{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-2ae0d553df8bec27", "name": "Possibly dead Python function: fetch_comment", "shortDescription": {"text": "Possibly dead Python function: fetch_comment"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74f39dcce359ae12", "name": "Possibly dead Python function: fetch_job_content", "shortDescription": {"text": "Possibly dead Python function: fetch_job_content"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d9242be800084c6e", "name": "Possibly dead Python function: show_progress", "shortDescription": {"text": "Possibly dead Python function: show_progress"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eb80b67468441eec", "name": "Possibly dead Python function: log_message", "shortDescription": {"text": "Possibly dead Python function: log_message"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e34cc54db68ce2b", "name": "Possibly dead Python function: do_GET", "shortDescription": {"text": "Possibly dead Python function: do_GET"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d69f864dff2c0faf", "name": "Possibly dead Python function: do_POST", "shortDescription": {"text": "Possibly dead Python function: do_POST"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-328b79181b97cead", "name": "Possibly dead Python function: do_OPTIONS", "shortDescription": {"text": "Possibly dead Python function: do_OPTIONS"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12257ba7cd4bebc3", "name": "Possibly dead Python function: create_nowait_stopping_criteria", "shortDescription": {"text": "Possibly dead Python function: create_nowait_stopping_criteria"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12f5900ae825e7d1", "name": "Possibly dead Python function: apply_nowait", "shortDescription": {"text": "Possibly dead Python function: apply_nowait"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-405de004877cc311", "name": "Possibly dead Python function: ask", "shortDescription": {"text": "Possibly dead Python function: ask"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b04a74be6d3cefaa", "name": "Possibly dead Python function: is_expired", "shortDescription": {"text": "Possibly dead Python function: is_expired"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-243a0c4a2667bff0", "name": "Possibly dead Python function: update_notebook", "shortDescription": {"text": "Possibly dead Python function: update_notebook"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c4c416fadad262a", "name": "Possibly dead Python function: increment_use_count", "shortDescription": {"text": "Possibly dead Python function: increment_use_count"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d214dd2a1077fa3", "name": "Possibly dead Python function: run_single_query", "shortDescription": {"text": "Possibly dead Python function: run_single_query"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dda0982447b92b37", "name": "Possibly dead Python function: do_GET", "shortDescription": {"text": "Possibly dead Python function: do_GET"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80916047250707a3", "name": "Possibly dead Python function: do_POST", "shortDescription": {"text": "Possibly dead Python function: do_POST"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ebc29aa693b33881", "name": "Possibly dead Python function: log_message", "shortDescription": {"text": "Possibly dead Python function: log_message"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0a70b9202254a95", "name": "Possibly dead Python function: run_single_query", "shortDescription": {"text": "Possibly dead Python function: run_single_query"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-82c85d07bb66ae79", "name": "Possibly dead Python function: do_GET", "shortDescription": {"text": "Possibly dead Python function: do_GET"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b4e7c2c2b1425dd3", "name": "Possibly dead Python function: do_POST", "shortDescription": {"text": "Possibly dead Python function: do_POST"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b6b835d136f6007", "name": "Possibly dead Python function: log_message", "shortDescription": {"text": "Possibly dead Python function: log_message"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f78d9c05a94897c7", "name": "Possibly dead Python function: run_single_query", "shortDescription": {"text": "Possibly dead Python function: run_single_query"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-512ba20a2b683cb0", "name": "Possibly dead Python function: do_GET", "shortDescription": {"text": "Possibly dead Python function: do_GET"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93ffd7ae4550b2af", "name": "Possibly dead Python function: do_POST", "shortDescription": {"text": "Possibly dead Python function: do_POST"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-876f27a80c75be8d", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/FileTreeSidebar.tsx:90", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/FileTreeSidebar.tsx:90"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-52e503a849e6f45a", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/SkillSlideView.tsx:395", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/SkillSlideView.tsx:395"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ff270f26da8645d", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/SendToRepoModal.tsx:284", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/SendToRepoModal.tsx:284"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f97cb89e98ab22b0", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/SkillExplorer.tsx:312", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/SkillExplorer.tsx:312"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ce9a6656a1114798", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/SkillExplorer.tsx:490", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/SkillExplorer.tsx:490"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf2b1963533c3054", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/SaveToCollectionButton.tsx:257", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/SaveToCollectionButton.tsx:257"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1ed3dc1ad3ab47b4", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/TypeIcon.tsx:5", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/TypeIcon.tsx:5"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-64c6d30875b8a13a", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/AuthButton.tsx:122", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/AuthButton.tsx:122"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-80ac04408cb20eed", "name": "Stray `console.log` in TS/JS \u2014 dashboard/src/components/AuthButton.tsx:38", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 dashboard/src/components/AuthButton.tsx:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-19b6468e2fbcb806", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/JobsPreview.tsx:152", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/JobsPreview.tsx:152"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4cc846af72f36a51", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/CartSidebar.tsx:217", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/CartSidebar.tsx:217"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2ab03438a2357dd4", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/MyComponentsView.tsx:279", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/MyComponentsView.tsx:279"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b8e06706f35fe761", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/MyComponentsSidebarItem.tsx:57", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/MyComponentsSidebarItem.tsx:57"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-81bc25b45f6e18e7", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/MarkdownViewer.tsx:426", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/MarkdownViewer.tsx:426"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f7eb34171750e4e", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/JobsView.tsx:370", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/JobsView.tsx:370"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0e8b2bbe74e338b2", "name": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/TrendingView.tsx:359", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/TrendingView.tsx:359"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2e9c9cf8f17ec639", "name": "Stray `console.log` in TS/JS \u2014 dashboard/src/pages/api/claude-code-check.ts:89", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 dashboard/src/pages/api/claude-code-check.ts:89"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-550868b31bb06fde", "name": "Stray `console.log` in TS/JS \u2014 dashboard/public/blog/js/blog-loader.js:219", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 dashboard/public/blog/js/blog-loader.js:219"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2bd4b8f37e25f8b1", "name": "Stray `console.log` in TS/JS \u2014 api/claude-code-check.js:116", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 api/claude-code-check.js:116"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d67003e60b964de7", "name": "Stray `console.log` in TS/JS \u2014 api/claude-code-monitor/discord-notifier.js:244", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 api/claude-code-monitor/discord-notifier.js:244"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a772a6b62af720d5", "name": "Stray `console.log` in TS/JS \u2014 api/claude-code-monitor/check-version.js:116", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 api/claude-code-monitor/check-version.js:116"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cbdc2f9b704b8760", "name": "Stray `console.log` in TS/JS \u2014 api/claude-code-monitor/webhook.js:105", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 api/claude-code-monitor/webhook.js:105"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b2c365773f68b33b", "name": "Stray `console.log` in TS/JS \u2014 scripts/dev-server.js:38", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/dev-server.js:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e482245a880a42e8", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/tests/validation/IntegrityValidator.test.js:363", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/tests/validation/IntegrityValidator.test.js:363"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a76a3a002ed4317", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/tests/validation/StructuralValidator.test.js:48", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/tests/validation/StructuralValidator.test.js:48"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-495141723bcd8d43", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/tests/validation/SemanticValidator.test.js:48", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/tests/validation/SemanticValidator.test.js:48"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141ffe14fb6b8bd4", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/test-console-bridge.js:10", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/test-console-bridge.js:10"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ffdac82d25d6679f", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/session-sharing.js:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/session-sharing.js:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d0455a6cb5e4b716", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/console-bridge.js:47", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/console-bridge.js:47"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa33801467afe395", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/health-check.js:32", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/health-check.js:32"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af3251eb844a05cc", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/mcp-stats.js:10", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/mcp-stats.js:10"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-95f35e55481a5b8c", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/security-audit.js:79", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/security-audit.js:79"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a44c19ec0625b6fa", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/plugin-dashboard.js:638", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/plugin-dashboard.js:638"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b2dff80c67467c67", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics.js:81", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics.js:81"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-716384aa8f1f75bf", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/index.js:63", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/index.js:63"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d85c36c9d16ce469", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/chats-mobile.js:68", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/chats-mobile.js:68"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27effba130c62f62", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/skill-dashboard.js:29", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/skill-dashboard.js:29"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d01a5f34f0e9efbe", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/sandbox-server.js:16", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/sandbox-server.js:16"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1cf9e938e4db2fa0", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/command-stats.js:108", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/command-stats.js:108"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc6840b9d03e0993", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/file-operations.js:36", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/file-operations.js:36"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-200ab30c76e881a7", "name": "TODO/FIXME marker in shipping code \u2014 cli-tool/src/claude-api-proxy.js:193", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 cli-tool/src/claude-api-proxy.js:193"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ca7092afacdd14e8", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/claude-api-proxy.js:170", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/claude-api-proxy.js:170"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6bfbea20d76bb432", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/teams-dashboard.js:781", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/teams-dashboard.js:781"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92176d7789a85825", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/agents.js:58", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/agents.js:58"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bef619aa06c05a21", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/hook-stats.js:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/hook-stats.js:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-070aa6e8ada64408", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/plugin-dashboard-web/app.js:696", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/plugin-dashboard-web/app.js:696"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ca5424df8de60ce4", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/utils/PerformanceMonitor.js:42", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/utils/PerformanceMonitor.js:42"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-914f7a7eef31b694", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/YearInReview2025.js:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/YearInReview2025.js:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1891f31c7615c769", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/ProcessDetector.js:38", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/ProcessDetector.js:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-01d9ee5f0209455d", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/ConversationAnalyzer.js:29", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/ConversationAnalyzer.js:29"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28e8e85624069c02", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/FileWatcher.js:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/FileWatcher.js:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f991dbd9eb507b8", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/notifications/NotificationManager.js:21", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/notifications/NotificationManager.js:21"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-20f1585a206d8e07", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/notifications/WebSocketServer.js:32", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/notifications/WebSocketServer.js:32"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ef37c56a6d66126", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/SessionTimer.js:30", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/SessionTimer.js:30"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-14cd06a7a349eae6", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/ConversationTable.js:319", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/ConversationTable.js:319"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fe40abc96025af26", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/ActivityHeatmap.js:14", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/ActivityHeatmap.js:14"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-251cf92a6603754d", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/DashboardPage.js:29", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/DashboardPage.js:29"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c54a9af15fb4b082", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/ToolDisplay.js:45", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/ToolDisplay.js:45"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e1c837cd0e8ac2d", "name": "Icon-only button without accessible name \u2014 cli-tool/src/analytics-web/components/App.js:66", "shortDescription": {"text": "Icon-only button without accessible name \u2014 cli-tool/src/analytics-web/components/App.js:66"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7c5aba23a25683f2", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/App.js:190", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/App.js:190"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c8fbca775ff3a5de", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/services/DataService.js:111", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/services/DataService.js:111"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-618fa009934e725f", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/services/WebSocketService.js:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/services/WebSocketService.js:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-57f0a73d98bbcc3d", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/src/sdk/global-agent-manager.js:32", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/sdk/global-agent-manager.js:32"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-97682deb339cd17c", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/cloudflare/monitor.ts:54", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/cloudflare/monitor.ts:54"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc77a1d60040948a", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/cloudflare/launcher.ts:53", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/cloudflare/launcher.ts:53"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5412044d0a786db2", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/cloudflare/src/index.ts:126", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/cloudflare/src/index.ts:126"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b09b155dfea14769", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/docker/execute.js:25", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/docker/execute.js:25"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f355003556e0313", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/docker/docker-launcher.js:28", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/docker/docker-launcher.js:28"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2dcbcf405eb46ff3", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/productivity/writing-skills/render-graphs.js:124", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/productivity/writing-skills/render-graphs.js:124"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1c6f56fecff8e9cb", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/development/writing-skills/render-graphs.js:124", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/development/writing-skills/render-graphs.js:124"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bab2539ef9d16d4b", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/scripts/take-screenshots.js:15", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/scripts/take-screenshots.js:15"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72106d4e62c34ed1", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/index.ts:31"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c0f4a372c1becbf0", "name": "TODO/FIXME marker in shipping code \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backen", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/types/index.ts:1"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6696fc4ac2b0a6d5", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/db/database.ts:13"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d32cd85797a392fe", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/db/migrations.ts:15"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d62e418cbc9ca08", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/db/db.ts:10"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eec82640131fe15c", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/scientific/document-skills/pptx/scripts/html2pptx.js:921", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/scientific/document-skills/pptx/scripts/html2pptx.js:921"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71d4084521e196b5", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/utilities/playwright-skill/run.js:36", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/utilities/playwright-skill/run.js:36"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b4a2e4bc50d6e38b", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/utilities/playwright-skill/lib/helpers.js:137", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/utilities/playwright-skill/lib/helpers.js:137"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3834d7439e569b8a", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/document-processing/pptx/scripts/html2pptx.js:921", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/document-processing/pptx/scripts/html2pptx.js:921"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a165ce6db5c77c4e", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/web-development/roier-seo/scripts/audit.js:154", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/web-development/roier-seo/scripts/audit.js:154"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ce760b38e7c1c5a5", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/web-development/roier-seo/scripts/audit-api.js:135", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/web-development/roier-seo/scripts/audit-api.js:135"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d739bb109fb7bef5", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/.claude/sandbox/cloudflare/monitor.ts:54", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/.claude/sandbox/cloudflare/monitor.ts:54"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53ef92a9cb48d3b4", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/.claude/sandbox/cloudflare/launcher.ts:53", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/.claude/sandbox/cloudflare/launcher.ts:53"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-75e4ee4c8b8b40a4", "name": "Stray `console.log` in TS/JS \u2014 cli-tool/.claude/sandbox/cloudflare/src/index.ts:126", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/.claude/sandbox/cloudflare/src/index.ts:126"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9404156fe75556f1", "name": "Stray `console.log` in TS/JS \u2014 docs/js/generate-search-data.js:10", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 docs/js/generate-search-data.js:10"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5be9934d33c0a22a", "name": "Icon-only button without accessible name \u2014 docs/js/index-events.js:1488", "shortDescription": {"text": "Icon-only button without accessible name \u2014 docs/js/index-events.js:1488"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56a70b56bcd455a7", "name": "Stray `console.log` in TS/JS \u2014 docs/js/partnership-banner.js:37", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 docs/js/partnership-banner.js:37"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-782c7d1829a760b9", "name": "Icon-only button without accessible name \u2014 docs/js/script.js:273", "shortDescription": {"text": "Icon-only button without accessible name \u2014 docs/js/script.js:273"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1c071ae0f69de84e", "name": "Icon-only button without accessible name \u2014 docs/js/component-page.js:1443", "shortDescription": {"text": "Icon-only button without accessible name \u2014 docs/js/component-page.js:1443"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5dff18310bd26af6", "name": "Icon-only button without accessible name \u2014 docs/js/modal-helpers.js:72", "shortDescription": {"text": "Icon-only button without accessible name \u2014 docs/js/modal-helpers.js:72"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c813022da522a915", "name": "Icon-only button without accessible name \u2014 docs/js/workflows.js:448", "shortDescription": {"text": "Icon-only button without accessible name \u2014 docs/js/workflows.js:448"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25ae8e49c5f46e28", "name": "Stray `console.log` in TS/JS \u2014 docs/blog/js/blog-loader.js:219", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 docs/blog/js/blog-loader.js:219"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c29ca5366b26b08e", "name": "Stray `console.log` in TS/JS \u2014 cloudflare-workers/pulse/index.js:24", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cloudflare-workers/pulse/index.js:24"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b5c2f6acab01b3f2", "name": "Stray `console.log` in TS/JS \u2014 cloudflare-workers/docs-monitor/index.js:11", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cloudflare-workers/docs-monitor/index.js:11"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b60837323506a20", "name": "Stray `console.log` in TS/JS \u2014 cloudflare-workers/crons/index.js:25", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 cloudflare-workers/crons/index.js:25"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-addbee1cc95a0506", "name": "Privileged port 17 in use", "shortDescription": {"text": "Privileged port 17 in use"}, "fullDescription": {"text": "Port 17 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-669335e8406a3314", "name": "Privileged port 14 in use", "shortDescription": {"text": "Privileged port 14 in use"}, "fullDescription": {"text": "Port 14 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2b094ad13936773b", "name": "Privileged port 15 in use", "shortDescription": {"text": "Privileged port 15 in use"}, "fullDescription": {"text": "Port 15 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e12da7b2e6b43ca5", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8dc6d88e07ca2c0", "name": "Privileged port 11 in use", "shortDescription": {"text": "Privileged port 11 in use"}, "fullDescription": {"text": "Port 11 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0ae2ea4a5338c554", "name": "Privileged port 16 in use", "shortDescription": {"text": "Privileged port 16 in use"}, "fullDescription": {"text": "Port 16 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c812a893dc96d84e", "name": "Privileged port 13 in use", "shortDescription": {"text": "Privileged port 13 in use"}, "fullDescription": {"text": "Port 13 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a01c87209ebdec95", "name": "Privileged port 44 in use", "shortDescription": {"text": "Privileged port 44 in use"}, "fullDescription": {"text": "Port 44 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6174ac472c8478f", "name": "Privileged port 10 in use", "shortDescription": {"text": "Privileged port 10 in use"}, "fullDescription": {"text": "Port 10 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fce8df86616125e6", "name": "Privileged port 30 in use", "shortDescription": {"text": "Privileged port 30 in use"}, "fullDescription": {"text": "Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-669e3b03829427cb", "name": "Privileged port 502 in use", "shortDescription": {"text": "Privileged port 502 in use"}, "fullDescription": {"text": "Port 502 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48bcda5a617a3315", "name": "Privileged port 21 in use", "shortDescription": {"text": "Privileged port 21 in use"}, "fullDescription": {"text": "Port 21 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cacc426c9b36ae46", "name": "Privileged port 554 in use", "shortDescription": {"text": "Privileged port 554 in use"}, "fullDescription": {"text": "Port 554 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-657451abf5ffa328", "name": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9885e8092889575f", "name": "Insecure pattern 'dangerous_innerhtml' in dashboard/src/components/SkillSlideView.tsx:395", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in dashboard/src/components/SkillSlideView.tsx:395"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2b95c869adfed3de", "name": "Insecure pattern 'local_storage_auth_token' in dashboard/src/components/SendToRepoModal.tsx:94", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in dashboard/src/components/SendToRepoModal.tsx:94"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d923475d341055f", "name": "Insecure pattern 'dangerous_innerhtml' in dashboard/src/components/SkillExplorer.tsx:490", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in dashboard/src/components/SkillExplorer.tsx:490"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cce64367f270e1cf", "name": "Insecure pattern 'dangerous_innerhtml' in dashboard/src/components/MarkdownViewer.tsx:426", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in dashboard/src/components/MarkdownViewer.tsx:426"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b750df27631e32ac", "name": "Insecure pattern 'cors_wildcard' in dashboard/src/pages/api/live-task/tools.ts:7", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in dashboard/src/pages/api/live-task/tools.ts:7"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c41ad7bd74c4ad7", "name": "Insecure pattern 'cors_wildcard' in dashboard/src/pages/api/live-task/control.ts:10", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in dashboard/src/pages/api/live-task/control.ts:10"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3604578eb0c900f", "name": "Insecure pattern 'cors_wildcard' in dashboard/src/pages/api/live-task/cycles.ts:7", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in dashboard/src/pages/api/live-task/cycles.ts:7"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1700725b85a295c", "name": "Insecure pattern 'cors_wildcard' in dashboard/src/lib/api/cors.ts:2", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in dashboard/src/lib/api/cors.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e357bac053aa68b8", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/nextjs-vercel-claude-code-integration/index.html", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/nextjs-vercel-claude-code-integration/index.html:715"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0bbb935e5c314391", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/heygen-best-practices-skill/index.html:579", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/heygen-best-practices-skill/index.html:579"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cecb7c130330f51b", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/js/blog-loader.js:241", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/js/blog-loader.js:241"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7bceae650b70d99d", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/security-hooks-secrets/index.html:541", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/security-hooks-secrets/index.html:541"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8418c3584f0754e7", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/frontend-developer-agent/index.html:393", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/frontend-developer-agent/index.html:393"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b6700623d56bd26d", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/neon-open-source-program/index.html:590", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/neon-open-source-program/index.html:590"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b0a9e87281f904cd", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/simple-notifications-hook/index.html:456", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/simple-notifications-hook/index.html:456"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d57f5b43bc251f27", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/context7-mcp/index.html:359", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/context7-mcp/index.html:359"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7948193a390ee7f6", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/vercel-deployment-monitor-statusline/index.html:", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/vercel-deployment-monitor-statusline/index.html:493"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c7b5b8574ed692ea", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/code-reviewer-agent/index.html:395", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/code-reviewer-agent/index.html:395"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9920ccd39ee7f89f", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/supabase-claude-code-integration/index.html:509", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/supabase-claude-code-integration/index.html:509"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e192d6e6c2ba979", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/react-best-practices-skill/index.html:515", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/react-best-practices-skill/index.html:515"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f92beb77a7369dd", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/skills-creator/index.html:413", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/skills-creator/index.html:413"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d1e322d7a666efd", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/hackathon-ai-strategist-agent/index.html:471", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/hackathon-ai-strategist-agent/index.html:471"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ec4e88858ded6322", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/e2b-claude-code-sandbox/index.html:535", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/e2b-claude-code-sandbox/index.html:535"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5841d37ee57b37dc", "name": "Insecure pattern 'cors_wildcard' in api/health-check.js:85", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/health-check.js:85"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c89982362a338c0", "name": "Insecure pattern 'cors_wildcard' in api/track-website-events.js:47", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/track-website-events.js:47"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-070173c400e3532f", "name": "Insecure pattern 'cors_wildcard' in api/track-command-usage.js:66", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/track-command-usage.js:66"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fad366de85d1ce26", "name": "Insecure pattern 'cors_wildcard' in api/claude-code-check.js:105", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/claude-code-check.js:105"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d1b7e2b2d85cc5a0", "name": "Insecure pattern 'cors_wildcard' in api/track-installation-outcome.js:40", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/track-installation-outcome.js:40"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e37e2d8de0afa08f", "name": "Insecure pattern 'cors_wildcard' in api/track-download-supabase.js:52", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/track-download-supabase.js:52"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad6aa45ff36c9bac", "name": "Insecure pattern 'cors_wildcard' in api/collections.js:5", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/collections.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e9f84ab1f78cc9a4", "name": "Insecure pattern 'cors_wildcard' in api/collections/items.js:5", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/collections/items.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d62ee324d72d0033", "name": "Insecure pattern 'cors_wildcard' in api/collections/[id].js:5", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/collections/[id].js:5"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8b90e104c4dd347b", "name": "Insecure pattern 'cors_wildcard' in api/claude-code-monitor/discord-notifier.js:225", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/claude-code-monitor/discord-notifier.js:225"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e9ff07bde483320", "name": "Insecure pattern 'cors_wildcard' in api/claude-code-monitor/check-version.js:105", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/claude-code-monitor/check-version.js:105"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-185bab02eb0b685b", "name": "Insecure pattern 'cors_wildcard' in api/claude-code-monitor/webhook.js:89", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api/claude-code-monitor/webhook.js:89"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7eb4108ef72af439", "name": "Insecure pattern 'node_child_process' in cli-tool/src/session-sharing.js:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/session-sharing.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fb709adb3ea058d0", "name": "Insecure pattern 'exec_used' in cli-tool/src/console-bridge.js:130", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/src/console-bridge.js:130"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e479b771ea43dca3", "name": "Insecure pattern 'node_child_process' in cli-tool/src/console-bridge.js:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/console-bridge.js:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e6b2edeff2a21572", "name": "Insecure pattern 'node_child_process' in cli-tool/src/health-check.js:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/health-check.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-416233f94a2c1d46", "name": "Insecure pattern 'node_child_process' in cli-tool/src/mcp-stats.js:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/mcp-stats.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-70057339c50939d8", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/sandbox-interface.html:976", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/sandbox-interface.html:976"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a719259af37fbfd0", "name": "Insecure pattern 'cors_wildcard' in cli-tool/src/plugin-dashboard.js:542", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/plugin-dashboard.js:542"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7e2cab4dfe15e45f", "name": "Insecure pattern 'node_child_process' in cli-tool/src/analytics.js:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/analytics.js:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f4721cb002238ac", "name": "Insecure pattern 'cors_wildcard' in cli-tool/src/analytics.js:622", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/analytics.js:622"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-32f43aa30fbe6d69", "name": "Insecure pattern 'node_child_process' in cli-tool/src/index.js:2474", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/index.js:2474"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c98fbf592b46bccc", "name": "Insecure pattern 'node_child_process' in cli-tool/src/chats-mobile.js:7", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/chats-mobile.js:7"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a54fc9abeda8edc3", "name": "Insecure pattern 'cors_wildcard' in cli-tool/src/skill-dashboard.js:340", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/skill-dashboard.js:340"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49004c0291394ac0", "name": "Insecure pattern 'node_child_process' in cli-tool/src/sandbox-server.js:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/sandbox-server.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f19d7d50ba36436a", "name": "Insecure pattern 'cors_wildcard' in cli-tool/src/sandbox-server.js:52", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/sandbox-server.js:52"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87b15021b1e8cb8c", "name": "Insecure pattern 'node_child_process' in cli-tool/src/command-stats.js:4", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/command-stats.js:4"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bc7f931fb2021c21", "name": "Insecure pattern 'node_child_process' in cli-tool/src/file-operations.js:596", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/file-operations.js:596"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-966ff5acb1a25e9a", "name": "Insecure pattern 'exec_used' in cli-tool/src/claude-api-proxy.js:359", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/src/claude-api-proxy.js:359"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-835dbda05002be4f", "name": "Insecure pattern 'node_child_process' in cli-tool/src/claude-api-proxy.js:356", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/claude-api-proxy.js:356"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea2f452282090678", "name": "Insecure pattern 'cors_wildcard' in cli-tool/src/claude-api-proxy.js:25", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/claude-api-proxy.js:25"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76fd9633334ecfc7", "name": "Insecure pattern 'cors_wildcard' in cli-tool/src/teams-dashboard.js:629", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/teams-dashboard.js:629"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-549f935c1d6f19e0", "name": "Insecure pattern 'node_child_process' in cli-tool/src/hook-stats.js:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/hook-stats.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cac5bd7f226b81af", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/plugin-dashboard-web/app.js:178", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/plugin-dashboard-web/app.js:178"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-715e98ab16c28c87", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/skill-dashboard-web/script.js:147", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/skill-dashboard-web/script.js:147"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b78df99b4be1acf", "name": "Insecure pattern 'exec_used' in cli-tool/src/analytics/core/ProcessDetector.js:32", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/src/analytics/core/ProcessDetector.js:32"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f56b8a2e8d2bf8ff", "name": "Insecure pattern 'node_child_process' in cli-tool/src/analytics/core/ProcessDetector.js:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/analytics/core/ProcessDetector.js:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-755d34a18ec64db7", "name": "Insecure pattern 'node_child_process' in cli-tool/src/validation/validators/ProvenanceValidator.js:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/validation/validators/ProvenanceValidator.js:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c1fd266779c164f1", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/teams-dashboard-web/app.js:29", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/teams-dashboard-web/app.js:29"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-01f2e2e537e0294d", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/2025.html:669", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/2025.html:669"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-835639a64c1fe3ab", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/index.html:8492", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/index.html:8492"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a77d22a7f1b5b9d", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/chats_mobile.html:2757", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/chats_mobile.html:2757"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d6723c651339f389", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/SessionTimer.js:41", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/SessionTimer.js:41"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-500b170d27e1c31a", "name": "Insecure pattern 'insert_adjacent_html' in cli-tool/src/analytics-web/components/SessionTimer.js:297", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in cli-tool/src/analytics-web/components/SessionTimer.js:297"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38a286fbb7efe8ec", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/AgentAnalytics.js:49", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/AgentAnalytics.js:49"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa3e68a15673314f", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/ConversationTable.js:45", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/ConversationTable.js:45"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8af54e5b7b824afa", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/Sidebar.js:28", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/Sidebar.js:28"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff6f531a3aa296b1", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/HeaderComponent.js:75", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/HeaderComponent.js:75"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f917dbd4989686d2", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/ActivityHeatmap.js:36", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/ActivityHeatmap.js:36"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e17734aa5c9b5da0", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/DashboardPage.js:122", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/DashboardPage.js:122"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-db4e6fe1aa56578d", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/App.js:39", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/App.js:39"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-062b3fffab1329db", "name": "Insecure pattern 'node_child_process' in cli-tool/src/sdk/global-agent-manager.js:247", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/sdk/global-agent-manager.js:247"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e77aae5e73c8f908", "name": "Insecure pattern 'cors_wildcard' in cli-tool/components/sandbox/cloudflare/src/index.ts:38", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/components/sandbox/cloudflare/src/index.ts:38"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe93086bf260ceee", "name": "Insecure pattern 'node_child_process' in cli-tool/components/sandbox/docker/execute.js:11", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/sandbox/docker/execute.js:11"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dbf3d474f785ee3d", "name": "Insecure pattern 'node_child_process' in cli-tool/components/sandbox/docker/docker-launcher.js:8", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/sandbox/docker/docker-launcher.js:8"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b72800fa83f7ca9f", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/hooks/monitoring/context-timeline.py:611", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/hooks/monitoring/context-timeline.py:611"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f0cafc0f0b83a926", "name": "Insecure pattern 'cors_wildcard' in cli-tool/components/hooks/monitoring/context-timeline.py:976", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/components/hooks/monitoring/context-timeline.py:976"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-927ed11b1d2ea91b", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/productivity/writing-rules/SKILL.md:249", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/productivity/writing-rules/SKILL.md:249"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5b7944c0a5cef35a", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/productivity/writing-rules/SKILL.md:249", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/productivity/writing-rules/SKILL.md:249"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d42faacccddba2cf", "name": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/productivity/writing-rules/SKILL.md:178", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/productivity/writing-rules/SKILL.md:178"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e78ec80c88fa169", "name": "Insecure pattern 'node_child_process' in cli-tool/components/skills/productivity/writing-skills/render-graphs.js:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/skills/productivity/writing-skills/render-graphs.js:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a041bcd1c96cb285", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/productivity/skill-creator/eval-viewer/view", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/productivity/skill-creator/eval-viewer/viewer.html:766"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eda269f18c4fc0b8", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/productivity/skill-creator/assets/eval_revi", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/productivity/skill-creator/assets/eval_review.html:69"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a48b8ed10230517a", "name": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/development/typescript-expert/scripts/ts_diagnost", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/development/typescript-expert/scripts/ts_diagnostic.py:16"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6879aa3f556d9a10", "name": "Possible secret in cli-tool/components/skills/development/production-code-audit/SKILL.md", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/development/production-code-audit/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-9cc405bb19974c3e", "name": "Insecure pattern 'weak_hash' in cli-tool/components/skills/development/production-code-audit/SKILL.md:54", "shortDescription": {"text": "Insecure pattern 'weak_hash' in cli-tool/components/skills/development/production-code-audit/SKILL.md:54"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f382bcc6daf73ab5", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/development/github-workflow-automation/SKILL.md:559", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/development/github-workflow-automation/SKILL.md:559"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-423b53cb28cc87ed", "name": "Insecure pattern 'cors_wildcard' in cli-tool/components/skills/development/aws-serverless/SKILL.md:48", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/components/skills/development/aws-serverless/SKILL.md:48"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5e748ecf4b2a2f27", "name": "Insecure pattern 'document_write' in cli-tool/components/skills/development/best-practices/SKILL.md:130", "shortDescription": {"text": "Insecure pattern 'document_write' in cli-tool/components/skills/development/best-practices/SKILL.md:130"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-945b6b833329fb79", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/best-practices/SKILL.md:129", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/best-practices/SKILL.md:129"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b1396d80e61b7d5", "name": "Insecure pattern 'local_storage_auth_token' in cli-tool/components/skills/development/best-practices/SKILL.md:144", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in cli-tool/components/skills/development/best-practices/SKILL.md:144"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-855dbe47face3d30", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-development/eval-viewer/v", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-development/eval-viewer/viewer.html:766"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-67aa34019926c0fc", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-development/assets/eval_r", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-development/assets/eval_review.html:69"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6fd2970474c9dc4a", "name": "Possible secret in cli-tool/components/skills/development/api-documentation-generator/SKILL.md", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/development/api-documentation-generator/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-02263a3f2e6806ac", "name": "Insecure pattern 'node_child_process' in cli-tool/components/skills/development/writing-skills/render-graphs.js:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/skills/development/writing-skills/render-graphs.js:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-78168f688429f52c", "name": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/development/webapp-testing/scripts/with_server.py", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/development/webapp-testing/scripts/with_server.py:69"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ddd77b1eeb5bfd54", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-creator/eval-viewer/viewe", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-creator/eval-viewer/viewer.html:766"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3dab293b48f5bd63", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-creator/assets/eval_revie", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-creator/assets/eval_review.html:69"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-925f27ca7c21af7e", "name": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/development/react-best-practices/AGENTS.md:1466", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/development/react-best-practices/AGENTS.md:1466"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6381d78b58dddb1d", "name": "Possible secret in cli-tool/components/skills/development/bun-development/SKILL.md", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/development/bun-development/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-1030635444076680", "name": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/development/cc-skill-security-review/SKILL.md:207", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/development/cc-skill-security-review/SKILL.md:207"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2e2751ff8f8f966", "name": "Insecure pattern 'local_storage_auth_token' in cli-tool/components/skills/development/cc-skill-security-review/SKILL.md:", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in cli-tool/components/skills/development/cc-skill-security-review/SKILL.md:145"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c1b2e968d711b81", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/prompt-engineering-guidance/SKILL.md:384", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/prompt-engineering-guidance/SKILL.md:384"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5bb59eed5e19a974", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/agents-langchain/SKILL.md:145", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/agents-langchain/SKILL.md:145"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f5512ba6f022142", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/agents-crewai/SKILL.md:241", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/agents-crewai/SKILL.md:241"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e5d113361be5368", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/langgraph/SKILL.md:66", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/langgraph/SKILL.md:66"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-17d275594e16de29", "name": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/ai-research/autonomous-agent-patterns/SKILL.md:39", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/ai-research/autonomous-agent-patterns/SKILL.md:390"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5e72a09532acd0e9", "name": "Insecure pattern 'subprocess_implicit_shell' in cli-tool/components/skills/ai-research/autonomous-agent-patterns/SKILL.m", "shortDescription": {"text": "Insecure pattern 'subprocess_implicit_shell' in cli-tool/components/skills/ai-research/autonomous-agent-patterns/SKILL.md:664"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_implicit_shell). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d7145f4faa0be0e0", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-results.json:1080"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-52984639e6d45af4", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-results.json:372"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-59b4dc9921d15efa", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-predictions.json:1072"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0b1d31905e934e4a", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-predictions.json:364"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5db4254f87591382", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-predictions.json:894"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2183fbd9d53578bb", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-predictions.json:304"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1f6eb29ff6d61d32", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-results.json:902"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-146f1203242860bd", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-results.json:312"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bb00dac73e939770", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-00-49-17/", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-00-49-17/humaneval-solutions/160.py:29"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e34a823e893b820c", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/humaneval-loki-solut", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/humaneval-loki-solutions/160.py:34"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c00aafda91cd780f", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/ai-research/loki-mode/autonomy/run.sh:758", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/ai-research/loki-mode/autonomy/run.sh:758"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b71f7ad2af5a85c", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md:184", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md:184"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-50ce38800f22fb27", "name": "Insecure pattern 'python_os_system' in cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md:", "shortDescription": {"text": "Insecure pattern 'python_os_system' in cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md:198"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-45cedeb28ef557d6", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:193", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:193"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c1c68502697093ba", "name": "Insecure pattern 'document_write' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:188", "shortDescription": {"text": "Insecure pattern 'document_write' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:188"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87ab9c864809001b", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:465", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:465"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-381657bd8bed8fe6", "name": "Insecure pattern 'insert_adjacent_html' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:192", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:192"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5a3016db2896a1c2", "name": "Insecure pattern 'python_os_system' in cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md:230", "shortDescription": {"text": "Insecure pattern 'python_os_system' in cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md:230"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-99059af261a047dd", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md:419", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md:419"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e7ebdcb9a09bad4e", "name": "Insecure pattern 'weak_hash' in cli-tool/components/skills/security/pentest-commands/SKILL.md:403", "shortDescription": {"text": "Insecure pattern 'weak_hash' in cli-tool/components/skills/security/pentest-commands/SKILL.md:403"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02444458fd20324e", "name": "Insecure pattern 'python_os_system' in cli-tool/components/skills/security/privilege-escalation-methods/SKILL.md:77", "shortDescription": {"text": "Insecure pattern 'python_os_system' in cli-tool/components/skills/security/privilege-escalation-methods/SKILL.md:77"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d751ea4635c8f0ee", "name": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/security/webapp-testing/scripts/with_server.py:69", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/security/webapp-testing/scripts/with_server.py:69"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0a7247e7636eb153", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/security/vulnerability-scanner/SKILL.md:205", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/security/vulnerability-scanner/SKILL.md:205"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-544d97c86002efb3", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/vulnerability-scanner/SKILL.md:205", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/vulnerability-scanner/SKILL.md:205"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0d88c4320488120b", "name": "Insecure pattern 'tls_verify_false' in cli-tool/components/skills/security/vulnerability-scanner/SKILL.md:208", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in cli-tool/components/skills/security/vulnerability-scanner/SKILL.md:208"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8fdc033a7921d37c", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py:63", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py:63"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2348247da4340be7", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py:64", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py:64"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-87c115468bba416b", "name": "Insecure pattern 'node_child_process' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py:66"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-274bb48205e8f949", "name": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_sca", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py:70"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b0d8e76f221f19d", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/wordpress-penetration-testing/SKILL.md:313", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/wordpress-penetration-testing/SKILL.md:313"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-94c35eb93df43a40", "name": "Insecure pattern 'python_os_system' in cli-tool/components/skills/security/windows-privilege-escalation/SKILL.md:341", "shortDescription": {"text": "Insecure pattern 'python_os_system' in cli-tool/components/skills/security/windows-privilege-escalation/SKILL.md:341"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-23b82a59221fe52c", "name": "Possible secret in cli-tool/components/skills/security/sql-injection-testing/SKILL.md", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/security/sql-injection-testing/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-4c559689fb0e7214", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/security/html-injection-testing/SKILL.md:42", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/security/html-injection-testing/SKILL.md:427"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9059488aedf3195d", "name": "Possible secret in cli-tool/components/skills/scientific/perplexity-search/SKILL.md", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/scientific/perplexity-search/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-8bc0327ff7e36b8c", "name": "Insecure pattern 'weak_hash' in cli-tool/components/skills/scientific/ena-database/SKILL.md:70", "shortDescription": {"text": "Insecure pattern 'weak_hash' in cli-tool/components/skills/scientific/ena-database/SKILL.md:70"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff99b8ad209cd0a5", "name": "Possible secret in cli-tool/components/skills/scientific/markitdown/README.md", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/scientific/markitdown/README.md"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-afe6a09218a0ea57", "name": "Possible secret in cli-tool/components/skills/scientific/markitdown/SKILL.md", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/scientific/markitdown/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6dc4fc8f979ea5e2", "name": "Possible secret in cli-tool/components/skills/scientific/research-lookup/research_lookup.py", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/scientific/research-lookup/research_lookup.py"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-f1942da9846aa4e6", "name": "Possible secret in cli-tool/components/skills/scientific/research-lookup/lookup.py", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/scientific/research-lookup/lookup.py"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-da379be56648bad2", "name": "Possible secret in cli-tool/components/skills/scientific/research-lookup/scripts/research_lookup.py", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/scientific/research-lookup/scripts/research_lookup.py"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-a0e9fa198bae91a7", "name": "Insecure pattern 'debug_true' in cli-tool/components/skills/scientific/plotly/SKILL.md:246", "shortDescription": {"text": "Insecure pattern 'debug_true' in cli-tool/components/skills/scientific/plotly/SKILL.md:246"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8fb36134dc99c8e", "name": "Possible secret in cli-tool/components/skills/scientific/brenda-database/SKILL.md", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/scientific/brenda-database/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-7db6c05381d395e9", "name": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/scientific/alphafold-database/SKILL.md:245", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/scientific/alphafold-database/SKILL.md:245"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2d47908037a274ed", "name": "Insecure pattern 'tls_verify_false' in cli-tool/components/skills/scientific/scikit-bio/SKILL.md:282", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in cli-tool/components/skills/scientific/scikit-bio/SKILL.md:282"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1ed2ee18cea7ddfd", "name": "Insecure pattern 'node_child_process' in cli-tool/components/skills/utilities/playwright-skill/run.js:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/skills/utilities/playwright-skill/run.js:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa37d709a92f7bff", "name": "Possible secret in cli-tool/components/skills/utilities/playwright-skill/lib/helpers.js", "shortDescription": {"text": "Possible secret in cli-tool/components/skills/utilities/playwright-skill/lib/helpers.