/recipes.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e3185177b09f970", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/server-quickstart.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/server-quickstart.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-14c9da2e8994fd72", "name": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langgraph.m", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langgraph.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1aa151db543ff0b6", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langgraph.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langgraph.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-948e985e11c0d35d", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/agui-protocol.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/agui-protocol.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f71c020798fc323d", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/ui-clients.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/ui-clients.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff8d4432d8d592c5", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/ui-miniprogram.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/ui-miniprogram.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-21174c8e2817a75d", "name": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langchain.m", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langchain.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-eb5cf5ce7bdb7b30", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langchain.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langchain.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2186d1094c4bebb3", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/spec-workflow/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/spec-workflow/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8e0900dc76d7997c", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-wechat-integration/references/o", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-wechat-integration/references/official-account-jsapi-pay.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49bbeae4adbdb880", "name": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/auth-web/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/auth-web/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dd43a8c8225d10a9", "name": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/ops-inspector/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/ops-inspector/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b930682318b4e12b", "name": "Commented-code block (5 lines) in test/victoryStats.test.mjs:107", "shortDescription": {"text": "Commented-code block (5 lines) in test/victoryStats.test.mjs:107"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-db65b767bd7b6491", "name": "Legacy-named symbol `gd_wxapp_room_v1` in miniprogram/core/ownerRoom.js:9", "shortDescription": {"text": "Legacy-named symbol `gd_wxapp_room_v1` in miniprogram/core/ownerRoom.js:9"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3e7a00cb6213e41d", "name": "Legacy-named symbol `gd_wxapp_game_v1` in miniprogram/core/gameStore.js:22", "shortDescription": {"text": "Legacy-named symbol `gd_wxapp_game_v1` in miniprogram/core/gameStore.js:22"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d034c05df54ab9d", "name": "Commented-code block (6 lines) in miniprogram/shared-logic/honorLogic.js:372", "shortDescription": {"text": "Commented-code block (6 lines) in miniprogram/shared-logic/honorLogic.js:372"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b41702a2034859a4", "name": "Commented-code block (5 lines) in miniprogram/shared-logic/achievementLogic.js:38", "shortDescription": {"text": "Commented-code block (5 lines) in miniprogram/shared-logic/achievementLogic.js:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23013"}, "properties": {"repository": "xingfanxia/guandan-scorer-wxapp", "repoUrl": "https://github.com/xingfanxia/guandan-scorer-wxapp", "branch": "main"}, "results": [{"ruleId": "scanner-6e9c9d8b8115db9b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/sync-shared-logic.mjs:11"}, "properties": {"repobilityId": "08898b7898018851", "scanner": "scanner-primary", "fingerprint": "6e9c9d8b8115db9b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/sync-shared-logic.mjs"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-508c71dd341ee0b3", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in .claude/skills/cloudbase/references/cloud-functions/SKILL.md:103"}, "properties": {"repobilityId": "23edcf6febdf603c", "scanner": "scanner-primary", "fingerprint": "508c71dd341ee0b3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloud-functions/SKILL.md"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-52964415dff082f5", "level": "error", "message": {"text": "Possible secret in .claude/skills/cloudbase/references/auth-web/SKILL.md"}, "properties": {"repobilityId": "5e91ee0f8ee5e9c8", "scanner": "scanner-primary", "fingerprint": "52964415dff082f5", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/auth-web/SKILL.md"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-52964415dff082f5", "level": "error", "message": {"text": "Possible secret in .claude/skills/cloudbase/references/auth-web/SKILL.md"}, "properties": {"repobilityId": "5e91ee0f8ee5e9c8", "scanner": "scanner-primary", "fingerprint": "52964415dff082f5", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/auth-web/SKILL.md"}, "region": {"startLine": 155}}}]}, {"ruleId": "scanner-52964415dff082f5", "level": "error", "message": {"text": "Possible secret in .claude/skills/cloudbase/references/auth-web/SKILL.md"}, "properties": {"repobilityId": "5e91ee0f8ee5e9c8", "scanner": "scanner-primary", "fingerprint": "52964415dff082f5", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/auth-web/SKILL.md"}, "region": {"startLine": 156}}}]}, {"ruleId": "scanner-52964415dff082f5", "level": "error", "message": {"text": "Possible secret in .claude/skills/cloudbase/references/auth-web/SKILL.md"}, "properties": {"repobilityId": "5e91ee0f8ee5e9c8", "scanner": "scanner-primary", "fingerprint": "52964415dff082f5", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/auth-web/SKILL.md"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-52964415dff082f5", "level": "error", "message": {"text": "Possible secret in .claude/skills/cloudbase/references/auth-web/SKILL.md"}, "properties": {"repobilityId": "5e91ee0f8ee5e9c8", "scanner": "scanner-primary", "fingerprint": "52964415dff082f5", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/auth-web/SKILL.md"}, "region": {"startLine": 221}}}]}, {"ruleId": "scanner-52964415dff082f5", "level": "error", "message": {"text": "Possible secret in .claude/skills/cloudbase/references/auth-web/SKILL.md"}, "properties": {"repobilityId": "5e91ee0f8ee5e9c8", "scanner": "scanner-primary", "fingerprint": "52964415dff082f5", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/auth-web/SKILL.md"}, "region": {"startLine": 376}}}]}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "52e916ee1c96ebbc", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-d1c21d85f86d6468", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_add/package.json"}, "properties": {"repobilityId": "27fe484fb02d0838", "scanner": "scanner-primary", "fingerprint": "d1c21d85f86d6468", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/pool_add/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-10919a7dd235b84a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/profile_get_by_handle/package.json"}, "properties": {"repobilityId": "49ebfbf98f34732c", "scanner": "scanner-primary", "fingerprint": "10919a7dd235b84a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/profile_get_by_handle/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-28bd56161a12d342", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/room_claim_seat/package.json"}, "properties": {"repobilityId": "9503a453bc6bb37e", "scanner": "scanner-primary", "fingerprint": "28bd56161a12d342", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/room_claim_seat/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7ae774c81559bef", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/room_write/package.json"}, "properties": {"repobilityId": "f41af1f2505d8d12", "scanner": "scanner-primary", "fingerprint": "b7ae774c81559bef", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/room_write/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0300865ac1009b00", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/vote_reset/package.json"}, "properties": {"repobilityId": "d2768295032fb035", "scanner": "scanner-primary", "fingerprint": "0300865ac1009b00", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/vote_reset/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c994526ec08f635", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/vote_submit/package.json"}, "properties": {"repobilityId": "59b2f52b60d7a82a", "scanner": "scanner-primary", "fingerprint": "8c994526ec08f635", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/vote_submit/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-44aa378083c419ff", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/profile_sync/package.json"}, "properties": {"repobilityId": "36f1f80bc07977d6", "scanner": "scanner-primary", "fingerprint": "44aa378083c419ff", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/profile_sync/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ff7ca2e19022da45", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_list/package.json"}, "properties": {"repobilityId": "93d5882b8c186e80", "scanner": "scanner-primary", "fingerprint": "ff7ca2e19022da45", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/pool_list/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-db3012a2746dab2e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/admin/package.json"}, "properties": {"repobilityId": "7553e0e858dc05a3", "scanner": "scanner-primary", "fingerprint": "db3012a2746dab2e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/admin/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-513e4a5df684201b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/profile_get/package.json"}, "properties": {"repobilityId": "044656fe217f4c9e", "scanner": "scanner-primary", "fingerprint": "513e4a5df684201b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/profile_get/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d92da62f9172809", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/room_create/package.json"}, "properties": {"repobilityId": "676db803a3aebe16", "scanner": "scanner-primary", "fingerprint": "1d92da62f9172809", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/room_create/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-33f0031ce85808bf", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_prune/package.json"}, "properties": {"repobilityId": "11e7b0104089210e", "scanner": "scanner-primary", "fingerprint": "33f0031ce85808bf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/pool_prune/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-51a5a7575bfea3f8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_bind/package.json"}, "properties": {"repobilityId": "5592f1217d105ad1", "scanner": "scanner-primary", "fingerprint": "51a5a7575bfea3f8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/pool_bind/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b15a49974f469089", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/vote_tally/package.json"}, "properties": {"repobilityId": "c2c6547162aeec40", "scanner": "scanner-primary", "fingerprint": "b15a49974f469089", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/vote_tally/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c97ba2bdb01afb13", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cloudfunctions/pool_import/package.json"}, "properties": {"repobilityId": "14416ec684b7de20", "scanner": "scanner-primary", "fingerprint": "c97ba2bdb01afb13", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudfunctions/pool_import/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "5cb7adf9f909a129", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "7fe74cfa8972da18", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "986655635848fd75", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "82a33ac921842118", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "ad4fb53354ed91db", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "b47c1cf9f4e70eda", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-38c3fb49d2c505c5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/complex-queries.md"}, "properties": {"repobilityId": "61269c3be7ccbbc7", "scanner": "scanner-primary", "fingerprint": "38c3fb49d2c505c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/no-sql-web-sdk/complex-queries.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e6f12840bdce838", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/pagination.md"}, "properties": {"repobilityId": "3e5a9b7be86f0f35", "scanner": "scanner-primary", "fingerprint": "4e6f12840bdce838", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/no-sql-web-sdk/pagination.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb065e2dc8b06037", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/geolocation.md"}, "properties": {"repobilityId": "8f74d890432da010", "scanner": "scanner-primary", "fingerprint": "cb065e2dc8b06037", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/no-sql-web-sdk/geolocation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-28b453e5ea73dfba", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/crud-operations.md"}, "properties": {"repobilityId": "80883ffa5e712cf7", "scanner": "scanner-primary", "fingerprint": "28b453e5ea73dfba", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/no-sql-web-sdk/crud-operations.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9bfbf18d6e8e7926", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-web-sdk/aggregation.md"}, "properties": {"repobilityId": "0ee472000ca9580c", "scanner": "scanner-primary", "fingerprint": "9bfbf18d6e8e7926", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/no-sql-web-sdk/aggregation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a4e038c978459579", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/miniprogram-development/references/cloudbase-integration.md"}, "properties": {"repobilityId": "8dd75f8f67b3fd64", "scanner": "scanner-primary", "fingerprint": "a4e038c978459579", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/miniprogram-development/references/cloudbase-integration.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-934446a000bbb636", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/complex-queries.md"}, "properties": {"repobilityId": "91a0c83a487ea662", "scanner": "scanner-primary", "fingerprint": "934446a000bbb636", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/no-sql-wx-mp-sdk/complex-queries.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c349ed58597da44", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/pagination.md"}, "properties": {"repobilityId": "68541be52c082885", "scanner": "scanner-primary", "fingerprint": "8c349ed58597da44", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/no-sql-wx-mp-sdk/pagination.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-addd7c43482af905", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/geolocation.md"}, "properties": {"repobilityId": "1c24750bf874a024", "scanner": "scanner-primary", "fingerprint": "addd7c43482af905", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/no-sql-wx-mp-sdk/geolocation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a89cde19e858fbe3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/no-sql-wx-mp-sdk/aggregation.md"}, "properties": {"repobilityId": "abf28fcf803d31bb", "scanner": "scanner-primary", "fingerprint": "a89cde19e858fbe3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/no-sql-wx-mp-sdk/aggregation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-75e9f33ccacc2471", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/relational-database-web/SKILL.md"}, "properties": {"repobilityId": "4f2dcec7cb808568", "scanner": "scanner-primary", "fingerprint": "75e9f33ccacc2471", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/relational-database-web/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b5487a0b6ecefde8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/py/server-quickstart.md"}, "properties": {"repobilityId": "b70dcbdbfefbf40b", "scanner": "scanner-primary", "fingerprint": "b5487a0b6ecefde8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/py/server-quickstart.md"}, "region": {"startLine": 397}}}]}, {"ruleId": "scanner-3a6991004810a155", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/py/adapter-coze.md"}, "properties": {"repobilityId": "29d1918f15377774", "scanner": "scanner-primary", "fingerprint": "3a6991004810a155", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/py/adapter-coze.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-71431e45c2a328c6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/py/authentication.md"}, "properties": {"repobilityId": "f67c419f7bfe2067", "scanner": "scanner-primary", "fingerprint": "71431e45c2a328c6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/py/authentication.md"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-230d85244d3a881e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/observability.md"}, "properties": {"repobilityId": "f13efe5b8582367c", "scanner": "scanner-primary", "fingerprint": "230d85244d3a881e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/py/references/observability.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0c2d5fd7f01eb00b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/storage.md"}, "properties": {"repobilityId": "c32c57bc350d6b1b", "scanner": "scanner-primary", "fingerprint": "0c2d5fd7f01eb00b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/py/references/storage.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4c0aa8ac3d61c1a3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/tools.md"}, "properties": {"repobilityId": "13daf9eaa5a97df6", "scanner": "scanner-primary", "fingerprint": "4c0aa8ac3d61c1a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/py/references/tools.