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-2865f82e4ff5e2be", "name": "Insecure pattern 'chmod_777' in cli-tool/components/skills/utilities/network-101/SKILL.md:174", "shortDescription": {"text": "Insecure pattern 'chmod_777' in cli-tool/components/skills/utilities/network-101/SKILL.md:174"}, "fullDescription": {"text": "Found a known-risky pattern (chmod_777). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bad0c0a9de15cac8", "name": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/utilities/browser-extension-builder/SKILL.m", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/utilities/browser-extension-builder/SKILL.md:132"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c0120bd2a7bd572", "name": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/business-marketing/schema-markup/SKILL.md:542", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/business-marketing/schema-markup/SKILL.md:542"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b6a6efc58979476", "name": "Insecure pattern 'exec_used' in cli-tool/components/skills/workflow-automation/github-workflow-automation/SKILL.md:559", "shortDescription": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/workflow-automation/github-workflow-automation/SKILL.md:559"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e24be14b10d0539", "name": "Insecure pattern 'weak_hash' in cli-tool/components/skills/pocketbase/pb-deploy/SKILL.md:176", "shortDescription": {"text": "Insecure pattern 'weak_hash' in cli-tool/components/skills/pocketbase/pb-deploy/SKILL.md:176"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd3725fe6c8d82e8", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/web-development/chrome-extension-developer/SKILL.md:77", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/web-development/chrome-extension-developer/SKILL.md:77"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6acaf77dcd28b51f", "name": "Insecure pattern 'eval_used' in cli-tool/components/skills/web-development/electron-development/SKILL.md:298", "shortDescription": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/web-development/electron-development/SKILL.md:298"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5dff8b9fe4f8239a", "name": "Insecure pattern 'new_function_used' in cli-tool/components/skills/web-development/electron-development/SKILL.md:298", "shortDescription": {"text": "Insecure pattern 'new_function_used' in cli-tool/components/skills/web-development/electron-development/SKILL.md:298"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5dc3f8a48dac7c1d", "name": "Insecure pattern 'cors_wildcard' in cli-tool/.claude/sandbox/cloudflare/src/index.ts:38", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/.claude/sandbox/cloudflare/src/index.ts:38"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b474f5fc9843d153", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/sandbox-interface.html:1023", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/sandbox-interface.html:1023"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-913629d11d5f41db", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/download-stats.html:376", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/download-stats.html:376"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9bf8bbd2f16b234d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/jobs.html:827", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/jobs.html:827"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a87685159bb0508", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/index-events.js:312", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/index-events.js:312"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0f2165c88796461f", "name": "Insecure pattern 'insert_adjacent_html' in docs/js/index-events.js:1264", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in docs/js/index-events.js:1264"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b842f3ceeb55555", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/trending.js:99", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/trending.js:99"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8855c6be07d244", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/workflows-events.js:105", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/workflows-events.js:105"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24549669b4de425d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/script.js:43", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/script.js:43"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fee8b009e0323883", "name": "Insecure pattern 'insert_adjacent_html' in docs/js/script.js:318", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in docs/js/script.js:318"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b260c1df8fbc376d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/component-page.js:332", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/component-page.js:332"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de74fb820be5b1aa", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/plugin-page.js:139", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/plugin-page.js:139"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-394badc3bf1eec31", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/search-functionality.js:441", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/search-functionality.js:441"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1c50860a466489e", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/cart-manager.js:295", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/cart-manager.js:295"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b86528b7b0d73e2", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/modal-helpers.js:233", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/modal-helpers.js:233"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88f7c8c86b758846", "name": "Insecure pattern 'insert_adjacent_html' in docs/js/modal-helpers.js:14", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in docs/js/modal-helpers.js:14"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be4bc145d569c34b", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/stack-router.js:292", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/stack-router.js:292"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-93dbc494153fc412", "name": "Insecure pattern 'insert_adjacent_html' in docs/js/stack-router.js:138", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in docs/js/stack-router.js:138"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a77a3c1379e0c40", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/workflows.js:125", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/workflows.js:125"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-314932c8cdc299c3", "name": "Insecure pattern 'insert_adjacent_html' in docs/js/workflows.js:492", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in docs/js/workflows.js:492"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-16622721f38ae873", "name": "Insecure pattern 'local_storage_auth_token' in docs/js/event-tracker.js:24", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in docs/js/event-tracker.js:24"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-052cd34384498ab3", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/claude-prs/index.html:433", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/claude-prs/index.html:433"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-10a1467ace0c3b1a", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/featured/neon-instagres/index.html:529", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/featured/neon-instagres/index.html:529"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-53ded6fd3d928f0f", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/nextjs-vercel-claude-code-integration/index.html:715", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/nextjs-vercel-claude-code-integration/index.html:715"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1dbda48e4dab1980", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/heygen-best-practices-skill/index.html:579", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/heygen-best-practices-skill/index.html:579"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b0ee947d97c06467", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/js/blog-loader.js:241", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/js/blog-loader.js:241"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-970fa6b86fda5ac1", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/security-hooks-secrets/index.html:541", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/security-hooks-secrets/index.html:541"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25248d77bbe82a50", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/frontend-developer-agent/index.html:393", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/frontend-developer-agent/index.html:393"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e407cfcb0d6ec01d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/neon-open-source-program/index.html:590", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/neon-open-source-program/index.html:590"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-44ff3242b9ad9f8d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/simple-notifications-hook/index.html:456", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/simple-notifications-hook/index.html:456"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7bf79eb96bcfd62", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/context7-mcp/index.html:359", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/context7-mcp/index.html:359"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-181cfe2a1f291308", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/vercel-deployment-monitor-statusline/index.html:493", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/vercel-deployment-monitor-statusline/index.html:493"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7fa46d407068d7f2", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/code-reviewer-agent/index.html:395", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/code-reviewer-agent/index.html:395"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb4e9e16ba7e9c30", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/supabase-claude-code-integration/index.html:509", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/supabase-claude-code-integration/index.html:509"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7692c66ebb92f106", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/react-best-practices-skill/index.html:515", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/react-best-practices-skill/index.html:515"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-59f154fa6c24104f", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/skills-creator/index.html:413", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/skills-creator/index.html:413"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de6b59c95e2227e0", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/hackathon-ai-strategist-agent/index.html:471", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/hackathon-ai-strategist-agent/index.html:471"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-429fd40998cb1bc3", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/e2b-claude-code-sandbox/index.html:535", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/e2b-claude-code-sandbox/index.html:535"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71b0063fd42cc550", "name": "Insecure pattern 'private_key_in_repo' in cloudflare-workers/pulse/index.js:572", "shortDescription": {"text": "Insecure pattern 'private_key_in_repo' in cloudflare-workers/pulse/index.js:572"}, "fullDescription": {"text": "Found a known-risky pattern (private_key_in_repo). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-fa7c5fb55eecc55b", "name": "Insecure pattern 'cors_wildcard' in cloudflare-workers/pulse/index.js:775", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cloudflare-workers/pulse/index.js:775"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b7044f2d0fbbf62", "name": "Insecure pattern 'cors_wildcard' in cloudflare-workers/docs-monitor/index.js:128", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in cloudflare-workers/docs-monitor/index.js:128"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-99da449c1430dff1", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5fa6cb9fb693ed55", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5046a44f80cc8ccd", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c1a3378dc0f6b2a7", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f46a4bdda8dacf33", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24431337ae92e7f1", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/github-script@v8 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-23417bdc5c7219f0", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-73014c508f4d5a3d", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f19bbf3e57b95ef", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d29fb6921eb6f3fd", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5075ed2dbf9e1f38", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5e935219e9111ef4", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12d7aaab43370f39", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bdf437a13b7cc54e", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-011ae81365fcf278", "name": "Very large file: dashboard/src/components/MyComponentsView.tsx (1096 lines)", "shortDescription": {"text": "Very large file: dashboard/src/components/MyComponentsView.tsx (1096 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd464002df67af54", "name": "Very large file: cli-tool/src/analytics.js (2403 lines)", "shortDescription": {"text": "Very large file: cli-tool/src/analytics.js (2403 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b5fedf3763436810", "name": "Very large file: cli-tool/src/index.js (3458 lines)", "shortDescription": {"text": "Very large file: cli-tool/src/index.js (3458 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d49cd39b94835ee", "name": "Very large file: cli-tool/src/analytics-web/components/DashboardPage.js (2323 lines)", "shortDescription": {"text": "Very large file: cli-tool/src/analytics-web/components/DashboardPage.js (2323 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e389bd8221fc70d6", "name": "Very large file: cli-tool/components/hooks/monitoring/context-timeline.py (1224 lines)", "shortDescription": {"text": "Very large file: cli-tool/components/hooks/monitoring/context-timeline.py (1224 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-867854c9b619f20c", "name": "Very large file: cli-tool/components/skills/ai-research/loki-mode/benchmarks/run-benchmarks.sh (1948 lines)", "shortDescription": {"text": "Very large file: cli-tool/components/skills/ai-research/loki-mode/benchmarks/run-benchmarks.sh (1948 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-433e46b53f0448a7", "name": "Very large file: cli-tool/components/skills/ai-research/loki-mode/autonomy/run.sh (1991 lines)", "shortDescription": {"text": "Very large file: cli-tool/components/skills/ai-research/loki-mode/autonomy/run.sh (1991 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-34993ab32aa24977", "name": "Very large file: cli-tool/components/skills/scientific/document-skills/docx/scripts/document.py (1276 lines)", "shortDescription": {"text": "Very large file: cli-tool/components/skills/scientific/document-skills/docx/scripts/document.py (1276 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-872598a3929c508b", "name": "Very large file: cli-tool/components/skills/document-processing/docx/scripts/document.py (1276 lines)", "shortDescription": {"text": "Very large file: cli-tool/components/skills/document-processing/docx/scripts/document.py (1276 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c877ca0ef8071762", "name": "Very large file: docs/js/index-events.js (2018 lines)", "shortDescription": {"text": "Very large file: docs/js/index-events.js (2018 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-691db2c3b1841f4d", "name": "Very large file: docs/js/script.js (2194 lines)", "shortDescription": {"text": "Very large file: docs/js/script.js (2194 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69b7ca2edecca42c", "name": "Very large file: docs/js/component-page.js (1915 lines)", "shortDescription": {"text": "Very large file: docs/js/component-page.js (1915 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "35 test file(s) for 1071 source file(s) (ratio 0.03). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f06aa76fffc294bf", "name": "103 TODO/FIXME markers", "shortDescription": {"text": "103 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f0e0c4bdf17fcc69", "name": "Node manifest has dependencies but no lockfile: cli-tool/components/sandbox/cloudflare/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cli-tool/components/sandbox/cloudflare/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5f4c9de92ec32a81", "name": "Node manifest has dependencies but no lockfile: cli-tool/components/sandbox/docker/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cli-tool/components/sandbox/docker/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b42b51b968798216", "name": "Node manifest has dependencies but no lockfile: cli-tool/components/skills/design-to-code/scripts/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cli-tool/components/skills/design-to-code/scripts/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-958907f0c9e5e1b4", "name": "Node manifest has dependencies but no lockfile: cli-tool/components/skills/utilities/playwright-skill/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cli-tool/components/skills/utilities/playwright-skill/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f8c7c582cf7f7a5b", "name": "Node manifest has dependencies but no lockfile: cli-tool/components/skills/web-development/roier-seo/scripts/package.jso", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cli-tool/components/skills/web-development/roier-seo/scripts/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f177536cd665a8a", "name": "Node manifest has dependencies but no lockfile: cli-tool/.claude/sandbox/cloudflare/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: cli-tool/.claude/sandbox/cloudflare/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 9099 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 155 placeholder/mock markers across 63 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d79c4077342a7d0", "name": "Runtime service client appears to use placeholder configuration", "shortDescription": {"text": "Runtime service client appears to use placeholder configuration"}, "fullDescription": {"text": "A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17d866d91a7c451e", "name": "Agent instruction/config may expose a secret: CLAUDE.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: CLAUDE.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-24f2ea4bd14badc1", "name": "Agent instruction contains unpinned remote install: CLAUDE.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: CLAUDE.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc55229a7a3c078d", "name": "Agent authority lacks a verifier contract: .mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d42544b581e05fc", "name": "Agent authority lacks a verifier contract: cli-tool/templates/rust/.mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/rust/.mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-78cff6aeb0619944", "name": "Agent authority lacks a verifier contract: cli-tool/templates/javascript-typescript/.mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/javascript-typescript/.mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-45cc1d2bb653a387", "name": "Agent authority lacks a verifier contract: cli-tool/templates/javascript-typescript/examples/vue-app/.claude/commands/co", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/javascript-typescript/examples/vue-app/.claude/commands/components.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef4d033feef8d47f", "name": "Agent authority lacks a verifier contract: cli-tool/templates/python/.mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/.mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ea0120aad84aed0", "name": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/flask-app/.claude/commands/app-factory.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/flask-app/.claude/commands/app-factory.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8d8683617868284", "name": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/flask-app/.claude/commands/flask-route.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/flask-app/.claude/commands/flask-route.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a448a399b17c8a1", "name": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/flask-app/.claude/commands/blueprint.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/flask-app/.claude/commands/blueprint.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38d819cb667e788c", "name": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/django-app/.claude/commands/admin.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/django-app/.claude/commands/admin.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b007338ad7a394ff", "name": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/django-app/.claude/commands/views.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/django-app/.claude/commands/views.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d7c2340cb42ce6da", "name": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/django-app/.claude/commands/django-model.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/django-app/.claude/commands/django-model.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c3ad8261fce9342", "name": "Agent authority lacks a verifier contract: cli-tool/templates/python/.claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/.claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8ea050a95991694", "name": "Agent authority lacks a verifier contract: cli-tool/templates/python/.claude/commands/lint.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/.claude/commands/lint.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38ce187695c4fd46", "name": "Agent authority lacks a verifier contract: cli-tool/templates/ruby/.mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/ruby/.mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a45c4db8d49fc596", "name": "Agent authority lacks a verifier contract: cli-tool/templates/ruby/examples/rails-app/.claude/commands/authentication.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/ruby/examples/rails-app/.claude/commands/authentication.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d564dadd60903d9", "name": "Agent authority lacks a verifier contract: cli-tool/templates/go/.mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/go/.mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-819ba14ea5f626fd", "name": "Agent authority lacks a verifier contract: cli-tool/templates/common/.mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/common/.mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-311d44aa9184f54a", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/claude-code-sessions/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/claude-code-sessions/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-516c2eebab32e521", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/productivity/nowait/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/productivity/nowait/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-14c286e4e17b765f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notion-research-documentation/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notion-research-documentation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ece5816d7f6ed6d9", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/productivity/notion-spec-to-implementation/SKIL", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/productivity/notion-spec-to-implementation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ff001f242bf9d73c", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notion-spec-to-implementation/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notion-spec-to-implementation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dbdc334e928fad19", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notion-knowledge-capture/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notion-knowledge-capture/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1fb2e7d809809268", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notebooklm/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notebooklm/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8e34964e4b07785", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/writing-plans/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/writing-plans/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8a2d9309444b59e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/meeting-insights-analyzer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/meeting-insights-analyzer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f6d6c67ab05d56c", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/file-organizer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/file-organizer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eeff2adcb079f9ed", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/executing-plans/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/executing-plans/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f2ada9c2da93206", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/doc-coauthoring/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/doc-coauthoring/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1888975eb329610", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/writing-skills/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/writing-skills/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6d3881bb543fb03", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/address-github-comments/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/address-github-comments/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-56f7431ff9733e57", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/skill-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/skill-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ddbe0d1fd43b8422", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/invoice-organizer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/invoice-organizer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fb226d607804ba8d", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/brainstorming/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/brainstorming/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5a06b31bf760ccfc", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/templates/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/templates/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9cd0a9fd5e461d50", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/deploy/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/deploy/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a221688c927709a", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b2436d6a1753216", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/railway/new/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/railway/new/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9134360ae8dc1219", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/projects/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/projects/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f27bc49d71b07b56", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/railway/status/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/railway/status/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1fc36a0f896e1434", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/domain/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/domain/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b2774d4b1b6a1924", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/security-compliance/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/security-compliance/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-41678f78b0e4fe65", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/cocoindex/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/cocoindex/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7ccf06029cdad9d0", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/prometheus-configuration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/prometheus-configuration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e99f8b67f565fc34", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/k6-load-testing/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/k6-load-testing/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d018c4c45fad02cd", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/code-review-checklist/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/code-review-checklist/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bb9ed17a3ab52081", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/code-review-checklist/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/code-review-checklist/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a4063eecdd79561", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/skill-installer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/skill-installer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca3fa9ee333615b6", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/cc-skill-clickhouse-io/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/cc-skill-clickhouse-io/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d333b956b30fb64", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/testing-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/testing-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5df3dcaeb028c5db", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/test-driven-development/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/test-driven-development/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f1765300b4ca997", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/typescript-expert/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/typescript-expert/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce0e237e311c236c", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/cc-skill-backend-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/cc-skill-backend-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4d5499ddc47b8a9e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/cc-skill-backend-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/cc-skill-backend-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c77721257bdd10f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/playwright-e2e-builder/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/playwright-e2e-builder/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0217b0c7920e6580", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/zapier-workflows/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/zapier-workflows/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-49659ea6dcc150aa", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/server-management/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/server-management/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-952b7a97aac61378", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/swift-concurrency-expert/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/swift-concurrency-expert/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2be83af168f1514", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/playwright/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/playwright/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b3e98a0fcd9cfa09", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/playwright/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/playwright/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b702d643c4e08c69", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/gke-basics/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/gke-basics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a901d86c25c5bb8", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/production-code-audit/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/production-code-audit/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-538d221f0723cd00", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/production-code-audit/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/production-code-audit/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b6d30426aad8a1f4", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/git-pushing/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/git-pushing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c4c3504ca86c6b7", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/bullmq-specialist/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/bullmq-specialist/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1925816f7b2a77ad", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/aws-serverless/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/aws-serverless/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f63d1ba7ebb87d3a", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/feature-design-assistant/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/feature-design-assistant/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6298618f89ed7843", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/firebase-basics/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/firebase-basics/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81c92a9a83d3fcfa", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/environment-setup-guide/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/environment-setup-guide/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-70934e558427128d", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/environment-setup-guide/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/environment-setup-guide/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d9eb1bdaff7ea05", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/deployment-procedures/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/deployment-procedures/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d3795a79ded9a1d1", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/web-to-markdown/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/web-to-markdown/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbbdc0126d1f8693", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/dependency-updater/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/dependency-updater/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbd9f933a78d475a", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/dependency-updater/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/dependency-updater/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b4fc0377d09093c", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/google-cloud-networking-observability/", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/google-cloud-networking-observability/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e8472044856dcd1", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/performance/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/performance/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef732fae9c6bd09a", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/finishing-a-development-branch/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/finishing-a-development-branch/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a42fab2fa123fd90", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/render-deploy/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/render-deploy/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ee147bbe742b9aeb", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/codex/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/codex/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5befa23d8661e14", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/writing-plans/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/writing-plans/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad901c1a10e6cab3", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/best-practices/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/best-practices/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-597c092f3fbf1804", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/skill-development/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/skill-development/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d264fca0f0591df", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/tdd-workflow/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/tdd-workflow/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85c87d6e792b2b51", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/cloud-run-basics/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/cloud-run-basics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d4bffe25941b779a", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/openapi-to-typescript/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/openapi-to-typescript/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cdb275475292333d", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/nodejs-best-practices/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/nodejs-best-practices/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-789a6302d0595c38", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/claude-api/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/claude-api/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-eec71913c3f8c5dd", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/api-documentation-generator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/api-documentation-generator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3aa0893ef642e072", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/mui/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/mui/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a2a021f533d6515", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/command-development/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/command-development/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f0a3fe5ac9a35ffd", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/playwright-java/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/playwright-java/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9c6b0066d0eade5", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/executing-plans/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/executing-plans/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ad69704daafa2f4", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/verification-before-completion/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/verification-before-completion/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7df12e1f5e59c80", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/test-detect/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/test-detect/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a447bad533095a62", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/dispatching-parallel-agents/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/dispatching-parallel-agents/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc927459ab3bd6ed", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/writing-skills/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/writing-skills/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3c5a0831275e60e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/vercel-deploy/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/vercel-deploy/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9aa7160d217aef85", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/android-cicd/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/android-cicd/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-266d24629d67785a", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/android-cicd/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/android-cicd/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-241dfac3588df689", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/clean-code/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/clean-code/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-28e5c37d26b70359", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/convex/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/convex/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd4dea4b9f8ff743", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/prisma-expert/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/prisma-expert/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1b9868a8f998e631", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/api-integration-specialist/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/api-integration-specialist/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8ec4bc7511875aa1", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/systematic-debugging/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/systematic-debugging/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef7c9ef13c78d316", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/i18n-localization/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/i18n-localization/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3797db31d5f833c9", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/codex-review/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/codex-review/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ee15618368ad17a", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/avalonia-viewmodels-zafiro/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/avalonia-viewmodels-zafiro/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6486f8f0ec92e476", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/software-architecture/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/software-architecture/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7ff2c2357e0e94d", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/using-git-worktrees/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/using-git-worktrees/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-05a0b471064fa50b", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/nestjs-expert/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/nestjs-expert/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a801cc1af5aacd41", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/changelog-generator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/changelog-generator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e3b64c47bd02d4f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/e2e-testing-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/e2e-testing-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3e54a36acf2dab5e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/skill-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/skill-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-408c34cca62e5448", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/netlify-deploy/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/netlify-deploy/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df8a5e3cce4d257f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/domain-driven-design/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/domain-driven-design/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d99519af29d9ecd", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/docker-expert/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/docker-expert/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2530d7fe765c0cf", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/postgres-best-practices/AGENTS.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/postgres-best-practices/AGENTS.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f80a9600e4a83c6", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/brainstorming/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/brainstorming/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-74027343376c804f", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/bun-development/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/bun-development/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a1515f22b39e3831", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/bun-development/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/bun-development/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5bc13f331b232412", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/bun-development/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/bun-development/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02950e7626d1b71e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/bleu/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/bleu/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-77bfca494eeebd87", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/cc-skill-security-review/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/cc-skill-security-review/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f5837912769f38b9", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/javascript-mastery/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/javascript-mastery/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-23bbb599fc362848", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/task-execution-engine/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/task-execution-engine/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e89dce85596de368", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/git/git-context-controller/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/git/git-context-controller/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ded732ce832f1309", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/rag-chroma/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/rag-chroma/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-31070559c41d5b5d", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/fine-tuning-peft/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/fine-tuning-peft/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ed773b9ae4919bf7", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/inference-serving-vllm/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/inference-serving-vllm/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-90b39f8d5a20e011", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/inference-serving-tensorrt-llm/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/inference-serving-tensorrt-llm/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f60f00305322759", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-rwkv/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-rwkv/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dc97830bbe5a047f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/model-architecture-rwkv/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/model-architecture-rwkv/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-35517b62a391f95d", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/llm-app-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/llm-app-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b881de80b2326940", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-transf", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-transformer-lens/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a390ee313def8d82", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/mechanistic-interpretability-transform", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/mechanistic-interpretability-transformer-lens/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50fe82927afcd843", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/mechanistic-interpretability-", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/mechanistic-interpretability-transformer-lens/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ad22df5479d2328", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-hqq/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-hqq/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-21b28558e1dcfc01", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-langchain/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-langchain/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2c3a1d3373f90e68", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-langchain/references/agents.", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-langchain/references/agents.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d6bbf55ae091a9ae", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/post-training-trl-fine-tuning/SKILL", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/post-training-trl-fine-tuning/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4375b948332d6ee5", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/infrastructure-lambda-labs/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/infrastructure-lambda-labs/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-afd93d20b2ffa350", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-segment-anything/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-segment-anything/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cdd6913994f7c6a6", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/multimodal-segment-anything/S", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/multimodal-segment-anything/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-daa224aea3b9f1b4", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/fine-tuning-unsloth/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/fine-tuning-unsloth/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-45f67118f0b44f96", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-llamaindex/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-llamaindex/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2c6808a79095db15", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/agents-llamaindex/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/agents-llamaindex/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-529c1d6242de2edc", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/observability-phoenix/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/observability-phoenix/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c1c5ef5e7ee7bb1e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/fine-tuning-axolotl/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/fine-tuning-axolotl/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-74266982f398530c", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-megatron-core/", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-megatron-core/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a4e06e1bfb78d296", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/distributed-training-megatron-core/SKI", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/distributed-training-megatron-core/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dd1bfb2b87410e5e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/deep-research-notebooklm/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/deep-research-notebooklm/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-218bb46914cebbd1", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-speculative-dec", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-speculative-decoding/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6fa14859639caccd", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-llava/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-llava/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ab593e65ac334efa", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-nnsigh", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-nnsight/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ac05d8f4259d32c0", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/mechanistic-interpretability-nnsight/S", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/mechanistic-interpretability-nnsight/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f470e583d5921f3", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-pyvene", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-pyvene/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b30aada7f0aaa1cf", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/fine-tuning-llama-factory/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/fine-tuning-llama-factory/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f6018bb61dc5e458", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/evaluation-nemo-evaluator/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/evaluation-nemo-evaluator/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-65c89db8529d2dcc", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/post-training-simpo/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/post-training-simpo/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4e72d26a9191bbe1", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/post-training-simpo/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/post-training-simpo/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72744279fac9273a", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-ray-train/SKIL", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-ray-train/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dab65e25f52e0007", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/distributed-training-ray-train/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/distributed-training-ray-train/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2b804d7ed7378fa", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-saelen", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-saelens/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8864e4342eac489f", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-flash-attention/SKILL.", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-flash-attention/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ae6cc3c0bd463df1", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/optimization-flash-attention/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/optimization-flash-attention/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6aca3a00c9aa56e", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mlops-mlflow/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mlops-mlflow/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-720cdc5f9e17d79d", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/tokenization-sentencepiece/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/tokenization-sentencepiece/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-37a5186d422e9e8d", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/data-processing-ray-data/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/data-processing-ray-data/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9052daaee9f4e8e8", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-mamba/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-mamba/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5815553ebd9282fe", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/model-architecture-mamba/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/model-architecture-mamba/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-40a75fe944e55339", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-long-context/SK", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-long-context/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5beb90baa8dc70a5", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-long-context/SKILL", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-long-context/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d84129d7fd2f18f", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/prompt-engineering-dspy/SKILL", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/prompt-engineering-dspy/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f6f91cb2aa9b92d", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-litgpt/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-litgpt/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-97a40c5ea59c0f51", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-26651cccc046d59f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08a4b0b6611b1734", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/model-architecture-torchtitan", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2791ad3f4788ffd0", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/llm-ops/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/llm-ops/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1853480d46500d3", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-pytorch-lightn", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-pytorch-lightning/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cf966458f496173b", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-awq/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-awq/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6b7f1472f7610be0", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/optimization-awq/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/optimization-awq/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b10e3d6e986ea844", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-accelerate/SKI", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-accelerate/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b5ce9f27a3369d82", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/distributed-training-accelerate/SKILL.", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/distributed-training-accelerate/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6d9ba309aae27a9", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-moe-training/SKILL", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-moe-training/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a2705bc2c772e8f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/qa-test-planner/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/qa-test-planner/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-499b9e8cb68e1fc5", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/data-processing-nemo-curator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/data-processing-nemo-curator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-01930fa402662cf2", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/datadog-cli/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/datadog-cli/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9825209fb6a21d97", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-audiocraft/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-audiocraft/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30efbb0c5df464dd", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/multimodal-audiocraft/SKILL.m", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/multimodal-audiocraft/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0fe2ee6f0a7986d3", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-model-pruning/S", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-model-pruning/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6c157818d4202395", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-model-pruning/SKIL", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-model-pruning/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ac72cac38d348e53", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/inference-serving-sglang/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/inference-serving-sglang/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8653a9ecd035522a", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-deepspeed/SKIL", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-deepspeed/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4ad9cd90e1e6f786", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-model-merging/S", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-model-merging/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5fd8890cd180b0c0", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-autogpt/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-autogpt/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-69ccbeaa83af4cea", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/safety-alignment-llamaguard/SKILL.m", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/safety-alignment-llamaguard/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0929ab7fd5624478", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/dispatching-parallel-agents/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/dispatching-parallel-agents/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eee1b724b821f5e1", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-nanogpt/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-nanogpt/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c59c73dc988494e6", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/context7-auto-research/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/context7-auto-research/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e122ec2d00991a85", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/ml-paper-writing/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/ml-paper-writing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a27b2429f322b92", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/ml-paper-writing/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/ml-paper-writing/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d017575dcf05544b", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/post-training-grpo-rl-training/SKIL", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/post-training-grpo-rl-training/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-50f9841432b8a1d3", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-gptq/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-gptq/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ea5feaeab20a8594", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/optimization-gptq/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/optimization-gptq/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f5da6bebf05b06a9", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/loki-mode/CLAUDE.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/loki-mode/CLAUDE.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e615f5af1a5ef698", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/loki-mode/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/loki-mode/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4f59e8cb045cf33f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/loki-mode/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/loki-mode/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-35a788d88c35c836", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/loki-mode/references/agents.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/loki-mode/references/agents.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fd727f3e8d31a1a9", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/tokenization-huggingface-tokenizers", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/tokenization-huggingface-tokenizers/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bbe0640b4d9ac2b3", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-bitsandbytes/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-bitsandbytes/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-caaa80dc26267b13", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-knowledge-disti", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-knowledge-distillation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5ede8f1fed249b1a", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-knowledge-distilla", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-knowledge-distillation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69c4e61e2d306dbd", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/safety-alignment-nemo-guardrails/SK", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/safety-alignment-nemo-guardrails/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-244c8463b5c6a60c", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/agent-manager-skill/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/agent-manager-skill/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5013b099d9bd4c2", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-whisper/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-whisper/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8cc0718e4c91b06a", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/post-training-openrlhf/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/post-training-openrlhf/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e9b483359f7b2a90", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/agent-memory-mcp/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/agent-memory-mcp/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c7524691ac26116d", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SK", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1df88475ee436414", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-aec2d74ae82f1e38", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-06edb2faa4185b9a", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a92e539ba09a5811", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/deep-research/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/deep-research/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc9f6c0a873351c6", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/pydantic-ai/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/pydantic-ai/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-253bbcf2b3b278e9", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/ethical-hacking-methodology/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/ethical-hacking-methodology/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e685f18eaf830001", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/scanning-tools/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/scanning-tools/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-85e2f339d7943345", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/smtp-penetration-testing/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/smtp-penetration-testing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ebe4f8a7df4cd16", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2140b635a22d6fd", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/aws-penetration-testing/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/aws-penetration-testing/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0b812bb90ca88d75", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/api-security-best-practices/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/api-security-best-practices/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-01b5a10955b15b1f", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/broken-authentication/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/broken-authentication/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6c1b8bed10f629ae", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/broken-authentication/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/broken-authentication/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-308892759fe085c3", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/secrets-management/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/secrets-management/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e627ea39f31458c4", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/security/cloud-penetration-testing/SKILL.", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/security/cloud-penetration-testing/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-deb05c2e246f7c1c", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/security/linux-privilege-escalation/SKILL", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-988c847ae703430a", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/pentest-checklist/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/pentest-checklist/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-af94a34191cdd988", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/red-team-tactics/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/red-team-tactics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-771e2fdf1e85aa49", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/security-best-practices/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/security-best-practices/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a319e75b23410422", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/vulnerability-scanner/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/vulnerability-scanner/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f12d9733fd1915ce", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/google-cloud-auth/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/google-cloud-auth/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-723a5448e711038c", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/metasploit-framework/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/metasploit-framework/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60514de98b5b3cd4", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/media/speech/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/media/speech/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ffaf54bc697c8db8", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/media/screenshot/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/media/screenshot/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-917a0cee07bb2954", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/stable-baselines3/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/stable-baselines3/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-13d869b63c00ec97", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/pubchem-database/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/pubchem-database/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0fdf94bc0d39e780", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/scientific/geniml/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/scientific/geniml/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a0b0318a15166be", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/perplexity-search/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/perplexity-search/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-33998f988497b922", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/simpy/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/simpy/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e9aca45a233c5ad9", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/fluidsim/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/fluidsim/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df58eb8e5491b570", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/scanpy/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/scanpy/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d3ae53432c774c3a", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/chembl-database/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/chembl-database/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-08c9c7294454e602", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/chembl-database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/chembl-database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3dbb835e3a2ca987", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/ensembl-database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/ensembl-database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-74cf457e42efe325", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/ena-database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/ena-database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb95564034adc43a", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/qutip/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/qutip/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-aa70f06976c48da7", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/astropy/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/astropy/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cd308a71f1d65fa6", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/medchem/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/medchem/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b5e2ba92327657f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/matplotlib/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/matplotlib/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0fc369989e439e11", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/biorxiv-database/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/biorxiv-database/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3de2ffd9b1be7093", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/scientific/document-skills/pptx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/scientific/document-skills/pptx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eacc2c33068136b2", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/scientific/document-skills/docx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/scientific/document-skills/docx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-745bec70057d2c90", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/esm/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/esm/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60efc374e7341093", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/datacommons-client/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/datacommons-client/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-77cdbc43e89a5146", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/pennylane/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/pennylane/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b90fc3c785f5ef6b", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/reactome-database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/reactome-database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c157aade5c6397a", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/datamol/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/datamol/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-73802dda0a277856", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/scvi-tools/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/scvi-tools/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b419cbac1ebe35c", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/generate-image/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/generate-image/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2015a55aaa134b7", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/denario/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/denario/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-346d4be48e2589c7", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/statistical-analysis/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/statistical-analysis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ac6223a5f804ad6", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/zarr-python/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/zarr-python/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0362571861bc8336", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/flowio/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/flowio/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a6b1fbc39a0413cb", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/transformers/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/transformers/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cac5af469662f4ff", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/treatment-plans/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/treatment-plans/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7928c1f227f462b6", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/uniprot-database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/uniprot-database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-759eb556b637ee6d", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/plotly/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/plotly/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8d6208bc73b84a06", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/neurokit2/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/neurokit2/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-39eb0f3a2a2b1fc5", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/geopandas/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/geopandas/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17ba48c07df0b7ae", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/lamindb/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/lamindb/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9ae8b5c298e80b04", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/lamindb/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/lamindb/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c701f9cb3034e95", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/scikit-learn/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/scikit-learn/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a82d124839e65b5", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/molfeat/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/molfeat/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3dfd32d8db0bb511", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/bioservices/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/bioservices/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb77a2192464dc36", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/gtars/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/gtars/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-165a580fd1f76183", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/gene-database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/gene-database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0720d10b9d05321f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/clinicaltrials-database/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/clinicaltrials-database/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-73408d50351ba9ac", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/pufferlib/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/pufferlib/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-33b727f324473f12", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/omero-integration/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/omero-integration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94e5794b2301b9ea", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/aeon/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/aeon/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0c081118f593f2f8", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/dask/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/dask/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2797f2dcb65be4cc", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/utilities/playwright-skill/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/utilities/playwright-skill/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-05e5bc8fee9174f5", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/content-research-writer/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/content-research-writer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-811ebd48d58017e2", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/micro-saas-launcher/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/micro-saas-launcher/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08665a5b992fdc26", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/business-marketing/ai-wrapper-product/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/business-marketing/ai-wrapper-product/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-da69cd7daa01a614", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/lead-research-assistant/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/lead-research-assistant/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b00c0ef22530716", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/app-builder/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/app-builder/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71f7a237ae31cea6", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/marketing-demand-acquisition/SK", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/marketing-demand-acquisition/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-07a92d7019c7b6cb", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/ceo-advisor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/ceo-advisor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1141e9020f4e15c7", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/writing-clearly-and-conci", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/writing-clearly-and-concisely/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d382cba1fb6edb2c", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/discord-bot-architect/SKI", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/discord-bot-architect/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-00755423758b8e13", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/slack-gif-creator/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/slack-gif-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4bb0e27aabe5afd0", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/enterprise-communication/quality-manager-qms-is", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/enterprise-communication/quality-manager-qms-iso13485/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3e4fef3d36b7360d", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/enterprise-communication/risk-management-specia", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/enterprise-communication/risk-management-specialist/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6425e12d6df9f6d7", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/enterprise-communication/information-security-m", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/enterprise-communication/information-security-manager-iso27001/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6e2f83dda5f4a944", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/excel-analysis/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/excel-analysis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-23e0994f2b04d1fb", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/trigger-dev/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/trigger-dev/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1a3a815c8a9cfcc", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/planning-with-files/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/planning-with-files/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-59c9c74d72ae4d51", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/inngest/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/inngest/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b98b09aeb244423", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/workflow-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/workflow-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-edd1dc86ee505ca8", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/yeet/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/yeet/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ae2394a706000d54", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/workflow-automation/gitops-workflow/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/workflow-automation/gitops-workflow/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a893ae0a42303f7e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/dependabot-review/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/dependabot-review/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d0e7e4675b41b158", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/video/sora/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/video/sora/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-af5659c3747adf29", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/slack-gif-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/slack-gif-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11a0fa528fca50c9", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/mermaid-diagrams/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/mermaid-diagrams/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4597872c66589976", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/creative-design/mermaid-diagrams/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/creative-design/mermaid-diagrams/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ee1e14b83630fa3", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/excalidraw/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/excalidraw/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2704f58fa3642e15", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/develop-web-game/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/develop-web-game/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-031545878de69b47", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/creative-design/develop-web-game/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/creative-design/develop-web-game/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a09657913a075564", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f21851caec983f9", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/game-audio/SKILL.", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/game-audio/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e777a1aace04f1d", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/multiplayer/SKILL", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/multiplayer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c88802f6196cbcf", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/game-art/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/game-art/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc65e9c62bb2fd73", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/web-design-guidelines/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/web-design-guidelines/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef953ef647011f32", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/algorithmic-art/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/algorithmic-art/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2659fea19b52cd32", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/creative-design/figma-implement-design/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/creative-design/figma-implement-design/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c90468ae2d39e092", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/premium-web-design/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/premium-web-design/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ae8a06277a1e0a4e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/diagrammer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/diagrammer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afa06171cc3a066d", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/creative-design/accessibility-auditor/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/creative-design/accessibility-auditor/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7b63375159f5348c", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/imagegen/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/imagegen/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-abb42cf39b0a63cf", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/creative-design/3d-web-experience/SKILL.m", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/creative-design/3d-web-experience/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e76c0bd1ab4f1b09", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-data/data-feeds/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-data/data-feeds/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d33e913f7ce2581", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-data/search/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-data/search/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8430f2470cfe23e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-data/scrape/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-data/scrape/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eaa2ed2d230762f4", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/marketing/x-twitter-scraper/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/marketing/x-twitter-scraper/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4bf0caf97ce78767", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/sports/footballbin-predictions/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/sports/footballbin-predictions/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30f40e100d072ade", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/career/tech-resume-optimizer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/career/tech-resume-optimizer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a63fff599c367b88", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/career/resume-formatter/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/career/resume-formatter/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cea317e5f45e7056", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/bigquery-basics/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/bigquery-basics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25c150f56b18ccd4", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/supabase-postgres-best-practices/AGENTS.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/supabase-postgres-best-practices/AGENTS.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5b1d044204b9cee", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/postgres-schema-design/SKILL.MD", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/postgres-schema-design/SKILL.MD"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc711358451b0ba0", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/cloud-sql-basics/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/cloud-sql-basics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3bf550346bc5815d", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/using-neon/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/using-neon/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90be0b740675f53f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/docx-official/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/docx-official/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1658611dfbdbeec8", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/docx-official/SKILL.m", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/docx-official/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08ba7f71c68ac6fa", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/json-canvas/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/json-canvas/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76ced8aaf7589243", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/pptx/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/pptx/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d7da446f6916cbcd", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/pptx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/pptx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-92e73b5fd6112f83", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/obsidian-markdown/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/obsidian-markdown/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69d3518ba579b30b", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/docx/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/docx/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e94f5c03c11868de", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/docx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/docx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-304b60830dfa4c57", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/pptx-official/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/pptx-official/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-348e86cad8f673fe", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/pptx-official/SKILL.m", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/pptx-official/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d8fddc5ae2e187a", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/documentation-templates/SKILL.", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/documentation-templates/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef90bbf8a60cdec0", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/doc/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/doc/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-56bfaebc1043cc5d", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/pocketbase/pb-sdk/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/pocketbase/pb-sdk/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f3d930060d3b67fd", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/pocketbase/pb-hooks/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/pocketbase/pb-hooks/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b20d98496a85897f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-maestro/memory-search/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-maestro/memory-search/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c96286fbb46fe54c", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-maestro/graph-query/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-maestro/graph-query/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8e715225d453ab59", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-maestro/agent-messaging/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-maestro/agent-messaging/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-919c5d65affc323b", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/sentry/find-bugs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/sentry/find-bugs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7fff7dc393b94717", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/sentry/code-review/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/sentry/code-review/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-16871ec64004a8b8", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/firecrawl-scraper/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/firecrawl-scraper/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-19b04b8477f3e961", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/web-development/react-state-management/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/web-development/react-state-management/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3fa15fe763de4999", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/web-development/sveltekit/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/web-development/sveltekit/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ccfb4e6bf0946fea", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/exa-search/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/exa-search/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-22b11c480b8a925f", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/web-performance-optimization/SKILL", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/web-performance-optimization/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc286e51ab93302e", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/astro/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/astro/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-daa9cf0f8a5419ac", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/tavily-web/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/tavily-web/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d5490ba73343cfd5", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/blockrun/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/blockrun/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c01367f4a395cca", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/zustand-store-ts/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/zustand-store-ts/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-454962afe4589124", "name": "Agent instruction/config may expose a secret: cli-tool/components/skills/web-development/shopify-development/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/web-development/shopify-development/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9b19074f6b8b7ba4", "name": "Agent instruction contains unpinned remote install: cli-tool/components/skills/web-development/shopify-development/SKILL", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/web-development/shopify-development/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-073343337b2bc293", "name": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/shadcn/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/shadcn/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60cff32827781fc1", "name": "Agent instruction/config may expose a secret: cli-tool/.claude/sandbox/cloudflare/SANDBOX_DEBUGGING.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/.claude/sandbox/cloudflare/SANDBOX_DEBUGGING.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a67d7e7b162ddb24", "name": "Agent authority lacks a verifier contract: cli-tool/.claude/sandbox/cloudflare/SANDBOX_DEBUGGING.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: cli-tool/.claude/sandbox/cloudflare/SANDBOX_DEBUGGING.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e310562c37e5b25d", "name": "Agent instruction contains unpinned remote install: cli-tool/.claude/sandbox/cloudflare/claude-code-sandbox.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: cli-tool/.claude/sandbox/cloudflare/claude-code-sandbox.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87c592d1f8ea4a07", "name": "Agent instruction/config may expose a secret: cli-tool/.claude/sandbox/cloudflare/README.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/.claude/sandbox/cloudflare/README.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2b58452f1b908368", "name": "Agent instruction/config may expose a secret: cli-tool/.claude/sandbox/cloudflare/QUICKSTART.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: cli-tool/.claude/sandbox/cloudflare/QUICKSTART.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-61f64af4e1b91986", "name": "Agent authority lacks a verifier contract: docs/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: docs/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8a4f2a9f9845937", "name": "Agent authority lacks a verifier contract: .claude/agents/cli-ui-designer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/cli-ui-designer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-66d7a80907c1ee46", "name": "Agent instruction/config may expose a secret: .claude/agents/component-reviewer.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agents/component-reviewer.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e3e6e5719c9bda4", "name": "Agent authority lacks a verifier contract: .claude/agents/component-reviewer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/component-reviewer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e2ba07dc9a6bce5a", "name": "Agent authority lacks a verifier contract: .claude/commands/lint.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/lint.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d51de83224902cad", "name": "Agent authority lacks a verifier contract: .claude/commands/worktree-init.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/worktree-init.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12e498cb0043c854", "name": "Agent authority lacks a verifier contract: .claude/rules/dashboard.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/rules/dashboard.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3600f802b06416b8", "name": "Agent authority lacks a verifier contract: .claude/rules/cloudflare.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/rules/cloudflare.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17cd9183a6e14640", "name": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/components/live-task/LiveTaskPanel.tsx:112", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/components/live-task/LiveTaskPanel.tsx:112"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cee743b0c8fcceb0", "name": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/pages/api/claude-code-check.ts:10", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/pages/api/claude-code-check.ts:10"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c88359e7efd465cd", "name": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/pages/api/discord/interactions.ts:29", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/pages/api/discord/interactions.ts:29"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3b7e5993894f8da", "name": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/lib/github-api.ts:32", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/lib/github-api.ts:32"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c734eaea16352bbe", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/skillspector_scan.py:85", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/skillspector_scan.py:85"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f7e7571eebb4aa0", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/generate_components_json.py:240", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/generate_components_json.py:240"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e080d38202e8daf", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/src/tracking-service.js:132", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/src/tracking-service.js:132"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-985e9aa3223934c1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/src/index.js:530", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/src/index.js:530"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-603f24b078f4cd76", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/src/sdk/global-agent-manager.js:63", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/src/sdk/global-agent-manager.js:63"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-40989fb9b71d53b2", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/sandbox/e2b/e2b-launcher.py:37", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/sandbox/e2b/e2b-launcher.py:37"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62fdc7e3e1b79685", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/components/sandbox/cloudflare/launcher.ts:330", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/components/sandbox/cloudflare/launcher.ts:330"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-506c64d0f5f5df86", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/components/sandbox/cloudflare/src/index.ts:33", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/components/sandbox/cloudflare/src/index.ts:33"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e329dcd362f3202a", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/hooks/monitoring/context-timeline.py:1109", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/hooks/monitoring/context-timeline.py:1109"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-19402a5b9bdf8152", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/hooks/security/secret-scanner.py:320", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/hooks/security/secret-scanner.py:320"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-67d32d9ebf02ed4a", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/settings/statusline/context-monitor.py:24", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/settings/statusline/context-monitor.py:24"}, "fullDescription": {"text": "`subprocess.check_output(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47c056f003987936", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/settings/statusline/deadline-countdown.py:35", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/settings/statusline/deadline-countdown.py:35"}, "fullDescription": {"text": "`subprocess.check_output(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-86ce5d6d11b6ac2f", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/notebooklm/scripts/__ini", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/notebooklm/scripts/__init__.py:53"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f09cf028b09b2586", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/notebooklm/scripts/setup", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/notebooklm/scripts/setup_environment.py:62"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a0644701864d9c46", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/notebooklm/scripts/run.p", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/notebooklm/scripts/run.py:38"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81f33934007b6ccf", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/skill-creator/scripts/ru", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/skill-creator/scripts/run_eval.py:85"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87ce0cc7ade2eed8", "name": "Commented-code block (5 lines) in cli-tool/components/skills/productivity/skill-creator/scripts/improve_description.py:1", "shortDescription": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/productivity/skill-creator/scripts/improve_description.py:158"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a984deb42f86e06a", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/development/skill-development/scripts", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/development/skill-development/scripts/run_eval.py:85"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5bf7f4237282b6d6", "name": "Commented-code block (5 lines) in cli-tool/components/skills/development/skill-development/scripts/improve_description.p", "shortDescription": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/development/skill-development/scripts/improve_description.py:158"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bd19176b4a496155", "name": "Commented-code block (8 lines) in cli-tool/components/skills/development/systematic-debugging/condition-based-waiting-ex", "shortDescription": {"text": "Commented-code block (8 lines) in cli-tool/components/skills/development/systematic-debugging/condition-based-waiting-example.ts:140"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3a61638979c62d64", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/development/skill-creator/scripts/run", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/development/skill-creator/scripts/run_eval.py:85"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-82716e747c2dc553", "name": "Commented-code block (5 lines) in cli-tool/components/skills/development/skill-creator/scripts/improve_description.py:15", "shortDescription": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/development/skill-creator/scripts/improve_description.py:158"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-77fab8f37ea873df", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generat", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/frontend/src/api/todos.ts:15"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a0f9c0fc95f6144", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/security/security-ownership-map/scrip", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/security/security-ownership-map/scripts/build_ownership_map.py:360"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0834ccbc54e279b", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/security/security-ownership-map/scrip", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/security/security-ownership-map/scripts/run_ownership_map.py:195"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d5f66e15063a9d1a", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/security/security-ownership-map/scrip", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/security/security-ownership-map/scripts/community_maintainers.py:324"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c54364c40c6608ea", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/media/screenshot/scripts/take_screens", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/media/screenshot/scripts/take_screenshot.py:237"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-817611be0db27125", "name": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/stable-baselines3/scripts/train_rl_agent.py:101", "shortDescription": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/stable-baselines3/scripts/train_rl_agent.py:101"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e57948d435dea477", "name": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/stable-baselines3/scripts/custom_env_template.py", "shortDescription": {"text": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/stable-baselines3/scripts/custom_env_template.py:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3a59d87db402eda6", "name": "Commented-code block (8 lines) in cli-tool/components/skills/scientific/stable-baselines3/scripts/evaluate_agent.py:210", "shortDescription": {"text": "Commented-code block (8 lines) in cli-tool/components/skills/scientific/stable-baselines3/scripts/evaluate_agent.py:210"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ddf29c3fed58b7c9", "name": "Commented-code block (8 lines) in cli-tool/components/skills/scientific/pydicom/scripts/anonymize_dicom.py:73", "shortDescription": {"text": "Commented-code block (8 lines) in cli-tool/components/skills/scientific/pydicom/scripts/anonymize_dicom.py:73"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c20bf274f83a0fee", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/ensembl-database/scripts/e", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/ensembl-database/scripts/ensembl_query.py:159"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-857db9bdc67fd6a5", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/clinpgx-database/scripts/q", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/clinpgx-database/scripts/query_clinpgx.py:36"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2b68bbf94d434b2d", "name": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/matplotlib/scripts/plot_template.py:186", "shortDescription": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/matplotlib/scripts/plot_template.py:186"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f7dc40edab17741c", "name": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/document-skills/pdf/scripts/extract_form_field_i", "shortDescription": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/document-skills/pdf/scripts/extract_form_field_info.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03529930ca822959", "name": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/document-skills/pptx/scripts/thumbnail.py:32", "shortDescription": {"text": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/document-skills/pptx/scripts/thumbnail.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-63c87db9799c2698", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/pptx/scrip", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/pptx/scripts/thumbnail.py:219"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8d5de3e8ae137768", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/pptx/ooxml", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/pptx/ooxml/scripts/validation/redlining.py:153"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d940cb9c5ff62fd3", "name": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/scientific/document-skills/pptx/ooxml/scripts/validation/ba", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/scientific/document-skills/pptx/ooxml/scripts/validation/base.py:769"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-90995b05e99b7e31", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/xlsx/recal", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/xlsx/recalc.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-add7b91cc3cd33a5", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/docx/ooxml", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/docx/ooxml/scripts/validation/redlining.py:153"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5606e713c3e7fc2f", "name": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/scientific/document-skills/docx/ooxml/scripts/validation/ba", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/scientific/document-skills/docx/ooxml/scripts/validation/base.py:769"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31801ecd11887174", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/uspto-database/scripts/pat", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/uspto-database/scripts/patent_search.py:70"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c1a5118192631a54", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/reactome-database/scripts/", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/reactome-database/scripts/reactome_query.py:36"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-05b1d8f9f30de08c", "name": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/research-lookup/examples.py:140", "shortDescription": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/research-lookup/examples.py:140"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ef9014be3cbe384f", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/generate-image/scripts/gen", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/generate-image/scripts/generate_image.py:144"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79107c7906037ead", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/uniprot-database/scripts/u", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/uniprot-database/scripts/uniprot_client.py:61"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2737d9ffb191d1b", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/biomni/scripts/setup_envir", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/biomni/scripts/setup_environment.py:47"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-218f8973a8225062", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/labarchive-integration/scr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/labarchive-integration/scripts/entry_operations.py:172"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d3a74f243a753b9", "name": "Legacy-named symbol `notebook_backup` in cli-tool/components/skills/scientific/labarchive-integration/scripts/notebook_o", "shortDescription": {"text": "Legacy-named symbol `notebook_backup` in cli-tool/components/skills/scientific/labarchive-integration/scripts/notebook_operations.py:131"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eaa087c9e96b860b", "name": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/pymc/assets/hierarchical_model_template.py:20", "shortDescription": {"text": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/pymc/assets/hierarchical_model_template.py:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5372a6a6e9f0128d", "name": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/pymc/assets/linear_regression_template.py:20", "shortDescription": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/pymc/assets/linear_regression_template.py:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d3f8ef4adbbf66fc", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/clinicaltrials-database/sc", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/clinicaltrials-database/scripts/query_clinicaltrials.py:87"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bba90ea889c3530b", "name": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/pufferlib/scripts/env_template.py:39", "shortDescription": {"text": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/pufferlib/scripts/env_template.py:39"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-20e32368d35ee124", "name": "Commented-code block (8 lines) in cli-tool/components/skills/scientific/pytorch-lightning/scripts/template_datamodule.py", "shortDescription": {"text": "Commented-code block (8 lines) in cli-tool/components/skills/scientific/pytorch-lightning/scripts/template_datamodule.py:174"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-817621da1aaa44e1", "name": "Commented-code block (10 lines) in cli-tool/components/skills/enterprise-communication/regulatory-affairs-head/scripts/r", "shortDescription": {"text": "Commented-code block (10 lines) in cli-tool/components/skills/enterprise-communication/regulatory-affairs-head/scripts/regulatory_tracker.py:185"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e75c02f809a31fb3", "name": "Legacy-named symbol `days_old` in cli-tool/components/skills/enterprise-communication/session-handoff/scripts/check_stal", "shortDescription": {"text": "Legacy-named symbol `days_old` in cli-tool/components/skills/enterprise-communication/session-handoff/scripts/check_staleness.py:164"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-45b02a749dac6b9b", "name": "Commented-code block (8 lines) in cli-tool/components/skills/creative-design/algorithmic-art/templates/generator_templat", "shortDescription": {"text": "Commented-code block (8 lines) in cli-tool/components/skills/creative-design/algorithmic-art/templates/generator_template.js:15"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fc4a2af44c20e2b1", "name": "Legacy-named symbol `button_v1` in cli-tool/components/skills/creative-design/executing-marketing-campaigns/scripts/mark", "shortDescription": {"text": "Legacy-named symbol `button_v1` in cli-tool/components/skills/creative-design/executing-marketing-campaigns/scripts/marketing_utils.py:39"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-88742301455f03ed", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx-official/scr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx-official/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5896fad0ae64d7bc", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx-official/scr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx-official/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-797adce94ab2ad15", "name": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/docx-official/scripts/office/validators", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/docx-official/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf9dee2b552c1360", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/scripts/thum", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/scripts/thumbnail.py:161"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-224ae085561803b5", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/scripts/offi", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36b5641bfa136b4f", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/scripts/offi", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be92884dd304281f", "name": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/pptx/scripts/office/validators/base.py:", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/pptx/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3d388cc93bc443b", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/ooxml/script", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/ooxml/scripts/validation/redlining.py:153"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1c45b404ba4ca081", "name": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/pptx/ooxml/scripts/validation/base.py:7", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/pptx/ooxml/scripts/validation/base.py:769"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a9b3199b0a6530b", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/recalc.py:92", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/recalc.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a85e614da02b80a", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/scripts/reca", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/scripts/recalc.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e682a1c0103abbe", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/scripts/offi", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1fb0c43182eb2a87", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/scripts/offi", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a887fefe0efcdcc0", "name": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/xlsx/scripts/office/validators/base.py:", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/xlsx/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7465f7d242ff6c20", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx/scripts/offi", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d126409bbee4256", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx/scripts/offi", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f36e27155a145095", "name": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/docx/scripts/office/validators/base.py:", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/docx/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-36bb9f86a552f6eb", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx/ooxml/script", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx/ooxml/scripts/validation/redlining.py:153"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-caba650e9bd49785", "name": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/docx/ooxml/scripts/validation/base.py:7", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/docx/ooxml/scripts/validation/base.py:769"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b3ce7cbcf732514", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx-official/scr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx-official/scripts/thumbnail.py:161"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce54a22d8fcb42ae", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx-official/scr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx-official/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81700d7fed8f9778", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx-official/scr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx-official/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce13010e0d8acc6b", "name": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/pptx-official/scripts/office/validators", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/pptx-official/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-580c271e3547de83", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/doc/scripts/rende", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/doc/scripts/render_docx.py:101"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dfa80f82b29b2224", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/rec", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/recalc.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97b2128f88108721", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/scr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/scripts/recalc.