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-628456ce969e6d0d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/py/references/recipes.md"}, "properties": {"repobilityId": "f1f42e013ee44819", "scanner": "scanner-primary", "fingerprint": "628456ce969e6d0d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/py/references/recipes.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e3185177b09f970", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/server-quickstart.md"}, "properties": {"repobilityId": "718c62008a2db42e", "scanner": "scanner-primary", "fingerprint": "1e3185177b09f970", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/ts/server-quickstart.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-14c9da2e8994fd72", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langgraph.md"}, "properties": {"repobilityId": "a9e01aa0b471289e", "scanner": "scanner-primary", "fingerprint": "14c9da2e8994fd72", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langgraph.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-1aa151db543ff0b6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langgraph.md"}, "properties": {"repobilityId": "b86dd91192ac2414", "scanner": "scanner-primary", "fingerprint": "1aa151db543ff0b6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langgraph.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-948e985e11c0d35d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/agui-protocol.md"}, "properties": {"repobilityId": "fb6fe5b70620426d", "scanner": "scanner-primary", "fingerprint": "948e985e11c0d35d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/ts/agui-protocol.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f71c020798fc323d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/ui-clients.md"}, "properties": {"repobilityId": "6c9be6a957ad5d0b", "scanner": "scanner-primary", "fingerprint": "f71c020798fc323d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/ts/ui-clients.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ff8d4432d8d592c5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/ui-miniprogram.md"}, "properties": {"repobilityId": "05220abc81570fe5", "scanner": "scanner-primary", "fingerprint": "ff8d4432d8d592c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/ts/ui-miniprogram.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-21174c8e2817a75d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langchain.md"}, "properties": {"repobilityId": "4f78726bfbabc082", "scanner": "scanner-primary", "fingerprint": "21174c8e2817a75d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langchain.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-eb5cf5ce7bdb7b30", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langchain.md"}, "properties": {"repobilityId": "65d4fc25abf89581", "scanner": "scanner-primary", "fingerprint": "eb5cf5ce7bdb7b30", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-agent/ts/adapter-langchain.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2186d1094c4bebb3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/spec-workflow/SKILL.md"}, "properties": {"repobilityId": "51d320b7645af9ae", "scanner": "scanner-primary", "fingerprint": "2186d1094c4bebb3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/spec-workflow/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8e0900dc76d7997c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/cloudbase-wechat-integration/references/official-account-jsapi-pay.md"}, "properties": {"repobilityId": "7c055680a440cbf7", "scanner": "scanner-primary", "fingerprint": "8e0900dc76d7997c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/cloudbase-wechat-integration/references/official-account-jsapi-pay.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49bbeae4adbdb880", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/cloudbase/references/auth-web/SKILL.md"}, "properties": {"repobilityId": "61ec784733f3fff2", "scanner": "scanner-primary", "fingerprint": "49bbeae4adbdb880", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/auth-web/SKILL.md"}, "region": {"startLine": 318}}}]}, {"ruleId": "scanner-dd43a8c8225d10a9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cloudbase/references/ops-inspector/SKILL.md"}, "properties": {"repobilityId": "f03b38bd77343464", "scanner": "scanner-primary", "fingerprint": "dd43a8c8225d10a9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cloudbase/references/ops-inspector/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b930682318b4e12b", "level": "none", "message": {"text": "Commented-code block (5 lines) in test/victoryStats.test.mjs:107"}, "properties": {"repobilityId": "9b649c149b18e219", "scanner": "scanner-primary", "fingerprint": "b930682318b4e12b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-db65b767bd7b6491", "level": "note", "message": {"text": "Legacy-named symbol `gd_wxapp_room_v1` in miniprogram/core/ownerRoom.js:9"}, "properties": {"repobilityId": "dabaead87713c75a", "scanner": "scanner-primary", "fingerprint": "db65b767bd7b6491", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3e7a00cb6213e41d", "level": "note", "message": {"text": "Legacy-named symbol `gd_wxapp_game_v1` in miniprogram/core/gameStore.js:22"}, "properties": {"repobilityId": "083a897d2bcedc15", "scanner": "scanner-primary", "fingerprint": "3e7a00cb6213e41d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8d034c05df54ab9d", "level": "none", "message": {"text": "Commented-code block (6 lines) in miniprogram/shared-logic/honorLogic.js:372"}, "properties": {"repobilityId": "14c44745ab9d3e17", "scanner": "scanner-primary", "fingerprint": "8d034c05df54ab9d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b41702a2034859a4", "level": "none", "message": {"text": "Commented-code block (5 lines) in miniprogram/shared-logic/achievementLogic.js:38"}, "properties": {"repobilityId": "9ac67480ecd3af20", "scanner": "scanner-primary", "fingerprint": "b41702a2034859a4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}]}]}