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6212b5278e22fa36", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/scr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ebe26055bc8e737", "name": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/scr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-839c9a5455dfce2e", "name": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/xlsx-official/scripts/office/validators", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/xlsx-official/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e1174609777f3017", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/.claude/sandbox/cloudflare/src/index.ts:33", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/.claude/sandbox/cloudflare/src/index.ts:33"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-460e4c732844ce0d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/index-events.js:1150", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/index-events.js:1150"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-19aa7ddff53a6a41", "name": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/data-loader.js:37", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/data-loader.js:37"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72a9fc1ce162deac", "name": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/script.js:48", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/script.js:48"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d1e96df34c38ec2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/component-page.js:514", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/component-page.js:514"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dbc710ba8c873755", "name": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/search-functionality.js:172", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/search-functionality.js:172"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dfb828cdea5bcbd5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cloudflare-workers/pulse/index.js:28", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cloudflare-workers/pulse/index.js:28"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e2d2272edc5b53e1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cloudflare-workers/docs-monitor/index.js:91", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cloudflare-workers/docs-monitor/index.js:91"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-550e678ef818552d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cloudflare-workers/crons/index.js:24", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cloudflare-workers/crons/index.js:24"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca395a18e146a116", "name": "38 env vars used in code but missing from .env.example", "shortDescription": {"text": "38 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `API_BASE_URL`, `CCT_DEBUG`, `CCT_NO_ANALYTICS`, `CCT_NO_TRACKING`, `CI`, `CLOUDFLARE_WORKER_URL`, `CODEX_SANDBOX`, `CONTEXT_TIMELINE_LIMIT` + 30 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ncli-tool/components/hooks/automation/telegram-pr-webhook.py:get_input, .claude/hooks/telegram-pr-webhook.py:get_input\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ncli-tool/components/skills/productivity/skill-creator/scripts/utils.py:parse_skill_md, cli-tool/components/skills/development/skill-development/scripts/utils.py:parse_skill_md, cli-tool/components/skills/development/skill-creator/scripts/utils.py:parse_skill_md\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ncli-tool/components/skills/productivity/skill-creator/scripts/quick_validate.py:validate_skill, cli-tool/components/skills/development/skill-creation-guide/scripts/quick_validate.py:validate_skill, cli-tool/components/skills/development/skill-development/scripts/quick_validate.py:validate_skill, cli-tool/components/skills/development/skill-creator/scripts/quick_validate.py:validate_skill\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f85b413037a8f432", "name": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (api/claude-code-check.js:13)", "shortDescription": {"text": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (api/claude-code-check.js:13)"}, "fullDescription": {"text": "`api/claude-code-check.js:13` calls `GET https://registry.npmjs.org/${NPM_PACKAGE}/latest` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/registry.npmjs.org/<p>/latest`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e0e2057b5d99c6cb", "name": "Dangling fetch: GET https://aitmpl.com/components.json (api/discord/interactions.js:24)", "shortDescription": {"text": "Dangling fetch: GET https://aitmpl.com/components.json (api/discord/interactions.js:24)"}, "fullDescription": {"text": "`api/discord/interactions.js:24` calls `GET https://aitmpl.com/components.json` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/aitmpl.com/components.json`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a219cef331d59b0a", "name": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (api/claude-code-monitor/check-version.js:13)", "shortDescription": {"text": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (api/claude-code-monitor/check-version.js:13)"}, "fullDescription": {"text": "`api/claude-code-monitor/check-version.js:13` calls `GET https://registry.npmjs.org/${NPM_PACKAGE}/latest` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/registry.npmjs.org/<p>/latest`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5c9ab4b285ec8a43", "name": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (api/claude-code-monitor/webhook.js:24)", "shortDescription": {"text": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (api/claude-code-monitor/webhook.js:24)"}, "fullDescription": {"text": "`api/claude-code-monitor/webhook.js:24` calls `GET https://registry.npmjs.org/${NPM_PACKAGE}/latest` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/registry.npmjs.org/<p>/latest`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5a38b9f9378c8d39", "name": "Dangling fetch: POST https://www.aitmpl.com/api/track-download-supabase (cli-tool/src/tracking-service.js:132)", "shortDescription": {"text": "Dangling fetch: POST https://www.aitmpl.com/api/track-download-supabase (cli-tool/src/tracking-service.js:132)"}, "fullDescription": {"text": "`cli-tool/src/tracking-service.js:132` calls `POST https://www.aitmpl.com/api/track-download-supabase` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/www.aitmpl.com/api/track-download-supabase`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-79b0b327308e846c", "name": "Dangling fetch: POST https://www.aitmpl.com/api/track-command-usage (cli-tool/src/tracking-service.js:262)", "shortDescription": {"text": "Dangling fetch: POST https://www.aitmpl.com/api/track-command-usage (cli-tool/src/tracking-service.js:262)"}, "fullDescription": {"text": "`cli-tool/src/tracking-service.js:262` calls `POST https://www.aitmpl.com/api/track-command-usage` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/www.aitmpl.com/api/track-command-usage`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d98158fd30755e2e", "name": "Dangling fetch: POST https://www.aitmpl.com/api/track-installation-outcome (cli-tool/src/tracking-service.js:338)", "shortDescription": {"text": "Dangling fetch: POST https://www.aitmpl.com/api/track-installation-outcome (cli-tool/src/tracking-service.js:338)"}, "fullDescription": {"text": "`cli-tool/src/tracking-service.js:338` calls `POST https://www.aitmpl.com/api/track-installation-outcome` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/www.aitmpl.com/api/track-installation-outcome`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e9e91472a92ebe2d", "name": "Dangling fetch: GET https://aitmpl.com/api/agents.json (cli-tool/src/index.js:1464)", "shortDescription": {"text": "Dangling fetch: GET https://aitmpl.com/api/agents.json (cli-tool/src/index.js:1464)"}, "fullDescription": {"text": "`cli-tool/src/index.js:1464` calls `GET https://aitmpl.com/api/agents.json` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/aitmpl.com/api/agents.json`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f8f434a78f49febf", "name": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents (cli-", "shortDescription": {"text": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents (cli-tool/src/index.js:1479)"}, "fullDescription": {"text": "`cli-tool/src/index.js:1479` calls `GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-676db85b71b1024a", "name": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents/${ite", "shortDescription": {"text": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents/${item.name} (cli-tool/src/index.js:1523)"}, "fullDescription": {"text": "`cli-tool/src/index.js:1523` calls `GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents/${item.name}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-730cefd7dfc24566", "name": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents (cli-", "shortDescription": {"text": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents (cli-tool/src/sdk/global-agent-manager.js:546)"}, "fullDescription": {"text": "`cli-tool/src/sdk/global-agent-manager.js:546` calls `GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-66bc1f950169e081", "name": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents (cli-", "shortDescription": {"text": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents (cli-tool/src/sdk/global-agent-manager.js:581)"}, "fullDescription": {"text": "`cli-tool/src/sdk/global-agent-manager.js:581` calls `GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0b4c0b065b55a621", "name": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents/${ite", "shortDescription": {"text": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents/${item.name} (cli-tool/src/sdk/global-agent-manager.js:595)"}, "fullDescription": {"text": "`cli-tool/src/sdk/global-agent-manager.js:595` calls `GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents/${item.name}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fbce3efc4cbc7c32", "name": "Dangling fetch: GET https://api.github.com/repos/${GITHUB_CONFIG.owner}/${GITHUB_CONFIG.repo}/contents/cli-tool/componen", "shortDescription": {"text": "Dangling fetch: GET https://api.github.com/repos/${GITHUB_CONFIG.owner}/${GITHUB_CONFIG.repo}/contents/cli-tool/components/${type}/${file.name} (docs/js/script.js:1256)"}, "fullDescription": {"text": "`docs/js/script.js:1256` calls `GET https://api.github.com/repos/${GITHUB_CONFIG.owner}/${GITHUB_CONFIG.repo}/contents/cli-tool/components/${type}/${file.name}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.github.com/repos/<p>/<p>/contents/cli-tool/components/<p>/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-38c9275a4b4c3088", "name": "Dangling fetch: GET https://raw.githubusercontent.com/davila7/claude-code-templates/main/cli-tool/components/.claude-plu", "shortDescription": {"text": "Dangling fetch: GET https://raw.githubusercontent.com/davila7/claude-code-templates/main/cli-tool/components/.claude-plugin/marketplace.json (docs/js/component-page.js:514)"}, "fullDescription": {"text": "`docs/js/component-page.js:514` calls `GET https://raw.githubusercontent.com/davila7/claude-code-templates/main/cli-tool/components/.claude-plugin/marketplace.json` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/raw.githubusercontent.com/davila7/claude-code-templates/main/cli-tool/components/.claude-plugin/marketplace.json`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e53e934155bee4a2", "name": "Dangling fetch: GET https://code.claude.com/docs (cloudflare-workers/docs-monitor/index.js:15)", "shortDescription": {"text": "Dangling fetch: GET https://code.claude.com/docs (cloudflare-workers/docs-monitor/index.js:15)"}, "fullDescription": {"text": "`cloudflare-workers/docs-monitor/index.js:15` calls `GET https://code.claude.com/docs` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/code.claude.com/docs`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fd0aa670f9968a87", "name": "Dangling fetch: GET /claude-jobs.json (dashboard/src/components/JobsPreview.tsx:74)", "shortDescription": {"text": "Dangling fetch: GET /claude-jobs.json (dashboard/src/components/JobsPreview.tsx:74)"}, "fullDescription": {"text": "`dashboard/src/components/JobsPreview.tsx:74` calls `GET /claude-jobs.json` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/claude-jobs.json`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e3ddff48f79fea06", "name": "Dangling fetch: POST /api/collections/share (dashboard/src/components/MyComponentsView.tsx:598)", "shortDescription": {"text": "Dangling fetch: POST /api/collections/share (dashboard/src/components/MyComponentsView.tsx:598)"}, "fullDescription": {"text": "`dashboard/src/components/MyComponentsView.tsx:598` calls `POST /api/collections/share` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/collections/share`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e1b9e1a3c4388e1c", "name": "Dangling fetch: GET /claude-jobs.json (dashboard/src/components/JobsView.tsx:96)", "shortDescription": {"text": "Dangling fetch: GET /claude-jobs.json (dashboard/src/components/JobsView.tsx:96)"}, "fullDescription": {"text": "`dashboard/src/components/JobsView.tsx:96` calls `GET /claude-jobs.json` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/claude-jobs.json`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6458684f920cc1c5", "name": "Dangling fetch: GET /trending-data.json (dashboard/src/components/TrendingView.tsx:59)", "shortDescription": {"text": "Dangling fetch: GET /trending-data.json (dashboard/src/components/TrendingView.tsx:59)"}, "fullDescription": {"text": "`dashboard/src/components/TrendingView.tsx:59` calls `GET /trending-data.json` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/trending-data.json`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-748464998277f935", "name": "Dangling fetch: GET /api/live-task/cycles?limit=20 (dashboard/src/components/live-task/LiveTaskPanel.tsx:30)", "shortDescription": {"text": "Dangling fetch: GET /api/live-task/cycles?limit=20 (dashboard/src/components/live-task/LiveTaskPanel.tsx:30)"}, "fullDescription": {"text": "`dashboard/src/components/live-task/LiveTaskPanel.tsx:30` calls `GET /api/live-task/cycles?limit=20` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/live-task/cycles`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-891c841ed1ba295a", "name": "Dangling fetch: GET /api/live-task/control (dashboard/src/components/live-task/LiveTaskPanel.tsx:38)", "shortDescription": {"text": "Dangling fetch: GET /api/live-task/control (dashboard/src/components/live-task/LiveTaskPanel.tsx:38)"}, "fullDescription": {"text": "`dashboard/src/components/live-task/LiveTaskPanel.tsx:38` calls `GET /api/live-task/control` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/live-task/control`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-45488e0861913246", "name": "Dangling fetch: GET /api/live-task/tools?cycle_id=${cycleId} (dashboard/src/components/live-task/LiveTaskPanel.tsx:46)", "shortDescription": {"text": "Dangling fetch: GET /api/live-task/tools?cycle_id=${cycleId} (dashboard/src/components/live-task/LiveTaskPanel.tsx:46)"}, "fullDescription": {"text": "`dashboard/src/components/live-task/LiveTaskPanel.tsx:46` calls `GET /api/live-task/tools?cycle_id=${cycleId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/live-task/tools`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bcc39818b2960f68", "name": "Dangling fetch: POST /api/live-task/control (dashboard/src/components/live-task/LiveTaskPanel.tsx:112)", "shortDescription": {"text": "Dangling fetch: POST /api/live-task/control (dashboard/src/components/live-task/LiveTaskPanel.tsx:112)"}, "fullDescription": {"text": "`dashboard/src/components/live-task/LiveTaskPanel.tsx:112` calls `POST /api/live-task/control` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/live-task/control`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dd3f429659ac630e", "name": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (dashboard/src/pages/api/claude-code-check.ts:10)", "shortDescription": {"text": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (dashboard/src/pages/api/claude-code-check.ts:10)"}, "fullDescription": {"text": "`dashboard/src/pages/api/claude-code-check.ts:10` calls `GET https://registry.npmjs.org/${NPM_PACKAGE}/latest` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/registry.npmjs.org/<p>/latest`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7957dbc831a9cef9", "name": "Dangling fetch: GET https://www.aitmpl.com/components.json (dashboard/src/pages/api/discord/interactions.ts:29)", "shortDescription": {"text": "Dangling fetch: GET https://www.aitmpl.com/components.json (dashboard/src/pages/api/discord/interactions.ts:29)"}, "fullDescription": {"text": "`dashboard/src/pages/api/discord/interactions.ts:29` calls `GET https://www.aitmpl.com/components.json` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/www.aitmpl.com/components.json`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-375a05898db48b47", "name": "Dangling fetch: POST https://github.com/login/oauth/access_token (dashboard/src/pages/api/github/token.ts:24)", "shortDescription": {"text": "Dangling fetch: POST https://github.com/login/oauth/access_token (dashboard/src/pages/api/github/token.ts:24)"}, "fullDescription": {"text": "`dashboard/src/pages/api/github/token.ts:24` calls `POST https://github.com/login/oauth/access_token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/github.com/login/oauth/access_token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a3c45156489b020", "name": "Unused endpoint: GET /api/users", "shortDescription": {"text": "Unused endpoint: GET /api/users"}, "fullDescription": {"text": "`cli-tool/components/skills/development/api-design-principles/assets/rest-api-template.py` declares `GET /api/users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49546f6900fb04c5", "name": "Unused endpoint: POST /api/users", "shortDescription": {"text": "Unused endpoint: POST /api/users"}, "fullDescription": {"text": "`cli-tool/components/skills/development/api-design-principles/assets/rest-api-template.py` declares `POST /api/users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ffef5a07597afc9", "name": "Unused endpoint: GET /api/users/{user_id}", "shortDescription": {"text": "Unused endpoint: GET /api/users/{user_id}"}, "fullDescription": {"text": "`cli-tool/components/skills/development/api-design-principles/assets/rest-api-template.py` declares `GET /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-887c385438b11bc5", "name": "Unused endpoint: PATCH /api/users/{user_id}", "shortDescription": {"text": "Unused endpoint: PATCH /api/users/{user_id}"}, "fullDescription": {"text": "`cli-tool/components/skills/development/api-design-principles/assets/rest-api-template.py` declares `PATCH /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c3fb176c336b8818", "name": "Unused endpoint: DELETE /api/users/{user_id}", "shortDescription": {"text": "Unused endpoint: DELETE /api/users/{user_id}"}, "fullDescription": {"text": "`cli-tool/components/skills/development/api-design-principles/assets/rest-api-template.py` declares `DELETE /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-51baa046357d29df", "name": "Unused endpoint: GET /component/:type/:name", "shortDescription": {"text": "Unused endpoint: GET /component/:type/:name"}, "fullDescription": {"text": "`scripts/dev-server.js` declares `GET /component/:type/:name` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1abb102f2c991dea", "name": "Unused endpoint: GET /blog/*", "shortDescription": {"text": "Unused endpoint: GET /blog/*"}, "fullDescription": {"text": "`scripts/dev-server.js` declares `GET /blog/*` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5baa8971ebe192a1", "name": "Unused endpoint: GET /", "shortDescription": {"text": "Unused endpoint: GET /"}, "fullDescription": {"text": "`scripts/dev-server.js` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30690c0c0e56ebe1", "name": "Unused endpoint: GET /api/permissions", "shortDescription": {"text": "Unused endpoint: GET /api/permissions"}, "fullDescription": {"text": "`cli-tool/src/plugin-dashboard.js` declares `GET /api/permissions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-705b41a4e5b1ae9d", "name": "Unused endpoint: GET /api/data", "shortDescription": {"text": "Unused endpoint: GET /api/data"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/data` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c921d242ce55dba1", "name": "Unused endpoint: GET /api/conversations", "shortDescription": {"text": "Unused endpoint: GET /api/conversations"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/conversations` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4b0361ac0f5eeb9", "name": "Unused endpoint: GET /api/agents", "shortDescription": {"text": "Unused endpoint: GET /api/agents"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/agents` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9cf0afe01c87f4af", "name": "Unused endpoint: GET /api/realtime", "shortDescription": {"text": "Unused endpoint: GET /api/realtime"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/realtime` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-64b8e6b11d60cba5", "name": "Unused endpoint: GET /api/refresh", "shortDescription": {"text": "Unused endpoint: GET /api/refresh"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/refresh` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a3aa5e1ba2303fa0", "name": "Unused endpoint: GET /api/conversation-state", "shortDescription": {"text": "Unused endpoint: GET /api/conversation-state"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/conversation-state` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9b46238010303501", "name": "Unused endpoint: GET /api/conversations/:id/messages", "shortDescription": {"text": "Unused endpoint: GET /api/conversations/:id/messages"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/conversations/:id/messages` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-96f92333c411a2d4", "name": "Unused endpoint: GET /api/session/data", "shortDescription": {"text": "Unused endpoint: GET /api/session/data"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/session/data` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4a66d93dae23a2a", "name": "Unused endpoint: GET /api/session/:id", "shortDescription": {"text": "Unused endpoint: GET /api/session/:id"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/session/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f29cdd55fce314a", "name": "Unused endpoint: GET /api/fast-update", "shortDescription": {"text": "Unused endpoint: GET /api/fast-update"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/fast-update` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eb28601d1c93a14e", "name": "Unused endpoint: GET /api/system/health", "shortDescription": {"text": "Unused endpoint: GET /api/system/health"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/system/health` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c2507f3182299a0", "name": "Unused endpoint: GET /api/version", "shortDescription": {"text": "Unused endpoint: GET /api/version"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/version` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b22a0a4558f2099", "name": "Unused endpoint: GET /api/system/metrics", "shortDescription": {"text": "Unused endpoint: GET /api/system/metrics"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/system/metrics` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d30aa36f85b5752f", "name": "Unused endpoint: GET /api/activity", "shortDescription": {"text": "Unused endpoint: GET /api/activity"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/activity` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-508a2ffac970b27a", "name": "Unused endpoint: GET /api/2025", "shortDescription": {"text": "Unused endpoint: GET /api/2025"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /api/2025` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-721059cf77e14658", "name": "Unused endpoint: GET /2025", "shortDescription": {"text": "Unused endpoint: GET /2025"}, "fullDescription": {"text": "`cli-tool/src/analytics.js` declares `GET /2025` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-304b08eb557b15a5", "name": "Unused endpoint: USE /services", "shortDescription": {"text": "Unused endpoint: USE /services"}, "fullDescription": {"text": "`cli-tool/src/chats-mobile.js` declares `USE /services` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4eee1e47d2172b1b", "name": "Unused endpoint: USE /components", "shortDescription": {"text": "Unused endpoint: USE /components"}, "fullDescription": {"text": "`cli-tool/src/chats-mobile.js` declares `USE /components` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b59435b3211a9df", "name": "Unused endpoint: USE /assets", "shortDescription": {"text": "Unused endpoint: USE /assets"}, "fullDescription": {"text": "`cli-tool/src/chats-mobile.js` declares `USE /assets` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8af0c286ad18c336", "name": "Unused endpoint: GET /api/conversation-states", "shortDescription": {"text": "Unused endpoint: GET /api/conversation-states"}, "fullDescription": {"text": "`cli-tool/src/chats-mobile.js` declares `GET /api/conversation-states` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1eaf4386b3b285c2", "name": "Unused endpoint: GET /api/directories", "shortDescription": {"text": "Unused endpoint: GET /api/directories"}, "fullDescription": {"text": "`cli-tool/src/chats-mobile.js` declares `GET /api/directories` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5991aedcc673ddad", "name": "Unused endpoint: POST /api/search", "shortDescription": {"text": "Unused endpoint: POST /api/search"}, "fullDescription": {"text": "`cli-tool/src/chats-mobile.js` declares `POST /api/search` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-48fa1201bf94cda8", "name": "Unused endpoint: POST /api/conversations/:id/search", "shortDescription": {"text": "Unused endpoint: POST /api/conversations/:id/search"}, "fullDescription": {"text": "`cli-tool/src/chats-mobile.js` declares `POST /api/conversations/:id/search` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86f46464d9f248a1", "name": "Unused endpoint: POST /api/conversations/:id/download", "shortDescription": {"text": "Unused endpoint: POST /api/conversations/:id/download"}, "fullDescription": {"text": "`cli-tool/src/chats-mobile.js` declares `POST /api/conversations/:id/download` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-48867ac7d320857f", "name": "Unused endpoint: GET /api/conversations/:id/analytics", "shortDescription": {"text": "Unused endpoint: GET /api/conversations/:id/analytics"}, "fullDescription": {"text": "`cli-tool/src/chats-mobile.js` declares `GET /api/conversations/:id/analytics` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2cbc08e97a8f0293", "name": "Unused endpoint: GET /api/skills", "shortDescription": {"text": "Unused endpoint: GET /api/skills"}, "fullDescription": {"text": "`cli-tool/src/skill-dashboard.js` declares `GET /api/skills` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3c4a55211ee83025", "name": "Unused endpoint: GET /api/skills/:name", "shortDescription": {"text": "Unused endpoint: GET /api/skills/:name"}, "fullDescription": {"text": "`cli-tool/src/skill-dashboard.js` declares `GET /api/skills/:name` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8636424772444757", "name": "Unused endpoint: GET /api/skills/:name/file/*", "shortDescription": {"text": "Unused endpoint: GET /api/skills/:name/file/*"}, "fullDescription": {"text": "`cli-tool/src/skill-dashboard.js` declares `GET /api/skills/:name/file/*` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e1afb33b283baf0", "name": "Unused endpoint: USE /css", "shortDescription": {"text": "Unused endpoint: USE /css"}, "fullDescription": {"text": "`cli-tool/src/sandbox-server.js` declares `USE /css` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91fa6ba786c475ff", "name": "Unused endpoint: USE /js", "shortDescription": {"text": "Unused endpoint: USE /js"}, "fullDescription": {"text": "`cli-tool/src/sandbox-server.js` declares `USE /js` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-deefc2469b9a0e12", "name": "Unused endpoint: POST /api/execute", "shortDescription": {"text": "Unused endpoint: POST /api/execute"}, "fullDescription": {"text": "`cli-tool/src/sandbox-server.js` declares `POST /api/execute` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9a754f731a4ce51d", "name": "Unused endpoint: GET /api/task/:taskId", "shortDescription": {"text": "Unused endpoint: GET /api/task/:taskId"}, "fullDescription": {"text": "`cli-tool/src/sandbox-server.js` declares `GET /api/task/:taskId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf16ae0930dc161a", "name": "Unused endpoint: GET /api/tasks", "shortDescription": {"text": "Unused endpoint: GET /api/tasks"}, "fullDescription": {"text": "`cli-tool/src/sandbox-server.js` declares `GET /api/tasks` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7c3a3da9407a893e", "name": "Unused endpoint: POST /api/install-agent", "shortDescription": {"text": "Unused endpoint: POST /api/install-agent"}, "fullDescription": {"text": "`cli-tool/src/sandbox-server.js` declares `POST /api/install-agent` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cfa621c46167674c", "name": "Unused endpoint: POST /api/send-message", "shortDescription": {"text": "Unused endpoint: POST /api/send-message"}, "fullDescription": {"text": "`cli-tool/src/claude-api-proxy.js` declares `POST /api/send-message` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-54fa42552bc79bcb", "name": "Unused endpoint: GET /api/conversation/:sessionId", "shortDescription": {"text": "Unused endpoint: GET /api/conversation/:sessionId"}, "fullDescription": {"text": "`cli-tool/src/claude-api-proxy.js` declares `GET /api/conversation/:sessionId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d3f8e7f35bf5f5fe", "name": "Unused endpoint: GET /api/sessions/:id/timeline", "shortDescription": {"text": "Unused endpoint: GET /api/sessions/:id/timeline"}, "fullDescription": {"text": "`cli-tool/src/teams-dashboard.js` declares `GET /api/sessions/:id/timeline` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a18207582bcd980", "name": "Unused endpoint: GET /api/sessions/:id/teammates/:agentId", "shortDescription": {"text": "Unused endpoint: GET /api/sessions/:id/teammates/:agentId"}, "fullDescription": {"text": "`cli-tool/src/teams-dashboard.js` declares `GET /api/sessions/:id/teammates/:agentId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dde3adb27bf7eebe", "name": "Unused endpoint: USE /api", "shortDescription": {"text": "Unused endpoint: USE /api"}, "fullDescription": {"text": "`cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/index.ts` declares `USE /api` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c70359e360d801b", "name": "Unused endpoint: GET /todos", "shortDescription": {"text": "Unused endpoint: GET /todos"}, "fullDescription": {"text": "`cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/routes/todos.ts` declares `GET /todos` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31f38cf25278c564", "name": "Unused endpoint: POST /todos", "shortDescription": {"text": "Unused endpoint: POST /todos"}, "fullDescription": {"text": "`cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/routes/todos.ts` declares `POST /todos` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/25282"}, "properties": {"repository": "davila7/claude-code-templates", "repoUrl": "https://github.com/davila7/claude-code-templates", "branch": "main"}, "results": [{"ruleId": "scanner-2ae0d553df8bec27", "level": "note", "message": {"text": "Possibly dead Python function: fetch_comment"}, "properties": {"repobilityId": "02213d200710a6fd", "scanner": "scanner-primary", "fingerprint": "2ae0d553df8bec27", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/generate_claude_jobs.py:367"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74f39dcce359ae12", "level": "note", "message": {"text": "Possibly dead Python function: fetch_job_content"}, "properties": {"repobilityId": "ffd41f71c80e6e1f", "scanner": "scanner-primary", "fingerprint": "74f39dcce359ae12", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/generate_claude_jobs.py:595"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d9242be800084c6e", "level": "note", "message": {"text": "Possibly dead Python function: show_progress"}, "properties": {"repobilityId": "6d5527eaf5a78425", "scanner": "scanner-primary", "fingerprint": "d9242be800084c6e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/sandbox/e2b/e2b-launcher.py:270"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb80b67468441eec", "level": "note", "message": {"text": "Possibly dead Python function: log_message"}, "properties": {"repobilityId": "965f3150b4af5b2e", "scanner": "scanner-primary", "fingerprint": "eb80b67468441eec", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/hooks/monitoring/context-timeline.py:970"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e34cc54db68ce2b", "level": "note", "message": {"text": "Possibly dead Python function: do_GET"}, "properties": {"repobilityId": "2d943bb45e4f13bd", "scanner": "scanner-primary", "fingerprint": "2e34cc54db68ce2b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/hooks/monitoring/context-timeline.py:982"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d69f864dff2c0faf", "level": "note", "message": {"text": "Possibly dead Python function: do_POST"}, "properties": {"repobilityId": "53357410ca9379a9", "scanner": "scanner-primary", "fingerprint": "d69f864dff2c0faf", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/hooks/monitoring/context-timeline.py:1050"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-328b79181b97cead", "level": "note", "message": {"text": "Possibly dead Python function: do_OPTIONS"}, "properties": {"repobilityId": "36491d1f4fa41aef", "scanner": "scanner-primary", "fingerprint": "328b79181b97cead", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/hooks/monitoring/context-timeline.py:1068"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12257ba7cd4bebc3", "level": "note", "message": {"text": "Possibly dead Python function: create_nowait_stopping_criteria"}, "properties": {"repobilityId": "8334e9e3c6c55fe5", "scanner": "scanner-primary", "fingerprint": "12257ba7cd4bebc3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/nowait/scripts/nowait_processor.py:191"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12f5900ae825e7d1", "level": "note", "message": {"text": "Possibly dead Python function: apply_nowait"}, "properties": {"repobilityId": "4f3bc71beb6a93bf", "scanner": "scanner-primary", "fingerprint": "12f5900ae825e7d1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/nowait/scripts/nowait_processor.py:254"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-405de004877cc311", "level": "note", "message": {"text": "Possibly dead Python function: ask"}, "properties": {"repobilityId": "dd0bc1dc267a8b52", "scanner": "scanner-primary", "fingerprint": "405de004877cc311", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/notebooklm/scripts/browser_session.py:91"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b04a74be6d3cefaa", "level": "note", "message": {"text": "Possibly dead Python function: is_expired"}, "properties": {"repobilityId": "43d05883fea1f364", "scanner": "scanner-primary", "fingerprint": "b04a74be6d3cefaa", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/notebooklm/scripts/browser_session.py:247"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-243a0c4a2667bff0", "level": "note", "message": {"text": "Possibly dead Python function: update_notebook"}, "properties": {"repobilityId": "9829909809da7dee", "scanner": "scanner-primary", "fingerprint": "243a0c4a2667bff0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/notebooklm/scripts/notebook_manager.py:150"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c4c416fadad262a", "level": "note", "message": {"text": "Possibly dead Python function: increment_use_count"}, "properties": {"repobilityId": "517cc5f203714174", "scanner": "scanner-primary", "fingerprint": "6c4c416fadad262a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/notebooklm/scripts/notebook_manager.py:260"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d214dd2a1077fa3", "level": "note", "message": {"text": "Possibly dead Python function: run_single_query"}, "properties": {"repobilityId": "1056c4dff9b57a73", "scanner": "scanner-primary", "fingerprint": "3d214dd2a1077fa3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/skill-creator/scripts/run_eval.py:35"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dda0982447b92b37", "level": "note", "message": {"text": "Possibly dead Python function: do_GET"}, "properties": {"repobilityId": "2d943bb45e4f13bd", "scanner": "scanner-primary", "fingerprint": "dda0982447b92b37", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/skill-creator/eval-viewer/generate_review.py:332"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80916047250707a3", "level": "note", "message": {"text": "Possibly dead Python function: do_POST"}, "properties": {"repobilityId": "53357410ca9379a9", "scanner": "scanner-primary", "fingerprint": "80916047250707a3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/skill-creator/eval-viewer/generate_review.py:361"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ebc29aa693b33881", "level": "note", "message": {"text": "Possibly dead Python function: log_message"}, "properties": {"repobilityId": "965f3150b4af5b2e", "scanner": "scanner-primary", "fingerprint": "ebc29aa693b33881", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/skill-creator/eval-viewer/generate_review.py:382"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0a70b9202254a95", "level": "note", "message": {"text": "Possibly dead Python function: run_single_query"}, "properties": {"repobilityId": "1056c4dff9b57a73", "scanner": "scanner-primary", "fingerprint": "a0a70b9202254a95", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-development/scripts/run_eval.py:35"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-82c85d07bb66ae79", "level": "note", "message": {"text": "Possibly dead Python function: do_GET"}, "properties": {"repobilityId": "2d943bb45e4f13bd", "scanner": "scanner-primary", "fingerprint": "82c85d07bb66ae79", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-development/eval-viewer/generate_review.py:332"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b4e7c2c2b1425dd3", "level": "note", "message": {"text": "Possibly dead Python function: do_POST"}, "properties": {"repobilityId": "53357410ca9379a9", "scanner": "scanner-primary", "fingerprint": "b4e7c2c2b1425dd3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-development/eval-viewer/generate_review.py:361"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b6b835d136f6007", "level": "note", "message": {"text": "Possibly dead Python function: log_message"}, "properties": {"repobilityId": "965f3150b4af5b2e", "scanner": "scanner-primary", "fingerprint": "6b6b835d136f6007", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-development/eval-viewer/generate_review.py:382"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f78d9c05a94897c7", "level": "note", "message": {"text": "Possibly dead Python function: run_single_query"}, "properties": {"repobilityId": "1056c4dff9b57a73", "scanner": "scanner-primary", "fingerprint": "f78d9c05a94897c7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-creator/scripts/run_eval.py:35"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-512ba20a2b683cb0", "level": "note", "message": {"text": "Possibly dead Python function: do_GET"}, "properties": {"repobilityId": "2d943bb45e4f13bd", "scanner": "scanner-primary", "fingerprint": "512ba20a2b683cb0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-creator/eval-viewer/generate_review.py:332"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-93ffd7ae4550b2af", "level": "note", "message": {"text": "Possibly dead Python function: do_POST"}, "properties": {"repobilityId": "53357410ca9379a9", "scanner": "scanner-primary", "fingerprint": "93ffd7ae4550b2af", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-creator/eval-viewer/generate_review.py:361"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-876f27a80c75be8d", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/FileTreeSidebar.tsx:90"}, "properties": {"repobilityId": "3f35b1ba676dc177", "scanner": "scanner-primary", "fingerprint": "876f27a80c75be8d", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-52e503a849e6f45a", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/SkillSlideView.tsx:395"}, "properties": {"repobilityId": "110cf67e128709c7", "scanner": "scanner-primary", "fingerprint": "52e503a849e6f45a", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-6ff270f26da8645d", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/SendToRepoModal.tsx:284"}, "properties": {"repobilityId": "a950db07ebe0c14d", "scanner": "scanner-primary", "fingerprint": "6ff270f26da8645d", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-f97cb89e98ab22b0", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/SkillExplorer.tsx:312"}, "properties": {"repobilityId": "4b9dbe3b0c1fb38a", "scanner": "scanner-primary", "fingerprint": "f97cb89e98ab22b0", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-ce9a6656a1114798", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/SkillExplorer.tsx:490"}, "properties": {"repobilityId": "de09e06de0c137fe", "scanner": "scanner-primary", "fingerprint": "ce9a6656a1114798", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-cf2b1963533c3054", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/SaveToCollectionButton.tsx:257"}, "properties": {"repobilityId": "e5ee8de2bb0aa301", "scanner": "scanner-primary", "fingerprint": "cf2b1963533c3054", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-1ed3dc1ad3ab47b4", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/TypeIcon.tsx:5"}, "properties": {"repobilityId": "b1c57a890c59b9c3", "scanner": "scanner-primary", "fingerprint": "1ed3dc1ad3ab47b4", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-64c6d30875b8a13a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/AuthButton.tsx:122"}, "properties": {"repobilityId": "015119628a6d5fe5", "scanner": "scanner-primary", "fingerprint": "64c6d30875b8a13a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-80ac04408cb20eed", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 dashboard/src/components/AuthButton.tsx:38"}, "properties": {"repobilityId": "fa34005bec4dc0fb", "scanner": "scanner-primary", "fingerprint": "80ac04408cb20eed", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-19b6468e2fbcb806", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/JobsPreview.tsx:152"}, "properties": {"repobilityId": "77e3cf2c1db4fac5", "scanner": "scanner-primary", "fingerprint": "19b6468e2fbcb806", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-4cc846af72f36a51", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/CartSidebar.tsx:217"}, "properties": {"repobilityId": "ede5c6988b7c6ec2", "scanner": "scanner-primary", "fingerprint": "4cc846af72f36a51", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-2ab03438a2357dd4", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/MyComponentsView.tsx:279"}, "properties": {"repobilityId": "cf621a8a1f5d1e22", "scanner": "scanner-primary", "fingerprint": "2ab03438a2357dd4", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b8e06706f35fe761", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/MyComponentsSidebarItem.tsx:57"}, "properties": {"repobilityId": "e5175f292715903a", "scanner": "scanner-primary", "fingerprint": "b8e06706f35fe761", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-81bc25b45f6e18e7", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 dashboard/src/components/MarkdownViewer.tsx:426"}, "properties": {"repobilityId": "e14fce63009544c5", "scanner": "scanner-primary", "fingerprint": "81bc25b45f6e18e7", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-3f7eb34171750e4e", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/JobsView.tsx:370"}, "properties": {"repobilityId": "33790370c15cc3ed", "scanner": "scanner-primary", "fingerprint": "3f7eb34171750e4e", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-0e8b2bbe74e338b2", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 dashboard/src/components/TrendingView.tsx:359"}, "properties": {"repobilityId": "a97db071ad2e0e64", "scanner": "scanner-primary", "fingerprint": "0e8b2bbe74e338b2", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-2e9c9cf8f17ec639", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 dashboard/src/pages/api/claude-code-check.ts:89"}, "properties": {"repobilityId": "e5fb9e6e99221f63", "scanner": "scanner-primary", "fingerprint": "2e9c9cf8f17ec639", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-550868b31bb06fde", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 dashboard/public/blog/js/blog-loader.js:219"}, "properties": {"repobilityId": "54c25612e79d9106", "scanner": "scanner-primary", "fingerprint": "550868b31bb06fde", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2bd4b8f37e25f8b1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 api/claude-code-check.js:116"}, "properties": {"repobilityId": "792fa7c35aefb33f", "scanner": "scanner-primary", "fingerprint": "2bd4b8f37e25f8b1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d67003e60b964de7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 api/claude-code-monitor/discord-notifier.js:244"}, "properties": {"repobilityId": "3d10e2a86b064f3b", "scanner": "scanner-primary", "fingerprint": "d67003e60b964de7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a772a6b62af720d5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 api/claude-code-monitor/check-version.js:116"}, "properties": {"repobilityId": "3e96358c60dbc7b9", "scanner": "scanner-primary", "fingerprint": "a772a6b62af720d5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-cbdc2f9b704b8760", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 api/claude-code-monitor/webhook.js:105"}, "properties": {"repobilityId": "c097a1772a62dc68", "scanner": "scanner-primary", "fingerprint": "cbdc2f9b704b8760", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b2c365773f68b33b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/dev-server.js:38"}, "properties": {"repobilityId": "933e584b7f052375", "scanner": "scanner-primary", "fingerprint": "b2c365773f68b33b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e482245a880a42e8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/tests/validation/IntegrityValidator.test.js:363"}, "properties": {"repobilityId": "5f4b7ddbd28ceafc", "scanner": "scanner-primary", "fingerprint": "e482245a880a42e8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6a76a3a002ed4317", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/tests/validation/StructuralValidator.test.js:48"}, "properties": {"repobilityId": "3579b32c5b20e4db", "scanner": "scanner-primary", "fingerprint": "6a76a3a002ed4317", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-495141723bcd8d43", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/tests/validation/SemanticValidator.test.js:48"}, "properties": {"repobilityId": "aef7b2df47267c05", "scanner": "scanner-primary", "fingerprint": "495141723bcd8d43", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-141ffe14fb6b8bd4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/test-console-bridge.js:10"}, "properties": {"repobilityId": "03b21d96b6c2bfb4", "scanner": "scanner-primary", "fingerprint": "141ffe14fb6b8bd4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ffdac82d25d6679f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/session-sharing.js:26"}, "properties": {"repobilityId": "68c67778a57cd38f", "scanner": "scanner-primary", "fingerprint": "ffdac82d25d6679f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d0455a6cb5e4b716", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/console-bridge.js:47"}, "properties": {"repobilityId": "76eb4abb5663107c", "scanner": "scanner-primary", "fingerprint": "d0455a6cb5e4b716", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-aa33801467afe395", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/health-check.js:32"}, "properties": {"repobilityId": "3bcb3abfdc4a437a", "scanner": "scanner-primary", "fingerprint": "aa33801467afe395", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-af3251eb844a05cc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/mcp-stats.js:10"}, "properties": {"repobilityId": "cb046d7d5c835221", "scanner": "scanner-primary", "fingerprint": "af3251eb844a05cc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-95f35e55481a5b8c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/security-audit.js:79"}, "properties": {"repobilityId": "53ef1d0654fe2bb0", "scanner": "scanner-primary", "fingerprint": "95f35e55481a5b8c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a44c19ec0625b6fa", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/plugin-dashboard.js:638"}, "properties": {"repobilityId": "98fa48c186d7219d", "scanner": "scanner-primary", "fingerprint": "a44c19ec0625b6fa", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b2dff80c67467c67", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics.js:81"}, "properties": {"repobilityId": "ef3cc7cd378710ed", "scanner": "scanner-primary", "fingerprint": "b2dff80c67467c67", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-716384aa8f1f75bf", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/index.js:63"}, "properties": {"repobilityId": "89cfc8470c198c60", "scanner": "scanner-primary", "fingerprint": "716384aa8f1f75bf", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d85c36c9d16ce469", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/chats-mobile.js:68"}, "properties": {"repobilityId": "6d9edfb89fd7ef41", "scanner": "scanner-primary", "fingerprint": "d85c36c9d16ce469", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-27effba130c62f62", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/skill-dashboard.js:29"}, "properties": {"repobilityId": "9dbc3b63771c98c3", "scanner": "scanner-primary", "fingerprint": "27effba130c62f62", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d01a5f34f0e9efbe", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/sandbox-server.js:16"}, "properties": {"repobilityId": "c53c0e8ee9fa44e8", "scanner": "scanner-primary", "fingerprint": "d01a5f34f0e9efbe", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1cf9e938e4db2fa0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/command-stats.js:108"}, "properties": {"repobilityId": "01ebf7e67ade6ecf", "scanner": "scanner-primary", "fingerprint": "1cf9e938e4db2fa0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-cc6840b9d03e0993", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/file-operations.js:36"}, "properties": {"repobilityId": "fdd825601df42ace", "scanner": "scanner-primary", "fingerprint": "cc6840b9d03e0993", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-200ab30c76e881a7", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 cli-tool/src/claude-api-proxy.js:193"}, "properties": {"repobilityId": "09d987013de972ec", "scanner": "scanner-primary", "fingerprint": "200ab30c76e881a7", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-ca7092afacdd14e8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/claude-api-proxy.js:170"}, "properties": {"repobilityId": "3d3f34f0d9a42fa8", "scanner": "scanner-primary", "fingerprint": "ca7092afacdd14e8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6bfbea20d76bb432", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/teams-dashboard.js:781"}, "properties": {"repobilityId": "59a552c00f27dcee", "scanner": "scanner-primary", "fingerprint": "6bfbea20d76bb432", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-92176d7789a85825", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/agents.js:58"}, "properties": {"repobilityId": "c354b21ac7470155", "scanner": "scanner-primary", "fingerprint": "92176d7789a85825", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bef619aa06c05a21", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/hook-stats.js:26"}, "properties": {"repobilityId": "1c60bd5c50c6a489", "scanner": "scanner-primary", "fingerprint": "bef619aa06c05a21", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-070aa6e8ada64408", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/plugin-dashboard-web/app.js:696"}, "properties": {"repobilityId": "97f200533e9206f0", "scanner": "scanner-primary", "fingerprint": "070aa6e8ada64408", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ca5424df8de60ce4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/utils/PerformanceMonitor.js:42"}, "properties": {"repobilityId": "c60d079b8dc871bf", "scanner": "scanner-primary", "fingerprint": "ca5424df8de60ce4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-914f7a7eef31b694", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/YearInReview2025.js:26"}, "properties": {"repobilityId": "81aa328086383516", "scanner": "scanner-primary", "fingerprint": "914f7a7eef31b694", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1891f31c7615c769", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/ProcessDetector.js:38"}, "properties": {"repobilityId": "b19915f17c98d060", "scanner": "scanner-primary", "fingerprint": "1891f31c7615c769", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-01d9ee5f0209455d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/ConversationAnalyzer.js:29"}, "properties": {"repobilityId": "c44bac703a6c8ca9", "scanner": "scanner-primary", "fingerprint": "01d9ee5f0209455d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-28e8e85624069c02", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/core/FileWatcher.js:26"}, "properties": {"repobilityId": "f417f12794c674f5", "scanner": "scanner-primary", "fingerprint": "28e8e85624069c02", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7f991dbd9eb507b8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/notifications/NotificationManager.js:21"}, "properties": {"repobilityId": "fbf9f78a74e651fd", "scanner": "scanner-primary", "fingerprint": "7f991dbd9eb507b8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-20f1585a206d8e07", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics/notifications/WebSocketServer.js:32"}, "properties": {"repobilityId": "742a3bc81b00ed8b", "scanner": "scanner-primary", "fingerprint": "20f1585a206d8e07", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3ef37c56a6d66126", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/SessionTimer.js:30"}, "properties": {"repobilityId": "9f165799131ae81f", "scanner": "scanner-primary", "fingerprint": "3ef37c56a6d66126", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-14cd06a7a349eae6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/ConversationTable.js:319"}, "properties": {"repobilityId": "3d1c7dde714d94d7", "scanner": "scanner-primary", "fingerprint": "14cd06a7a349eae6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fe40abc96025af26", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/ActivityHeatmap.js:14"}, "properties": {"repobilityId": "1f65bc0b03e1a6cd", "scanner": "scanner-primary", "fingerprint": "fe40abc96025af26", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-251cf92a6603754d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/DashboardPage.js:29"}, "properties": {"repobilityId": "c9589b5eddb55c09", "scanner": "scanner-primary", "fingerprint": "251cf92a6603754d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c54a9af15fb4b082", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/ToolDisplay.js:45"}, "properties": {"repobilityId": "75be612238b0c401", "scanner": "scanner-primary", "fingerprint": "c54a9af15fb4b082", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2e1c837cd0e8ac2d", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 cli-tool/src/analytics-web/components/App.js:66"}, "properties": {"repobilityId": "20a8393d85cf3480", "scanner": "scanner-primary", "fingerprint": "2e1c837cd0e8ac2d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-7c5aba23a25683f2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/components/App.js:190"}, "properties": {"repobilityId": "36227d0b70f1b43b", "scanner": "scanner-primary", "fingerprint": "7c5aba23a25683f2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c8fbca775ff3a5de", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/services/DataService.js:111"}, "properties": {"repobilityId": "f0dcc10e4e3b92f4", "scanner": "scanner-primary", "fingerprint": "c8fbca775ff3a5de", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-618fa009934e725f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/analytics-web/services/WebSocketService.js:33"}, "properties": {"repobilityId": "194e1e3f48663173", "scanner": "scanner-primary", "fingerprint": "618fa009934e725f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-57f0a73d98bbcc3d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/src/sdk/global-agent-manager.js:32"}, "properties": {"repobilityId": "4c3bf44da44b0c1b", "scanner": "scanner-primary", "fingerprint": "57f0a73d98bbcc3d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-97682deb339cd17c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/cloudflare/monitor.ts:54"}, "properties": {"repobilityId": "429afe7ca488c623", "scanner": "scanner-primary", "fingerprint": "97682deb339cd17c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-dc77a1d60040948a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/cloudflare/launcher.ts:53"}, "properties": {"repobilityId": "0c7e242c6ae43610", "scanner": "scanner-primary", "fingerprint": "dc77a1d60040948a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5412044d0a786db2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/cloudflare/src/index.ts:126"}, "properties": {"repobilityId": "02e082eef2a18560", "scanner": "scanner-primary", "fingerprint": "5412044d0a786db2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b09b155dfea14769", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/docker/execute.js:25"}, "properties": {"repobilityId": "077f1101b87b7ef2", "scanner": "scanner-primary", "fingerprint": "b09b155dfea14769", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1f355003556e0313", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/sandbox/docker/docker-launcher.js:28"}, "properties": {"repobilityId": "c942c67e66ead6de", "scanner": "scanner-primary", "fingerprint": "1f355003556e0313", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2dcbcf405eb46ff3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/productivity/writing-skills/render-graphs.js:124"}, "properties": {"repobilityId": "07f85b4f8a2e7d05", "scanner": "scanner-primary", "fingerprint": "2dcbcf405eb46ff3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1c6f56fecff8e9cb", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/development/writing-skills/render-graphs.js:124"}, "properties": {"repobilityId": "3312f49132f46a10", "scanner": "scanner-primary", "fingerprint": "1c6f56fecff8e9cb", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bab2539ef9d16d4b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/scripts/take-screenshots.js:15"}, "properties": {"repobilityId": "3cbf4494308bb4a8", "scanner": "scanner-primary", "fingerprint": "bab2539ef9d16d4b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-72106d4e62c34ed1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/index.ts:31"}, "properties": {"repobilityId": "7db16306f86a8cbc", "scanner": "scanner-primary", "fingerprint": "72106d4e62c34ed1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c0f4a372c1becbf0", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/types/index.ts:1"}, "properties": {"repobilityId": "0b9230395757b5ca", "scanner": "scanner-primary", "fingerprint": "c0f4a372c1becbf0", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-6696fc4ac2b0a6d5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/db/database.ts:13"}, "properties": {"repobilityId": "e0dab66696d36115", "scanner": "scanner-primary", "fingerprint": "6696fc4ac2b0a6d5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d32cd85797a392fe", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/db/migrations.ts:15"}, "properties": {"repobilityId": "ecf6adfe864f3496", "scanner": "scanner-primary", "fingerprint": "d32cd85797a392fe", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8d62e418cbc9ca08", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/backend/src/db/db.ts:10"}, "properties": {"repobilityId": "1fbda9118920c960", "scanner": "scanner-primary", "fingerprint": "8d62e418cbc9ca08", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-eec82640131fe15c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/scientific/document-skills/pptx/scripts/html2pptx.js:921"}, "properties": {"repobilityId": "d8cc270bb0bec690", "scanner": "scanner-primary", "fingerprint": "eec82640131fe15c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-71d4084521e196b5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/utilities/playwright-skill/run.js:36"}, "properties": {"repobilityId": "da53688e8b2dc93c", "scanner": "scanner-primary", "fingerprint": "71d4084521e196b5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b4a2e4bc50d6e38b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/utilities/playwright-skill/lib/helpers.js:137"}, "properties": {"repobilityId": "693532c4b9a41080", "scanner": "scanner-primary", "fingerprint": "b4a2e4bc50d6e38b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3834d7439e569b8a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/document-processing/pptx/scripts/html2pptx.js:921"}, "properties": {"repobilityId": "54d93a5791a09a32", "scanner": "scanner-primary", "fingerprint": "3834d7439e569b8a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a165ce6db5c77c4e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/web-development/roier-seo/scripts/audit.js:154"}, "properties": {"repobilityId": "e02e2b7667a015d6", "scanner": "scanner-primary", "fingerprint": "a165ce6db5c77c4e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ce760b38e7c1c5a5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/components/skills/web-development/roier-seo/scripts/audit-api.js:135"}, "properties": {"repobilityId": "5811b404cbe85df0", "scanner": "scanner-primary", "fingerprint": "ce760b38e7c1c5a5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d739bb109fb7bef5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/.claude/sandbox/cloudflare/monitor.ts:54"}, "properties": {"repobilityId": "35f2cee9213fd681", "scanner": "scanner-primary", "fingerprint": "d739bb109fb7bef5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-53ef92a9cb48d3b4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/.claude/sandbox/cloudflare/launcher.ts:53"}, "properties": {"repobilityId": "42d8e8523c0b956b", "scanner": "scanner-primary", "fingerprint": "53ef92a9cb48d3b4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-75e4ee4c8b8b40a4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cli-tool/.claude/sandbox/cloudflare/src/index.ts:126"}, "properties": {"repobilityId": "33260104ff82e81b", "scanner": "scanner-primary", "fingerprint": "75e4ee4c8b8b40a4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9404156fe75556f1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 docs/js/generate-search-data.js:10"}, "properties": {"repobilityId": "21bfc68ff7b146fb", "scanner": "scanner-primary", "fingerprint": "9404156fe75556f1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5be9934d33c0a22a", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 docs/js/index-events.js:1488"}, "properties": {"repobilityId": "e7c64a9c2c5b8f96", "scanner": "scanner-primary", "fingerprint": "5be9934d33c0a22a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-56a70b56bcd455a7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 docs/js/partnership-banner.js:37"}, "properties": {"repobilityId": "189a620a5b64b1f8", "scanner": "scanner-primary", "fingerprint": "56a70b56bcd455a7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-782c7d1829a760b9", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 docs/js/script.js:273"}, "properties": {"repobilityId": "4baaaae655c8babe", "scanner": "scanner-primary", "fingerprint": "782c7d1829a760b9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-1c071ae0f69de84e", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 docs/js/component-page.js:1443"}, "properties": {"repobilityId": "c2c6a1ba5c62e6f9", "scanner": "scanner-primary", "fingerprint": "1c071ae0f69de84e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-5dff18310bd26af6", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 docs/js/modal-helpers.js:72"}, "properties": {"repobilityId": "14fe687272cfd1d9", "scanner": "scanner-primary", "fingerprint": "5dff18310bd26af6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-c813022da522a915", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 docs/js/workflows.js:448"}, "properties": {"repobilityId": "ba9b45231c5b63a2", "scanner": "scanner-primary", "fingerprint": "c813022da522a915", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-25ae8e49c5f46e28", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 docs/blog/js/blog-loader.js:219"}, "properties": {"repobilityId": "b354ccf9b07536e4", "scanner": "scanner-primary", "fingerprint": "25ae8e49c5f46e28", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c29ca5366b26b08e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cloudflare-workers/pulse/index.js:24"}, "properties": {"repobilityId": "e5d097985d82fac1", "scanner": "scanner-primary", "fingerprint": "c29ca5366b26b08e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b5c2f6acab01b3f2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cloudflare-workers/docs-monitor/index.js:11"}, "properties": {"repobilityId": "0e41bb2e444874b8", "scanner": "scanner-primary", "fingerprint": "b5c2f6acab01b3f2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1b60837323506a20", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 cloudflare-workers/crons/index.js:25"}, "properties": {"repobilityId": "f13eeeb6d7ac25f7", "scanner": "scanner-primary", "fingerprint": "1b60837323506a20", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-addbee1cc95a0506", "level": "warning", "message": {"text": "Privileged port 17 in use"}, "properties": {"repobilityId": "0bf38fb8f89ec589", "scanner": "scanner-primary", "fingerprint": "addbee1cc95a0506", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-community-help-discord.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-669335e8406a3314", "level": "warning", "message": {"text": "Privileged port 14 in use"}, "properties": {"repobilityId": "2dbd4b719a1412ff", "scanner": "scanner-primary", "fingerprint": "669335e8406a3314", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-community-help-discord.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b094ad13936773b", "level": "warning", "message": {"text": "Privileged port 15 in use"}, "properties": {"repobilityId": "3340f9a170f285cd", "scanner": "scanner-primary", "fingerprint": "2b094ad13936773b", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-blog-discord.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e12da7b2e6b43ca5", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "e12da7b2e6b43ca5", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-blog-discord.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8dc6d88e07ca2c0", "level": "warning", "message": {"text": "Privileged port 11 in use"}, "properties": {"repobilityId": "5b3038c67fabb4c8", "scanner": "scanner-primary", "fingerprint": "e8dc6d88e07ca2c0", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-component-discord.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0ae2ea4a5338c554", "level": "warning", "message": {"text": "Privileged port 16 in use"}, "properties": {"repobilityId": "d31009168c502ace", "scanner": "scanner-primary", "fingerprint": "0ae2ea4a5338c554", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-general-discord.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c812a893dc96d84e", "level": "warning", "message": {"text": "Privileged port 13 in use"}, "properties": {"repobilityId": "79d721e4d6f64798", "scanner": "scanner-primary", "fingerprint": "c812a893dc96d84e", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-general-discord.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a01c87209ebdec95", "level": "warning", "message": {"text": "Privileged port 44 in use"}, "properties": {"repobilityId": "1f021a2e926773a0", "scanner": "scanner-primary", "fingerprint": "a01c87209ebdec95", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/hooks/monitoring/langsmith-tracing.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6174ac472c8478f", "level": "warning", "message": {"text": "Privileged port 10 in use"}, "properties": {"repobilityId": "735372d6b5594915", "scanner": "scanner-primary", "fingerprint": "a6174ac472c8478f", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/error-resolver/replay/solution-template.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fce8df86616125e6", "level": "warning", "message": {"text": "Privileged port 30 in use"}, "properties": {"repobilityId": "54f172e7d16fc662", "scanner": "scanner-primary", "fingerprint": "fce8df86616125e6", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/error-resolver/replay/solution-template.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-669e3b03829427cb", "level": "warning", "message": {"text": "Privileged port 502 in use"}, "properties": {"repobilityId": "266ca9fc258b3118", "scanner": "scanner-primary", "fingerprint": "669e3b03829427cb", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-48bcda5a617a3315", "level": "warning", "message": {"text": "Privileged port 21 in use"}, "properties": {"repobilityId": "d920b7cd1b1a16dc", "scanner": "scanner-primary", "fingerprint": "48bcda5a617a3315", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cacc426c9b36ae46", "level": "warning", "message": {"text": "Privileged port 554 in use"}, "properties": {"repobilityId": "6639d60eed047e74", "scanner": "scanner-primary", "fingerprint": "cacc426c9b36ae46", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-657451abf5ffa328", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "78d4c0ab58d23774", "scanner": "scanner-primary", "fingerprint": "657451abf5ffa328", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/sandbox/docker/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-9885e8092889575f", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in dashboard/src/components/SkillSlideView.tsx:395"}, "properties": {"repobilityId": "5e549f5c11fe552a", "scanner": "scanner-primary", "fingerprint": "9885e8092889575f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/src/components/SkillSlideView.tsx"}, "region": {"startLine": 395}}}]}, {"ruleId": "scanner-2b95c869adfed3de", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in dashboard/src/components/SendToRepoModal.tsx:94"}, "properties": {"repobilityId": "f2b7d0bc9194133b", "scanner": "scanner-primary", "fingerprint": "2b95c869adfed3de", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/src/components/SendToRepoModal.tsx"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-5d923475d341055f", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in dashboard/src/components/SkillExplorer.tsx:490"}, "properties": {"repobilityId": "e280aff05ed85740", "scanner": "scanner-primary", "fingerprint": "5d923475d341055f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/src/components/SkillExplorer.tsx"}, "region": {"startLine": 490}}}]}, {"ruleId": "scanner-cce64367f270e1cf", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in dashboard/src/components/MarkdownViewer.tsx:426"}, "properties": {"repobilityId": "890dbebf07466caa", "scanner": "scanner-primary", "fingerprint": "cce64367f270e1cf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/src/components/MarkdownViewer.tsx"}, "region": {"startLine": 426}}}]}, {"ruleId": "scanner-b750df27631e32ac", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in dashboard/src/pages/api/live-task/tools.ts:7"}, "properties": {"repobilityId": "e6e033262a0be3cd", "scanner": "scanner-primary", "fingerprint": "b750df27631e32ac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/src/pages/api/live-task/tools.ts"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-3c41ad7bd74c4ad7", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in dashboard/src/pages/api/live-task/control.ts:10"}, "properties": {"repobilityId": "84a1dc08f06fe47b", "scanner": "scanner-primary", "fingerprint": "3c41ad7bd74c4ad7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/src/pages/api/live-task/control.ts"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-f3604578eb0c900f", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in dashboard/src/pages/api/live-task/cycles.ts:7"}, "properties": {"repobilityId": "9d3bd894ef5dade8", "scanner": "scanner-primary", "fingerprint": "f3604578eb0c900f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/src/pages/api/live-task/cycles.ts"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-a1700725b85a295c", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in dashboard/src/lib/api/cors.ts:2"}, "properties": {"repobilityId": "818a25ab3a42949d", "scanner": "scanner-primary", "fingerprint": "a1700725b85a295c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/src/lib/api/cors.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-e357bac053aa68b8", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/nextjs-vercel-claude-code-integration/index.html:715"}, "properties": {"repobilityId": "3f88ada2ad531933", "scanner": "scanner-primary", "fingerprint": "e357bac053aa68b8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/nextjs-vercel-claude-code-integration/index.html"}, "region": {"startLine": 715}}}]}, {"ruleId": "scanner-0bbb935e5c314391", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/heygen-best-practices-skill/index.html:579"}, "properties": {"repobilityId": "956ba95ec186e68d", "scanner": "scanner-primary", "fingerprint": "0bbb935e5c314391", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/heygen-best-practices-skill/index.html"}, "region": {"startLine": 579}}}]}, {"ruleId": "scanner-cecb7c130330f51b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/js/blog-loader.js:241"}, "properties": {"repobilityId": "10535ee90657e58e", "scanner": "scanner-primary", "fingerprint": "cecb7c130330f51b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/js/blog-loader.js"}, "region": {"startLine": 241}}}]}, {"ruleId": "scanner-7bceae650b70d99d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/security-hooks-secrets/index.html:541"}, "properties": {"repobilityId": "61ab09bd97ab66c5", "scanner": "scanner-primary", "fingerprint": "7bceae650b70d99d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/security-hooks-secrets/index.html"}, "region": {"startLine": 541}}}]}, {"ruleId": "scanner-8418c3584f0754e7", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/frontend-developer-agent/index.html:393"}, "properties": {"repobilityId": "92f9f2304d68a37a", "scanner": "scanner-primary", "fingerprint": "8418c3584f0754e7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/frontend-developer-agent/index.html"}, "region": {"startLine": 393}}}]}, {"ruleId": "scanner-b6700623d56bd26d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/neon-open-source-program/index.html:590"}, "properties": {"repobilityId": "71ff4f61daa22ced", "scanner": "scanner-primary", "fingerprint": "b6700623d56bd26d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/neon-open-source-program/index.html"}, "region": {"startLine": 590}}}]}, {"ruleId": "scanner-b0a9e87281f904cd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/simple-notifications-hook/index.html:456"}, "properties": {"repobilityId": "bcd251bb4f9ab69c", "scanner": "scanner-primary", "fingerprint": "b0a9e87281f904cd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/simple-notifications-hook/index.html"}, "region": {"startLine": 456}}}]}, {"ruleId": "scanner-d57f5b43bc251f27", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/context7-mcp/index.html:359"}, "properties": {"repobilityId": "acf76362771b71fd", "scanner": "scanner-primary", "fingerprint": "d57f5b43bc251f27", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/context7-mcp/index.html"}, "region": {"startLine": 359}}}]}, {"ruleId": "scanner-7948193a390ee7f6", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/vercel-deployment-monitor-statusline/index.html:493"}, "properties": {"repobilityId": "4a7ae2bbe0328262", "scanner": "scanner-primary", "fingerprint": "7948193a390ee7f6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/vercel-deployment-monitor-statusline/index.html"}, "region": {"startLine": 493}}}]}, {"ruleId": "scanner-c7b5b8574ed692ea", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/code-reviewer-agent/index.html:395"}, "properties": {"repobilityId": "dfc953bc362f18a6", "scanner": "scanner-primary", "fingerprint": "c7b5b8574ed692ea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/code-reviewer-agent/index.html"}, "region": {"startLine": 395}}}]}, {"ruleId": "scanner-9920ccd39ee7f89f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/supabase-claude-code-integration/index.html:509"}, "properties": {"repobilityId": "4967466c9345f667", "scanner": "scanner-primary", "fingerprint": "9920ccd39ee7f89f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/supabase-claude-code-integration/index.html"}, "region": {"startLine": 509}}}]}, {"ruleId": "scanner-2e192d6e6c2ba979", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/react-best-practices-skill/index.html:515"}, "properties": {"repobilityId": "19efd1bac85dda4f", "scanner": "scanner-primary", "fingerprint": "2e192d6e6c2ba979", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/react-best-practices-skill/index.html"}, "region": {"startLine": 515}}}]}, {"ruleId": "scanner-8f92beb77a7369dd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/skills-creator/index.html:413"}, "properties": {"repobilityId": "eadad1075024dafa", "scanner": "scanner-primary", "fingerprint": "8f92beb77a7369dd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/skills-creator/index.html"}, "region": {"startLine": 413}}}]}, {"ruleId": "scanner-3d1e322d7a666efd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/hackathon-ai-strategist-agent/index.html:471"}, "properties": {"repobilityId": "d353f118f7c169ec", "scanner": "scanner-primary", "fingerprint": "3d1e322d7a666efd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/hackathon-ai-strategist-agent/index.html"}, "region": {"startLine": 471}}}]}, {"ruleId": "scanner-ec4e88858ded6322", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard/public/blog/e2b-claude-code-sandbox/index.html:535"}, "properties": {"repobilityId": "fb9113f2f9df976c", "scanner": "scanner-primary", "fingerprint": "ec4e88858ded6322", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard/public/blog/e2b-claude-code-sandbox/index.html"}, "region": {"startLine": 535}}}]}, {"ruleId": "scanner-5841d37ee57b37dc", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/health-check.js:85"}, "properties": {"repobilityId": "28b547303d24288e", "scanner": "scanner-primary", "fingerprint": "5841d37ee57b37dc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/health-check.js"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-5c89982362a338c0", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/track-website-events.js:47"}, "properties": {"repobilityId": "2d65759b9cbff4d6", "scanner": "scanner-primary", "fingerprint": "5c89982362a338c0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/track-website-events.js"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-070173c400e3532f", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/track-command-usage.js:66"}, "properties": {"repobilityId": "42a02f11ab624a51", "scanner": "scanner-primary", "fingerprint": "070173c400e3532f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/track-command-usage.js"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-fad366de85d1ce26", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/claude-code-check.js:105"}, "properties": {"repobilityId": "c3dcbec42d4bf1e4", "scanner": "scanner-primary", "fingerprint": "fad366de85d1ce26", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/claude-code-check.js"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-d1b7e2b2d85cc5a0", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/track-installation-outcome.js:40"}, "properties": {"repobilityId": "ed5adb7f2d82df15", "scanner": "scanner-primary", "fingerprint": "d1b7e2b2d85cc5a0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/track-installation-outcome.js"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-e37e2d8de0afa08f", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/track-download-supabase.js:52"}, "properties": {"repobilityId": "5478d2172f037bd7", "scanner": "scanner-primary", "fingerprint": "e37e2d8de0afa08f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/track-download-supabase.js"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-ad6aa45ff36c9bac", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/collections.js:5"}, "properties": {"repobilityId": "97c5f57d01f5d2f1", "scanner": "scanner-primary", "fingerprint": "ad6aa45ff36c9bac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/collections.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-e9f84ab1f78cc9a4", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/collections/items.js:5"}, "properties": {"repobilityId": "3498c915d7d91d08", "scanner": "scanner-primary", "fingerprint": "e9f84ab1f78cc9a4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/collections/items.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-d62ee324d72d0033", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/collections/[id].js:5"}, "properties": {"repobilityId": "8b208b0a70ace030", "scanner": "scanner-primary", "fingerprint": "d62ee324d72d0033", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/collections/[id].js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-8b90e104c4dd347b", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/claude-code-monitor/discord-notifier.js:225"}, "properties": {"repobilityId": "1ff5cf4599429dd5", "scanner": "scanner-primary", "fingerprint": "8b90e104c4dd347b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/claude-code-monitor/discord-notifier.js"}, "region": {"startLine": 225}}}]}, {"ruleId": "scanner-6e9ff07bde483320", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/claude-code-monitor/check-version.js:105"}, "properties": {"repobilityId": "a1b0cabf49c419ca", "scanner": "scanner-primary", "fingerprint": "6e9ff07bde483320", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/claude-code-monitor/check-version.js"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-185bab02eb0b685b", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api/claude-code-monitor/webhook.js:89"}, "properties": {"repobilityId": "259b235b8fb24eb6", "scanner": "scanner-primary", "fingerprint": "185bab02eb0b685b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api/claude-code-monitor/webhook.js"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-7eb4108ef72af439", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/session-sharing.js:5"}, "properties": {"repobilityId": "c95e2fd9ee782ba9", "scanner": "scanner-primary", "fingerprint": "7eb4108ef72af439", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/session-sharing.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-fb709adb3ea058d0", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/src/console-bridge.js:130"}, "properties": {"repobilityId": "b0afd7b8dc3aca2a", "scanner": "scanner-primary", "fingerprint": "fb709adb3ea058d0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/console-bridge.js"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-e479b771ea43dca3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/console-bridge.js:2"}, "properties": {"repobilityId": "d3ab5551bfaf0f62", "scanner": "scanner-primary", "fingerprint": "e479b771ea43dca3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/console-bridge.js"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-e6b2edeff2a21572", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/health-check.js:5"}, "properties": {"repobilityId": "9473bccd22476b68", "scanner": "scanner-primary", "fingerprint": "e6b2edeff2a21572", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/health-check.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-416233f94a2c1d46", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/mcp-stats.js:5"}, "properties": {"repobilityId": "2a3f4451692d9138", "scanner": "scanner-primary", "fingerprint": "416233f94a2c1d46", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/mcp-stats.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-70057339c50939d8", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/sandbox-interface.html:976"}, "properties": {"repobilityId": "fc4a1ef08b0db109", "scanner": "scanner-primary", "fingerprint": "70057339c50939d8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/sandbox-interface.html"}, "region": {"startLine": 976}}}]}, {"ruleId": "scanner-a719259af37fbfd0", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/plugin-dashboard.js:542"}, "properties": {"repobilityId": "1e3d859eaa2713a4", "scanner": "scanner-primary", "fingerprint": "a719259af37fbfd0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/plugin-dashboard.js"}, "region": {"startLine": 542}}}]}, {"ruleId": "scanner-7e2cab4dfe15e45f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/analytics.js:9"}, "properties": {"repobilityId": "29cd23336c33370e", "scanner": "scanner-primary", "fingerprint": "7e2cab4dfe15e45f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics.js"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-7f4721cb002238ac", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/analytics.js:622"}, "properties": {"repobilityId": "70722b5cd7bafb77", "scanner": "scanner-primary", "fingerprint": "7f4721cb002238ac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics.js"}, "region": {"startLine": 622}}}]}, {"ruleId": "scanner-32f43aa30fbe6d69", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/index.js:2474"}, "properties": {"repobilityId": "450497240bd5358b", "scanner": "scanner-primary", "fingerprint": "32f43aa30fbe6d69", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/index.js"}, "region": {"startLine": 2474}}}]}, {"ruleId": "scanner-c98fbf592b46bccc", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/chats-mobile.js:7"}, "properties": {"repobilityId": "664db87fd0224e36", "scanner": "scanner-primary", "fingerprint": "c98fbf592b46bccc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/chats-mobile.js"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-a54fc9abeda8edc3", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/skill-dashboard.js:340"}, "properties": {"repobilityId": "f0748099a7e5ed09", "scanner": "scanner-primary", "fingerprint": "a54fc9abeda8edc3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/skill-dashboard.js"}, "region": {"startLine": 340}}}]}, {"ruleId": "scanner-49004c0291394ac0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/sandbox-server.js:5"}, "properties": {"repobilityId": "bfa866b7d6529fd1", "scanner": "scanner-primary", "fingerprint": "49004c0291394ac0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/sandbox-server.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-f19d7d50ba36436a", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/sandbox-server.js:52"}, "properties": {"repobilityId": "f42615a2fa03cb26", "scanner": "scanner-primary", "fingerprint": "f19d7d50ba36436a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/sandbox-server.js"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-87b15021b1e8cb8c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/command-stats.js:4"}, "properties": {"repobilityId": "8aeba0a4d727c704", "scanner": "scanner-primary", "fingerprint": "87b15021b1e8cb8c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/command-stats.js"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-bc7f931fb2021c21", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/file-operations.js:596"}, "properties": {"repobilityId": "1e3ced58a8ac49ca", "scanner": "scanner-primary", "fingerprint": "bc7f931fb2021c21", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/file-operations.js"}, "region": {"startLine": 596}}}]}, {"ruleId": "scanner-966ff5acb1a25e9a", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/src/claude-api-proxy.js:359"}, "properties": {"repobilityId": "cc0f5f90e2547ec6", "scanner": "scanner-primary", "fingerprint": "966ff5acb1a25e9a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/claude-api-proxy.js"}, "region": {"startLine": 359}}}]}, {"ruleId": "scanner-835dbda05002be4f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/claude-api-proxy.js:356"}, "properties": {"repobilityId": "ead5d48c906f684f", "scanner": "scanner-primary", "fingerprint": "835dbda05002be4f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/claude-api-proxy.js"}, "region": {"startLine": 356}}}]}, {"ruleId": "scanner-ea2f452282090678", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/claude-api-proxy.js:25"}, "properties": {"repobilityId": "9acad45b2d2f45ba", "scanner": "scanner-primary", "fingerprint": "ea2f452282090678", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/claude-api-proxy.js"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-76fd9633334ecfc7", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/src/teams-dashboard.js:629"}, "properties": {"repobilityId": "30bc8db027dfb376", "scanner": "scanner-primary", "fingerprint": "76fd9633334ecfc7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/teams-dashboard.js"}, "region": {"startLine": 629}}}]}, {"ruleId": "scanner-549f935c1d6f19e0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/hook-stats.js:5"}, "properties": {"repobilityId": "7d12821a7147d4dd", "scanner": "scanner-primary", "fingerprint": "549f935c1d6f19e0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/hook-stats.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-cac5bd7f226b81af", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/plugin-dashboard-web/app.js:178"}, "properties": {"repobilityId": "c5a48edd2ac786a9", "scanner": "scanner-primary", "fingerprint": "cac5bd7f226b81af", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/plugin-dashboard-web/app.js"}, "region": {"startLine": 178}}}]}, {"ruleId": "scanner-715e98ab16c28c87", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/skill-dashboard-web/script.js:147"}, "properties": {"repobilityId": "6669077947c5a4ae", "scanner": "scanner-primary", "fingerprint": "715e98ab16c28c87", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/skill-dashboard-web/script.js"}, "region": {"startLine": 147}}}]}, {"ruleId": "scanner-5b78df99b4be1acf", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/src/analytics/core/ProcessDetector.js:32"}, "properties": {"repobilityId": "8748526400065f8b", "scanner": "scanner-primary", "fingerprint": "5b78df99b4be1acf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics/core/ProcessDetector.js"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-f56b8a2e8d2bf8ff", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/analytics/core/ProcessDetector.js:1"}, "properties": {"repobilityId": "ddb2293317a5ae08", "scanner": "scanner-primary", "fingerprint": "f56b8a2e8d2bf8ff", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics/core/ProcessDetector.js"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-755d34a18ec64db7", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/validation/validators/ProvenanceValidator.js:2"}, "properties": {"repobilityId": "6542675c2e78da43", "scanner": "scanner-primary", "fingerprint": "755d34a18ec64db7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/validation/validators/ProvenanceValidator.js"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-c1fd266779c164f1", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/teams-dashboard-web/app.js:29"}, "properties": {"repobilityId": "fa5d30297d7c72e6", "scanner": "scanner-primary", "fingerprint": "c1fd266779c164f1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/teams-dashboard-web/app.js"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-01f2e2e537e0294d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/2025.html:669"}, "properties": {"repobilityId": "521936b6163492c7", "scanner": "scanner-primary", "fingerprint": "01f2e2e537e0294d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/2025.html"}, "region": {"startLine": 669}}}]}, {"ruleId": "scanner-835639a64c1fe3ab", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/index.html:8492"}, "properties": {"repobilityId": "65f0823c79fadcc1", "scanner": "scanner-primary", "fingerprint": "835639a64c1fe3ab", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/index.html"}, "region": {"startLine": 8492}}}]}, {"ruleId": "scanner-4a77d22a7f1b5b9d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/chats_mobile.html:2757"}, "properties": {"repobilityId": "25faaf39adbe9e24", "scanner": "scanner-primary", "fingerprint": "4a77d22a7f1b5b9d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/chats_mobile.html"}, "region": {"startLine": 2757}}}]}, {"ruleId": "scanner-d6723c651339f389", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/SessionTimer.js:41"}, "properties": {"repobilityId": "6c2407175279bb83", "scanner": "scanner-primary", "fingerprint": "d6723c651339f389", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/components/SessionTimer.js"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-500b170d27e1c31a", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in cli-tool/src/analytics-web/components/SessionTimer.js:297"}, "properties": {"repobilityId": "a55a78b5ad06b484", "scanner": "scanner-primary", "fingerprint": "500b170d27e1c31a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/components/SessionTimer.js"}, "region": {"startLine": 297}}}]}, {"ruleId": "scanner-38a286fbb7efe8ec", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/AgentAnalytics.js:49"}, "properties": {"repobilityId": "ea461481fb5f5d2e", "scanner": "scanner-primary", "fingerprint": "38a286fbb7efe8ec", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/components/AgentAnalytics.js"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-fa3e68a15673314f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/ConversationTable.js:45"}, "properties": {"repobilityId": "de558d57d42e4a9c", "scanner": "scanner-primary", "fingerprint": "fa3e68a15673314f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/components/ConversationTable.js"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-8af54e5b7b824afa", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/Sidebar.js:28"}, "properties": {"repobilityId": "30e5e56a5bde7c94", "scanner": "scanner-primary", "fingerprint": "8af54e5b7b824afa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/components/Sidebar.js"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-ff6f531a3aa296b1", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/HeaderComponent.js:75"}, "properties": {"repobilityId": "d1bfbb7e2059b919", "scanner": "scanner-primary", "fingerprint": "ff6f531a3aa296b1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/components/HeaderComponent.js"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-f917dbd4989686d2", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/ActivityHeatmap.js:36"}, "properties": {"repobilityId": "64c778b56c4db260", "scanner": "scanner-primary", "fingerprint": "f917dbd4989686d2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/components/ActivityHeatmap.js"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-e17734aa5c9b5da0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/DashboardPage.js:122"}, "properties": {"repobilityId": "e503dff4a96b5197", "scanner": "scanner-primary", "fingerprint": "e17734aa5c9b5da0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/components/DashboardPage.js"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-db4e6fe1aa56578d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/src/analytics-web/components/App.js:39"}, "properties": {"repobilityId": "48823bfbdddd0648", "scanner": "scanner-primary", "fingerprint": "db4e6fe1aa56578d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/analytics-web/components/App.js"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-062b3fffab1329db", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/src/sdk/global-agent-manager.js:247"}, "properties": {"repobilityId": "5f41954368f685b2", "scanner": "scanner-primary", "fingerprint": "062b3fffab1329db", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/src/sdk/global-agent-manager.js"}, "region": {"startLine": 247}}}]}, {"ruleId": "scanner-e77aae5e73c8f908", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/components/sandbox/cloudflare/src/index.ts:38"}, "properties": {"repobilityId": "ed72503969329825", "scanner": "scanner-primary", "fingerprint": "e77aae5e73c8f908", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/sandbox/cloudflare/src/index.ts"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-fe93086bf260ceee", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/sandbox/docker/execute.js:11"}, "properties": {"repobilityId": "04f672f89c31ef70", "scanner": "scanner-primary", "fingerprint": "fe93086bf260ceee", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/sandbox/docker/execute.js"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-dbf3d474f785ee3d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/sandbox/docker/docker-launcher.js:8"}, "properties": {"repobilityId": "67d3d5dd883d952d", "scanner": "scanner-primary", "fingerprint": "dbf3d474f785ee3d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/sandbox/docker/docker-launcher.js"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-b72800fa83f7ca9f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/hooks/monitoring/context-timeline.py:611"}, "properties": {"repobilityId": "749565ece3f62c15", "scanner": "scanner-primary", "fingerprint": "b72800fa83f7ca9f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/hooks/monitoring/context-timeline.py"}, "region": {"startLine": 611}}}]}, {"ruleId": "scanner-f0cafc0f0b83a926", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/components/hooks/monitoring/context-timeline.py:976"}, "properties": {"repobilityId": "9bbf9bf0a9bea68c", "scanner": "scanner-primary", "fingerprint": "f0cafc0f0b83a926", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/hooks/monitoring/context-timeline.py"}, "region": {"startLine": 976}}}]}, {"ruleId": "scanner-927ed11b1d2ea91b", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/productivity/writing-rules/SKILL.md:249"}, "properties": {"repobilityId": "52441f5ad1f33197", "scanner": "scanner-primary", "fingerprint": "927ed11b1d2ea91b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/writing-rules/SKILL.md"}, "region": {"startLine": 249}}}]}, {"ruleId": "scanner-5b7944c0a5cef35a", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/productivity/writing-rules/SKILL.md:249"}, "properties": {"repobilityId": "f6bc0b7760c227bb", "scanner": "scanner-primary", "fingerprint": "5b7944c0a5cef35a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/writing-rules/SKILL.md"}, "region": {"startLine": 249}}}]}, {"ruleId": "scanner-d42faacccddba2cf", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/productivity/writing-rules/SKILL.md:178"}, "properties": {"repobilityId": "a6e795dce9a87952", "scanner": "scanner-primary", "fingerprint": "d42faacccddba2cf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/writing-rules/SKILL.md"}, "region": {"startLine": 178}}}]}, {"ruleId": "scanner-9e78ec80c88fa169", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/skills/productivity/writing-skills/render-graphs.js:18"}, "properties": {"repobilityId": "3bc8b0af63f6acf8", "scanner": "scanner-primary", "fingerprint": "9e78ec80c88fa169", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/writing-skills/render-graphs.js"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-a041bcd1c96cb285", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/productivity/skill-creator/eval-viewer/viewer.html:766"}, "properties": {"repobilityId": "2f0cb26447ef5f5e", "scanner": "scanner-primary", "fingerprint": "a041bcd1c96cb285", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/skill-creator/eval-viewer/viewer.html"}, "region": {"startLine": 766}}}]}, {"ruleId": "scanner-eda269f18c4fc0b8", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/productivity/skill-creator/assets/eval_review.html:69"}, "properties": {"repobilityId": "ee166d563c2c8acc", "scanner": "scanner-primary", "fingerprint": "eda269f18c4fc0b8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/skill-creator/assets/eval_review.html"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-a48b8ed10230517a", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/development/typescript-expert/scripts/ts_diagnostic.py:16"}, "properties": {"repobilityId": "7255c2c0d5ee6fb6", "scanner": "scanner-primary", "fingerprint": "a48b8ed10230517a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/typescript-expert/scripts/ts_diagnostic.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-6879aa3f556d9a10", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/development/production-code-audit/SKILL.md"}, "properties": {"repobilityId": "48b1ec120a6b60c5", "scanner": "scanner-primary", "fingerprint": "6879aa3f556d9a10", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/production-code-audit/SKILL.md"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-9cc405bb19974c3e", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in cli-tool/components/skills/development/production-code-audit/SKILL.md:54"}, "properties": {"repobilityId": "1ce793bef2152501", "scanner": "scanner-primary", "fingerprint": "9cc405bb19974c3e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/production-code-audit/SKILL.md"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-f382bcc6daf73ab5", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/development/github-workflow-automation/SKILL.md:559"}, "properties": {"repobilityId": "b31d36f777814c42", "scanner": "scanner-primary", "fingerprint": "f382bcc6daf73ab5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/github-workflow-automation/SKILL.md"}, "region": {"startLine": 559}}}]}, {"ruleId": "scanner-423b53cb28cc87ed", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/components/skills/development/aws-serverless/SKILL.md:48"}, "properties": {"repobilityId": "5f8ec3ea4a41de3c", "scanner": "scanner-primary", "fingerprint": "423b53cb28cc87ed", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/aws-serverless/SKILL.md"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-5e748ecf4b2a2f27", "level": "note", "message": {"text": "Insecure pattern 'document_write' in cli-tool/components/skills/development/best-practices/SKILL.md:130"}, "properties": {"repobilityId": "cb7457527c716307", "scanner": "scanner-primary", "fingerprint": "5e748ecf4b2a2f27", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/best-practices/SKILL.md"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-945b6b833329fb79", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/best-practices/SKILL.md:129"}, "properties": {"repobilityId": "cf3f4a73289acd80", "scanner": "scanner-primary", "fingerprint": "945b6b833329fb79", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/best-practices/SKILL.md"}, "region": {"startLine": 129}}}]}, {"ruleId": "scanner-0b1396d80e61b7d5", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in cli-tool/components/skills/development/best-practices/SKILL.md:144"}, "properties": {"repobilityId": "41c00d8fd5dae3b3", "scanner": "scanner-primary", "fingerprint": "0b1396d80e61b7d5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/best-practices/SKILL.md"}, "region": {"startLine": 144}}}]}, {"ruleId": "scanner-855dbe47face3d30", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-development/eval-viewer/viewer.html:766"}, "properties": {"repobilityId": "1cde759f8758f347", "scanner": "scanner-primary", "fingerprint": "855dbe47face3d30", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-development/eval-viewer/viewer.html"}, "region": {"startLine": 766}}}]}, {"ruleId": "scanner-67aa34019926c0fc", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-development/assets/eval_review.html:69"}, "properties": {"repobilityId": "b8152e6a206af066", "scanner": "scanner-primary", "fingerprint": "67aa34019926c0fc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-development/assets/eval_review.html"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-6fd2970474c9dc4a", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/development/api-documentation-generator/SKILL.md"}, "properties": {"repobilityId": "e42443122f50101f", "scanner": "scanner-primary", "fingerprint": "6fd2970474c9dc4a", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/api-documentation-generator/SKILL.md"}, "region": {"startLine": 167}}}]}, {"ruleId": "scanner-02263a3f2e6806ac", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/skills/development/writing-skills/render-graphs.js:18"}, "properties": {"repobilityId": "a2b2b94097a43008", "scanner": "scanner-primary", "fingerprint": "02263a3f2e6806ac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/writing-skills/render-graphs.js"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-78168f688429f52c", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/development/webapp-testing/scripts/with_server.py:69"}, "properties": {"repobilityId": "85df9ebecf62fd94", "scanner": "scanner-primary", "fingerprint": "78168f688429f52c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/webapp-testing/scripts/with_server.py"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-ddd77b1eeb5bfd54", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-creator/eval-viewer/viewer.html:766"}, "properties": {"repobilityId": "13c5efa660953847", "scanner": "scanner-primary", "fingerprint": "ddd77b1eeb5bfd54", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-creator/eval-viewer/viewer.html"}, "region": {"startLine": 766}}}]}, {"ruleId": "scanner-3dab293b48f5bd63", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/development/skill-creator/assets/eval_review.html:69"}, "properties": {"repobilityId": "8c8e077a414e08e8", "scanner": "scanner-primary", "fingerprint": "3dab293b48f5bd63", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-creator/assets/eval_review.html"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-925f27ca7c21af7e", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/development/react-best-practices/AGENTS.md:1466"}, "properties": {"repobilityId": "cdc23b9285861963", "scanner": "scanner-primary", "fingerprint": "925f27ca7c21af7e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/react-best-practices/AGENTS.md"}, "region": {"startLine": 1466}}}]}, {"ruleId": "scanner-6381d78b58dddb1d", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/development/bun-development/SKILL.md"}, "properties": {"repobilityId": "b5640d0d478a9093", "scanner": "scanner-primary", "fingerprint": "6381d78b58dddb1d", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/bun-development/SKILL.md"}, "region": {"startLine": 377}}}]}, {"ruleId": "scanner-1030635444076680", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/development/cc-skill-security-review/SKILL.md:207"}, "properties": {"repobilityId": "1feca53a189bb03c", "scanner": "scanner-primary", "fingerprint": "1030635444076680", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/cc-skill-security-review/SKILL.md"}, "region": {"startLine": 207}}}]}, {"ruleId": "scanner-c2e2751ff8f8f966", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in cli-tool/components/skills/development/cc-skill-security-review/SKILL.md:145"}, "properties": {"repobilityId": "a3c5d4e6cf0638e4", "scanner": "scanner-primary", "fingerprint": "c2e2751ff8f8f966", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/cc-skill-security-review/SKILL.md"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-4c1b2e968d711b81", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/prompt-engineering-guidance/SKILL.md:384"}, "properties": {"repobilityId": "1982a60f32404752", "scanner": "scanner-primary", "fingerprint": "4c1b2e968d711b81", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/prompt-engineering-guidance/SKILL.md"}, "region": {"startLine": 384}}}]}, {"ruleId": "scanner-5bb59eed5e19a974", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/agents-langchain/SKILL.md:145"}, "properties": {"repobilityId": "dafa0620229aeaac", "scanner": "scanner-primary", "fingerprint": "5bb59eed5e19a974", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/agents-langchain/SKILL.md"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-3f5512ba6f022142", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/agents-crewai/SKILL.md:241"}, "properties": {"repobilityId": "97fe9d04f6191244", "scanner": "scanner-primary", "fingerprint": "3f5512ba6f022142", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/agents-crewai/SKILL.md"}, "region": {"startLine": 241}}}]}, {"ruleId": "scanner-7e5d113361be5368", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/langgraph/SKILL.md:66"}, "properties": {"repobilityId": "f33c6d520004cdf8", "scanner": "scanner-primary", "fingerprint": "7e5d113361be5368", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/langgraph/SKILL.md"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-17d275594e16de29", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/ai-research/autonomous-agent-patterns/SKILL.md:390"}, "properties": {"repobilityId": "0a074a7153c07bb9", "scanner": "scanner-primary", "fingerprint": "17d275594e16de29", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/autonomous-agent-patterns/SKILL.md"}, "region": {"startLine": 390}}}]}, {"ruleId": "scanner-5e72a09532acd0e9", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_implicit_shell' in cli-tool/components/skills/ai-research/autonomous-agent-patterns/SKILL.md:664"}, "properties": {"repobilityId": "e941db1ab7140843", "scanner": "scanner-primary", "fingerprint": "5e72a09532acd0e9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_implicit_shell"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/autonomous-agent-patterns/SKILL.md"}, "region": {"startLine": 664}}}]}, {"ruleId": "scanner-d7145f4faa0be0e0", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-results.json:1080"}, "properties": {"repobilityId": "ab339a08284489ef", "scanner": "scanner-primary", "fingerprint": "d7145f4faa0be0e0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-results.json"}, "region": {"startLine": 1080}}}]}, {"ruleId": "scanner-52984639e6d45af4", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-results.json:372"}, "properties": {"repobilityId": "682b71d212a72831", "scanner": "scanner-primary", "fingerprint": "52984639e6d45af4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-results.json"}, "region": {"startLine": 372}}}]}, {"ruleId": "scanner-59b4dc9921d15efa", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-predictions.json:1072"}, "properties": {"repobilityId": "34d7acad5fcd07ef", "scanner": "scanner-primary", "fingerprint": "59b4dc9921d15efa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-predictions.json"}, "region": {"startLine": 1072}}}]}, {"ruleId": "scanner-0b1d31905e934e4a", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-predictions.json:364"}, "properties": {"repobilityId": "9034904fa446fa3b", "scanner": "scanner-primary", "fingerprint": "0b1d31905e934e4a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-10-37-54/swebench-loki-predictions.json"}, "region": {"startLine": 364}}}]}, {"ruleId": "scanner-5db4254f87591382", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-predictions.json:894"}, "properties": {"repobilityId": "208ee1a1f7b2a521", "scanner": "scanner-primary", "fingerprint": "5db4254f87591382", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-predictions.json"}, "region": {"startLine": 894}}}]}, {"ruleId": "scanner-2183fbd9d53578bb", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-predictions.json:304"}, "properties": {"repobilityId": "663a75113ae8d841", "scanner": "scanner-primary", "fingerprint": "2183fbd9d53578bb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-predictions.json"}, "region": {"startLine": 304}}}]}, {"ruleId": "scanner-1f6eb29ff6d61d32", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-results.json:902"}, "properties": {"repobilityId": "20bfbf5b5c83b271", "scanner": "scanner-primary", "fingerprint": "1f6eb29ff6d61d32", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-results.json"}, "region": {"startLine": 902}}}]}, {"ruleId": "scanner-146f1203242860bd", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-results.json:312"}, "properties": {"repobilityId": "2faef5b861d7bdfa", "scanner": "scanner-primary", "fingerprint": "146f1203242860bd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-01-24-17/swebench-results.json"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-bb00dac73e939770", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-00-49-17/humaneval-solutions/160.py:29"}, "properties": {"repobilityId": "e09b66bd721e83b7", "scanner": "scanner-primary", "fingerprint": "bb00dac73e939770", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/2026-01-05-00-49-17/humaneval-solutions/160.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-e34a823e893b820c", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/humaneval-loki-solutions/160.py:34"}, "properties": {"repobilityId": "8ae92e42ad52c3f9", "scanner": "scanner-primary", "fingerprint": "e34a823e893b820c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/benchmarks/results/humaneval-loki-solutions/160.py"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-c00aafda91cd780f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/ai-research/loki-mode/autonomy/run.sh:758"}, "properties": {"repobilityId": "605d515f2eee3b3a", "scanner": "scanner-primary", "fingerprint": "c00aafda91cd780f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/autonomy/run.sh"}, "region": {"startLine": 758}}}]}, {"ruleId": "scanner-0b71f7ad2af5a85c", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md:184"}, "properties": {"repobilityId": "e39da28ca74e89ab", "scanner": "scanner-primary", "fingerprint": "0b71f7ad2af5a85c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md"}, "region": {"startLine": 184}}}]}, {"ruleId": "scanner-50ce38800f22fb27", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md:198"}, "properties": {"repobilityId": "e0d40d6d7b095a53", "scanner": "scanner-primary", "fingerprint": "50ce38800f22fb27", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md"}, "region": {"startLine": 198}}}]}, {"ruleId": "scanner-45cedeb28ef557d6", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:193"}, "properties": {"repobilityId": "d197c8f2ab7c5413", "scanner": "scanner-primary", "fingerprint": "45cedeb28ef557d6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/xss-html-injection/SKILL.md"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-c1c68502697093ba", "level": "note", "message": {"text": "Insecure pattern 'document_write' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:188"}, "properties": {"repobilityId": "b1298197582fa43b", "scanner": "scanner-primary", "fingerprint": "c1c68502697093ba", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/xss-html-injection/SKILL.md"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-87ab9c864809001b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:465"}, "properties": {"repobilityId": "8ba1f4a60bf53779", "scanner": "scanner-primary", "fingerprint": "87ab9c864809001b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/xss-html-injection/SKILL.md"}, "region": {"startLine": 465}}}]}, {"ruleId": "scanner-381657bd8bed8fe6", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in cli-tool/components/skills/security/xss-html-injection/SKILL.md:192"}, "properties": {"repobilityId": "1354a065f0993410", "scanner": "scanner-primary", "fingerprint": "381657bd8bed8fe6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/xss-html-injection/SKILL.md"}, "region": {"startLine": 192}}}]}, {"ruleId": "scanner-5a3016db2896a1c2", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md:230"}, "properties": {"repobilityId": "6d5781218d0d0969", "scanner": "scanner-primary", "fingerprint": "5a3016db2896a1c2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md"}, "region": {"startLine": 230}}}]}, {"ruleId": "scanner-99059af261a047dd", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md:419"}, "properties": {"repobilityId": "cde1df94b3cd1ff2", "scanner": "scanner-primary", "fingerprint": "99059af261a047dd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md"}, "region": {"startLine": 419}}}]}, {"ruleId": "scanner-e7ebdcb9a09bad4e", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in cli-tool/components/skills/security/pentest-commands/SKILL.md:403"}, "properties": {"repobilityId": "e15f179c650f2817", "scanner": "scanner-primary", "fingerprint": "e7ebdcb9a09bad4e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/pentest-commands/SKILL.md"}, "region": {"startLine": 403}}}]}, {"ruleId": "scanner-02444458fd20324e", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in cli-tool/components/skills/security/privilege-escalation-methods/SKILL.md:77"}, "properties": {"repobilityId": "43d31f91a3ef00f4", "scanner": "scanner-primary", "fingerprint": "02444458fd20324e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/privilege-escalation-methods/SKILL.md"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-d751ea4635c8f0ee", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/security/webapp-testing/scripts/with_server.py:69"}, "properties": {"repobilityId": "c28414271a4ac5b5", "scanner": "scanner-primary", "fingerprint": "d751ea4635c8f0ee", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/webapp-testing/scripts/with_server.py"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-0a7247e7636eb153", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/security/vulnerability-scanner/SKILL.md:205"}, "properties": {"repobilityId": "996dd2e61a8d0330", "scanner": "scanner-primary", "fingerprint": "0a7247e7636eb153", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/vulnerability-scanner/SKILL.md"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-544d97c86002efb3", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/vulnerability-scanner/SKILL.md:205"}, "properties": {"repobilityId": "6625562a62a392c7", "scanner": "scanner-primary", "fingerprint": "544d97c86002efb3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/vulnerability-scanner/SKILL.md"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-0d88c4320488120b", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in cli-tool/components/skills/security/vulnerability-scanner/SKILL.md:208"}, "properties": {"repobilityId": "b74a97a853271c1e", "scanner": "scanner-primary", "fingerprint": "0d88c4320488120b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/vulnerability-scanner/SKILL.md"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-8fdc033a7921d37c", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py:63"}, "properties": {"repobilityId": "48cf27ca69428d11", "scanner": "scanner-primary", "fingerprint": "8fdc033a7921d37c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-2348247da4340be7", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py:64"}, "properties": {"repobilityId": "08200f7d24af6fdd", "scanner": "scanner-primary", "fingerprint": "2348247da4340be7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-87c115468bba416b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py:66"}, "properties": {"repobilityId": "4d8a3da0d8cb44e7", "scanner": "scanner-primary", "fingerprint": "87c115468bba416b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-274bb48205e8f949", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py:70"}, "properties": {"repobilityId": "f730f479cb29b30e", "scanner": "scanner-primary", "fingerprint": "274bb48205e8f949", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/vulnerability-scanner/scripts/security_scan.py"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-1b0d8e76f221f19d", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/security/wordpress-penetration-testing/SKILL.md:313"}, "properties": {"repobilityId": "efb5ad55ad3e7cce", "scanner": "scanner-primary", "fingerprint": "1b0d8e76f221f19d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/wordpress-penetration-testing/SKILL.md"}, "region": {"startLine": 313}}}]}, {"ruleId": "scanner-94c35eb93df43a40", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in cli-tool/components/skills/security/windows-privilege-escalation/SKILL.md:341"}, "properties": {"repobilityId": "d82e7e452ae35597", "scanner": "scanner-primary", "fingerprint": "94c35eb93df43a40", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/windows-privilege-escalation/SKILL.md"}, "region": {"startLine": 341}}}]}, {"ruleId": "scanner-23b82a59221fe52c", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/security/sql-injection-testing/SKILL.md"}, "properties": {"repobilityId": "be18272e30f4c1aa", "scanner": "scanner-primary", "fingerprint": "23b82a59221fe52c", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/sql-injection-testing/SKILL.md"}, "region": {"startLine": 212}}}]}, {"ruleId": "scanner-23b82a59221fe52c", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/security/sql-injection-testing/SKILL.md"}, "properties": {"repobilityId": "be18272e30f4c1aa", "scanner": "scanner-primary", "fingerprint": "23b82a59221fe52c", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/sql-injection-testing/SKILL.md"}, "region": {"startLine": 404}}}]}, {"ruleId": "scanner-23b82a59221fe52c", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/security/sql-injection-testing/SKILL.md"}, "properties": {"repobilityId": "be18272e30f4c1aa", "scanner": "scanner-primary", "fingerprint": "23b82a59221fe52c", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/sql-injection-testing/SKILL.md"}, "region": {"startLine": 415}}}]}, {"ruleId": "scanner-4c559689fb0e7214", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/security/html-injection-testing/SKILL.md:427"}, "properties": {"repobilityId": "09e01effe9114239", "scanner": "scanner-primary", "fingerprint": "4c559689fb0e7214", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/html-injection-testing/SKILL.md"}, "region": {"startLine": 427}}}]}, {"ruleId": "scanner-9059488aedf3195d", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/scientific/perplexity-search/SKILL.md"}, "properties": {"repobilityId": "f3dfc4addaf064f8", "scanner": "scanner-primary", "fingerprint": "9059488aedf3195d", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/perplexity-search/SKILL.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-9059488aedf3195d", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/scientific/perplexity-search/SKILL.md"}, "properties": {"repobilityId": "f3dfc4addaf064f8", "scanner": "scanner-primary", "fingerprint": "9059488aedf3195d", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/perplexity-search/SKILL.md"}, "region": {"startLine": 265}}}]}, {"ruleId": "scanner-8bc0327ff7e36b8c", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in cli-tool/components/skills/scientific/ena-database/SKILL.md:70"}, "properties": {"repobilityId": "5d2610e27a651efb", "scanner": "scanner-primary", "fingerprint": "8bc0327ff7e36b8c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/ena-database/SKILL.md"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-ff99b8ad209cd0a5", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/scientific/markitdown/README.md"}, "properties": {"repobilityId": "c9f0c90af9d36aef", "scanner": "scanner-primary", "fingerprint": "ff99b8ad209cd0a5", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/markitdown/README.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-afe6a09218a0ea57", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/scientific/markitdown/SKILL.md"}, "properties": {"repobilityId": "b0fd877f1ae74827", "scanner": "scanner-primary", "fingerprint": "afe6a09218a0ea57", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/markitdown/SKILL.md"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-afe6a09218a0ea57", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/scientific/markitdown/SKILL.md"}, "properties": {"repobilityId": "b0fd877f1ae74827", "scanner": "scanner-primary", "fingerprint": "afe6a09218a0ea57", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/markitdown/SKILL.md"}, "region": {"startLine": 258}}}]}, {"ruleId": "scanner-afe6a09218a0ea57", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/scientific/markitdown/SKILL.md"}, "properties": {"repobilityId": "b0fd877f1ae74827", "scanner": "scanner-primary", "fingerprint": "afe6a09218a0ea57", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/markitdown/SKILL.md"}, "region": {"startLine": 415}}}]}, {"ruleId": "scanner-6dc4fc8f979ea5e2", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/scientific/research-lookup/research_lookup.py"}, "properties": {"repobilityId": "8598a8bb24602299", "scanner": "scanner-primary", "fingerprint": "6dc4fc8f979ea5e2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/research-lookup/research_lookup.py"}, "region": {"startLine": 333}}}]}, {"ruleId": "scanner-f1942da9846aa4e6", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/scientific/research-lookup/lookup.py"}, "properties": {"repobilityId": "7a143d43a7d7c648", "scanner": "scanner-primary", "fingerprint": "f1942da9846aa4e6", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/research-lookup/lookup.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-da379be56648bad2", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/scientific/research-lookup/scripts/research_lookup.py"}, "properties": {"repobilityId": "73d529b31f8e19f9", "scanner": "scanner-primary", "fingerprint": "da379be56648bad2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/research-lookup/scripts/research_lookup.py"}, "region": {"startLine": 333}}}]}, {"ruleId": "scanner-a0e9fa198bae91a7", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in cli-tool/components/skills/scientific/plotly/SKILL.md:246"}, "properties": {"repobilityId": "62cd99b2d0c517fa", "scanner": "scanner-primary", "fingerprint": "a0e9fa198bae91a7", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/plotly/SKILL.md"}, "region": {"startLine": 246}}}]}, {"ruleId": "scanner-e8fb36134dc99c8e", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/scientific/brenda-database/SKILL.md"}, "properties": {"repobilityId": "f4adae1fba2efbcd", "scanner": "scanner-primary", "fingerprint": "e8fb36134dc99c8e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/brenda-database/SKILL.md"}, "region": {"startLine": 311}}}]}, {"ruleId": "scanner-7db6c05381d395e9", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in cli-tool/components/skills/scientific/alphafold-database/SKILL.md:245"}, "properties": {"repobilityId": "de0321bc2fe26fd0", "scanner": "scanner-primary", "fingerprint": "7db6c05381d395e9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/alphafold-database/SKILL.md"}, "region": {"startLine": 245}}}]}, {"ruleId": "scanner-2d47908037a274ed", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in cli-tool/components/skills/scientific/scikit-bio/SKILL.md:282"}, "properties": {"repobilityId": "f1422f29110d849e", "scanner": "scanner-primary", "fingerprint": "2d47908037a274ed", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/scikit-bio/SKILL.md"}, "region": {"startLine": 282}}}]}, {"ruleId": "scanner-1ed2ee18cea7ddfd", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in cli-tool/components/skills/utilities/playwright-skill/run.js:15"}, "properties": {"repobilityId": "edd09dbdf465bb3f", "scanner": "scanner-primary", "fingerprint": "1ed2ee18cea7ddfd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/utilities/playwright-skill/run.js"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-aa37d709a92f7bff", "level": "error", "message": {"text": "Possible secret in cli-tool/components/skills/utilities/playwright-skill/lib/helpers.js"}, "properties": {"repobilityId": "4081412bfe6eb406", "scanner": "scanner-primary", "fingerprint": "aa37d709a92f7bff", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/utilities/playwright-skill/lib/helpers.js"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-2865f82e4ff5e2be", "level": "error", "message": {"text": "Insecure pattern 'chmod_777' in cli-tool/components/skills/utilities/network-101/SKILL.md:174"}, "properties": {"repobilityId": "8e2abebb303e4691", "scanner": "scanner-primary", "fingerprint": "2865f82e4ff5e2be", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "chmod_777"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/utilities/network-101/SKILL.md"}, "region": {"startLine": 174}}}]}, {"ruleId": "scanner-bad0c0a9de15cac8", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cli-tool/components/skills/utilities/browser-extension-builder/SKILL.md:132"}, "properties": {"repobilityId": "e965d1040b4fa0f8", "scanner": "scanner-primary", "fingerprint": "bad0c0a9de15cac8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/utilities/browser-extension-builder/SKILL.md"}, "region": {"startLine": 132}}}]}, {"ruleId": "scanner-2c0120bd2a7bd572", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in cli-tool/components/skills/business-marketing/schema-markup/SKILL.md:542"}, "properties": {"repobilityId": "333073b88b1b8171", "scanner": "scanner-primary", "fingerprint": "2c0120bd2a7bd572", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/business-marketing/schema-markup/SKILL.md"}, "region": {"startLine": 542}}}]}, {"ruleId": "scanner-3b6a6efc58979476", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in cli-tool/components/skills/workflow-automation/github-workflow-automation/SKILL.md:559"}, "properties": {"repobilityId": "a9da952936feefd6", "scanner": "scanner-primary", "fingerprint": "3b6a6efc58979476", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/workflow-automation/github-workflow-automation/SKILL.md"}, "region": {"startLine": 559}}}]}, {"ruleId": "scanner-7e24be14b10d0539", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in cli-tool/components/skills/pocketbase/pb-deploy/SKILL.md:176"}, "properties": {"repobilityId": "47e171bbd3d0c521", "scanner": "scanner-primary", "fingerprint": "7e24be14b10d0539", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/pocketbase/pb-deploy/SKILL.md"}, "region": {"startLine": 176}}}]}, {"ruleId": "scanner-cd3725fe6c8d82e8", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/web-development/chrome-extension-developer/SKILL.md:77"}, "properties": {"repobilityId": "de70d1cac042c2bc", "scanner": "scanner-primary", "fingerprint": "cd3725fe6c8d82e8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/chrome-extension-developer/SKILL.md"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-6acaf77dcd28b51f", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in cli-tool/components/skills/web-development/electron-development/SKILL.md:298"}, "properties": {"repobilityId": "44f327938d8b5b60", "scanner": "scanner-primary", "fingerprint": "6acaf77dcd28b51f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/electron-development/SKILL.md"}, "region": {"startLine": 298}}}]}, {"ruleId": "scanner-5dff8b9fe4f8239a", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in cli-tool/components/skills/web-development/electron-development/SKILL.md:298"}, "properties": {"repobilityId": "0bc1ee5335d7a4ba", "scanner": "scanner-primary", "fingerprint": "5dff8b9fe4f8239a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/electron-development/SKILL.md"}, "region": {"startLine": 298}}}]}, {"ruleId": "scanner-5dc3f8a48dac7c1d", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cli-tool/.claude/sandbox/cloudflare/src/index.ts:38"}, "properties": {"repobilityId": "94780c9ee45297be", "scanner": "scanner-primary", "fingerprint": "5dc3f8a48dac7c1d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/.claude/sandbox/cloudflare/src/index.ts"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-b474f5fc9843d153", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/sandbox-interface.html:1023"}, "properties": {"repobilityId": "e0f0e2ef04fe738b", "scanner": "scanner-primary", "fingerprint": "b474f5fc9843d153", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/sandbox-interface.html"}, "region": {"startLine": 1023}}}]}, {"ruleId": "scanner-913629d11d5f41db", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/download-stats.html:376"}, "properties": {"repobilityId": "c82d3abedb3a807a", "scanner": "scanner-primary", "fingerprint": "913629d11d5f41db", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/download-stats.html"}, "region": {"startLine": 376}}}]}, {"ruleId": "scanner-9bf8bbd2f16b234d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/jobs.html:827"}, "properties": {"repobilityId": "b01f0111caa22161", "scanner": "scanner-primary", "fingerprint": "9bf8bbd2f16b234d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/jobs.html"}, "region": {"startLine": 827}}}]}, {"ruleId": "scanner-3a87685159bb0508", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/index-events.js:312"}, "properties": {"repobilityId": "ba9842fd9ca7503d", "scanner": "scanner-primary", "fingerprint": "3a87685159bb0508", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/index-events.js"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-0f2165c88796461f", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in docs/js/index-events.js:1264"}, "properties": {"repobilityId": "13db06124af0b11a", "scanner": "scanner-primary", "fingerprint": "0f2165c88796461f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/index-events.js"}, "region": {"startLine": 1264}}}]}, {"ruleId": "scanner-4b842f3ceeb55555", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/trending.js:99"}, "properties": {"repobilityId": "b86e79346c803e01", "scanner": "scanner-primary", "fingerprint": "4b842f3ceeb55555", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/trending.js"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-ea8855c6be07d244", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/workflows-events.js:105"}, "properties": {"repobilityId": "0fe9a428a0c22593", "scanner": "scanner-primary", "fingerprint": "ea8855c6be07d244", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/workflows-events.js"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-24549669b4de425d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/script.js:43"}, "properties": {"repobilityId": "8517e35cc6cf73cb", "scanner": "scanner-primary", "fingerprint": "24549669b4de425d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/script.js"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-fee8b009e0323883", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in docs/js/script.js:318"}, "properties": {"repobilityId": "88a8ec42036f51a1", "scanner": "scanner-primary", "fingerprint": "fee8b009e0323883", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/script.js"}, "region": {"startLine": 318}}}]}, {"ruleId": "scanner-b260c1df8fbc376d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/component-page.js:332"}, "properties": {"repobilityId": "9c9714e85fb7db1e", "scanner": "scanner-primary", "fingerprint": "b260c1df8fbc376d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/component-page.js"}, "region": {"startLine": 332}}}]}, {"ruleId": "scanner-de74fb820be5b1aa", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/plugin-page.js:139"}, "properties": {"repobilityId": "768e9f59d01d61e4", "scanner": "scanner-primary", "fingerprint": "de74fb820be5b1aa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/plugin-page.js"}, "region": {"startLine": 139}}}]}, {"ruleId": "scanner-394badc3bf1eec31", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/search-functionality.js:441"}, "properties": {"repobilityId": "73d2d5dd200d39c9", "scanner": "scanner-primary", "fingerprint": "394badc3bf1eec31", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/search-functionality.js"}, "region": {"startLine": 441}}}]}, {"ruleId": "scanner-e1c50860a466489e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/cart-manager.js:295"}, "properties": {"repobilityId": "5995699ddd8fac30", "scanner": "scanner-primary", "fingerprint": "e1c50860a466489e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/cart-manager.js"}, "region": {"startLine": 295}}}]}, {"ruleId": "scanner-5b86528b7b0d73e2", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/modal-helpers.js:233"}, "properties": {"repobilityId": "a101d854a4bb459a", "scanner": "scanner-primary", "fingerprint": "5b86528b7b0d73e2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/modal-helpers.js"}, "region": {"startLine": 233}}}]}, {"ruleId": "scanner-88f7c8c86b758846", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in docs/js/modal-helpers.js:14"}, "properties": {"repobilityId": "6da7bff6aa45bc65", "scanner": "scanner-primary", "fingerprint": "88f7c8c86b758846", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/modal-helpers.js"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-be4bc145d569c34b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/stack-router.js:292"}, "properties": {"repobilityId": "b7309a6a3cc5831b", "scanner": "scanner-primary", "fingerprint": "be4bc145d569c34b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/stack-router.js"}, "region": {"startLine": 292}}}]}, {"ruleId": "scanner-93dbc494153fc412", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in docs/js/stack-router.js:138"}, "properties": {"repobilityId": "ed9524d1b6b1143b", "scanner": "scanner-primary", "fingerprint": "93dbc494153fc412", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/stack-router.js"}, "region": {"startLine": 138}}}]}, {"ruleId": "scanner-3a77a3c1379e0c40", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/js/workflows.js:125"}, "properties": {"repobilityId": "61e9de459ced50f3", "scanner": "scanner-primary", "fingerprint": "3a77a3c1379e0c40", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/workflows.js"}, "region": {"startLine": 125}}}]}, {"ruleId": "scanner-314932c8cdc299c3", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in docs/js/workflows.js:492"}, "properties": {"repobilityId": "bd2e16c774376484", "scanner": "scanner-primary", "fingerprint": "314932c8cdc299c3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/workflows.js"}, "region": {"startLine": 492}}}]}, {"ruleId": "scanner-16622721f38ae873", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in docs/js/event-tracker.js:24"}, "properties": {"repobilityId": "8cbde5e0087535d6", "scanner": "scanner-primary", "fingerprint": "16622721f38ae873", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/js/event-tracker.js"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-052cd34384498ab3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/claude-prs/index.html:433"}, "properties": {"repobilityId": "05cb59446d920484", "scanner": "scanner-primary", "fingerprint": "052cd34384498ab3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/claude-prs/index.html"}, "region": {"startLine": 433}}}]}, {"ruleId": "scanner-10a1467ace0c3b1a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/featured/neon-instagres/index.html:529"}, "properties": {"repobilityId": "217c98bf625066b2", "scanner": "scanner-primary", "fingerprint": "10a1467ace0c3b1a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/featured/neon-instagres/index.html"}, "region": {"startLine": 529}}}]}, {"ruleId": "scanner-53ded6fd3d928f0f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/nextjs-vercel-claude-code-integration/index.html:715"}, "properties": {"repobilityId": "c31394d08fa3b4d8", "scanner": "scanner-primary", "fingerprint": "53ded6fd3d928f0f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/nextjs-vercel-claude-code-integration/index.html"}, "region": {"startLine": 715}}}]}, {"ruleId": "scanner-1dbda48e4dab1980", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/heygen-best-practices-skill/index.html:579"}, "properties": {"repobilityId": "010cfb6fd4673b32", "scanner": "scanner-primary", "fingerprint": "1dbda48e4dab1980", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/heygen-best-practices-skill/index.html"}, "region": {"startLine": 579}}}]}, {"ruleId": "scanner-b0ee947d97c06467", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/js/blog-loader.js:241"}, "properties": {"repobilityId": "5e74c3b8c1d26d55", "scanner": "scanner-primary", "fingerprint": "b0ee947d97c06467", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/js/blog-loader.js"}, "region": {"startLine": 241}}}]}, {"ruleId": "scanner-970fa6b86fda5ac1", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/security-hooks-secrets/index.html:541"}, "properties": {"repobilityId": "ea4321b268e211fb", "scanner": "scanner-primary", "fingerprint": "970fa6b86fda5ac1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/security-hooks-secrets/index.html"}, "region": {"startLine": 541}}}]}, {"ruleId": "scanner-25248d77bbe82a50", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/frontend-developer-agent/index.html:393"}, "properties": {"repobilityId": "fcc07de382a5c0b3", "scanner": "scanner-primary", "fingerprint": "25248d77bbe82a50", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/frontend-developer-agent/index.html"}, "region": {"startLine": 393}}}]}, {"ruleId": "scanner-e407cfcb0d6ec01d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/neon-open-source-program/index.html:590"}, "properties": {"repobilityId": "b72ea2d630176975", "scanner": "scanner-primary", "fingerprint": "e407cfcb0d6ec01d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/neon-open-source-program/index.html"}, "region": {"startLine": 590}}}]}, {"ruleId": "scanner-44ff3242b9ad9f8d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/simple-notifications-hook/index.html:456"}, "properties": {"repobilityId": "24349180ba8da3f1", "scanner": "scanner-primary", "fingerprint": "44ff3242b9ad9f8d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/simple-notifications-hook/index.html"}, "region": {"startLine": 456}}}]}, {"ruleId": "scanner-f7bf79eb96bcfd62", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/context7-mcp/index.html:359"}, "properties": {"repobilityId": "5c452dde760707be", "scanner": "scanner-primary", "fingerprint": "f7bf79eb96bcfd62", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/context7-mcp/index.html"}, "region": {"startLine": 359}}}]}, {"ruleId": "scanner-181cfe2a1f291308", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/vercel-deployment-monitor-statusline/index.html:493"}, "properties": {"repobilityId": "c3e61f859266a422", "scanner": "scanner-primary", "fingerprint": "181cfe2a1f291308", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/vercel-deployment-monitor-statusline/index.html"}, "region": {"startLine": 493}}}]}, {"ruleId": "scanner-7fa46d407068d7f2", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/code-reviewer-agent/index.html:395"}, "properties": {"repobilityId": "4f0072509fb2cd72", "scanner": "scanner-primary", "fingerprint": "7fa46d407068d7f2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/code-reviewer-agent/index.html"}, "region": {"startLine": 395}}}]}, {"ruleId": "scanner-eb4e9e16ba7e9c30", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/supabase-claude-code-integration/index.html:509"}, "properties": {"repobilityId": "f0e926c517c94e24", "scanner": "scanner-primary", "fingerprint": "eb4e9e16ba7e9c30", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/supabase-claude-code-integration/index.html"}, "region": {"startLine": 509}}}]}, {"ruleId": "scanner-7692c66ebb92f106", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/react-best-practices-skill/index.html:515"}, "properties": {"repobilityId": "1aeb26dacd983262", "scanner": "scanner-primary", "fingerprint": "7692c66ebb92f106", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/react-best-practices-skill/index.html"}, "region": {"startLine": 515}}}]}, {"ruleId": "scanner-59f154fa6c24104f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/skills-creator/index.html:413"}, "properties": {"repobilityId": "c4ce18cceb2db8d8", "scanner": "scanner-primary", "fingerprint": "59f154fa6c24104f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/skills-creator/index.html"}, "region": {"startLine": 413}}}]}, {"ruleId": "scanner-de6b59c95e2227e0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/hackathon-ai-strategist-agent/index.html:471"}, "properties": {"repobilityId": "6dcd36afec7f533b", "scanner": "scanner-primary", "fingerprint": "de6b59c95e2227e0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/hackathon-ai-strategist-agent/index.html"}, "region": {"startLine": 471}}}]}, {"ruleId": "scanner-429fd40998cb1bc3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/blog/e2b-claude-code-sandbox/index.html:535"}, "properties": {"repobilityId": "e65b5497c1465bac", "scanner": "scanner-primary", "fingerprint": "429fd40998cb1bc3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/blog/e2b-claude-code-sandbox/index.html"}, "region": {"startLine": 535}}}]}, {"ruleId": "scanner-71b0063fd42cc550", "level": "error", "message": {"text": "Insecure pattern 'private_key_in_repo' in cloudflare-workers/pulse/index.js:572"}, "properties": {"repobilityId": "abb8f1214bd33e3e", "scanner": "scanner-primary", "fingerprint": "71b0063fd42cc550", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["owasp", "private_key_in_repo"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudflare-workers/pulse/index.js"}, "region": {"startLine": 572}}}]}, {"ruleId": "scanner-fa7c5fb55eecc55b", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cloudflare-workers/pulse/index.js:775"}, "properties": {"repobilityId": "538d1082ddc78b99", "scanner": "scanner-primary", "fingerprint": "fa7c5fb55eecc55b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudflare-workers/pulse/index.js"}, "region": {"startLine": 775}}}]}, {"ruleId": "scanner-4b7044f2d0fbbf62", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in cloudflare-workers/docs-monitor/index.js:128"}, "properties": {"repobilityId": "ccb574dd2bc00ffc", "scanner": "scanner-primary", "fingerprint": "4b7044f2d0fbbf62", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cloudflare-workers/docs-monitor/index.js"}, "region": {"startLine": 128}}}]}, {"ruleId": "scanner-99da449c1430dff1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a04030c40073d843", "scanner": "scanner-primary", "fingerprint": "99da449c1430dff1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/update-json-data.yml"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-99da449c1430dff1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "aa6fec1990ed0021", "scanner": "scanner-primary", "fingerprint": "99da449c1430dff1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/update-json-data.yml"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-99da449c1430dff1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "61be9c0b3478878d", "scanner": "scanner-primary", "fingerprint": "99da449c1430dff1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/update-json-data.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-5fa6cb9fb693ed55", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "414819f53edd5e58", "scanner": "scanner-primary", "fingerprint": "5fa6cb9fb693ed55", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/update-json-data.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5046a44f80cc8ccd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3540c1e1ef800062", "scanner": "scanner-primary", "fingerprint": "5046a44f80cc8ccd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill-security-scan-all.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-5046a44f80cc8ccd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f02aa613435ff685", "scanner": "scanner-primary", "fingerprint": "5046a44f80cc8ccd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill-security-scan-all.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-5046a44f80cc8ccd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9ed572e54bc3850f", "scanner": "scanner-primary", "fingerprint": "5046a44f80cc8ccd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill-security-scan-all.yml"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-5046a44f80cc8ccd", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e102779f49b58b71", "scanner": "scanner-primary", "fingerprint": "5046a44f80cc8ccd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill-security-scan-all.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-c1a3378dc0f6b2a7", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "93bf0b8a82158a33", "scanner": "scanner-primary", "fingerprint": "c1a3378dc0f6b2a7", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill-security-scan.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-c1a3378dc0f6b2a7", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b3734886df6a4cf3", "scanner": "scanner-primary", "fingerprint": "c1a3378dc0f6b2a7", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill-security-scan.yml"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-c1a3378dc0f6b2a7", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "aa39434900267366", "scanner": "scanner-primary", "fingerprint": "c1a3378dc0f6b2a7", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill-security-scan.yml"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-c1a3378dc0f6b2a7", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ec7565e0f073e109", "scanner": "scanner-primary", "fingerprint": "c1a3378dc0f6b2a7", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill-security-scan.yml"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-c1a3378dc0f6b2a7", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8a6fe78c5009efef", "scanner": "scanner-primary", "fingerprint": "c1a3378dc0f6b2a7", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/skill-security-scan.yml"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-f46a4bdda8dacf33", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f1c6f3b19c10e265", "scanner": "scanner-primary", "fingerprint": "f46a4bdda8dacf33", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/component-security-validation.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-f46a4bdda8dacf33", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "782a0ecca4f5bcb4", "scanner": "scanner-primary", "fingerprint": "f46a4bdda8dacf33", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/component-security-validation.yml"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-f46a4bdda8dacf33", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "084d76afdbfa41fc", "scanner": "scanner-primary", "fingerprint": "f46a4bdda8dacf33", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/component-security-validation.yml"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-f46a4bdda8dacf33", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4aa6cdda917a04fe", "scanner": "scanner-primary", "fingerprint": "f46a4bdda8dacf33", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/component-security-validation.yml"}, "region": {"startLine": 65}}}]}, {"ruleId": "scanner-24431337ae92e7f1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7d097c2ade215a1a", "scanner": "scanner-primary", "fingerprint": "24431337ae92e7f1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/component-pr-welcome.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-23417bdc5c7219f0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a6cf51c249a241e7", "scanner": "scanner-primary", "fingerprint": "23417bdc5c7219f0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish-package.yml"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-23417bdc5c7219f0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cb47cb271751d629", "scanner": "scanner-primary", "fingerprint": "23417bdc5c7219f0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish-package.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-73014c508f4d5a3d", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "71c9a1605eadd187", "scanner": "scanner-primary", "fingerprint": "73014c508f4d5a3d", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish-package.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f19bbf3e57b95ef", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "81913145c87389e3", "scanner": "scanner-primary", "fingerprint": "2f19bbf3e57b95ef", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/.github/workflows/claude-code-review.yml"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-2f19bbf3e57b95ef", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8ae725e30adb26c4", "scanner": "scanner-primary", "fingerprint": "2f19bbf3e57b95ef", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/.github/workflows/claude-code-review.yml"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-d29fb6921eb6f3fd", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "2b05a76a9c544b0d", "scanner": "scanner-primary", "fingerprint": "d29fb6921eb6f3fd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/.github/workflows/claude-code-review.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5075ed2dbf9e1f38", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6c1188c9a1863ac2", "scanner": "scanner-primary", "fingerprint": "5075ed2dbf9e1f38", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/.github/workflows/release.yml"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-5e935219e9111ef4", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "d5d15b4d7f107cc8", "scanner": "scanner-primary", "fingerprint": "5e935219e9111ef4", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/.github/workflows/release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12d7aaab43370f39", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d8f43900de268846", "scanner": "scanner-primary", "fingerprint": "12d7aaab43370f39", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/.github/workflows/claude.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-12d7aaab43370f39", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "66401e78196c0f52", "scanner": "scanner-primary", "fingerprint": "12d7aaab43370f39", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/.github/workflows/claude.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-bdf437a13b7cc54e", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "e859f67c1425af88", "scanner": "scanner-primary", "fingerprint": "bdf437a13b7cc54e", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/.github/workflows/claude.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-011ae81365fcf278", "level": "note", "message": {"text": "Very large file: dashboard/src/components/MyComponentsView.tsx (1096 lines)"}, "properties": {"repobilityId": "57860a10ff8e61b4", "scanner": "scanner-primary", "fingerprint": "011ae81365fcf278", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-cd464002df67af54", "level": "note", "message": {"text": "Very large file: cli-tool/src/analytics.js (2403 lines)"}, "properties": {"repobilityId": "5a83d012b2040bf7", "scanner": "scanner-primary", "fingerprint": "cd464002df67af54", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b5fedf3763436810", "level": "note", "message": {"text": "Very large file: cli-tool/src/index.js (3458 lines)"}, "properties": {"repobilityId": "8646d60ebd03ce12", "scanner": "scanner-primary", "fingerprint": "b5fedf3763436810", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4d49cd39b94835ee", "level": "note", "message": {"text": "Very large file: cli-tool/src/analytics-web/components/DashboardPage.js (2323 lines)"}, "properties": {"repobilityId": "fb936babf70b325d", "scanner": "scanner-primary", "fingerprint": "4d49cd39b94835ee", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e389bd8221fc70d6", "level": "note", "message": {"text": "Very large file: cli-tool/components/hooks/monitoring/context-timeline.py (1224 lines)"}, "properties": {"repobilityId": "b141da3af8c65b0d", "scanner": "scanner-primary", "fingerprint": "e389bd8221fc70d6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-867854c9b619f20c", "level": "note", "message": {"text": "Very large file: cli-tool/components/skills/ai-research/loki-mode/benchmarks/run-benchmarks.sh (1948 lines)"}, "properties": {"repobilityId": "e6e01faa7dacff0d", "scanner": "scanner-primary", "fingerprint": "867854c9b619f20c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-433e46b53f0448a7", "level": "note", "message": {"text": "Very large file: cli-tool/components/skills/ai-research/loki-mode/autonomy/run.sh (1991 lines)"}, "properties": {"repobilityId": "397e020e3c41317e", "scanner": "scanner-primary", "fingerprint": "433e46b53f0448a7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-34993ab32aa24977", "level": "note", "message": {"text": "Very large file: cli-tool/components/skills/scientific/document-skills/docx/scripts/document.py (1276 lines)"}, "properties": {"repobilityId": "60c6d9391a16ad7f", "scanner": "scanner-primary", "fingerprint": "34993ab32aa24977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-872598a3929c508b", "level": "note", "message": {"text": "Very large file: cli-tool/components/skills/document-processing/docx/scripts/document.py (1276 lines)"}, "properties": {"repobilityId": "ce71a12f4fd72b86", "scanner": "scanner-primary", "fingerprint": "872598a3929c508b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c877ca0ef8071762", "level": "note", "message": {"text": "Very large file: docs/js/index-events.js (2018 lines)"}, "properties": {"repobilityId": "94b5957bee4ad470", "scanner": "scanner-primary", "fingerprint": "c877ca0ef8071762", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-691db2c3b1841f4d", "level": "note", "message": {"text": "Very large file: docs/js/script.js (2194 lines)"}, "properties": {"repobilityId": "48b33589e774e9c8", "scanner": "scanner-primary", "fingerprint": "691db2c3b1841f4d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-69b7ca2edecca42c", "level": "note", "message": {"text": "Very large file: docs/js/component-page.js (1915 lines)"}, "properties": {"repobilityId": "1b610e1db8493a79", "scanner": "scanner-primary", "fingerprint": "69b7ca2edecca42c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-f06aa76fffc294bf", "level": "note", "message": {"text": "103 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "f06aa76fffc294bf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-f0e0c4bdf17fcc69", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cli-tool/components/sandbox/cloudflare/package.json"}, "properties": {"repobilityId": "080cdeda879632c9", "scanner": "scanner-primary", "fingerprint": "f0e0c4bdf17fcc69", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/sandbox/cloudflare/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5f4c9de92ec32a81", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cli-tool/components/sandbox/docker/package.json"}, "properties": {"repobilityId": "c8b2635368fd644c", "scanner": "scanner-primary", "fingerprint": "5f4c9de92ec32a81", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/sandbox/docker/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b42b51b968798216", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cli-tool/components/skills/design-to-code/scripts/package.json"}, "properties": {"repobilityId": "39f12d183b252ea8", "scanner": "scanner-primary", "fingerprint": "b42b51b968798216", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/design-to-code/scripts/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-958907f0c9e5e1b4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cli-tool/components/skills/utilities/playwright-skill/package.json"}, "properties": {"repobilityId": "493cbd7c66c6c1e1", "scanner": "scanner-primary", "fingerprint": "958907f0c9e5e1b4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/utilities/playwright-skill/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f8c7c582cf7f7a5b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cli-tool/components/skills/web-development/roier-seo/scripts/package.json"}, "properties": {"repobilityId": "bb9e66c6cd9d2f89", "scanner": "scanner-primary", "fingerprint": "f8c7c582cf7f7a5b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/roier-seo/scripts/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8f177536cd665a8a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: cli-tool/.claude/sandbox/cloudflare/package.json"}, "properties": {"repobilityId": "cf3e1670ce518ea5", "scanner": "scanner-primary", "fingerprint": "8f177536cd665a8a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/.claude/sandbox/cloudflare/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "661926f337bbba5b", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "a809b37a50a2be08", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-9d79c4077342a7d0", "level": "warning", "message": {"text": "Runtime service client appears to use placeholder configuration"}, "properties": {"repobilityId": "a63b7befe2e60b8d", "scanner": "scanner-primary", "fingerprint": "9d79c4077342a7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "runtime-config", "service-client", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "261f1168281c3043", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "dd7c8f6a3a2aeda6", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-17d866d91a7c451e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: CLAUDE.md"}, "properties": {"repobilityId": "ccce5984e58a48f0", "scanner": "scanner-primary", "fingerprint": "17d866d91a7c451e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 367}}}]}, {"ruleId": "scanner-24f2ea4bd14badc1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: CLAUDE.md"}, "properties": {"repobilityId": "0f6049734704e537", "scanner": "scanner-primary", "fingerprint": "24f2ea4bd14badc1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-cc55229a7a3c078d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .mcp.json"}, "properties": {"repobilityId": "51942fb3d5b8b5b4", "scanner": "scanner-primary", "fingerprint": "cc55229a7a3c078d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0d42544b581e05fc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/rust/.mcp.json"}, "properties": {"repobilityId": "825dfd48f8e912e7", "scanner": "scanner-primary", "fingerprint": "0d42544b581e05fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/rust/.mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78cff6aeb0619944", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/javascript-typescript/.mcp.json"}, "properties": {"repobilityId": "8612be71afb05770", "scanner": "scanner-primary", "fingerprint": "78cff6aeb0619944", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/javascript-typescript/.mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-45cc1d2bb653a387", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/javascript-typescript/examples/vue-app/.claude/commands/components.md"}, "properties": {"repobilityId": "ee85182b2f348608", "scanner": "scanner-primary", "fingerprint": "45cc1d2bb653a387", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/javascript-typescript/examples/vue-app/.claude/commands/components.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef4d033feef8d47f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/.mcp.json"}, "properties": {"repobilityId": "9ad6cb3e7768d732", "scanner": "scanner-primary", "fingerprint": "ef4d033feef8d47f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/python/.mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8ea0120aad84aed0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/flask-app/.claude/commands/app-factory.md"}, "properties": {"repobilityId": "c85b0d9e84b426ec", "scanner": "scanner-primary", "fingerprint": "8ea0120aad84aed0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/python/examples/flask-app/.claude/commands/app-factory.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a8d8683617868284", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/flask-app/.claude/commands/flask-route.md"}, "properties": {"repobilityId": "ea2cb4251e12d22f", "scanner": "scanner-primary", "fingerprint": "a8d8683617868284", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/python/examples/flask-app/.claude/commands/flask-route.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a448a399b17c8a1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/flask-app/.claude/commands/blueprint.md"}, "properties": {"repobilityId": "873260d49cdd5bed", "scanner": "scanner-primary", "fingerprint": "3a448a399b17c8a1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/python/examples/flask-app/.claude/commands/blueprint.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38d819cb667e788c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/django-app/.claude/commands/admin.md"}, "properties": {"repobilityId": "8cbb21cf7d25a601", "scanner": "scanner-primary", "fingerprint": "38d819cb667e788c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/python/examples/django-app/.claude/commands/admin.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b007338ad7a394ff", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/django-app/.claude/commands/views.md"}, "properties": {"repobilityId": "d24f08e516a57418", "scanner": "scanner-primary", "fingerprint": "b007338ad7a394ff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/python/examples/django-app/.claude/commands/views.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d7c2340cb42ce6da", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/examples/django-app/.claude/commands/django-model.md"}, "properties": {"repobilityId": "33346ef58c3a3626", "scanner": "scanner-primary", "fingerprint": "d7c2340cb42ce6da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/python/examples/django-app/.claude/commands/django-model.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c3ad8261fce9342", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/.claude/settings.json"}, "properties": {"repobilityId": "0f4ce1b156fe6ef5", "scanner": "scanner-primary", "fingerprint": "9c3ad8261fce9342", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/python/.claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8ea050a95991694", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/python/.claude/commands/lint.md"}, "properties": {"repobilityId": "26309757779c9889", "scanner": "scanner-primary", "fingerprint": "b8ea050a95991694", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/python/.claude/commands/lint.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38ce187695c4fd46", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/ruby/.mcp.json"}, "properties": {"repobilityId": "a2fa8c0a4a9e202a", "scanner": "scanner-primary", "fingerprint": "38ce187695c4fd46", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/ruby/.mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a45c4db8d49fc596", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/ruby/examples/rails-app/.claude/commands/authentication.md"}, "properties": {"repobilityId": "da1d562bbf86c8c4", "scanner": "scanner-primary", "fingerprint": "a45c4db8d49fc596", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/ruby/examples/rails-app/.claude/commands/authentication.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d564dadd60903d9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/go/.mcp.json"}, "properties": {"repobilityId": "2bfec0bd0d4dc2d6", "scanner": "scanner-primary", "fingerprint": "1d564dadd60903d9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/go/.mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-819ba14ea5f626fd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/templates/common/.mcp.json"}, "properties": {"repobilityId": "81cd0d9f0d190f50", "scanner": "scanner-primary", "fingerprint": "819ba14ea5f626fd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/templates/common/.mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-311d44aa9184f54a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/claude-code-sessions/SKILL.md"}, "properties": {"repobilityId": "71084817a01b619e", "scanner": "scanner-primary", "fingerprint": "311d44aa9184f54a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/claude-code-sessions/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-516c2eebab32e521", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/productivity/nowait/SKILL.md"}, "properties": {"repobilityId": "4624ff4fcad1f2a9", "scanner": "scanner-primary", "fingerprint": "516c2eebab32e521", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/nowait/SKILL.md"}, "region": {"startLine": 100}}}]}, {"ruleId": "scanner-14c286e4e17b765f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notion-research-documentation/SKILL.md"}, "properties": {"repobilityId": "8f30547eb78a2d5a", "scanner": "scanner-primary", "fingerprint": "14c286e4e17b765f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/notion-research-documentation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ece5816d7f6ed6d9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/productivity/notion-spec-to-implementation/SKILL.md"}, "properties": {"repobilityId": "65e4c141b7a8dc53", "scanner": "scanner-primary", "fingerprint": "ece5816d7f6ed6d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/notion-spec-to-implementation/SKILL.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-ff001f242bf9d73c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notion-spec-to-implementation/SKILL.md"}, "properties": {"repobilityId": "6e7375e37913a8ac", "scanner": "scanner-primary", "fingerprint": "ff001f242bf9d73c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/notion-spec-to-implementation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dbdc334e928fad19", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notion-knowledge-capture/SKILL.md"}, "properties": {"repobilityId": "73cfb8912f70cfe1", "scanner": "scanner-primary", "fingerprint": "dbdc334e928fad19", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/notion-knowledge-capture/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1fb2e7d809809268", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/notebooklm/SKILL.md"}, "properties": {"repobilityId": "71155c51d2a13d80", "scanner": "scanner-primary", "fingerprint": "1fb2e7d809809268", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/notebooklm/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c8e34964e4b07785", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/writing-plans/SKILL.md"}, "properties": {"repobilityId": "4a00b7426afad8b4", "scanner": "scanner-primary", "fingerprint": "c8e34964e4b07785", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/writing-plans/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8a2d9309444b59e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/meeting-insights-analyzer/SKILL.md"}, "properties": {"repobilityId": "fffd6efaa58aefb5", "scanner": "scanner-primary", "fingerprint": "b8a2d9309444b59e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/meeting-insights-analyzer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f6d6c67ab05d56c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/file-organizer/SKILL.md"}, "properties": {"repobilityId": "4b2ae3dd2c17525b", "scanner": "scanner-primary", "fingerprint": "3f6d6c67ab05d56c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/file-organizer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eeff2adcb079f9ed", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/executing-plans/SKILL.md"}, "properties": {"repobilityId": "e55010845a4d3870", "scanner": "scanner-primary", "fingerprint": "eeff2adcb079f9ed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/executing-plans/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f2ada9c2da93206", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/doc-coauthoring/SKILL.md"}, "properties": {"repobilityId": "afd29e59e620a593", "scanner": "scanner-primary", "fingerprint": "3f2ada9c2da93206", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/doc-coauthoring/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1888975eb329610", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/writing-skills/SKILL.md"}, "properties": {"repobilityId": "0c05e54df34a2bf2", "scanner": "scanner-primary", "fingerprint": "a1888975eb329610", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/writing-skills/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6d3881bb543fb03", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/address-github-comments/SKILL.md"}, "properties": {"repobilityId": "24623226c6729841", "scanner": "scanner-primary", "fingerprint": "a6d3881bb543fb03", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/address-github-comments/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-56f7431ff9733e57", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/skill-creator/SKILL.md"}, "properties": {"repobilityId": "f3f8afe9e2153e95", "scanner": "scanner-primary", "fingerprint": "56f7431ff9733e57", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/skill-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ddbe0d1fd43b8422", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/invoice-organizer/SKILL.md"}, "properties": {"repobilityId": "67c35b418256cea6", "scanner": "scanner-primary", "fingerprint": "ddbe0d1fd43b8422", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/invoice-organizer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb226d607804ba8d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/productivity/brainstorming/SKILL.md"}, "properties": {"repobilityId": "7aefd8351456ac1f", "scanner": "scanner-primary", "fingerprint": "fb226d607804ba8d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/productivity/brainstorming/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5a06b31bf760ccfc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/templates/SKILL.md"}, "properties": {"repobilityId": "057f54025b88691f", "scanner": "scanner-primary", "fingerprint": "5a06b31bf760ccfc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/railway/templates/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9cd0a9fd5e461d50", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/deploy/SKILL.md"}, "properties": {"repobilityId": "eafe32b2f5a51834", "scanner": "scanner-primary", "fingerprint": "9cd0a9fd5e461d50", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/railway/deploy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9a221688c927709a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/database/SKILL.md"}, "properties": {"repobilityId": "251886a817a96fc2", "scanner": "scanner-primary", "fingerprint": "9a221688c927709a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/railway/database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4b2436d6a1753216", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/railway/new/SKILL.md"}, "properties": {"repobilityId": "3331e33d696ef4b8", "scanner": "scanner-primary", "fingerprint": "4b2436d6a1753216", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/railway/new/SKILL.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-9134360ae8dc1219", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/projects/SKILL.md"}, "properties": {"repobilityId": "fab1c3f5369361f3", "scanner": "scanner-primary", "fingerprint": "9134360ae8dc1219", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/railway/projects/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f27bc49d71b07b56", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/railway/status/SKILL.md"}, "properties": {"repobilityId": "7d89b93fa3a46698", "scanner": "scanner-primary", "fingerprint": "f27bc49d71b07b56", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/railway/status/SKILL.md"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-1fc36a0f896e1434", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/railway/domain/SKILL.md"}, "properties": {"repobilityId": "53eb34b5ce411b35", "scanner": "scanner-primary", "fingerprint": "1fc36a0f896e1434", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/railway/domain/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b2774d4b1b6a1924", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/security-compliance/SKILL.md"}, "properties": {"repobilityId": "71cd664e1fa2f933", "scanner": "scanner-primary", "fingerprint": "b2774d4b1b6a1924", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/security-compliance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-41678f78b0e4fe65", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/cocoindex/SKILL.md"}, "properties": {"repobilityId": "bcd39bd3c15463ad", "scanner": "scanner-primary", "fingerprint": "41678f78b0e4fe65", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/cocoindex/SKILL.md"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-7ccf06029cdad9d0", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/prometheus-configuration/SKILL.md"}, "properties": {"repobilityId": "1a75334c1c027da6", "scanner": "scanner-primary", "fingerprint": "7ccf06029cdad9d0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/prometheus-configuration/SKILL.md"}, "region": {"startLine": 168}}}]}, {"ruleId": "scanner-e99f8b67f565fc34", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/k6-load-testing/SKILL.md"}, "properties": {"repobilityId": "9f6ca67b7170f7d8", "scanner": "scanner-primary", "fingerprint": "e99f8b67f565fc34", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/k6-load-testing/SKILL.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-d018c4c45fad02cd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/code-review-checklist/SKILL.md"}, "properties": {"repobilityId": "392a68d3f9a5fa86", "scanner": "scanner-primary", "fingerprint": "d018c4c45fad02cd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/code-review-checklist/SKILL.md"}, "region": {"startLine": 177}}}]}, {"ruleId": "scanner-bb9ed17a3ab52081", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/code-review-checklist/SKILL.md"}, "properties": {"repobilityId": "af0b995828aca452", "scanner": "scanner-primary", "fingerprint": "bb9ed17a3ab52081", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/code-review-checklist/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a4063eecdd79561", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/skill-installer/SKILL.md"}, "properties": {"repobilityId": "19b77c77a304a5b2", "scanner": "scanner-primary", "fingerprint": "2a4063eecdd79561", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-installer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ca3fa9ee333615b6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/cc-skill-clickhouse-io/SKILL.md"}, "properties": {"repobilityId": "94aa51399fa3e992", "scanner": "scanner-primary", "fingerprint": "ca3fa9ee333615b6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/cc-skill-clickhouse-io/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6d333b956b30fb64", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/testing-patterns/SKILL.md"}, "properties": {"repobilityId": "8466107a5acc5fca", "scanner": "scanner-primary", "fingerprint": "6d333b956b30fb64", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/testing-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5df3dcaeb028c5db", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/test-driven-development/SKILL.md"}, "properties": {"repobilityId": "f5a35249740741ad", "scanner": "scanner-primary", "fingerprint": "5df3dcaeb028c5db", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/test-driven-development/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9f1765300b4ca997", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/typescript-expert/SKILL.md"}, "properties": {"repobilityId": "7a17ce5b62eb8815", "scanner": "scanner-primary", "fingerprint": "9f1765300b4ca997", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/typescript-expert/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce0e237e311c236c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/cc-skill-backend-patterns/SKILL.md"}, "properties": {"repobilityId": "ee54a192c26d7f1e", "scanner": "scanner-primary", "fingerprint": "ce0e237e311c236c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/cc-skill-backend-patterns/SKILL.md"}, "region": {"startLine": 98}}}]}, {"ruleId": "scanner-4d5499ddc47b8a9e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/cc-skill-backend-patterns/SKILL.md"}, "properties": {"repobilityId": "678b73e3e277fc07", "scanner": "scanner-primary", "fingerprint": "4d5499ddc47b8a9e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/cc-skill-backend-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c77721257bdd10f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/playwright-e2e-builder/SKILL.md"}, "properties": {"repobilityId": "4f48cad58942d782", "scanner": "scanner-primary", "fingerprint": "9c77721257bdd10f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/playwright-e2e-builder/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0217b0c7920e6580", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/zapier-workflows/SKILL.md"}, "properties": {"repobilityId": "7f8083753e3737d5", "scanner": "scanner-primary", "fingerprint": "0217b0c7920e6580", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/zapier-workflows/SKILL.md"}, "region": {"startLine": 499}}}]}, {"ruleId": "scanner-49659ea6dcc150aa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/server-management/SKILL.md"}, "properties": {"repobilityId": "67a8360ec7d32aa6", "scanner": "scanner-primary", "fingerprint": "49659ea6dcc150aa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/server-management/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-952b7a97aac61378", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/swift-concurrency-expert/SKILL.md"}, "properties": {"repobilityId": "feb525fab8077fdd", "scanner": "scanner-primary", "fingerprint": "952b7a97aac61378", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/swift-concurrency-expert/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c2be83af168f1514", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/playwright/SKILL.md"}, "properties": {"repobilityId": "ef2f2cc915a72195", "scanner": "scanner-primary", "fingerprint": "c2be83af168f1514", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/playwright/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b3e98a0fcd9cfa09", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/playwright/SKILL.md"}, "properties": {"repobilityId": "cbf5776e5d236765", "scanner": "scanner-primary", "fingerprint": "b3e98a0fcd9cfa09", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/playwright/SKILL.md"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-b702d643c4e08c69", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/gke-basics/SKILL.md"}, "properties": {"repobilityId": "5346e5a5da78d0dc", "scanner": "scanner-primary", "fingerprint": "b702d643c4e08c69", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/gke-basics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a901d86c25c5bb8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/production-code-audit/SKILL.md"}, "properties": {"repobilityId": "7f91e723971b18aa", "scanner": "scanner-primary", "fingerprint": "3a901d86c25c5bb8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/production-code-audit/SKILL.md"}, "region": {"startLine": 281}}}]}, {"ruleId": "scanner-538d221f0723cd00", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/production-code-audit/SKILL.md"}, "properties": {"repobilityId": "275ebb2b66995105", "scanner": "scanner-primary", "fingerprint": "538d221f0723cd00", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/production-code-audit/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b6d30426aad8a1f4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/git-pushing/SKILL.md"}, "properties": {"repobilityId": "73bc528dac5b36c7", "scanner": "scanner-primary", "fingerprint": "b6d30426aad8a1f4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/git-pushing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c4c3504ca86c6b7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/bullmq-specialist/SKILL.md"}, "properties": {"repobilityId": "fcb83b2ab4b36c36", "scanner": "scanner-primary", "fingerprint": "8c4c3504ca86c6b7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/bullmq-specialist/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1925816f7b2a77ad", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/aws-serverless/SKILL.md"}, "properties": {"repobilityId": "003b7aff7b2b40e9", "scanner": "scanner-primary", "fingerprint": "1925816f7b2a77ad", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/aws-serverless/SKILL.md"}, "region": {"startLine": 111}}}]}, {"ruleId": "scanner-f63d1ba7ebb87d3a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/feature-design-assistant/SKILL.md"}, "properties": {"repobilityId": "85e7fc7e63d63f59", "scanner": "scanner-primary", "fingerprint": "f63d1ba7ebb87d3a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/feature-design-assistant/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6298618f89ed7843", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/firebase-basics/SKILL.md"}, "properties": {"repobilityId": "6c7040299aa02e91", "scanner": "scanner-primary", "fingerprint": "6298618f89ed7843", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/firebase-basics/SKILL.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-81c92a9a83d3fcfa", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/environment-setup-guide/SKILL.md"}, "properties": {"repobilityId": "bb4d3669b0bd03db", "scanner": "scanner-primary", "fingerprint": "81c92a9a83d3fcfa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/environment-setup-guide/SKILL.md"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-70934e558427128d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/environment-setup-guide/SKILL.md"}, "properties": {"repobilityId": "f27c695f4ac3ae07", "scanner": "scanner-primary", "fingerprint": "70934e558427128d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/environment-setup-guide/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9d9eb1bdaff7ea05", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/deployment-procedures/SKILL.md"}, "properties": {"repobilityId": "a5795911d8d62b04", "scanner": "scanner-primary", "fingerprint": "9d9eb1bdaff7ea05", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/deployment-procedures/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d3795a79ded9a1d1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/web-to-markdown/SKILL.md"}, "properties": {"repobilityId": "c5fda947241bf938", "scanner": "scanner-primary", "fingerprint": "d3795a79ded9a1d1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/web-to-markdown/SKILL.md"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-bbbdc0126d1f8693", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/dependency-updater/SKILL.md"}, "properties": {"repobilityId": "d688be4d8db598b2", "scanner": "scanner-primary", "fingerprint": "bbbdc0126d1f8693", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/dependency-updater/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bbd9f933a78d475a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/dependency-updater/SKILL.md"}, "properties": {"repobilityId": "3c985c3397b9b634", "scanner": "scanner-primary", "fingerprint": "bbd9f933a78d475a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/dependency-updater/SKILL.md"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-1b4fc0377d09093c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/google-cloud-networking-observability/SKILL.md"}, "properties": {"repobilityId": "5ad77564c97a7a7e", "scanner": "scanner-primary", "fingerprint": "1b4fc0377d09093c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/google-cloud-networking-observability/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e8472044856dcd1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/performance/SKILL.md"}, "properties": {"repobilityId": "2563039993e0df7c", "scanner": "scanner-primary", "fingerprint": "1e8472044856dcd1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/performance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef732fae9c6bd09a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/finishing-a-development-branch/SKILL.md"}, "properties": {"repobilityId": "0b0ce4b8f4900861", "scanner": "scanner-primary", "fingerprint": "ef732fae9c6bd09a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/finishing-a-development-branch/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a42fab2fa123fd90", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/render-deploy/SKILL.md"}, "properties": {"repobilityId": "0a0f6ae64bce7cb1", "scanner": "scanner-primary", "fingerprint": "a42fab2fa123fd90", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/render-deploy/SKILL.md"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-ee147bbe742b9aeb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/codex/SKILL.md"}, "properties": {"repobilityId": "f073ec66966a9e17", "scanner": "scanner-primary", "fingerprint": "ee147bbe742b9aeb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/codex/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a5befa23d8661e14", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/writing-plans/SKILL.md"}, "properties": {"repobilityId": "9e2c7a2cbda89dfd", "scanner": "scanner-primary", "fingerprint": "a5befa23d8661e14", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/writing-plans/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ad901c1a10e6cab3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/best-practices/SKILL.md"}, "properties": {"repobilityId": "079487d39bdce9f1", "scanner": "scanner-primary", "fingerprint": "ad901c1a10e6cab3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/best-practices/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-597c092f3fbf1804", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/skill-development/SKILL.md"}, "properties": {"repobilityId": "721cb9df60f1e719", "scanner": "scanner-primary", "fingerprint": "597c092f3fbf1804", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-development/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5d264fca0f0591df", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/tdd-workflow/SKILL.md"}, "properties": {"repobilityId": "035224ac74b5df5f", "scanner": "scanner-primary", "fingerprint": "5d264fca0f0591df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/tdd-workflow/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85c87d6e792b2b51", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/cloud-run-basics/SKILL.md"}, "properties": {"repobilityId": "36507b1ac69fad88", "scanner": "scanner-primary", "fingerprint": "85c87d6e792b2b51", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/cloud-run-basics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d4bffe25941b779a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/openapi-to-typescript/SKILL.md"}, "properties": {"repobilityId": "d9f6948d0550b6a5", "scanner": "scanner-primary", "fingerprint": "d4bffe25941b779a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/openapi-to-typescript/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cdb275475292333d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/nodejs-best-practices/SKILL.md"}, "properties": {"repobilityId": "010751d5262cca5e", "scanner": "scanner-primary", "fingerprint": "cdb275475292333d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/nodejs-best-practices/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-789a6302d0595c38", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/claude-api/SKILL.md"}, "properties": {"repobilityId": "5ca0bba40cc48ed1", "scanner": "scanner-primary", "fingerprint": "789a6302d0595c38", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/claude-api/SKILL.md"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-eec71913c3f8c5dd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/api-documentation-generator/SKILL.md"}, "properties": {"repobilityId": "aba13ca1ab58d806", "scanner": "scanner-primary", "fingerprint": "eec71913c3f8c5dd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/api-documentation-generator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3aa0893ef642e072", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/mui/SKILL.md"}, "properties": {"repobilityId": "516b3bb72f73bdb5", "scanner": "scanner-primary", "fingerprint": "3aa0893ef642e072", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/mui/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a2a021f533d6515", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/command-development/SKILL.md"}, "properties": {"repobilityId": "796131729df725a7", "scanner": "scanner-primary", "fingerprint": "6a2a021f533d6515", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/command-development/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f0a3fe5ac9a35ffd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/playwright-java/SKILL.md"}, "properties": {"repobilityId": "eb135fa9513d8fa0", "scanner": "scanner-primary", "fingerprint": "f0a3fe5ac9a35ffd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/playwright-java/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9c6b0066d0eade5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/executing-plans/SKILL.md"}, "properties": {"repobilityId": "9efce8d73a871344", "scanner": "scanner-primary", "fingerprint": "b9c6b0066d0eade5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/executing-plans/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1ad69704daafa2f4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/verification-before-completion/SKILL.md"}, "properties": {"repobilityId": "bcb12bbfb564c441", "scanner": "scanner-primary", "fingerprint": "1ad69704daafa2f4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/verification-before-completion/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a7df12e1f5e59c80", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/test-detect/SKILL.md"}, "properties": {"repobilityId": "6cf3a3eed44f5f16", "scanner": "scanner-primary", "fingerprint": "a7df12e1f5e59c80", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/test-detect/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a447bad533095a62", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/dispatching-parallel-agents/SKILL.md"}, "properties": {"repobilityId": "1bba7686cc3bf816", "scanner": "scanner-primary", "fingerprint": "a447bad533095a62", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/dispatching-parallel-agents/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc927459ab3bd6ed", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/writing-skills/SKILL.md"}, "properties": {"repobilityId": "a56d09d0b5ea547c", "scanner": "scanner-primary", "fingerprint": "fc927459ab3bd6ed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/writing-skills/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3c5a0831275e60e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/vercel-deploy/SKILL.md"}, "properties": {"repobilityId": "0d2ced510c63d0a2", "scanner": "scanner-primary", "fingerprint": "e3c5a0831275e60e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/vercel-deploy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9aa7160d217aef85", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/android-cicd/SKILL.md"}, "properties": {"repobilityId": "957eb1d221a6b4ce", "scanner": "scanner-primary", "fingerprint": "9aa7160d217aef85", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/android-cicd/SKILL.md"}, "region": {"startLine": 160}}}]}, {"ruleId": "scanner-266d24629d67785a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/android-cicd/SKILL.md"}, "properties": {"repobilityId": "b01e927b8c54ddb1", "scanner": "scanner-primary", "fingerprint": "266d24629d67785a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/android-cicd/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-241dfac3588df689", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/clean-code/SKILL.md"}, "properties": {"repobilityId": "c0179a0dd03b6013", "scanner": "scanner-primary", "fingerprint": "241dfac3588df689", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/clean-code/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-28e5c37d26b70359", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/convex/SKILL.md"}, "properties": {"repobilityId": "26cf4664020508fc", "scanner": "scanner-primary", "fingerprint": "28e5c37d26b70359", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/convex/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd4dea4b9f8ff743", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/prisma-expert/SKILL.md"}, "properties": {"repobilityId": "8ac47fe2829e2ba7", "scanner": "scanner-primary", "fingerprint": "cd4dea4b9f8ff743", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/prisma-expert/SKILL.md"}, "region": {"startLine": 249}}}]}, {"ruleId": "scanner-1b9868a8f998e631", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/api-integration-specialist/SKILL.md"}, "properties": {"repobilityId": "0e24abda1bbb428f", "scanner": "scanner-primary", "fingerprint": "1b9868a8f998e631", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/api-integration-specialist/SKILL.md"}, "region": {"startLine": 209}}}]}, {"ruleId": "scanner-8ec4bc7511875aa1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/systematic-debugging/SKILL.md"}, "properties": {"repobilityId": "07c9f84ac770ade0", "scanner": "scanner-primary", "fingerprint": "8ec4bc7511875aa1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/systematic-debugging/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef7c9ef13c78d316", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/i18n-localization/SKILL.md"}, "properties": {"repobilityId": "45139e8876a5198f", "scanner": "scanner-primary", "fingerprint": "ef7c9ef13c78d316", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/i18n-localization/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3797db31d5f833c9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/codex-review/SKILL.md"}, "properties": {"repobilityId": "b3ff70917a9eaef5", "scanner": "scanner-primary", "fingerprint": "3797db31d5f833c9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/codex-review/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ee15618368ad17a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/avalonia-viewmodels-zafiro/SKILL.md"}, "properties": {"repobilityId": "a236954a2707ccdf", "scanner": "scanner-primary", "fingerprint": "5ee15618368ad17a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/avalonia-viewmodels-zafiro/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6486f8f0ec92e476", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/software-architecture/SKILL.md"}, "properties": {"repobilityId": "fd0a1ed33448e2e4", "scanner": "scanner-primary", "fingerprint": "6486f8f0ec92e476", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/software-architecture/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7ff2c2357e0e94d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/using-git-worktrees/SKILL.md"}, "properties": {"repobilityId": "e41ba5ba26d61240", "scanner": "scanner-primary", "fingerprint": "b7ff2c2357e0e94d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/using-git-worktrees/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-05a0b471064fa50b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/nestjs-expert/SKILL.md"}, "properties": {"repobilityId": "c911b9acd7ff7330", "scanner": "scanner-primary", "fingerprint": "05a0b471064fa50b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/nestjs-expert/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a801cc1af5aacd41", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/changelog-generator/SKILL.md"}, "properties": {"repobilityId": "eef07c7ade09aa8f", "scanner": "scanner-primary", "fingerprint": "a801cc1af5aacd41", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/changelog-generator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9e3b64c47bd02d4f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/e2e-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "cc9cb97584b51108", "scanner": "scanner-primary", "fingerprint": "9e3b64c47bd02d4f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/e2e-testing-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3e54a36acf2dab5e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/skill-creator/SKILL.md"}, "properties": {"repobilityId": "5c054bbe56cad42b", "scanner": "scanner-primary", "fingerprint": "3e54a36acf2dab5e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/skill-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-408c34cca62e5448", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/netlify-deploy/SKILL.md"}, "properties": {"repobilityId": "d89da20389aec73a", "scanner": "scanner-primary", "fingerprint": "408c34cca62e5448", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/netlify-deploy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df8a5e3cce4d257f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/domain-driven-design/SKILL.md"}, "properties": {"repobilityId": "6ddbb027bd055519", "scanner": "scanner-primary", "fingerprint": "df8a5e3cce4d257f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/domain-driven-design/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d99519af29d9ecd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/docker-expert/SKILL.md"}, "properties": {"repobilityId": "8d35190ccf912ced", "scanner": "scanner-primary", "fingerprint": "4d99519af29d9ecd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/docker-expert/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c2530d7fe765c0cf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/postgres-best-practices/AGENTS.md"}, "properties": {"repobilityId": "565a6df9ad86ef6d", "scanner": "scanner-primary", "fingerprint": "c2530d7fe765c0cf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/postgres-best-practices/AGENTS.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f80a9600e4a83c6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/brainstorming/SKILL.md"}, "properties": {"repobilityId": "fd7a60f62a93f300", "scanner": "scanner-primary", "fingerprint": "7f80a9600e4a83c6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/brainstorming/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74027343376c804f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/bun-development/SKILL.md"}, "properties": {"repobilityId": "bda1b6b89ae2f15a", "scanner": "scanner-primary", "fingerprint": "74027343376c804f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/bun-development/SKILL.md"}, "region": {"startLine": 241}}}]}, {"ruleId": "scanner-a1515f22b39e3831", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/bun-development/SKILL.md"}, "properties": {"repobilityId": "9aeb09b50976a043", "scanner": "scanner-primary", "fingerprint": "a1515f22b39e3831", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/bun-development/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5bc13f331b232412", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/development/bun-development/SKILL.md"}, "properties": {"repobilityId": "5227bef84158e21b", "scanner": "scanner-primary", "fingerprint": "5bc13f331b232412", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/bun-development/SKILL.md"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-02950e7626d1b71e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/bleu/SKILL.md"}, "properties": {"repobilityId": "0732d1bbd24dd998", "scanner": "scanner-primary", "fingerprint": "02950e7626d1b71e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/bleu/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-77bfca494eeebd87", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/cc-skill-security-review/SKILL.md"}, "properties": {"repobilityId": "638a3aa0ceebc677", "scanner": "scanner-primary", "fingerprint": "77bfca494eeebd87", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/cc-skill-security-review/SKILL.md"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-f5837912769f38b9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/development/javascript-mastery/SKILL.md"}, "properties": {"repobilityId": "f729b5eba31e6b8f", "scanner": "scanner-primary", "fingerprint": "f5837912769f38b9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/javascript-mastery/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-23bbb599fc362848", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/development/task-execution-engine/SKILL.md"}, "properties": {"repobilityId": "d9e6e773fd313ab1", "scanner": "scanner-primary", "fingerprint": "23bbb599fc362848", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/development/task-execution-engine/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-e89dce85596de368", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/git/git-context-controller/SKILL.md"}, "properties": {"repobilityId": "b31223c22182bd17", "scanner": "scanner-primary", "fingerprint": "e89dce85596de368", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/git/git-context-controller/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ded732ce832f1309", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/rag-chroma/SKILL.md"}, "properties": {"repobilityId": "4108486365e1bfe9", "scanner": "scanner-primary", "fingerprint": "ded732ce832f1309", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/rag-chroma/SKILL.md"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-31070559c41d5b5d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/fine-tuning-peft/SKILL.md"}, "properties": {"repobilityId": "7d9909cd035c9b7d", "scanner": "scanner-primary", "fingerprint": "31070559c41d5b5d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/fine-tuning-peft/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-ed773b9ae4919bf7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/inference-serving-vllm/SKILL.md"}, "properties": {"repobilityId": "622e1da3f2324f53", "scanner": "scanner-primary", "fingerprint": "ed773b9ae4919bf7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/inference-serving-vllm/SKILL.md"}, "region": {"startLine": 359}}}]}, {"ruleId": "scanner-90b39f8d5a20e011", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/inference-serving-tensorrt-llm/SKILL.md"}, "properties": {"repobilityId": "515af874baa14742", "scanner": "scanner-primary", "fingerprint": "90b39f8d5a20e011", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/inference-serving-tensorrt-llm/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f60f00305322759", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-rwkv/SKILL.md"}, "properties": {"repobilityId": "3616b03d379cb79c", "scanner": "scanner-primary", "fingerprint": "7f60f00305322759", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/model-architecture-rwkv/SKILL.md"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-dc97830bbe5a047f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/model-architecture-rwkv/SKILL.md"}, "properties": {"repobilityId": "9ea1ac84ce7e9a67", "scanner": "scanner-primary", "fingerprint": "dc97830bbe5a047f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/model-architecture-rwkv/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-35517b62a391f95d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/llm-app-patterns/SKILL.md"}, "properties": {"repobilityId": "10c731ff13d40ae7", "scanner": "scanner-primary", "fingerprint": "35517b62a391f95d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/llm-app-patterns/SKILL.md"}, "region": {"startLine": 656}}}]}, {"ruleId": "scanner-b881de80b2326940", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-transformer-lens/SKILL.md"}, "properties": {"repobilityId": "fc534d1798b53db6", "scanner": "scanner-primary", "fingerprint": "b881de80b2326940", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/mechanistic-interpretability-transformer-lens/SKILL.md"}, "region": {"startLine": 78}}}]}, {"ruleId": "scanner-a390ee313def8d82", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/mechanistic-interpretability-transformer-lens/SKILL.md"}, "properties": {"repobilityId": "20d761ae0e853e84", "scanner": "scanner-primary", "fingerprint": "a390ee313def8d82", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/mechanistic-interpretability-transformer-lens/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-50fe82927afcd843", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/mechanistic-interpretability-transformer-lens/SKILL.md"}, "properties": {"repobilityId": "e10e7358bd87a2e1", "scanner": "scanner-primary", "fingerprint": "50fe82927afcd843", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/mechanistic-interpretability-transformer-lens/SKILL.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-7ad22df5479d2328", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-hqq/SKILL.md"}, "properties": {"repobilityId": "2f10436992194ad8", "scanner": "scanner-primary", "fingerprint": "7ad22df5479d2328", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/optimization-hqq/SKILL.md"}, "region": {"startLine": 196}}}]}, {"ruleId": "scanner-21b28558e1dcfc01", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-langchain/SKILL.md"}, "properties": {"repobilityId": "98d6652e68ac5531", "scanner": "scanner-primary", "fingerprint": "21b28558e1dcfc01", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/agents-langchain/SKILL.md"}, "region": {"startLine": 237}}}]}, {"ruleId": "scanner-2c3a1d3373f90e68", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-langchain/references/agents.md"}, "properties": {"repobilityId": "7cef134f043cef82", "scanner": "scanner-primary", "fingerprint": "2c3a1d3373f90e68", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/agents-langchain/references/agents.md"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-d6bbf55ae091a9ae", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/post-training-trl-fine-tuning/SKILL.md"}, "properties": {"repobilityId": "f7220de71ebda52a", "scanner": "scanner-primary", "fingerprint": "d6bbf55ae091a9ae", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/post-training-trl-fine-tuning/SKILL.md"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-4375b948332d6ee5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/infrastructure-lambda-labs/SKILL.md"}, "properties": {"repobilityId": "240d5e24a8aad486", "scanner": "scanner-primary", "fingerprint": "4375b948332d6ee5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/infrastructure-lambda-labs/SKILL.md"}, "region": {"startLine": 210}}}]}, {"ruleId": "scanner-afd93d20b2ffa350", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-segment-anything/SKILL.md"}, "properties": {"repobilityId": "f827be7f98eba515", "scanner": "scanner-primary", "fingerprint": "afd93d20b2ffa350", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/multimodal-segment-anything/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cdd6913994f7c6a6", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/multimodal-segment-anything/SKILL.md"}, "properties": {"repobilityId": "9cbf499a53b21a2f", "scanner": "scanner-primary", "fingerprint": "cdd6913994f7c6a6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/multimodal-segment-anything/SKILL.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-daa224aea3b9f1b4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/fine-tuning-unsloth/SKILL.md"}, "properties": {"repobilityId": "405f9912778b7cd8", "scanner": "scanner-primary", "fingerprint": "daa224aea3b9f1b4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/fine-tuning-unsloth/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-45f67118f0b44f96", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-llamaindex/SKILL.md"}, "properties": {"repobilityId": "77e59dd8946ac5f9", "scanner": "scanner-primary", "fingerprint": "45f67118f0b44f96", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/agents-llamaindex/SKILL.md"}, "region": {"startLine": 309}}}]}, {"ruleId": "scanner-2c6808a79095db15", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/agents-llamaindex/SKILL.md"}, "properties": {"repobilityId": "0c079b3b364db24c", "scanner": "scanner-primary", "fingerprint": "2c6808a79095db15", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/agents-llamaindex/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-529c1d6242de2edc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/observability-phoenix/SKILL.md"}, "properties": {"repobilityId": "541ffb2f240ca749", "scanner": "scanner-primary", "fingerprint": "529c1d6242de2edc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/observability-phoenix/SKILL.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-c1c5ef5e7ee7bb1e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/fine-tuning-axolotl/SKILL.md"}, "properties": {"repobilityId": "109ded6f48308f5b", "scanner": "scanner-primary", "fingerprint": "c1c5ef5e7ee7bb1e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/fine-tuning-axolotl/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74266982f398530c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-megatron-core/SKILL.md"}, "properties": {"repobilityId": "7a5842d2a2016037", "scanner": "scanner-primary", "fingerprint": "74266982f398530c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/distributed-training-megatron-core/SKILL.md"}, "region": {"startLine": 360}}}]}, {"ruleId": "scanner-a4e06e1bfb78d296", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/distributed-training-megatron-core/SKILL.md"}, "properties": {"repobilityId": "fc051c7d9a7479c2", "scanner": "scanner-primary", "fingerprint": "a4e06e1bfb78d296", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/distributed-training-megatron-core/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd1bfb2b87410e5e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/deep-research-notebooklm/SKILL.md"}, "properties": {"repobilityId": "5025660bb924c5df", "scanner": "scanner-primary", "fingerprint": "dd1bfb2b87410e5e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/deep-research-notebooklm/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-218bb46914cebbd1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-speculative-decoding/SKILL.md"}, "properties": {"repobilityId": "af47f8be7116765f", "scanner": "scanner-primary", "fingerprint": "218bb46914cebbd1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/emerging-techniques-speculative-decoding/SKILL.md"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-6fa14859639caccd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-llava/SKILL.md"}, "properties": {"repobilityId": "cf65057f902d1bca", "scanner": "scanner-primary", "fingerprint": "6fa14859639caccd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/multimodal-llava/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ab593e65ac334efa", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-nnsight/SKILL.md"}, "properties": {"repobilityId": "b84dc6eb48a80097", "scanner": "scanner-primary", "fingerprint": "ab593e65ac334efa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/mechanistic-interpretability-nnsight/SKILL.md"}, "region": {"startLine": 184}}}]}, {"ruleId": "scanner-ac05d8f4259d32c0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/mechanistic-interpretability-nnsight/SKILL.md"}, "properties": {"repobilityId": "b36eadd46da6221d", "scanner": "scanner-primary", "fingerprint": "ac05d8f4259d32c0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/mechanistic-interpretability-nnsight/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6f470e583d5921f3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-pyvene/SKILL.md"}, "properties": {"repobilityId": "4db4ba5103d8cdbf", "scanner": "scanner-primary", "fingerprint": "6f470e583d5921f3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/mechanistic-interpretability-pyvene/SKILL.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-b30aada7f0aaa1cf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/fine-tuning-llama-factory/SKILL.md"}, "properties": {"repobilityId": "63f6c0e87c0af1f7", "scanner": "scanner-primary", "fingerprint": "b30aada7f0aaa1cf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/fine-tuning-llama-factory/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f6018bb61dc5e458", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/evaluation-nemo-evaluator/SKILL.md"}, "properties": {"repobilityId": "1a105219b8e967d5", "scanner": "scanner-primary", "fingerprint": "f6018bb61dc5e458", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/evaluation-nemo-evaluator/SKILL.md"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-65c89db8529d2dcc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/post-training-simpo/SKILL.md"}, "properties": {"repobilityId": "cf3a88b48a7ad3dd", "scanner": "scanner-primary", "fingerprint": "65c89db8529d2dcc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/post-training-simpo/SKILL.md"}, "region": {"startLine": 214}}}]}, {"ruleId": "scanner-4e72d26a9191bbe1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/post-training-simpo/SKILL.md"}, "properties": {"repobilityId": "8e2300b7ff458842", "scanner": "scanner-primary", "fingerprint": "4e72d26a9191bbe1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/post-training-simpo/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72744279fac9273a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-ray-train/SKILL.md"}, "properties": {"repobilityId": "c1e4c367c088d582", "scanner": "scanner-primary", "fingerprint": "72744279fac9273a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/distributed-training-ray-train/SKILL.md"}, "region": {"startLine": 129}}}]}, {"ruleId": "scanner-dab65e25f52e0007", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/distributed-training-ray-train/SKILL.md"}, "properties": {"repobilityId": "3fa6625dd862d244", "scanner": "scanner-primary", "fingerprint": "dab65e25f52e0007", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/distributed-training-ray-train/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d2b804d7ed7378fa", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mechanistic-interpretability-saelens/SKILL.md"}, "properties": {"repobilityId": "ae6f1187c9976b53", "scanner": "scanner-primary", "fingerprint": "d2b804d7ed7378fa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/mechanistic-interpretability-saelens/SKILL.md"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-8864e4342eac489f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-flash-attention/SKILL.md"}, "properties": {"repobilityId": "0c529f561d8ed073", "scanner": "scanner-primary", "fingerprint": "8864e4342eac489f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/optimization-flash-attention/SKILL.md"}, "region": {"startLine": 363}}}]}, {"ruleId": "scanner-ae6cc3c0bd463df1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/optimization-flash-attention/SKILL.md"}, "properties": {"repobilityId": "4c0d65101063b05a", "scanner": "scanner-primary", "fingerprint": "ae6cc3c0bd463df1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/optimization-flash-attention/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6aca3a00c9aa56e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/mlops-mlflow/SKILL.md"}, "properties": {"repobilityId": "0384657aaa2ab43e", "scanner": "scanner-primary", "fingerprint": "a6aca3a00c9aa56e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/mlops-mlflow/SKILL.md"}, "region": {"startLine": 402}}}]}, {"ruleId": "scanner-720cdc5f9e17d79d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/tokenization-sentencepiece/SKILL.md"}, "properties": {"repobilityId": "db49898a7b75010c", "scanner": "scanner-primary", "fingerprint": "720cdc5f9e17d79d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/tokenization-sentencepiece/SKILL.md"}, "region": {"startLine": 199}}}]}, {"ruleId": "scanner-37a5186d422e9e8d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/data-processing-ray-data/SKILL.md"}, "properties": {"repobilityId": "20d70e160fcf3f59", "scanner": "scanner-primary", "fingerprint": "37a5186d422e9e8d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/data-processing-ray-data/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9052daaee9f4e8e8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-mamba/SKILL.md"}, "properties": {"repobilityId": "42572d06aeb73973", "scanner": "scanner-primary", "fingerprint": "9052daaee9f4e8e8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/model-architecture-mamba/SKILL.md"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-5815553ebd9282fe", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/model-architecture-mamba/SKILL.md"}, "properties": {"repobilityId": "65a3eaaf443987e2", "scanner": "scanner-primary", "fingerprint": "5815553ebd9282fe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/model-architecture-mamba/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-40a75fe944e55339", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-long-context/SKILL.md"}, "properties": {"repobilityId": "ba988ebddc46d069", "scanner": "scanner-primary", "fingerprint": "40a75fe944e55339", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/emerging-techniques-long-context/SKILL.md"}, "region": {"startLine": 481}}}]}, {"ruleId": "scanner-5beb90baa8dc70a5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-long-context/SKILL.md"}, "properties": {"repobilityId": "b2bcd33e0ea532df", "scanner": "scanner-primary", "fingerprint": "5beb90baa8dc70a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/emerging-techniques-long-context/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7d84129d7fd2f18f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/prompt-engineering-dspy/SKILL.md"}, "properties": {"repobilityId": "1b9efe15a5f51efa", "scanner": "scanner-primary", "fingerprint": "7d84129d7fd2f18f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/prompt-engineering-dspy/SKILL.md"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-5f6f91cb2aa9b92d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-litgpt/SKILL.md"}, "properties": {"repobilityId": "670a185ee76874b9", "scanner": "scanner-primary", "fingerprint": "5f6f91cb2aa9b92d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/model-architecture-litgpt/SKILL.md"}, "region": {"startLine": 464}}}]}, {"ruleId": "scanner-97a40c5ea59c0f51", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL.md"}, "properties": {"repobilityId": "30344a8d00dfe068", "scanner": "scanner-primary", "fingerprint": "97a40c5ea59c0f51", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL.md"}, "region": {"startLine": 354}}}]}, {"ruleId": "scanner-26651cccc046d59f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL.md"}, "properties": {"repobilityId": "6ad09f031abb77f9", "scanner": "scanner-primary", "fingerprint": "26651cccc046d59f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08a4b0b6611b1734", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL.md"}, "properties": {"repobilityId": "e2b5c6c9bad4fdd9", "scanner": "scanner-primary", "fingerprint": "08a4b0b6611b1734", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/model-architecture-torchtitan/SKILL.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-2791ad3f4788ffd0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/llm-ops/SKILL.md"}, "properties": {"repobilityId": "54337ccb1a9744f9", "scanner": "scanner-primary", "fingerprint": "2791ad3f4788ffd0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/llm-ops/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1853480d46500d3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-pytorch-lightning/SKILL.md"}, "properties": {"repobilityId": "db155824e0757ff0", "scanner": "scanner-primary", "fingerprint": "a1853480d46500d3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/distributed-training-pytorch-lightning/SKILL.md"}, "region": {"startLine": 340}}}]}, {"ruleId": "scanner-cf966458f496173b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-awq/SKILL.md"}, "properties": {"repobilityId": "e7f50104dad8e2c7", "scanner": "scanner-primary", "fingerprint": "cf966458f496173b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/optimization-awq/SKILL.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-6b7f1472f7610be0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/optimization-awq/SKILL.md"}, "properties": {"repobilityId": "353aa4940f579e6a", "scanner": "scanner-primary", "fingerprint": "6b7f1472f7610be0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/optimization-awq/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b10e3d6e986ea844", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-accelerate/SKILL.md"}, "properties": {"repobilityId": "2c7ffb4152126719", "scanner": "scanner-primary", "fingerprint": "b10e3d6e986ea844", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/distributed-training-accelerate/SKILL.md"}, "region": {"startLine": 325}}}]}, {"ruleId": "scanner-b5ce9f27a3369d82", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/distributed-training-accelerate/SKILL.md"}, "properties": {"repobilityId": "6a3cde2fe7d0d9b1", "scanner": "scanner-primary", "fingerprint": "b5ce9f27a3369d82", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/distributed-training-accelerate/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6d9ba309aae27a9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-moe-training/SKILL.md"}, "properties": {"repobilityId": "17abdc79f1bd0969", "scanner": "scanner-primary", "fingerprint": "a6d9ba309aae27a9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/emerging-techniques-moe-training/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a2705bc2c772e8f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/qa-test-planner/SKILL.md"}, "properties": {"repobilityId": "b220f2f5a5f52a36", "scanner": "scanner-primary", "fingerprint": "7a2705bc2c772e8f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/qa-test-planner/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-499b9e8cb68e1fc5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/data-processing-nemo-curator/SKILL.md"}, "properties": {"repobilityId": "2ac0169972f35d36", "scanner": "scanner-primary", "fingerprint": "499b9e8cb68e1fc5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/data-processing-nemo-curator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-01930fa402662cf2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/datadog-cli/SKILL.md"}, "properties": {"repobilityId": "66e18874ef7245d6", "scanner": "scanner-primary", "fingerprint": "01930fa402662cf2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/datadog-cli/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9825209fb6a21d97", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-audiocraft/SKILL.md"}, "properties": {"repobilityId": "9a174807e5d2ffba", "scanner": "scanner-primary", "fingerprint": "9825209fb6a21d97", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/multimodal-audiocraft/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30efbb0c5df464dd", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/multimodal-audiocraft/SKILL.md"}, "properties": {"repobilityId": "63cd76bb46401da5", "scanner": "scanner-primary", "fingerprint": "30efbb0c5df464dd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/multimodal-audiocraft/SKILL.md"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-0fe2ee6f0a7986d3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-model-pruning/SKILL.md"}, "properties": {"repobilityId": "a679d110f8f54a9b", "scanner": "scanner-primary", "fingerprint": "0fe2ee6f0a7986d3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/emerging-techniques-model-pruning/SKILL.md"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-6c157818d4202395", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-model-pruning/SKILL.md"}, "properties": {"repobilityId": "fc0c5f5143217f2d", "scanner": "scanner-primary", "fingerprint": "6c157818d4202395", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/emerging-techniques-model-pruning/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ac72cac38d348e53", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/inference-serving-sglang/SKILL.md"}, "properties": {"repobilityId": "23a1696427507393", "scanner": "scanner-primary", "fingerprint": "ac72cac38d348e53", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/inference-serving-sglang/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8653a9ecd035522a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/distributed-training-deepspeed/SKILL.md"}, "properties": {"repobilityId": "79fa8468123372e3", "scanner": "scanner-primary", "fingerprint": "8653a9ecd035522a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/distributed-training-deepspeed/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-4ad9cd90e1e6f786", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-model-merging/SKILL.md"}, "properties": {"repobilityId": "35ce60f703be3eee", "scanner": "scanner-primary", "fingerprint": "4ad9cd90e1e6f786", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/emerging-techniques-model-merging/SKILL.md"}, "region": {"startLine": 438}}}]}, {"ruleId": "scanner-5fd8890cd180b0c0", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/agents-autogpt/SKILL.md"}, "properties": {"repobilityId": "e98dc00fc72b504a", "scanner": "scanner-primary", "fingerprint": "5fd8890cd180b0c0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/agents-autogpt/SKILL.md"}, "region": {"startLine": 297}}}]}, {"ruleId": "scanner-69ccbeaa83af4cea", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/safety-alignment-llamaguard/SKILL.md"}, "properties": {"repobilityId": "9947a3c4fa2717e6", "scanner": "scanner-primary", "fingerprint": "69ccbeaa83af4cea", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/safety-alignment-llamaguard/SKILL.md"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-0929ab7fd5624478", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/dispatching-parallel-agents/SKILL.md"}, "properties": {"repobilityId": "377f00b605088227", "scanner": "scanner-primary", "fingerprint": "0929ab7fd5624478", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/dispatching-parallel-agents/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eee1b724b821f5e1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/model-architecture-nanogpt/SKILL.md"}, "properties": {"repobilityId": "12d389a01a501ca2", "scanner": "scanner-primary", "fingerprint": "eee1b724b821f5e1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/model-architecture-nanogpt/SKILL.md"}, "region": {"startLine": 284}}}]}, {"ruleId": "scanner-c59c73dc988494e6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/context7-auto-research/SKILL.md"}, "properties": {"repobilityId": "bd989fdc9e194f8f", "scanner": "scanner-primary", "fingerprint": "c59c73dc988494e6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/context7-auto-research/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e122ec2d00991a85", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/ml-paper-writing/SKILL.md"}, "properties": {"repobilityId": "f5ff0ec52f8cf69d", "scanner": "scanner-primary", "fingerprint": "e122ec2d00991a85", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/ml-paper-writing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a27b2429f322b92", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/ml-paper-writing/SKILL.md"}, "properties": {"repobilityId": "ef75af4432a356fc", "scanner": "scanner-primary", "fingerprint": "2a27b2429f322b92", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/ml-paper-writing/SKILL.md"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-d017575dcf05544b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/post-training-grpo-rl-training/SKILL.md"}, "properties": {"repobilityId": "7c35855c3eb7b45a", "scanner": "scanner-primary", "fingerprint": "d017575dcf05544b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/post-training-grpo-rl-training/SKILL.md"}, "region": {"startLine": 282}}}]}, {"ruleId": "scanner-50f9841432b8a1d3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-gptq/SKILL.md"}, "properties": {"repobilityId": "5a84c2db8e7f825a", "scanner": "scanner-primary", "fingerprint": "50f9841432b8a1d3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/optimization-gptq/SKILL.md"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-ea5feaeab20a8594", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/optimization-gptq/SKILL.md"}, "properties": {"repobilityId": "49777156913c2f8b", "scanner": "scanner-primary", "fingerprint": "ea5feaeab20a8594", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/optimization-gptq/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f5da6bebf05b06a9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/loki-mode/CLAUDE.md"}, "properties": {"repobilityId": "35f9ab698bfb8ed4", "scanner": "scanner-primary", "fingerprint": "f5da6bebf05b06a9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/CLAUDE.md"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-e615f5af1a5ef698", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/loki-mode/SKILL.md"}, "properties": {"repobilityId": "5d68d99b1641e33c", "scanner": "scanner-primary", "fingerprint": "e615f5af1a5ef698", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/SKILL.md"}, "region": {"startLine": 704}}}]}, {"ruleId": "scanner-4f59e8cb045cf33f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/loki-mode/SKILL.md"}, "properties": {"repobilityId": "869e908c4c5550cf", "scanner": "scanner-primary", "fingerprint": "4f59e8cb045cf33f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-35a788d88c35c836", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/loki-mode/references/agents.md"}, "properties": {"repobilityId": "1f8ae238c01be76c", "scanner": "scanner-primary", "fingerprint": "35a788d88c35c836", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/loki-mode/references/agents.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd727f3e8d31a1a9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/tokenization-huggingface-tokenizers/SKILL.md"}, "properties": {"repobilityId": "ea7bbb76c58b9ff4", "scanner": "scanner-primary", "fingerprint": "fd727f3e8d31a1a9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/tokenization-huggingface-tokenizers/SKILL.md"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-bbe0640b4d9ac2b3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/optimization-bitsandbytes/SKILL.md"}, "properties": {"repobilityId": "3aab2b8e752356fd", "scanner": "scanner-primary", "fingerprint": "bbe0640b4d9ac2b3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/optimization-bitsandbytes/SKILL.md"}, "region": {"startLine": 125}}}]}, {"ruleId": "scanner-caaa80dc26267b13", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/emerging-techniques-knowledge-distillation/SKILL.md"}, "properties": {"repobilityId": "2ae074ef6c16e2ff", "scanner": "scanner-primary", "fingerprint": "caaa80dc26267b13", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/emerging-techniques-knowledge-distillation/SKILL.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-5ede8f1fed249b1a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/emerging-techniques-knowledge-distillation/SKILL.md"}, "properties": {"repobilityId": "0302b561cb0c6034", "scanner": "scanner-primary", "fingerprint": "5ede8f1fed249b1a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/emerging-techniques-knowledge-distillation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-69c4e61e2d306dbd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/safety-alignment-nemo-guardrails/SKILL.md"}, "properties": {"repobilityId": "deb58a4a6bf2d9c9", "scanner": "scanner-primary", "fingerprint": "69c4e61e2d306dbd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/safety-alignment-nemo-guardrails/SKILL.md"}, "region": {"startLine": 291}}}]}, {"ruleId": "scanner-244c8463b5c6a60c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/agent-manager-skill/SKILL.md"}, "properties": {"repobilityId": "2ddc53618aefddd3", "scanner": "scanner-primary", "fingerprint": "244c8463b5c6a60c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/agent-manager-skill/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a5013b099d9bd4c2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-whisper/SKILL.md"}, "properties": {"repobilityId": "2ebaa1796e0739e9", "scanner": "scanner-primary", "fingerprint": "a5013b099d9bd4c2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/multimodal-whisper/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8cc0718e4c91b06a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/post-training-openrlhf/SKILL.md"}, "properties": {"repobilityId": "8982a10f1c16e645", "scanner": "scanner-primary", "fingerprint": "8cc0718e4c91b06a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/post-training-openrlhf/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e9b483359f7b2a90", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/agent-memory-mcp/SKILL.md"}, "properties": {"repobilityId": "755bda968bc7876b", "scanner": "scanner-primary", "fingerprint": "e9b483359f7b2a90", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/agent-memory-mcp/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c7524691ac26116d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md"}, "properties": {"repobilityId": "db6320c17f3f2161", "scanner": "scanner-primary", "fingerprint": "c7524691ac26116d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/evaluation-lm-evaluation-harness/SKILL.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-1df88475ee436414", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md"}, "properties": {"repobilityId": "ac87ecc483f72e25", "scanner": "scanner-primary", "fingerprint": "1df88475ee436414", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md"}, "region": {"startLine": 183}}}]}, {"ruleId": "scanner-aec2d74ae82f1e38", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md"}, "properties": {"repobilityId": "b9eb9a6be860173b", "scanner": "scanner-primary", "fingerprint": "aec2d74ae82f1e38", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06edb2faa4185b9a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md"}, "properties": {"repobilityId": "0984bb287698ac36", "scanner": "scanner-primary", "fingerprint": "06edb2faa4185b9a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/multimodal-clip/SKILL.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-a92e539ba09a5811", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-research/deep-research/SKILL.md"}, "properties": {"repobilityId": "7921ffb1d8441550", "scanner": "scanner-primary", "fingerprint": "a92e539ba09a5811", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/deep-research/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc9f6c0a873351c6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/ai-research/pydantic-ai/SKILL.md"}, "properties": {"repobilityId": "f03153b4aabb9c9f", "scanner": "scanner-primary", "fingerprint": "fc9f6c0a873351c6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-research/pydantic-ai/SKILL.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-253bbcf2b3b278e9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/ethical-hacking-methodology/SKILL.md"}, "properties": {"repobilityId": "c5316fb17dfce9cb", "scanner": "scanner-primary", "fingerprint": "253bbcf2b3b278e9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/ethical-hacking-methodology/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e685f18eaf830001", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/scanning-tools/SKILL.md"}, "properties": {"repobilityId": "c7e4f89ba30228b5", "scanner": "scanner-primary", "fingerprint": "e685f18eaf830001", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/scanning-tools/SKILL.md"}, "region": {"startLine": 379}}}]}, {"ruleId": "scanner-85e2f339d7943345", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/smtp-penetration-testing/SKILL.md"}, "properties": {"repobilityId": "bb148a05f8b3ccb0", "scanner": "scanner-primary", "fingerprint": "85e2f339d7943345", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/smtp-penetration-testing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1ebe4f8a7df4cd16", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md"}, "properties": {"repobilityId": "7a2a1f667384bdcf", "scanner": "scanner-primary", "fingerprint": "1ebe4f8a7df4cd16", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f2140b635a22d6fd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/aws-penetration-testing/SKILL.md"}, "properties": {"repobilityId": "5711466c9483b822", "scanner": "scanner-primary", "fingerprint": "f2140b635a22d6fd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/aws-penetration-testing/SKILL.md"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-0b812bb90ca88d75", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/api-security-best-practices/SKILL.md"}, "properties": {"repobilityId": "85fb2215544d0f00", "scanner": "scanner-primary", "fingerprint": "0b812bb90ca88d75", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/api-security-best-practices/SKILL.md"}, "region": {"startLine": 157}}}]}, {"ruleId": "scanner-01b5a10955b15b1f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/broken-authentication/SKILL.md"}, "properties": {"repobilityId": "5c8fdb3042028df7", "scanner": "scanner-primary", "fingerprint": "01b5a10955b15b1f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/broken-authentication/SKILL.md"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-6c1b8bed10f629ae", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/broken-authentication/SKILL.md"}, "properties": {"repobilityId": "e6fd1d04b5eb44a2", "scanner": "scanner-primary", "fingerprint": "6c1b8bed10f629ae", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/broken-authentication/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-308892759fe085c3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/secrets-management/SKILL.md"}, "properties": {"repobilityId": "3de74846884495fc", "scanner": "scanner-primary", "fingerprint": "308892759fe085c3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/secrets-management/SKILL.md"}, "region": {"startLine": 175}}}]}, {"ruleId": "scanner-e627ea39f31458c4", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/security/cloud-penetration-testing/SKILL.md"}, "properties": {"repobilityId": "a36e2f2410b3c01f", "scanner": "scanner-primary", "fingerprint": "e627ea39f31458c4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/cloud-penetration-testing/SKILL.md"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-deb05c2e246f7c1c", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md"}, "properties": {"repobilityId": "f55e825c84196e67", "scanner": "scanner-primary", "fingerprint": "deb05c2e246f7c1c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/linux-privilege-escalation/SKILL.md"}, "region": {"startLine": 144}}}]}, {"ruleId": "scanner-988c847ae703430a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/security/pentest-checklist/SKILL.md"}, "properties": {"repobilityId": "e5d2e2b3c23fc562", "scanner": "scanner-primary", "fingerprint": "988c847ae703430a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/pentest-checklist/SKILL.md"}, "region": {"startLine": 128}}}]}, {"ruleId": "scanner-af94a34191cdd988", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/red-team-tactics/SKILL.md"}, "properties": {"repobilityId": "ef34e13e1f8a40b9", "scanner": "scanner-primary", "fingerprint": "af94a34191cdd988", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/red-team-tactics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-771e2fdf1e85aa49", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/security-best-practices/SKILL.md"}, "properties": {"repobilityId": "c6306f9124b9c0df", "scanner": "scanner-primary", "fingerprint": "771e2fdf1e85aa49", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/security-best-practices/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a319e75b23410422", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/vulnerability-scanner/SKILL.md"}, "properties": {"repobilityId": "5d811ea94f11488c", "scanner": "scanner-primary", "fingerprint": "a319e75b23410422", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/vulnerability-scanner/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f12d9733fd1915ce", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/google-cloud-auth/SKILL.md"}, "properties": {"repobilityId": "703ad75b707750a6", "scanner": "scanner-primary", "fingerprint": "f12d9733fd1915ce", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/google-cloud-auth/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-723a5448e711038c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/security/metasploit-framework/SKILL.md"}, "properties": {"repobilityId": "6621f0452c83fcef", "scanner": "scanner-primary", "fingerprint": "723a5448e711038c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/security/metasploit-framework/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-60514de98b5b3cd4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/media/speech/SKILL.md"}, "properties": {"repobilityId": "070464e76eec2e15", "scanner": "scanner-primary", "fingerprint": "60514de98b5b3cd4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/media/speech/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ffaf54bc697c8db8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/media/screenshot/SKILL.md"}, "properties": {"repobilityId": "5360aca450590630", "scanner": "scanner-primary", "fingerprint": "ffaf54bc697c8db8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/media/screenshot/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-917a0cee07bb2954", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/stable-baselines3/SKILL.md"}, "properties": {"repobilityId": "679578ff80e03cdf", "scanner": "scanner-primary", "fingerprint": "917a0cee07bb2954", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/stable-baselines3/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-13d869b63c00ec97", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/pubchem-database/SKILL.md"}, "properties": {"repobilityId": "ba8d29a03c5748e7", "scanner": "scanner-primary", "fingerprint": "13d869b63c00ec97", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/pubchem-database/SKILL.md"}, "region": {"startLine": 175}}}]}, {"ruleId": "scanner-0fdf94bc0d39e780", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/scientific/geniml/SKILL.md"}, "properties": {"repobilityId": "e93562024ef34652", "scanner": "scanner-primary", "fingerprint": "0fdf94bc0d39e780", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/geniml/SKILL.md"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-6a0b0318a15166be", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/perplexity-search/SKILL.md"}, "properties": {"repobilityId": "c9ac875cd45fdc80", "scanner": "scanner-primary", "fingerprint": "6a0b0318a15166be", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/perplexity-search/SKILL.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-33998f988497b922", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/simpy/SKILL.md"}, "properties": {"repobilityId": "bd23b4e163e468b2", "scanner": "scanner-primary", "fingerprint": "33998f988497b922", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/simpy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e9aca45a233c5ad9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/fluidsim/SKILL.md"}, "properties": {"repobilityId": "44ec1d1bd5fc4fe4", "scanner": "scanner-primary", "fingerprint": "e9aca45a233c5ad9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/fluidsim/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df58eb8e5491b570", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/scanpy/SKILL.md"}, "properties": {"repobilityId": "7873b9b6032983dd", "scanner": "scanner-primary", "fingerprint": "df58eb8e5491b570", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/scanpy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d3ae53432c774c3a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/chembl-database/SKILL.md"}, "properties": {"repobilityId": "098c6f9791754cb2", "scanner": "scanner-primary", "fingerprint": "d3ae53432c774c3a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/chembl-database/SKILL.md"}, "region": {"startLine": 381}}}]}, {"ruleId": "scanner-08c9c7294454e602", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/chembl-database/SKILL.md"}, "properties": {"repobilityId": "e379777dcd4bf8de", "scanner": "scanner-primary", "fingerprint": "08c9c7294454e602", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/chembl-database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3dbb835e3a2ca987", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/ensembl-database/SKILL.md"}, "properties": {"repobilityId": "5de88b7bab8b94e9", "scanner": "scanner-primary", "fingerprint": "3dbb835e3a2ca987", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/ensembl-database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74cf457e42efe325", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/ena-database/SKILL.md"}, "properties": {"repobilityId": "5f0d1dbd88c7e67e", "scanner": "scanner-primary", "fingerprint": "74cf457e42efe325", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/ena-database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb95564034adc43a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/qutip/SKILL.md"}, "properties": {"repobilityId": "83027a015ca8b1d7", "scanner": "scanner-primary", "fingerprint": "eb95564034adc43a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/qutip/SKILL.md"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-aa70f06976c48da7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/astropy/SKILL.md"}, "properties": {"repobilityId": "b083eaecd274f17c", "scanner": "scanner-primary", "fingerprint": "aa70f06976c48da7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/astropy/SKILL.md"}, "region": {"startLine": 314}}}]}, {"ruleId": "scanner-cd308a71f1d65fa6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/medchem/SKILL.md"}, "properties": {"repobilityId": "be032de17d73ea92", "scanner": "scanner-primary", "fingerprint": "cd308a71f1d65fa6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/medchem/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4b5e2ba92327657f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/matplotlib/SKILL.md"}, "properties": {"repobilityId": "051b51310e7e0073", "scanner": "scanner-primary", "fingerprint": "4b5e2ba92327657f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/matplotlib/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0fc369989e439e11", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/biorxiv-database/SKILL.md"}, "properties": {"repobilityId": "146b64d5fed01445", "scanner": "scanner-primary", "fingerprint": "0fc369989e439e11", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/biorxiv-database/SKILL.md"}, "region": {"startLine": 302}}}]}, {"ruleId": "scanner-3de2ffd9b1be7093", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/scientific/document-skills/pptx/SKILL.md"}, "properties": {"repobilityId": "769941de463085f1", "scanner": "scanner-primary", "fingerprint": "3de2ffd9b1be7093", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/document-skills/pptx/SKILL.md"}, "region": {"startLine": 512}}}]}, {"ruleId": "scanner-eacc2c33068136b2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/scientific/document-skills/docx/SKILL.md"}, "properties": {"repobilityId": "b3b9df3264185f18", "scanner": "scanner-primary", "fingerprint": "eacc2c33068136b2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/document-skills/docx/SKILL.md"}, "region": {"startLine": 228}}}]}, {"ruleId": "scanner-745bec70057d2c90", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/esm/SKILL.md"}, "properties": {"repobilityId": "aa9bd0bb8f54706e", "scanner": "scanner-primary", "fingerprint": "745bec70057d2c90", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/esm/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-60efc374e7341093", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/datacommons-client/SKILL.md"}, "properties": {"repobilityId": "283bd46573e598db", "scanner": "scanner-primary", "fingerprint": "60efc374e7341093", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/datacommons-client/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-77cdbc43e89a5146", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/pennylane/SKILL.md"}, "properties": {"repobilityId": "ecdc37674e08c364", "scanner": "scanner-primary", "fingerprint": "77cdbc43e89a5146", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/pennylane/SKILL.md"}, "region": {"startLine": 220}}}]}, {"ruleId": "scanner-b90fc3c785f5ef6b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/reactome-database/SKILL.md"}, "properties": {"repobilityId": "f825603a88595b9c", "scanner": "scanner-primary", "fingerprint": "b90fc3c785f5ef6b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/reactome-database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c157aade5c6397a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/datamol/SKILL.md"}, "properties": {"repobilityId": "72f21046dc84782b", "scanner": "scanner-primary", "fingerprint": "2c157aade5c6397a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/datamol/SKILL.md"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-73802dda0a277856", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/scvi-tools/SKILL.md"}, "properties": {"repobilityId": "c6341c6392bd942d", "scanner": "scanner-primary", "fingerprint": "73802dda0a277856", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/scvi-tools/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b419cbac1ebe35c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/generate-image/SKILL.md"}, "properties": {"repobilityId": "ebb2197024e099da", "scanner": "scanner-primary", "fingerprint": "0b419cbac1ebe35c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/generate-image/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c2015a55aaa134b7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/denario/SKILL.md"}, "properties": {"repobilityId": "43dbdf64850d2e3e", "scanner": "scanner-primary", "fingerprint": "c2015a55aaa134b7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/denario/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-346d4be48e2589c7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/statistical-analysis/SKILL.md"}, "properties": {"repobilityId": "ea28486e3ae029bd", "scanner": "scanner-primary", "fingerprint": "346d4be48e2589c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/statistical-analysis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ac6223a5f804ad6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/zarr-python/SKILL.md"}, "properties": {"repobilityId": "6035c6edda41689c", "scanner": "scanner-primary", "fingerprint": "3ac6223a5f804ad6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/zarr-python/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0362571861bc8336", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/flowio/SKILL.md"}, "properties": {"repobilityId": "d7d77734ce792836", "scanner": "scanner-primary", "fingerprint": "0362571861bc8336", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/flowio/SKILL.md"}, "region": {"startLine": 174}}}]}, {"ruleId": "scanner-a6b1fbc39a0413cb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/transformers/SKILL.md"}, "properties": {"repobilityId": "9fed009be9095209", "scanner": "scanner-primary", "fingerprint": "a6b1fbc39a0413cb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/transformers/SKILL.md"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-cac5af469662f4ff", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/treatment-plans/SKILL.md"}, "properties": {"repobilityId": "8f7e67cbbc526b92", "scanner": "scanner-primary", "fingerprint": "cac5af469662f4ff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/treatment-plans/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7928c1f227f462b6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/uniprot-database/SKILL.md"}, "properties": {"repobilityId": "11b09537466fb657", "scanner": "scanner-primary", "fingerprint": "7928c1f227f462b6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/uniprot-database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-759eb556b637ee6d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/plotly/SKILL.md"}, "properties": {"repobilityId": "0bbfce744a6d3bcc", "scanner": "scanner-primary", "fingerprint": "759eb556b637ee6d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/plotly/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8d6208bc73b84a06", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/neurokit2/SKILL.md"}, "properties": {"repobilityId": "b47e7fefb493135e", "scanner": "scanner-primary", "fingerprint": "8d6208bc73b84a06", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/neurokit2/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-39eb0f3a2a2b1fc5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/geopandas/SKILL.md"}, "properties": {"repobilityId": "8b00db61415c04d4", "scanner": "scanner-primary", "fingerprint": "39eb0f3a2a2b1fc5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/geopandas/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-17ba48c07df0b7ae", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/lamindb/SKILL.md"}, "properties": {"repobilityId": "d42a0d85e6f2c152", "scanner": "scanner-primary", "fingerprint": "17ba48c07df0b7ae", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/lamindb/SKILL.md"}, "region": {"startLine": 211}}}]}, {"ruleId": "scanner-9ae8b5c298e80b04", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/lamindb/SKILL.md"}, "properties": {"repobilityId": "38c492b4369e600c", "scanner": "scanner-primary", "fingerprint": "9ae8b5c298e80b04", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/lamindb/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c701f9cb3034e95", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/scikit-learn/SKILL.md"}, "properties": {"repobilityId": "5c82da92a533de4e", "scanner": "scanner-primary", "fingerprint": "9c701f9cb3034e95", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/scikit-learn/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a82d124839e65b5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/molfeat/SKILL.md"}, "properties": {"repobilityId": "9519457c95a474eb", "scanner": "scanner-primary", "fingerprint": "0a82d124839e65b5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/molfeat/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3dfd32d8db0bb511", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/bioservices/SKILL.md"}, "properties": {"repobilityId": "5c4996f4901614bf", "scanner": "scanner-primary", "fingerprint": "3dfd32d8db0bb511", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/bioservices/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb77a2192464dc36", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/gtars/SKILL.md"}, "properties": {"repobilityId": "6f1e03cbedbb9b39", "scanner": "scanner-primary", "fingerprint": "cb77a2192464dc36", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/gtars/SKILL.md"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-165a580fd1f76183", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/gene-database/SKILL.md"}, "properties": {"repobilityId": "d493f04e7d3272f4", "scanner": "scanner-primary", "fingerprint": "165a580fd1f76183", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/gene-database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0720d10b9d05321f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/clinicaltrials-database/SKILL.md"}, "properties": {"repobilityId": "22ef548d75253dfe", "scanner": "scanner-primary", "fingerprint": "0720d10b9d05321f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/clinicaltrials-database/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73408d50351ba9ac", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/pufferlib/SKILL.md"}, "properties": {"repobilityId": "efc0fc5838ce8ab6", "scanner": "scanner-primary", "fingerprint": "73408d50351ba9ac", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/pufferlib/SKILL.md"}, "region": {"startLine": 429}}}]}, {"ruleId": "scanner-33b727f324473f12", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/omero-integration/SKILL.md"}, "properties": {"repobilityId": "341edc3c19af1c44", "scanner": "scanner-primary", "fingerprint": "33b727f324473f12", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/omero-integration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94e5794b2301b9ea", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/scientific/aeon/SKILL.md"}, "properties": {"repobilityId": "38eadf2467da3cc7", "scanner": "scanner-primary", "fingerprint": "94e5794b2301b9ea", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/aeon/SKILL.md"}, "region": {"startLine": 366}}}]}, {"ruleId": "scanner-0c081118f593f2f8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/scientific/dask/SKILL.md"}, "properties": {"repobilityId": "a88d98f8de23a878", "scanner": "scanner-primary", "fingerprint": "0c081118f593f2f8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/scientific/dask/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2797f2dcb65be4cc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/utilities/playwright-skill/SKILL.md"}, "properties": {"repobilityId": "ed238c7958a17207", "scanner": "scanner-primary", "fingerprint": "2797f2dcb65be4cc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/utilities/playwright-skill/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-05e5bc8fee9174f5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/content-research-writer/SKILL.md"}, "properties": {"repobilityId": "8a6852be1730add1", "scanner": "scanner-primary", "fingerprint": "05e5bc8fee9174f5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/business-marketing/content-research-writer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-811ebd48d58017e2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/micro-saas-launcher/SKILL.md"}, "properties": {"repobilityId": "c9ed2f426403dd91", "scanner": "scanner-primary", "fingerprint": "811ebd48d58017e2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/business-marketing/micro-saas-launcher/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08665a5b992fdc26", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/business-marketing/ai-wrapper-product/SKILL.md"}, "properties": {"repobilityId": "0458d725ce47dc96", "scanner": "scanner-primary", "fingerprint": "08665a5b992fdc26", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/business-marketing/ai-wrapper-product/SKILL.md"}, "region": {"startLine": 177}}}]}, {"ruleId": "scanner-da69cd7daa01a614", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/lead-research-assistant/SKILL.md"}, "properties": {"repobilityId": "663aba57c1a88088", "scanner": "scanner-primary", "fingerprint": "da69cd7daa01a614", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/business-marketing/lead-research-assistant/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3b00c0ef22530716", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/app-builder/SKILL.md"}, "properties": {"repobilityId": "e4874fcd2a07211a", "scanner": "scanner-primary", "fingerprint": "3b00c0ef22530716", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/business-marketing/app-builder/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71f7a237ae31cea6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/marketing-demand-acquisition/SKILL.md"}, "properties": {"repobilityId": "5c303c36bd631268", "scanner": "scanner-primary", "fingerprint": "71f7a237ae31cea6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/business-marketing/marketing-demand-acquisition/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07a92d7019c7b6cb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/business-marketing/ceo-advisor/SKILL.md"}, "properties": {"repobilityId": "892638b11a913291", "scanner": "scanner-primary", "fingerprint": "07a92d7019c7b6cb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/business-marketing/ceo-advisor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1141e9020f4e15c7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/writing-clearly-and-concisely/SKILL.md"}, "properties": {"repobilityId": "c48ad4efb9a69404", "scanner": "scanner-primary", "fingerprint": "1141e9020f4e15c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/enterprise-communication/writing-clearly-and-concisely/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d382cba1fb6edb2c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/discord-bot-architect/SKILL.md"}, "properties": {"repobilityId": "3cafc4feb3604d78", "scanner": "scanner-primary", "fingerprint": "d382cba1fb6edb2c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/enterprise-communication/discord-bot-architect/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-00755423758b8e13", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/slack-gif-creator/SKILL.md"}, "properties": {"repobilityId": "84312eca7747c13c", "scanner": "scanner-primary", "fingerprint": "00755423758b8e13", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/enterprise-communication/slack-gif-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4bb0e27aabe5afd0", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/enterprise-communication/quality-manager-qms-iso13485/SKILL.md"}, "properties": {"repobilityId": "cbfcbc7e4331d8f1", "scanner": "scanner-primary", "fingerprint": "4bb0e27aabe5afd0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/enterprise-communication/quality-manager-qms-iso13485/SKILL.md"}, "region": {"startLine": 178}}}]}, {"ruleId": "scanner-3e4fef3d36b7360d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/enterprise-communication/risk-management-specialist/SKILL.md"}, "properties": {"repobilityId": "85b41c47969be231", "scanner": "scanner-primary", "fingerprint": "3e4fef3d36b7360d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/enterprise-communication/risk-management-specialist/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-6425e12d6df9f6d7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/enterprise-communication/information-security-manager-iso27001/SKILL.md"}, "properties": {"repobilityId": "dd93cb0089bf6e30", "scanner": "scanner-primary", "fingerprint": "6425e12d6df9f6d7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/enterprise-communication/information-security-manager-iso27001/SKILL.md"}, "region": {"startLine": 244}}}]}, {"ruleId": "scanner-6e2f83dda5f4a944", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/enterprise-communication/excel-analysis/SKILL.md"}, "properties": {"repobilityId": "e4d444c54cca539c", "scanner": "scanner-primary", "fingerprint": "6e2f83dda5f4a944", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/enterprise-communication/excel-analysis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-23e0994f2b04d1fb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/trigger-dev/SKILL.md"}, "properties": {"repobilityId": "d96a38fbb065a61e", "scanner": "scanner-primary", "fingerprint": "23e0994f2b04d1fb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/workflow-automation/trigger-dev/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1a3a815c8a9cfcc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/planning-with-files/SKILL.md"}, "properties": {"repobilityId": "c1d4e27be1e78784", "scanner": "scanner-primary", "fingerprint": "a1a3a815c8a9cfcc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/workflow-automation/planning-with-files/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-59c9c74d72ae4d51", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/inngest/SKILL.md"}, "properties": {"repobilityId": "0a33e6f0f6ee4732", "scanner": "scanner-primary", "fingerprint": "59c9c74d72ae4d51", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/workflow-automation/inngest/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b98b09aeb244423", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/workflow-automation/SKILL.md"}, "properties": {"repobilityId": "8c12ce0ce4c06c86", "scanner": "scanner-primary", "fingerprint": "6b98b09aeb244423", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/workflow-automation/workflow-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-edd1dc86ee505ca8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/yeet/SKILL.md"}, "properties": {"repobilityId": "2e043fccd378ab0e", "scanner": "scanner-primary", "fingerprint": "edd1dc86ee505ca8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/workflow-automation/yeet/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ae2394a706000d54", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/workflow-automation/gitops-workflow/SKILL.md"}, "properties": {"repobilityId": "e7f1fc39855e857d", "scanner": "scanner-primary", "fingerprint": "ae2394a706000d54", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/workflow-automation/gitops-workflow/SKILL.md"}, "region": {"startLine": 264}}}]}, {"ruleId": "scanner-a893ae0a42303f7e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/workflow-automation/dependabot-review/SKILL.md"}, "properties": {"repobilityId": "dba375d4edaca6fc", "scanner": "scanner-primary", "fingerprint": "a893ae0a42303f7e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/workflow-automation/dependabot-review/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d0e7e4675b41b158", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/video/sora/SKILL.md"}, "properties": {"repobilityId": "283d95065e9b76a6", "scanner": "scanner-primary", "fingerprint": "d0e7e4675b41b158", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/video/sora/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-af5659c3747adf29", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/slack-gif-creator/SKILL.md"}, "properties": {"repobilityId": "c5d10261e41d701e", "scanner": "scanner-primary", "fingerprint": "af5659c3747adf29", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/slack-gif-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11a0fa528fca50c9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/mermaid-diagrams/SKILL.md"}, "properties": {"repobilityId": "7199aa6cd3dc8079", "scanner": "scanner-primary", "fingerprint": "11a0fa528fca50c9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/mermaid-diagrams/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4597872c66589976", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/creative-design/mermaid-diagrams/SKILL.md"}, "properties": {"repobilityId": "9592851ee1df72b6", "scanner": "scanner-primary", "fingerprint": "4597872c66589976", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/mermaid-diagrams/SKILL.md"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-6ee1e14b83630fa3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/excalidraw/SKILL.md"}, "properties": {"repobilityId": "f6ece1a783e4b7ee", "scanner": "scanner-primary", "fingerprint": "6ee1e14b83630fa3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/excalidraw/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2704f58fa3642e15", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/develop-web-game/SKILL.md"}, "properties": {"repobilityId": "36209bdae530e9c0", "scanner": "scanner-primary", "fingerprint": "2704f58fa3642e15", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/develop-web-game/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-031545878de69b47", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/creative-design/develop-web-game/SKILL.md"}, "properties": {"repobilityId": "12e8679c7dd87339", "scanner": "scanner-primary", "fingerprint": "031545878de69b47", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/develop-web-game/SKILL.md"}, "region": {"startLine": 140}}}]}, {"ruleId": "scanner-a09657913a075564", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/SKILL.md"}, "properties": {"repobilityId": "2b95a4e847b957be", "scanner": "scanner-primary", "fingerprint": "a09657913a075564", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/game-development/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f21851caec983f9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/game-audio/SKILL.md"}, "properties": {"repobilityId": "51433a441fb5c187", "scanner": "scanner-primary", "fingerprint": "2f21851caec983f9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/game-development/game-audio/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9e777a1aace04f1d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/multiplayer/SKILL.md"}, "properties": {"repobilityId": "c9a8a2c68681b013", "scanner": "scanner-primary", "fingerprint": "9e777a1aace04f1d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/game-development/multiplayer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c88802f6196cbcf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/game-development/game-art/SKILL.md"}, "properties": {"repobilityId": "4450258d6a7f0ee7", "scanner": "scanner-primary", "fingerprint": "2c88802f6196cbcf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/game-development/game-art/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc65e9c62bb2fd73", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/web-design-guidelines/SKILL.md"}, "properties": {"repobilityId": "5af277c92abb8ca1", "scanner": "scanner-primary", "fingerprint": "fc65e9c62bb2fd73", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/web-design-guidelines/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef953ef647011f32", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/algorithmic-art/SKILL.md"}, "properties": {"repobilityId": "bddd2aa80cf85044", "scanner": "scanner-primary", "fingerprint": "ef953ef647011f32", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/algorithmic-art/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2659fea19b52cd32", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/creative-design/figma-implement-design/SKILL.md"}, "properties": {"repobilityId": "07038ab1a398beeb", "scanner": "scanner-primary", "fingerprint": "2659fea19b52cd32", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/figma-implement-design/SKILL.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-c90468ae2d39e092", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/premium-web-design/SKILL.md"}, "properties": {"repobilityId": "b73fa853616d4155", "scanner": "scanner-primary", "fingerprint": "c90468ae2d39e092", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/premium-web-design/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ae8a06277a1e0a4e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/diagrammer/SKILL.md"}, "properties": {"repobilityId": "93891a16e850182d", "scanner": "scanner-primary", "fingerprint": "ae8a06277a1e0a4e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/diagrammer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-afa06171cc3a066d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/creative-design/accessibility-auditor/SKILL.md"}, "properties": {"repobilityId": "7592d3e24c5e21d3", "scanner": "scanner-primary", "fingerprint": "afa06171cc3a066d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/accessibility-auditor/SKILL.md"}, "region": {"startLine": 168}}}]}, {"ruleId": "scanner-7b63375159f5348c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/creative-design/imagegen/SKILL.md"}, "properties": {"repobilityId": "e4a8dd19b9a19182", "scanner": "scanner-primary", "fingerprint": "7b63375159f5348c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/imagegen/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-abb42cf39b0a63cf", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/creative-design/3d-web-experience/SKILL.md"}, "properties": {"repobilityId": "a68cedad60a910d4", "scanner": "scanner-primary", "fingerprint": "abb42cf39b0a63cf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/creative-design/3d-web-experience/SKILL.md"}, "region": {"startLine": 124}}}]}, {"ruleId": "scanner-e76c0bd1ab4f1b09", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-data/data-feeds/SKILL.md"}, "properties": {"repobilityId": "b851c77363938558", "scanner": "scanner-primary", "fingerprint": "e76c0bd1ab4f1b09", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-data/data-feeds/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7d33e913f7ce2581", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-data/search/SKILL.md"}, "properties": {"repobilityId": "9bcce428a7cae103", "scanner": "scanner-primary", "fingerprint": "7d33e913f7ce2581", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-data/search/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c8430f2470cfe23e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-data/scrape/SKILL.md"}, "properties": {"repobilityId": "96b6ac9f96ce6096", "scanner": "scanner-primary", "fingerprint": "c8430f2470cfe23e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-data/scrape/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eaa2ed2d230762f4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/marketing/x-twitter-scraper/SKILL.md"}, "properties": {"repobilityId": "1ea32fdedbdbef10", "scanner": "scanner-primary", "fingerprint": "eaa2ed2d230762f4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/marketing/x-twitter-scraper/SKILL.md"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-4bf0caf97ce78767", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/sports/footballbin-predictions/SKILL.md"}, "properties": {"repobilityId": "6340393e447b44d7", "scanner": "scanner-primary", "fingerprint": "4bf0caf97ce78767", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/sports/footballbin-predictions/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30f40e100d072ade", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/career/tech-resume-optimizer/SKILL.md"}, "properties": {"repobilityId": "8ef5e9043bb87c86", "scanner": "scanner-primary", "fingerprint": "30f40e100d072ade", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/career/tech-resume-optimizer/SKILL.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-a63fff599c367b88", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/career/resume-formatter/SKILL.md"}, "properties": {"repobilityId": "31daad99a4a1334c", "scanner": "scanner-primary", "fingerprint": "a63fff599c367b88", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/career/resume-formatter/SKILL.md"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-cea317e5f45e7056", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/bigquery-basics/SKILL.md"}, "properties": {"repobilityId": "cc9a42ad7c772e25", "scanner": "scanner-primary", "fingerprint": "cea317e5f45e7056", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/database/bigquery-basics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-25c150f56b18ccd4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/supabase-postgres-best-practices/AGENTS.md"}, "properties": {"repobilityId": "a84ae75daee08047", "scanner": "scanner-primary", "fingerprint": "25c150f56b18ccd4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/database/supabase-postgres-best-practices/AGENTS.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b5b1d044204b9cee", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/postgres-schema-design/SKILL.MD"}, "properties": {"repobilityId": "9cc78e72e518d3ab", "scanner": "scanner-primary", "fingerprint": "b5b1d044204b9cee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/database/postgres-schema-design/SKILL.MD"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dc711358451b0ba0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/cloud-sql-basics/SKILL.md"}, "properties": {"repobilityId": "114b1cc093a1a50c", "scanner": "scanner-primary", "fingerprint": "dc711358451b0ba0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/database/cloud-sql-basics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3bf550346bc5815d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/database/using-neon/SKILL.md"}, "properties": {"repobilityId": "bdf82123beaf96d1", "scanner": "scanner-primary", "fingerprint": "3bf550346bc5815d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/database/using-neon/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90be0b740675f53f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/docx-official/SKILL.md"}, "properties": {"repobilityId": "fbe6d846fc0de282", "scanner": "scanner-primary", "fingerprint": "90be0b740675f53f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/docx-official/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1658611dfbdbeec8", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/docx-official/SKILL.md"}, "properties": {"repobilityId": "dfc8e01daa5c8ee7", "scanner": "scanner-primary", "fingerprint": "1658611dfbdbeec8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/docx-official/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-08ba7f71c68ac6fa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/json-canvas/SKILL.md"}, "properties": {"repobilityId": "df20ff6c259b7039", "scanner": "scanner-primary", "fingerprint": "08ba7f71c68ac6fa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/json-canvas/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76ced8aaf7589243", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/pptx/SKILL.md"}, "properties": {"repobilityId": "c90169a08e4eb141", "scanner": "scanner-primary", "fingerprint": "76ced8aaf7589243", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/pptx/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d7da446f6916cbcd", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/pptx/SKILL.md"}, "properties": {"repobilityId": "8db3cb07666e8b8d", "scanner": "scanner-primary", "fingerprint": "d7da446f6916cbcd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/pptx/SKILL.md"}, "region": {"startLine": 230}}}]}, {"ruleId": "scanner-92e73b5fd6112f83", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/obsidian-markdown/SKILL.md"}, "properties": {"repobilityId": "c6dcc52d68535872", "scanner": "scanner-primary", "fingerprint": "92e73b5fd6112f83", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/obsidian-markdown/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-69d3518ba579b30b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/docx/SKILL.md"}, "properties": {"repobilityId": "d6b82914b1485a06", "scanner": "scanner-primary", "fingerprint": "69d3518ba579b30b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/docx/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e94f5c03c11868de", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/docx/SKILL.md"}, "properties": {"repobilityId": "97e17449cb5ed051", "scanner": "scanner-primary", "fingerprint": "e94f5c03c11868de", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/docx/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-304b60830dfa4c57", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/pptx-official/SKILL.md"}, "properties": {"repobilityId": "e9c22781b731dfa8", "scanner": "scanner-primary", "fingerprint": "304b60830dfa4c57", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/pptx-official/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-348e86cad8f673fe", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/document-processing/pptx-official/SKILL.md"}, "properties": {"repobilityId": "e679bbc6c10365ff", "scanner": "scanner-primary", "fingerprint": "348e86cad8f673fe", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/pptx-official/SKILL.md"}, "region": {"startLine": 230}}}]}, {"ruleId": "scanner-9d8fddc5ae2e187a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/documentation-templates/SKILL.md"}, "properties": {"repobilityId": "f97f669ddb4ab332", "scanner": "scanner-primary", "fingerprint": "9d8fddc5ae2e187a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/documentation-templates/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef90bbf8a60cdec0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/document-processing/doc/SKILL.md"}, "properties": {"repobilityId": "6dcfcc03d209cf77", "scanner": "scanner-primary", "fingerprint": "ef90bbf8a60cdec0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/document-processing/doc/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-56bfaebc1043cc5d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/pocketbase/pb-sdk/SKILL.md"}, "properties": {"repobilityId": "6d5c73eca4a36a2a", "scanner": "scanner-primary", "fingerprint": "56bfaebc1043cc5d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/pocketbase/pb-sdk/SKILL.md"}, "region": {"startLine": 336}}}]}, {"ruleId": "scanner-f3d930060d3b67fd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/pocketbase/pb-hooks/SKILL.md"}, "properties": {"repobilityId": "ca69dd7ee57ab0fc", "scanner": "scanner-primary", "fingerprint": "f3d930060d3b67fd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/pocketbase/pb-hooks/SKILL.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-b20d98496a85897f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-maestro/memory-search/SKILL.md"}, "properties": {"repobilityId": "5050086faf4d45c8", "scanner": "scanner-primary", "fingerprint": "b20d98496a85897f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-maestro/memory-search/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c96286fbb46fe54c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-maestro/graph-query/SKILL.md"}, "properties": {"repobilityId": "12b743da225654a3", "scanner": "scanner-primary", "fingerprint": "c96286fbb46fe54c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-maestro/graph-query/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8e715225d453ab59", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/ai-maestro/agent-messaging/SKILL.md"}, "properties": {"repobilityId": "cb3c473d26816757", "scanner": "scanner-primary", "fingerprint": "8e715225d453ab59", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/ai-maestro/agent-messaging/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-919c5d65affc323b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/sentry/find-bugs/SKILL.md"}, "properties": {"repobilityId": "0e65fbe006d9dc33", "scanner": "scanner-primary", "fingerprint": "919c5d65affc323b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/sentry/find-bugs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7fff7dc393b94717", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/sentry/code-review/SKILL.md"}, "properties": {"repobilityId": "e0ac4c1db99e4647", "scanner": "scanner-primary", "fingerprint": "7fff7dc393b94717", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/sentry/code-review/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-16871ec64004a8b8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/firecrawl-scraper/SKILL.md"}, "properties": {"repobilityId": "62b56e9d87b80237", "scanner": "scanner-primary", "fingerprint": "16871ec64004a8b8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/firecrawl-scraper/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-19b04b8477f3e961", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/web-development/react-state-management/SKILL.md"}, "properties": {"repobilityId": "001db9fc51371f58", "scanner": "scanner-primary", "fingerprint": "19b04b8477f3e961", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/react-state-management/SKILL.md"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-3fa15fe763de4999", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/web-development/sveltekit/SKILL.md"}, "properties": {"repobilityId": "d63a247d0217f928", "scanner": "scanner-primary", "fingerprint": "3fa15fe763de4999", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/sveltekit/SKILL.md"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-ccfb4e6bf0946fea", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/exa-search/SKILL.md"}, "properties": {"repobilityId": "7d0162c95241805c", "scanner": "scanner-primary", "fingerprint": "ccfb4e6bf0946fea", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/exa-search/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-22b11c480b8a925f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/web-performance-optimization/SKILL.md"}, "properties": {"repobilityId": "37342f7125755bba", "scanner": "scanner-primary", "fingerprint": "22b11c480b8a925f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/web-performance-optimization/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc286e51ab93302e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/astro/SKILL.md"}, "properties": {"repobilityId": "3b5096447f8c6f7f", "scanner": "scanner-primary", "fingerprint": "cc286e51ab93302e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/astro/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-daa9cf0f8a5419ac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/tavily-web/SKILL.md"}, "properties": {"repobilityId": "7a2702783d2f9d36", "scanner": "scanner-primary", "fingerprint": "daa9cf0f8a5419ac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/tavily-web/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d5490ba73343cfd5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/blockrun/SKILL.md"}, "properties": {"repobilityId": "c5ab26560a94d3a6", "scanner": "scanner-primary", "fingerprint": "d5490ba73343cfd5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/blockrun/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c01367f4a395cca", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/zustand-store-ts/SKILL.md"}, "properties": {"repobilityId": "dbebd15f50cebad8", "scanner": "scanner-primary", "fingerprint": "9c01367f4a395cca", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/zustand-store-ts/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-454962afe4589124", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/components/skills/web-development/shopify-development/SKILL.md"}, "properties": {"repobilityId": "005f0e610552e11a", "scanner": "scanner-primary", "fingerprint": "454962afe4589124", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/shopify-development/SKILL.md"}, "region": {"startLine": 211}}}]}, {"ruleId": "scanner-9b19074f6b8b7ba4", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/components/skills/web-development/shopify-development/SKILL.md"}, "properties": {"repobilityId": "0d1ad16c38476c38", "scanner": "scanner-primary", "fingerprint": "9b19074f6b8b7ba4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/shopify-development/SKILL.md"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-073343337b2bc293", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/components/skills/web-development/shadcn/SKILL.md"}, "properties": {"repobilityId": "6336581499b01db4", "scanner": "scanner-primary", "fingerprint": "073343337b2bc293", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/components/skills/web-development/shadcn/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-60cff32827781fc1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/.claude/sandbox/cloudflare/SANDBOX_DEBUGGING.md"}, "properties": {"repobilityId": "4910d1c61806ce0c", "scanner": "scanner-primary", "fingerprint": "60cff32827781fc1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/.claude/sandbox/cloudflare/SANDBOX_DEBUGGING.md"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-a67d7e7b162ddb24", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: cli-tool/.claude/sandbox/cloudflare/SANDBOX_DEBUGGING.md"}, "properties": {"repobilityId": "4de93592d122e225", "scanner": "scanner-primary", "fingerprint": "a67d7e7b162ddb24", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/.claude/sandbox/cloudflare/SANDBOX_DEBUGGING.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e310562c37e5b25d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: cli-tool/.claude/sandbox/cloudflare/claude-code-sandbox.md"}, "properties": {"repobilityId": "d96c03ad8724539b", "scanner": "scanner-primary", "fingerprint": "e310562c37e5b25d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/.claude/sandbox/cloudflare/claude-code-sandbox.md"}, "region": {"startLine": 306}}}]}, {"ruleId": "scanner-87c592d1f8ea4a07", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/.claude/sandbox/cloudflare/README.md"}, "properties": {"repobilityId": "c93f0203a231d437", "scanner": "scanner-primary", "fingerprint": "87c592d1f8ea4a07", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/.claude/sandbox/cloudflare/README.md"}, "region": {"startLine": 166}}}]}, {"ruleId": "scanner-2b58452f1b908368", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: cli-tool/.claude/sandbox/cloudflare/QUICKSTART.md"}, "properties": {"repobilityId": "84053ef07f3b3975", "scanner": "scanner-primary", "fingerprint": "2b58452f1b908368", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli-tool/.claude/sandbox/cloudflare/QUICKSTART.md"}, "region": {"startLine": 176}}}]}, {"ruleId": "scanner-61f64af4e1b91986", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: docs/CLAUDE.md"}, "properties": {"repobilityId": "d2df5b4e51df9232", "scanner": "scanner-primary", "fingerprint": "61f64af4e1b91986", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8a4f2a9f9845937", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/cli-ui-designer.md"}, "properties": {"repobilityId": "013d3bc76806b401", "scanner": "scanner-primary", "fingerprint": "b8a4f2a9f9845937", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/cli-ui-designer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-66d7a80907c1ee46", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agents/component-reviewer.md"}, "properties": {"repobilityId": "0d19d00d2ac95b2c", "scanner": "scanner-primary", "fingerprint": "66d7a80907c1ee46", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/component-reviewer.md"}, "region": {"startLine": 276}}}]}, {"ruleId": "scanner-7e3e6e5719c9bda4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/component-reviewer.md"}, "properties": {"repobilityId": "7f9a217118c022fd", "scanner": "scanner-primary", "fingerprint": "7e3e6e5719c9bda4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/component-reviewer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e2ba07dc9a6bce5a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/lint.md"}, "properties": {"repobilityId": "c037927d106a2ea0", "scanner": "scanner-primary", "fingerprint": "e2ba07dc9a6bce5a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/lint.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d51de83224902cad", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/worktree-init.md"}, "properties": {"repobilityId": "3f905779e6c9a16e", "scanner": "scanner-primary", "fingerprint": "d51de83224902cad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/worktree-init.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12e498cb0043c854", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/rules/dashboard.md"}, "properties": {"repobilityId": "5224ac18cb4886bd", "scanner": "scanner-primary", "fingerprint": "12e498cb0043c854", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/dashboard.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3600f802b06416b8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/rules/cloudflare.md"}, "properties": {"repobilityId": "3a33d2ffcbc541ff", "scanner": "scanner-primary", "fingerprint": "3600f802b06416b8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/cloudflare.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-17cd9183a6e14640", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/components/live-task/LiveTaskPanel.tsx:112"}, "properties": {"repobilityId": "bccbb76a02987737", "scanner": "scanner-primary", "fingerprint": "17cd9183a6e14640", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-cee743b0c8fcceb0", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/pages/api/claude-code-check.ts:10"}, "properties": {"repobilityId": "7ccd8506cc807df6", "scanner": "scanner-primary", "fingerprint": "cee743b0c8fcceb0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c88359e7efd465cd", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/pages/api/discord/interactions.ts:29"}, "properties": {"repobilityId": "38cb2e2e4b3624ce", "scanner": "scanner-primary", "fingerprint": "c88359e7efd465cd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e3b7e5993894f8da", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 dashboard/src/lib/github-api.ts:32"}, "properties": {"repobilityId": "390c2f02c28ee0dd", "scanner": "scanner-primary", "fingerprint": "e3b7e5993894f8da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c734eaea16352bbe", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/skillspector_scan.py:85"}, "properties": {"repobilityId": "d9c9c47f5d14450d", "scanner": "scanner-primary", "fingerprint": "c734eaea16352bbe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8f7e7571eebb4aa0", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/generate_components_json.py:240"}, "properties": {"repobilityId": "8c3fb9dd6bfd6fb0", "scanner": "scanner-primary", "fingerprint": "8f7e7571eebb4aa0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6e080d38202e8daf", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/src/tracking-service.js:132"}, "properties": {"repobilityId": "77e8779171ce8750", "scanner": "scanner-primary", "fingerprint": "6e080d38202e8daf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-985e9aa3223934c1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/src/index.js:530"}, "properties": {"repobilityId": "f8270666dabfdb10", "scanner": "scanner-primary", "fingerprint": "985e9aa3223934c1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-603f24b078f4cd76", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/src/sdk/global-agent-manager.js:63"}, "properties": {"repobilityId": "c5677752e46d5e69", "scanner": "scanner-primary", "fingerprint": "603f24b078f4cd76", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-40989fb9b71d53b2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/sandbox/e2b/e2b-launcher.py:37"}, "properties": {"repobilityId": "8645f260f6d1189f", "scanner": "scanner-primary", "fingerprint": "40989fb9b71d53b2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-62fdc7e3e1b79685", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/components/sandbox/cloudflare/launcher.ts:330"}, "properties": {"repobilityId": "28441c01d2abceaf", "scanner": "scanner-primary", "fingerprint": "62fdc7e3e1b79685", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-506c64d0f5f5df86", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/components/sandbox/cloudflare/src/index.ts:33"}, "properties": {"repobilityId": "e89f97b62a603ba3", "scanner": "scanner-primary", "fingerprint": "506c64d0f5f5df86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e329dcd362f3202a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/hooks/monitoring/context-timeline.py:1109"}, "properties": {"repobilityId": "3cb69d2c7af502d7", "scanner": "scanner-primary", "fingerprint": "e329dcd362f3202a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-19402a5b9bdf8152", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/hooks/security/secret-scanner.py:320"}, "properties": {"repobilityId": "89c34ba638bf1ec8", "scanner": "scanner-primary", "fingerprint": "19402a5b9bdf8152", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-67d32d9ebf02ed4a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/settings/statusline/context-monitor.py:24"}, "properties": {"repobilityId": "d6c9d2b3d146daee", "scanner": "scanner-primary", "fingerprint": "67d32d9ebf02ed4a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-47c056f003987936", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/settings/statusline/deadline-countdown.py:35"}, "properties": {"repobilityId": "883d3e1f29db31a4", "scanner": "scanner-primary", "fingerprint": "47c056f003987936", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-86ce5d6d11b6ac2f", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/notebooklm/scripts/__init__.py:53"}, "properties": {"repobilityId": "48ed4e8851d7f8cf", "scanner": "scanner-primary", "fingerprint": "86ce5d6d11b6ac2f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f09cf028b09b2586", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/notebooklm/scripts/setup_environment.py:62"}, "properties": {"repobilityId": "23cc2ce82d599aad", "scanner": "scanner-primary", "fingerprint": "f09cf028b09b2586", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a0644701864d9c46", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/notebooklm/scripts/run.py:38"}, "properties": {"repobilityId": "54288c7cfc570b9e", "scanner": "scanner-primary", "fingerprint": "a0644701864d9c46", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-81f33934007b6ccf", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/productivity/skill-creator/scripts/run_eval.py:85"}, "properties": {"repobilityId": "3281354791daec13", "scanner": "scanner-primary", "fingerprint": "81f33934007b6ccf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-87ce0cc7ade2eed8", "level": "none", "message": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/productivity/skill-creator/scripts/improve_description.py:158"}, "properties": {"repobilityId": "05442f0c1141ae63", "scanner": "scanner-primary", "fingerprint": "87ce0cc7ade2eed8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a984deb42f86e06a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/development/skill-development/scripts/run_eval.py:85"}, "properties": {"repobilityId": "e95038e544b31ca8", "scanner": "scanner-primary", "fingerprint": "a984deb42f86e06a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5bf7f4237282b6d6", "level": "none", "message": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/development/skill-development/scripts/improve_description.py:158"}, "properties": {"repobilityId": "dca74d1078935a3a", "scanner": "scanner-primary", "fingerprint": "5bf7f4237282b6d6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bd19176b4a496155", "level": "none", "message": {"text": "Commented-code block (8 lines) in cli-tool/components/skills/development/systematic-debugging/condition-based-waiting-example.ts:140"}, "properties": {"repobilityId": "0212e38709795605", "scanner": "scanner-primary", "fingerprint": "bd19176b4a496155", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3a61638979c62d64", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/development/skill-creator/scripts/run_eval.py:85"}, "properties": {"repobilityId": "da21c2ca407c7803", "scanner": "scanner-primary", "fingerprint": "3a61638979c62d64", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-82716e747c2dc553", "level": "none", "message": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/development/skill-creator/scripts/improve_description.py:158"}, "properties": {"repobilityId": "57560c1b68b2707e", "scanner": "scanner-primary", "fingerprint": "82716e747c2dc553", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-77fab8f37ea873df", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/components/skills/ai-research/loki-mode/examples/todo-app-generated/frontend/src/api/todos.ts:15"}, "properties": {"repobilityId": "bd094654bb63c4ba", "scanner": "scanner-primary", "fingerprint": "77fab8f37ea873df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9a0f9c0fc95f6144", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/security/security-ownership-map/scripts/build_ownership_map.py:360"}, "properties": {"repobilityId": "dc2049c8ec10613d", "scanner": "scanner-primary", "fingerprint": "9a0f9c0fc95f6144", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c0834ccbc54e279b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/security/security-ownership-map/scripts/run_ownership_map.py:195"}, "properties": {"repobilityId": "32238210449d7a0a", "scanner": "scanner-primary", "fingerprint": "c0834ccbc54e279b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d5f66e15063a9d1a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/security/security-ownership-map/scripts/community_maintainers.py:324"}, "properties": {"repobilityId": "76e56c82ce8574d1", "scanner": "scanner-primary", "fingerprint": "d5f66e15063a9d1a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c54364c40c6608ea", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/media/screenshot/scripts/take_screenshot.py:237"}, "properties": {"repobilityId": "f58823ad1d854e82", "scanner": "scanner-primary", "fingerprint": "c54364c40c6608ea", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-817611be0db27125", "level": "none", "message": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/stable-baselines3/scripts/train_rl_agent.py:101"}, "properties": {"repobilityId": "e5b23ce1029fd01e", "scanner": "scanner-primary", "fingerprint": "817611be0db27125", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e57948d435dea477", "level": "none", "message": {"text": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/stable-baselines3/scripts/custom_env_template.py:59"}, "properties": {"repobilityId": "9a1b88e85b22fd87", "scanner": "scanner-primary", "fingerprint": "e57948d435dea477", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3a59d87db402eda6", "level": "none", "message": {"text": "Commented-code block (8 lines) in cli-tool/components/skills/scientific/stable-baselines3/scripts/evaluate_agent.py:210"}, "properties": {"repobilityId": "41670d5846fc69c7", "scanner": "scanner-primary", "fingerprint": "3a59d87db402eda6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ddf29c3fed58b7c9", "level": "none", "message": {"text": "Commented-code block (8 lines) in cli-tool/components/skills/scientific/pydicom/scripts/anonymize_dicom.py:73"}, "properties": {"repobilityId": "b0cf45808b2aaa4c", "scanner": "scanner-primary", "fingerprint": "ddf29c3fed58b7c9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c20bf274f83a0fee", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/ensembl-database/scripts/ensembl_query.py:159"}, "properties": {"repobilityId": "5f3fbeef39721715", "scanner": "scanner-primary", "fingerprint": "c20bf274f83a0fee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-857db9bdc67fd6a5", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/clinpgx-database/scripts/query_clinpgx.py:36"}, "properties": {"repobilityId": "356e37d7c69f6b7a", "scanner": "scanner-primary", "fingerprint": "857db9bdc67fd6a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2b68bbf94d434b2d", "level": "none", "message": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/matplotlib/scripts/plot_template.py:186"}, "properties": {"repobilityId": "65b764e3095deeaf", "scanner": "scanner-primary", "fingerprint": "2b68bbf94d434b2d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f7dc40edab17741c", "level": "none", "message": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/document-skills/pdf/scripts/extract_form_field_info.py:56"}, "properties": {"repobilityId": "ca15f0474527dd99", "scanner": "scanner-primary", "fingerprint": "f7dc40edab17741c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03529930ca822959", "level": "none", "message": {"text": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/document-skills/pptx/scripts/thumbnail.py:32"}, "properties": {"repobilityId": "8ce1481ea08d3ae9", "scanner": "scanner-primary", "fingerprint": "03529930ca822959", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-63c87db9799c2698", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/pptx/scripts/thumbnail.py:219"}, "properties": {"repobilityId": "70399c7fd9ff8e95", "scanner": "scanner-primary", "fingerprint": "63c87db9799c2698", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8d5de3e8ae137768", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/pptx/ooxml/scripts/validation/redlining.py:153"}, "properties": {"repobilityId": "42d96318449d6109", "scanner": "scanner-primary", "fingerprint": "8d5de3e8ae137768", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d940cb9c5ff62fd3", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/scientific/document-skills/pptx/ooxml/scripts/validation/base.py:769"}, "properties": {"repobilityId": "4faea8b0fcb7006a", "scanner": "scanner-primary", "fingerprint": "d940cb9c5ff62fd3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-90995b05e99b7e31", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/xlsx/recalc.py:92"}, "properties": {"repobilityId": "3f409501ae7a1597", "scanner": "scanner-primary", "fingerprint": "90995b05e99b7e31", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-add7b91cc3cd33a5", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/document-skills/docx/ooxml/scripts/validation/redlining.py:153"}, "properties": {"repobilityId": "aab8f9e71537536e", "scanner": "scanner-primary", "fingerprint": "add7b91cc3cd33a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5606e713c3e7fc2f", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/scientific/document-skills/docx/ooxml/scripts/validation/base.py:769"}, "properties": {"repobilityId": "33a2a5eb3052086a", "scanner": "scanner-primary", "fingerprint": "5606e713c3e7fc2f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-31801ecd11887174", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/uspto-database/scripts/patent_search.py:70"}, "properties": {"repobilityId": "0cd83643a868ada6", "scanner": "scanner-primary", "fingerprint": "31801ecd11887174", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c1a5118192631a54", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/reactome-database/scripts/reactome_query.py:36"}, "properties": {"repobilityId": "d8f7151e73cf92ae", "scanner": "scanner-primary", "fingerprint": "c1a5118192631a54", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-05b1d8f9f30de08c", "level": "none", "message": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/research-lookup/examples.py:140"}, "properties": {"repobilityId": "fb03f79edc71627d", "scanner": "scanner-primary", "fingerprint": "05b1d8f9f30de08c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ef9014be3cbe384f", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/generate-image/scripts/generate_image.py:144"}, "properties": {"repobilityId": "9183ed3b79b12445", "scanner": "scanner-primary", "fingerprint": "ef9014be3cbe384f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-79107c7906037ead", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/uniprot-database/scripts/uniprot_client.py:61"}, "properties": {"repobilityId": "b928bd312d92d445", "scanner": "scanner-primary", "fingerprint": "79107c7906037ead", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f2737d9ffb191d1b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/biomni/scripts/setup_environment.py:47"}, "properties": {"repobilityId": "7064dd5b616fa779", "scanner": "scanner-primary", "fingerprint": "f2737d9ffb191d1b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-218f8973a8225062", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/labarchive-integration/scripts/entry_operations.py:172"}, "properties": {"repobilityId": "b6a304e0c42e0226", "scanner": "scanner-primary", "fingerprint": "218f8973a8225062", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3d3a74f243a753b9", "level": "note", "message": {"text": "Legacy-named symbol `notebook_backup` in cli-tool/components/skills/scientific/labarchive-integration/scripts/notebook_operations.py:131"}, "properties": {"repobilityId": "fe81460cdc4481ed", "scanner": "scanner-primary", "fingerprint": "3d3a74f243a753b9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-eaa087c9e96b860b", "level": "none", "message": {"text": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/pymc/assets/hierarchical_model_template.py:20"}, "properties": {"repobilityId": "8a1a4b16a491dd0a", "scanner": "scanner-primary", "fingerprint": "eaa087c9e96b860b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5372a6a6e9f0128d", "level": "none", "message": {"text": "Commented-code block (5 lines) in cli-tool/components/skills/scientific/pymc/assets/linear_regression_template.py:20"}, "properties": {"repobilityId": "40e2713f7c8d7d99", "scanner": "scanner-primary", "fingerprint": "5372a6a6e9f0128d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d3f8ef4adbbf66fc", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/scientific/clinicaltrials-database/scripts/query_clinicaltrials.py:87"}, "properties": {"repobilityId": "3f58759f83d73053", "scanner": "scanner-primary", "fingerprint": "d3f8ef4adbbf66fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-bba90ea889c3530b", "level": "none", "message": {"text": "Commented-code block (6 lines) in cli-tool/components/skills/scientific/pufferlib/scripts/env_template.py:39"}, "properties": {"repobilityId": "44f707452f9cef89", "scanner": "scanner-primary", "fingerprint": "bba90ea889c3530b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-20e32368d35ee124", "level": "none", "message": {"text": "Commented-code block (8 lines) in cli-tool/components/skills/scientific/pytorch-lightning/scripts/template_datamodule.py:174"}, "properties": {"repobilityId": "cd4b3ffb8460257d", "scanner": "scanner-primary", "fingerprint": "20e32368d35ee124", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-817621da1aaa44e1", "level": "none", "message": {"text": "Commented-code block (10 lines) in cli-tool/components/skills/enterprise-communication/regulatory-affairs-head/scripts/regulatory_tracker.py:185"}, "properties": {"repobilityId": "fa4e8cf5fb66dc95", "scanner": "scanner-primary", "fingerprint": "817621da1aaa44e1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e75c02f809a31fb3", "level": "note", "message": {"text": "Legacy-named symbol `days_old` in cli-tool/components/skills/enterprise-communication/session-handoff/scripts/check_staleness.py:164"}, "properties": {"repobilityId": "4d1df24c802f9f78", "scanner": "scanner-primary", "fingerprint": "e75c02f809a31fb3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-45b02a749dac6b9b", "level": "none", "message": {"text": "Commented-code block (8 lines) in cli-tool/components/skills/creative-design/algorithmic-art/templates/generator_template.js:15"}, "properties": {"repobilityId": "7246e8b136e491c6", "scanner": "scanner-primary", "fingerprint": "45b02a749dac6b9b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fc4a2af44c20e2b1", "level": "note", "message": {"text": "Legacy-named symbol `button_v1` in cli-tool/components/skills/creative-design/executing-marketing-campaigns/scripts/marketing_utils.py:39"}, "properties": {"repobilityId": "9e4a5332e306e85c", "scanner": "scanner-primary", "fingerprint": "fc4a2af44c20e2b1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-88742301455f03ed", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx-official/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "d73a853d0251a0ee", "scanner": "scanner-primary", "fingerprint": "88742301455f03ed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5896fad0ae64d7bc", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx-official/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "c75abafaab8e178f", "scanner": "scanner-primary", "fingerprint": "5896fad0ae64d7bc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-797adce94ab2ad15", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/docx-official/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "78efa6f6f3e60639", "scanner": "scanner-primary", "fingerprint": "797adce94ab2ad15", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-cf9dee2b552c1360", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/scripts/thumbnail.py:161"}, "properties": {"repobilityId": "db708da75607d482", "scanner": "scanner-primary", "fingerprint": "cf9dee2b552c1360", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-224ae085561803b5", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "11c02503dcba05f9", "scanner": "scanner-primary", "fingerprint": "224ae085561803b5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-36b5641bfa136b4f", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "4333dad591d5df22", "scanner": "scanner-primary", "fingerprint": "36b5641bfa136b4f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-be92884dd304281f", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/pptx/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "1f8742ba2145ef87", "scanner": "scanner-primary", "fingerprint": "be92884dd304281f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b3d388cc93bc443b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx/ooxml/scripts/validation/redlining.py:153"}, "properties": {"repobilityId": "58713d6e9736439d", "scanner": "scanner-primary", "fingerprint": "b3d388cc93bc443b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1c45b404ba4ca081", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/pptx/ooxml/scripts/validation/base.py:769"}, "properties": {"repobilityId": "1e45f3f0fac58ba5", "scanner": "scanner-primary", "fingerprint": "1c45b404ba4ca081", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7a9b3199b0a6530b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/recalc.py:92"}, "properties": {"repobilityId": "9dc117774a0aef25", "scanner": "scanner-primary", "fingerprint": "7a9b3199b0a6530b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0a85e614da02b80a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/scripts/recalc.py:92"}, "properties": {"repobilityId": "02692279731ebede", "scanner": "scanner-primary", "fingerprint": "0a85e614da02b80a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9e682a1c0103abbe", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "495393001a88584c", "scanner": "scanner-primary", "fingerprint": "9e682a1c0103abbe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1fb0c43182eb2a87", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "9817d8cb3284355f", "scanner": "scanner-primary", "fingerprint": "1fb0c43182eb2a87", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a887fefe0efcdcc0", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/xlsx/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "d5b07a2d556506ba", "scanner": "scanner-primary", "fingerprint": "a887fefe0efcdcc0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7465f7d242ff6c20", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "a6092e316bea680f", "scanner": "scanner-primary", "fingerprint": "7465f7d242ff6c20", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3d126409bbee4256", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "f56f849512f9cc43", "scanner": "scanner-primary", "fingerprint": "3d126409bbee4256", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f36e27155a145095", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/docx/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "f766787bd69e5e6c", "scanner": "scanner-primary", "fingerprint": "f36e27155a145095", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-36bb9f86a552f6eb", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/docx/ooxml/scripts/validation/redlining.py:153"}, "properties": {"repobilityId": "815a11b59aa16eea", "scanner": "scanner-primary", "fingerprint": "36bb9f86a552f6eb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-caba650e9bd49785", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/docx/ooxml/scripts/validation/base.py:769"}, "properties": {"repobilityId": "6895fcaa0e7b8c92", "scanner": "scanner-primary", "fingerprint": "caba650e9bd49785", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2b3ce7cbcf732514", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx-official/scripts/thumbnail.py:161"}, "properties": {"repobilityId": "0f5950d5f0e741ff", "scanner": "scanner-primary", "fingerprint": "2b3ce7cbcf732514", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ce54a22d8fcb42ae", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx-official/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "a79bf61a428ed410", "scanner": "scanner-primary", "fingerprint": "ce54a22d8fcb42ae", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-81700d7fed8f9778", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/pptx-official/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "49a30f5aa878313c", "scanner": "scanner-primary", "fingerprint": "81700d7fed8f9778", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ce13010e0d8acc6b", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/pptx-official/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "be1f1384fc0997b0", "scanner": "scanner-primary", "fingerprint": "ce13010e0d8acc6b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-580c271e3547de83", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/doc/scripts/render_docx.py:101"}, "properties": {"repobilityId": "d852e14f46924af3", "scanner": "scanner-primary", "fingerprint": "580c271e3547de83", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dfa80f82b29b2224", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/recalc.py:92"}, "properties": {"repobilityId": "cee0e2a79fda9c9f", "scanner": "scanner-primary", "fingerprint": "dfa80f82b29b2224", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-97b2128f88108721", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/scripts/recalc.py:92"}, "properties": {"repobilityId": "17f7d85033c3ffee", "scanner": "scanner-primary", "fingerprint": "97b2128f88108721", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6212b5278e22fa36", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "dd6eafe01a0ee542", "scanner": "scanner-primary", "fingerprint": "6212b5278e22fa36", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1ebe26055bc8e737", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 cli-tool/components/skills/document-processing/xlsx-official/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "a6ec59d65c617365", "scanner": "scanner-primary", "fingerprint": "1ebe26055bc8e737", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-839c9a5455dfce2e", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in cli-tool/components/skills/document-processing/xlsx-official/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "983ae166594f617a", "scanner": "scanner-primary", "fingerprint": "839c9a5455dfce2e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e1174609777f3017", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cli-tool/.claude/sandbox/cloudflare/src/index.ts:33"}, "properties": {"repobilityId": "28cc5b3544f5303c", "scanner": "scanner-primary", "fingerprint": "e1174609777f3017", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-460e4c732844ce0d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/index-events.js:1150"}, "properties": {"repobilityId": "46774b3de6e98d3c", "scanner": "scanner-primary", "fingerprint": "460e4c732844ce0d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-19aa7ddff53a6a41", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/data-loader.js:37"}, "properties": {"repobilityId": "d1225714bcf60546", "scanner": "scanner-primary", "fingerprint": "19aa7ddff53a6a41", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-72a9fc1ce162deac", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/script.js:48"}, "properties": {"repobilityId": "01c37b714895a55e", "scanner": "scanner-primary", "fingerprint": "72a9fc1ce162deac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7d1e96df34c38ec2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/component-page.js:514"}, "properties": {"repobilityId": "566a3a4b143f0352", "scanner": "scanner-primary", "fingerprint": "7d1e96df34c38ec2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dbc710ba8c873755", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/js/search-functionality.js:172"}, "properties": {"repobilityId": "6cf2dd8b79efe951", "scanner": "scanner-primary", "fingerprint": "dbc710ba8c873755", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dfb828cdea5bcbd5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cloudflare-workers/pulse/index.js:28"}, "properties": {"repobilityId": "aa8bd7c0898c4939", "scanner": "scanner-primary", "fingerprint": "dfb828cdea5bcbd5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e2d2272edc5b53e1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cloudflare-workers/docs-monitor/index.js:91"}, "properties": {"repobilityId": "002ba63194e51df9", "scanner": "scanner-primary", "fingerprint": "e2d2272edc5b53e1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-550e678ef818552d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cloudflare-workers/crons/index.js:24"}, "properties": {"repobilityId": "74cb671e4f13c7dc", "scanner": "scanner-primary", "fingerprint": "550e678ef818552d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ca395a18e146a116", "level": "note", "message": {"text": "38 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "44b4fc87d4005415", "scanner": "scanner-primary", "fingerprint": "ca395a18e146a116", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "07c28ed53a69c24c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f87ed37059aba57b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8b60b65df760df0f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "5e69f364cbcf5f76", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f14d67dfcf87470a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "088b3969240c02ea", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "2e0707b37c55cfae", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3ef32855e5b2e766", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d9590a5490087b76", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b0ceb60045f5cfc1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "437d2cad6a9c16f0", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "edaa24465416582b", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "d2e2f16860e85dd0", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "74f1ccf0ba582c61", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "a285d6a1f9b5ae8b", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "b1747473b2d48662", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "53b69bb79c1c2494", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "10faad2567569430", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "333fca8579e428bd", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "014254aa5abab17d", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-f85b413037a8f432", "level": "error", "message": {"text": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (api/claude-code-check.js:13)"}, "properties": {"repobilityId": "a9cfc1877b400ddf", "scanner": "scanner-primary", "fingerprint": "f85b413037a8f432", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-e0e2057b5d99c6cb", "level": "error", "message": {"text": "Dangling fetch: GET https://aitmpl.com/components.json (api/discord/interactions.js:24)"}, "properties": {"repobilityId": "6ead9745a2971677", "scanner": "scanner-primary", "fingerprint": "e0e2057b5d99c6cb", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-a219cef331d59b0a", "level": "error", "message": {"text": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (api/claude-code-monitor/check-version.js:13)"}, "properties": {"repobilityId": "e18fbcae1aa60872", "scanner": "scanner-primary", "fingerprint": "a219cef331d59b0a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-5c9ab4b285ec8a43", "level": "error", "message": {"text": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (api/claude-code-monitor/webhook.js:24)"}, "properties": {"repobilityId": "8ab63c483fcd5c7b", "scanner": "scanner-primary", "fingerprint": "5c9ab4b285ec8a43", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-5a38b9f9378c8d39", "level": "error", "message": {"text": "Dangling fetch: POST https://www.aitmpl.com/api/track-download-supabase (cli-tool/src/tracking-service.js:132)"}, "properties": {"repobilityId": "e6b6b9cc85047f59", "scanner": "scanner-primary", "fingerprint": "5a38b9f9378c8d39", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-79b0b327308e846c", "level": "error", "message": {"text": "Dangling fetch: POST https://www.aitmpl.com/api/track-command-usage (cli-tool/src/tracking-service.js:262)"}, "properties": {"repobilityId": "4dfb143744f4dc6a", "scanner": "scanner-primary", "fingerprint": "79b0b327308e846c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d98158fd30755e2e", "level": "error", "message": {"text": "Dangling fetch: POST https://www.aitmpl.com/api/track-installation-outcome (cli-tool/src/tracking-service.js:338)"}, "properties": {"repobilityId": "29636471c359c368", "scanner": "scanner-primary", "fingerprint": "d98158fd30755e2e", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e9e91472a92ebe2d", "level": "error", "message": {"text": "Dangling fetch: GET https://aitmpl.com/api/agents.json (cli-tool/src/index.js:1464)"}, "properties": {"repobilityId": "7c7164269240aada", "scanner": "scanner-primary", "fingerprint": "e9e91472a92ebe2d", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f8f434a78f49febf", "level": "error", "message": {"text": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents (cli-tool/src/index.js:1479)"}, "properties": {"repobilityId": "5ceb382acd5aefd5", "scanner": "scanner-primary", "fingerprint": "f8f434a78f49febf", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-676db85b71b1024a", "level": "error", "message": {"text": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents/${item.name} (cli-tool/src/index.js:1523)"}, "properties": {"repobilityId": "a6907ef3ac923b70", "scanner": "scanner-primary", "fingerprint": "676db85b71b1024a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-730cefd7dfc24566", "level": "error", "message": {"text": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents (cli-tool/src/sdk/global-agent-manager.js:546)"}, "properties": {"repobilityId": "6f1b08a166a79e0e", "scanner": "scanner-primary", "fingerprint": "730cefd7dfc24566", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-66bc1f950169e081", "level": "error", "message": {"text": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents (cli-tool/src/sdk/global-agent-manager.js:581)"}, "properties": {"repobilityId": "50596df748936e1d", "scanner": "scanner-primary", "fingerprint": "66bc1f950169e081", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0b4c0b065b55a621", "level": "error", "message": {"text": "Dangling fetch: GET https://api.github.com/repos/davila7/claude-code-templates/contents/cli-tool/components/agents/${item.name} (cli-tool/src/sdk/global-agent-manager.js:595)"}, "properties": {"repobilityId": "5e2fcba55c496179", "scanner": "scanner-primary", "fingerprint": "0b4c0b065b55a621", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-fbce3efc4cbc7c32", "level": "error", "message": {"text": "Dangling fetch: GET https://api.github.com/repos/${GITHUB_CONFIG.owner}/${GITHUB_CONFIG.repo}/contents/cli-tool/components/${type}/${file.name} (docs/js/script.js:1256)"}, "properties": {"repobilityId": "fbcb7e1dd5636fb6", "scanner": "scanner-primary", "fingerprint": "fbce3efc4cbc7c32", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-38c9275a4b4c3088", "level": "error", "message": {"text": "Dangling fetch: GET https://raw.githubusercontent.com/davila7/claude-code-templates/main/cli-tool/components/.claude-plugin/marketplace.json (docs/js/component-page.js:514)"}, "properties": {"repobilityId": "e0026ecd6a4a58b5", "scanner": "scanner-primary", "fingerprint": "38c9275a4b4c3088", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e53e934155bee4a2", "level": "error", "message": {"text": "Dangling fetch: GET https://code.claude.com/docs (cloudflare-workers/docs-monitor/index.js:15)"}, "properties": {"repobilityId": "80550025c45a291a", "scanner": "scanner-primary", "fingerprint": "e53e934155bee4a2", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-fd0aa670f9968a87", "level": "error", "message": {"text": "Dangling fetch: GET /claude-jobs.json (dashboard/src/components/JobsPreview.tsx:74)"}, "properties": {"repobilityId": "f916b72872da822d", "scanner": "scanner-primary", "fingerprint": "fd0aa670f9968a87", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e3ddff48f79fea06", "level": "error", "message": {"text": "Dangling fetch: POST /api/collections/share (dashboard/src/components/MyComponentsView.tsx:598)"}, "properties": {"repobilityId": "b6097cc5675a748b", "scanner": "scanner-primary", "fingerprint": "e3ddff48f79fea06", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e1b9e1a3c4388e1c", "level": "error", "message": {"text": "Dangling fetch: GET /claude-jobs.json (dashboard/src/components/JobsView.tsx:96)"}, "properties": {"repobilityId": "982f3227421449ee", "scanner": "scanner-primary", "fingerprint": "e1b9e1a3c4388e1c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-6458684f920cc1c5", "level": "error", "message": {"text": "Dangling fetch: GET /trending-data.json (dashboard/src/components/TrendingView.tsx:59)"}, "properties": {"repobilityId": "fd0fa5f91ecd4c10", "scanner": "scanner-primary", "fingerprint": "6458684f920cc1c5", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-748464998277f935", "level": "error", "message": {"text": "Dangling fetch: GET /api/live-task/cycles?limit=20 (dashboard/src/components/live-task/LiveTaskPanel.tsx:30)"}, "properties": {"repobilityId": "d56dd964c5bc8205", "scanner": "scanner-primary", "fingerprint": "748464998277f935", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-891c841ed1ba295a", "level": "error", "message": {"text": "Dangling fetch: GET /api/live-task/control (dashboard/src/components/live-task/LiveTaskPanel.tsx:38)"}, "properties": {"repobilityId": "60db96a5ad5131e2", "scanner": "scanner-primary", "fingerprint": "891c841ed1ba295a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-45488e0861913246", "level": "error", "message": {"text": "Dangling fetch: GET /api/live-task/tools?cycle_id=${cycleId} (dashboard/src/components/live-task/LiveTaskPanel.tsx:46)"}, "properties": {"repobilityId": "1076a6f67da57369", "scanner": "scanner-primary", "fingerprint": "45488e0861913246", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-bcc39818b2960f68", "level": "error", "message": {"text": "Dangling fetch: POST /api/live-task/control (dashboard/src/components/live-task/LiveTaskPanel.tsx:112)"}, "properties": {"repobilityId": "3a2531b8bf24b982", "scanner": "scanner-primary", "fingerprint": "bcc39818b2960f68", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-dd3f429659ac630e", "level": "error", "message": {"text": "Dangling fetch: GET https://registry.npmjs.org/${NPM_PACKAGE}/latest (dashboard/src/pages/api/claude-code-check.ts:10)"}, "properties": {"repobilityId": "cf786bbe3fa99056", "scanner": "scanner-primary", "fingerprint": "dd3f429659ac630e", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-7957dbc831a9cef9", "level": "error", "message": {"text": "Dangling fetch: GET https://www.aitmpl.com/components.json (dashboard/src/pages/api/discord/interactions.ts:29)"}, "properties": {"repobilityId": "9328fb1aea385793", "scanner": "scanner-primary", "fingerprint": "7957dbc831a9cef9", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-375a05898db48b47", "level": "error", "message": {"text": "Dangling fetch: POST https://github.com/login/oauth/access_token (dashboard/src/pages/api/github/token.ts:24)"}, "properties": {"repobilityId": "545a0e7df684da76", "scanner": "scanner-primary", "fingerprint": "375a05898db48b47", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-3a3c45156489b020", "level": "note", "message": {"text": "Unused endpoint: GET /api/users"}, "properties": {"repobilityId": "c7a9a492e7c85b6a", "scanner": "scanner-primary", "fingerprint": "3a3c45156489b020", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-49546f6900fb04c5", "level": "note", "message": {"text": "Unused endpoint: POST /api/users"}, "properties": {"repobilityId": "2e0f3641a2d0353b", "scanner": "scanner-primary", "fingerprint": "49546f6900fb04c5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0ffef5a07597afc9", "level": "note", "message": {"text": "Unused endpoint: GET /api/users/{user_id}"}, "properties": {"repobilityId": "d0ad15f0c7de5970", "scanner": "scanner-primary", "fingerprint": "0ffef5a07597afc9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-887c385438b11bc5", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/users/{user_id}"}, "properties": {"repobilityId": "a6c6b020a733d36b", "scanner": "scanner-primary", "fingerprint": "887c385438b11bc5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c3fb176c336b8818", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/users/{user_id}"}, "properties": {"repobilityId": "9965079dd2c2345f", "scanner": "scanner-primary", "fingerprint": "c3fb176c336b8818", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-51baa046357d29df", "level": "note", "message": {"text": "Unused endpoint: GET /component/:type/:name"}, "properties": {"repobilityId": "fd881295cd2a4b39", "scanner": "scanner-primary", "fingerprint": "51baa046357d29df", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1abb102f2c991dea", "level": "note", "message": {"text": "Unused endpoint: GET /blog/*"}, "properties": {"repobilityId": "09b169e363a1736a", "scanner": "scanner-primary", "fingerprint": "1abb102f2c991dea", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5baa8971ebe192a1", "level": "note", "message": {"text": "Unused endpoint: GET /"}, "properties": {"repobilityId": "62054e0af2f7f810", "scanner": "scanner-primary", "fingerprint": "5baa8971ebe192a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-30690c0c0e56ebe1", "level": "note", "message": {"text": "Unused endpoint: GET /api/permissions"}, "properties": {"repobilityId": "63f5a90de69a639b", "scanner": "scanner-primary", "fingerprint": "30690c0c0e56ebe1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-705b41a4e5b1ae9d", "level": "note", "message": {"text": "Unused endpoint: GET /api/data"}, "properties": {"repobilityId": "6bfdeec6b525c472", "scanner": "scanner-primary", "fingerprint": "705b41a4e5b1ae9d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c921d242ce55dba1", "level": "note", "message": {"text": "Unused endpoint: GET /api/conversations"}, "properties": {"repobilityId": "e93142af16212a35", "scanner": "scanner-primary", "fingerprint": "c921d242ce55dba1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c4b0361ac0f5eeb9", "level": "note", "message": {"text": "Unused endpoint: GET /api/agents"}, "properties": {"repobilityId": "270e034b5d1bd8fd", "scanner": "scanner-primary", "fingerprint": "c4b0361ac0f5eeb9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9cf0afe01c87f4af", "level": "note", "message": {"text": "Unused endpoint: GET /api/realtime"}, "properties": {"repobilityId": "cdaf15f417ae4e67", "scanner": "scanner-primary", "fingerprint": "9cf0afe01c87f4af", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-64b8e6b11d60cba5", "level": "note", "message": {"text": "Unused endpoint: GET /api/refresh"}, "properties": {"repobilityId": "21d7f200e15c66b6", "scanner": "scanner-primary", "fingerprint": "64b8e6b11d60cba5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a3aa5e1ba2303fa0", "level": "note", "message": {"text": "Unused endpoint: GET /api/conversation-state"}, "properties": {"repobilityId": "b6df40aa9a52359d", "scanner": "scanner-primary", "fingerprint": "a3aa5e1ba2303fa0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9b46238010303501", "level": "note", "message": {"text": "Unused endpoint: GET /api/conversations/:id/messages"}, "properties": {"repobilityId": "33dd3be1c4317486", "scanner": "scanner-primary", "fingerprint": "9b46238010303501", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-96f92333c411a2d4", "level": "note", "message": {"text": "Unused endpoint: GET /api/session/data"}, "properties": {"repobilityId": "e5f75dae745220f9", "scanner": "scanner-primary", "fingerprint": "96f92333c411a2d4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e4a66d93dae23a2a", "level": "note", "message": {"text": "Unused endpoint: GET /api/session/:id"}, "properties": {"repobilityId": "fbb551752125d171", "scanner": "scanner-primary", "fingerprint": "e4a66d93dae23a2a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8f29cdd55fce314a", "level": "note", "message": {"text": "Unused endpoint: GET /api/fast-update"}, "properties": {"repobilityId": "8fd7474c89a80401", "scanner": "scanner-primary", "fingerprint": "8f29cdd55fce314a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-eb28601d1c93a14e", "level": "note", "message": {"text": "Unused endpoint: GET /api/system/health"}, "properties": {"repobilityId": "8f8c68ffab8bb029", "scanner": "scanner-primary", "fingerprint": "eb28601d1c93a14e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6c2507f3182299a0", "level": "note", "message": {"text": "Unused endpoint: GET /api/version"}, "properties": {"repobilityId": "77696be7bade4978", "scanner": "scanner-primary", "fingerprint": "6c2507f3182299a0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1b22a0a4558f2099", "level": "note", "message": {"text": "Unused endpoint: GET /api/system/metrics"}, "properties": {"repobilityId": "c44b203026ce64f8", "scanner": "scanner-primary", "fingerprint": "1b22a0a4558f2099", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d30aa36f85b5752f", "level": "note", "message": {"text": "Unused endpoint: GET /api/activity"}, "properties": {"repobilityId": "8b94d6f313237bd0", "scanner": "scanner-primary", "fingerprint": "d30aa36f85b5752f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-508a2ffac970b27a", "level": "note", "message": {"text": "Unused endpoint: GET /api/2025"}, "properties": {"repobilityId": "fd88a20b5b42f577", "scanner": "scanner-primary", "fingerprint": "508a2ffac970b27a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-721059cf77e14658", "level": "note", "message": {"text": "Unused endpoint: GET /2025"}, "properties": {"repobilityId": "ae5169724ac38fa2", "scanner": "scanner-primary", "fingerprint": "721059cf77e14658", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-304b08eb557b15a5", "level": "note", "message": {"text": "Unused endpoint: USE /services"}, "properties": {"repobilityId": "896938145b47f9be", "scanner": "scanner-primary", "fingerprint": "304b08eb557b15a5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4eee1e47d2172b1b", "level": "note", "message": {"text": "Unused endpoint: USE /components"}, "properties": {"repobilityId": "3143ac02e91dd215", "scanner": "scanner-primary", "fingerprint": "4eee1e47d2172b1b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3b59435b3211a9df", "level": "note", "message": {"text": "Unused endpoint: USE /assets"}, "properties": {"repobilityId": "8a95eb16ad7247d4", "scanner": "scanner-primary", "fingerprint": "3b59435b3211a9df", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8af0c286ad18c336", "level": "note", "message": {"text": "Unused endpoint: GET /api/conversation-states"}, "properties": {"repobilityId": "73d3288e8daefa46", "scanner": "scanner-primary", "fingerprint": "8af0c286ad18c336", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1eaf4386b3b285c2", "level": "note", "message": {"text": "Unused endpoint: GET /api/directories"}, "properties": {"repobilityId": "a1dc9870838fcae2", "scanner": "scanner-primary", "fingerprint": "1eaf4386b3b285c2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5991aedcc673ddad", "level": "note", "message": {"text": "Unused endpoint: POST /api/search"}, "properties": {"repobilityId": "8c5107440f639db4", "scanner": "scanner-primary", "fingerprint": "5991aedcc673ddad", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-48fa1201bf94cda8", "level": "note", "message": {"text": "Unused endpoint: POST /api/conversations/:id/search"}, "properties": {"repobilityId": "10b1b8d5f20f232d", "scanner": "scanner-primary", "fingerprint": "48fa1201bf94cda8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-86f46464d9f248a1", "level": "note", "message": {"text": "Unused endpoint: POST /api/conversations/:id/download"}, "properties": {"repobilityId": "c6c97c0164f9b1f6", "scanner": "scanner-primary", "fingerprint": "86f46464d9f248a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-48867ac7d320857f", "level": "note", "message": {"text": "Unused endpoint: GET /api/conversations/:id/analytics"}, "properties": {"repobilityId": "709d350400485de9", "scanner": "scanner-primary", "fingerprint": "48867ac7d320857f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2cbc08e97a8f0293", "level": "note", "message": {"text": "Unused endpoint: GET /api/skills"}, "properties": {"repobilityId": "01629c4fc763598d", "scanner": "scanner-primary", "fingerprint": "2cbc08e97a8f0293", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3c4a55211ee83025", "level": "note", "message": {"text": "Unused endpoint: GET /api/skills/:name"}, "properties": {"repobilityId": "f19aa3123ce59c75", "scanner": "scanner-primary", "fingerprint": "3c4a55211ee83025", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8636424772444757", "level": "note", "message": {"text": "Unused endpoint: GET /api/skills/:name/file/*"}, "properties": {"repobilityId": "4424fb2db79d5161", "scanner": "scanner-primary", "fingerprint": "8636424772444757", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2e1afb33b283baf0", "level": "note", "message": {"text": "Unused endpoint: USE /css"}, "properties": {"repobilityId": "3e25e64d518e0745", "scanner": "scanner-primary", "fingerprint": "2e1afb33b283baf0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-91fa6ba786c475ff", "level": "note", "message": {"text": "Unused endpoint: USE /js"}, "properties": {"repobilityId": "51f0b06885712d56", "scanner": "scanner-primary", "fingerprint": "91fa6ba786c475ff", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-deefc2469b9a0e12", "level": "note", "message": {"text": "Unused endpoint: POST /api/execute"}, "properties": {"repobilityId": "3d0f58f68501435b", "scanner": "scanner-primary", "fingerprint": "deefc2469b9a0e12", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9a754f731a4ce51d", "level": "note", "message": {"text": "Unused endpoint: GET /api/task/:taskId"}, "properties": {"repobilityId": "518143b3b389170b", "scanner": "scanner-primary", "fingerprint": "9a754f731a4ce51d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cf16ae0930dc161a", "level": "note", "message": {"text": "Unused endpoint: GET /api/tasks"}, "properties": {"repobilityId": "131a48f16158f6e1", "scanner": "scanner-primary", "fingerprint": "cf16ae0930dc161a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7c3a3da9407a893e", "level": "note", "message": {"text": "Unused endpoint: POST /api/install-agent"}, "properties": {"repobilityId": "b435f00f9e3cbd52", "scanner": "scanner-primary", "fingerprint": "7c3a3da9407a893e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cfa621c46167674c", "level": "note", "message": {"text": "Unused endpoint: POST /api/send-message"}, "properties": {"repobilityId": "a4a1ea717469b7c4", "scanner": "scanner-primary", "fingerprint": "cfa621c46167674c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-54fa42552bc79bcb", "level": "note", "message": {"text": "Unused endpoint: GET /api/conversation/:sessionId"}, "properties": {"repobilityId": "9968f6ff81984f51", "scanner": "scanner-primary", "fingerprint": "54fa42552bc79bcb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d3f8e7f35bf5f5fe", "level": "note", "message": {"text": "Unused endpoint: GET /api/sessions/:id/timeline"}, "properties": {"repobilityId": "f13c1d0266c8473f", "scanner": "scanner-primary", "fingerprint": "d3f8e7f35bf5f5fe", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7a18207582bcd980", "level": "note", "message": {"text": "Unused endpoint: GET /api/sessions/:id/teammates/:agentId"}, "properties": {"repobilityId": "1a0c761ab60ddf1c", "scanner": "scanner-primary", "fingerprint": "7a18207582bcd980", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-dde3adb27bf7eebe", "level": "note", "message": {"text": "Unused endpoint: USE /api"}, "properties": {"repobilityId": "55824f33bbcca453", "scanner": "scanner-primary", "fingerprint": "dde3adb27bf7eebe", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0c70359e360d801b", "level": "note", "message": {"text": "Unused endpoint: GET /todos"}, "properties": {"repobilityId": "49a7cacbeafdeb16", "scanner": "scanner-primary", "fingerprint": "0c70359e360d801b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-31f38cf25278c564", "level": "note", "message": {"text": "Unused endpoint: POST /todos"}, "properties": {"repobilityId": "8184620b4a23da7c", "scanner": "scanner-primary", "fingerprint": "31f38cf25278c564", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}