{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-faccb9061e9b52a0", "name": "No README detected", "shortDescription": {"text": "No README detected"}, "fullDescription": {"text": "No README file was found. Generated repos without README context are hard to operate, validate, or safely hand off."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 5 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, operator-readme. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci, operator-readme. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17d866d91a7c451e", "name": "Agent instruction/config may expose a secret: CLAUDE.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: CLAUDE.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-122f91b7f2906dc4", "name": "Agent authority lacks a verifier contract: .claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8769bcc771831214", "name": "Agent instruction contains unpinned remote install: .claude/settings.json", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/settings.json"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2dae69dc01a2eb69", "name": "Agent authority lacks a verifier contract: .claude/agents/spec-flow-analyzer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/spec-flow-analyzer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-551803c0e72c7e34", "name": "Agent authority lacks a verifier contract: .claude/agents/feature-tester-e2e.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/feature-tester-e2e.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f90cb21cec2cea6", "name": "Agent authority lacks a verifier contract: .claude/agents/auto-error-resolver.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/auto-error-resolver.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-816ec2fc8b0e7d81", "name": "Agent authority lacks a verifier contract: .claude/agents/code-simplicity-reviewer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/code-simplicity-reviewer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c9cf940ca502ebc", "name": "Agent authority lacks a verifier contract: .claude/skills/gemini/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/gemini/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-75eb19051b3bfda8", "name": "Agent authority lacks a verifier contract: .claude/skills/ux-ui-guidelines/resources/design-system.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ux-ui-guidelines/resources/design-system.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a46708dbdb02d32", "name": "Agent authority lacks a verifier contract: .claude/skills/ux-ui-guidelines/resources/animations.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ux-ui-guidelines/resources/animations.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f85258348d0b952", "name": "Agent authority lacks a verifier contract: .claude/skills/ux-ui-guidelines/resources/patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ux-ui-guidelines/resources/patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-29f3ee4f2dfc1914", "name": "Agent authority lacks a verifier contract: .claude/skills/dev-docs-update/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/dev-docs-update/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5784a83e0d22194c", "name": "Agent authority lacks a verifier contract: .claude/skills/coolify-manager/references/api_endpoints.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/coolify-manager/references/api_endpoints.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-605a51d72f6f5931", "name": "Agent authority lacks a verifier contract: .claude/skills/sentry-integration/resources/react-sentry-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/sentry-integration/resources/react-sentry-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69a35087a4b9fcea", "name": "Agent instruction/config may expose a secret: .claude/skills/security/resources/owasp-react-supabase.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/security/resources/owasp-react-supabase.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c91744296895f190", "name": "Agent authority lacks a verifier contract: .claude/skills/security/resources/owasp-react-supabase.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/security/resources/owasp-react-supabase.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b85836834e9e3d6e", "name": "Agent instruction/config may expose a secret: .claude/skills/security/resources/auth-security-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/security/resources/auth-security-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-73ae7548b0cd135f", "name": "Agent authority lacks a verifier contract: .claude/skills/code-review/resources/review-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/code-review/resources/review-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-098bf5055361b7da", "name": "Agent instruction/config may expose a secret: .claude/skills/code-review/resources/common-issues.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/code-review/resources/common-issues.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5dd0093af1e51a78", "name": "Agent instruction contains unpinned remote install: .claude/skills/agent-browser/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/agent-browser/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85e3997353fc5369", "name": "Agent authority lacks a verifier contract: .claude/skills/agent-browser/references/snapshot-refs.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/agent-browser/references/snapshot-refs.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49944422e6a36fa0", "name": "Agent authority lacks a verifier contract: .claude/skills/agent-browser/references/profiling.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/agent-browser/references/profiling.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b025c816d8c7982c", "name": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e3e2a96e5faa1167", "name": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0c71db06d76b5e3d", "name": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/resources/security.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/resources/security.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4be3de81eddaa5a8", "name": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/resources/security.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/resources/security.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2003a299f6ccb94a", "name": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/resources/edge-functions.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/resources/edge-functions.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ed2ddb1e0833ae08", "name": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/resources/database-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/resources/database-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7f6c99e1204bd6b9", "name": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/resources/database-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/resources/database-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c41522ead76d8bf", "name": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/resources/cli-guide.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/resources/cli-guide.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8bcef37865afa823", "name": "Agent authority lacks a verifier contract: .claude/skills/tailwind-react-guidelines/resources/forms.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/tailwind-react-guidelines/resources/forms.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-badddb08d191ee3a", "name": "Agent authority lacks a verifier contract: .claude/skills/tailwind-react-guidelines/resources/component-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/tailwind-react-guidelines/resources/component-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-42745cf6e99d6cc3", "name": "Agent authority lacks a verifier contract: .claude/skills/tailwind-react-guidelines/resources/performance.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/tailwind-react-guidelines/resources/performance.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a86df61049c7e62", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/lib/supabase.ts:25", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/lib/supabase.ts:25"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-319e66a630e14977", "name": "2 env vars used in code but missing from .env.example", "shortDescription": {"text": "2 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `VERIFY_RLS_EMAIL`, `VERIFY_RLS_PASSWORD`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5db78d847f5a9c27", "name": "Frontend route `/projekt/:id` has no Link/navigate to it \u2014 src/pages/ProjektSzczegolyPage.test.tsx", "shortDescription": {"text": "Frontend route `/projekt/:id` has no Link/navigate to it \u2014 src/pages/ProjektSzczegolyPage.test.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23897"}, "properties": {"repository": "adasior/RF", "repoUrl": "https://github.com/adasior/RF", "branch": "main"}, "results": [{"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "b9e6eb8464e0c8e7", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-faccb9061e9b52a0", "level": "note", "message": {"text": "No README detected"}, "properties": {"repobilityId": "1705c833bae446db", "scanner": "scanner-primary", "fingerprint": "faccb9061e9b52a0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["docs", "readme", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "0d345451c376327e", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "4ea6cfd8075f68ae", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "ba4ce75e977200ad", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "51aab7aac93880fb", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-17d866d91a7c451e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: CLAUDE.md"}, "properties": {"repobilityId": "ccce5984e58a48f0", "scanner": "scanner-primary", "fingerprint": "17d866d91a7c451e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-122f91b7f2906dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "properties": {"repobilityId": "a2967269048b6a9d", "scanner": "scanner-primary", "fingerprint": "122f91b7f2906dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8769bcc771831214", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/settings.json"}, "properties": {"repobilityId": "f94968d1c8aa7dc6", "scanner": "scanner-primary", "fingerprint": "8769bcc771831214", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-2dae69dc01a2eb69", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/spec-flow-analyzer.md"}, "properties": {"repobilityId": "2a2c21b2266c2724", "scanner": "scanner-primary", "fingerprint": "2dae69dc01a2eb69", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/spec-flow-analyzer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-551803c0e72c7e34", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/feature-tester-e2e.md"}, "properties": {"repobilityId": "fb343c7cc6e531b5", "scanner": "scanner-primary", "fingerprint": "551803c0e72c7e34", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/feature-tester-e2e.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1f90cb21cec2cea6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/auto-error-resolver.md"}, "properties": {"repobilityId": "5a011bc7c89ebfd6", "scanner": "scanner-primary", "fingerprint": "1f90cb21cec2cea6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/auto-error-resolver.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-816ec2fc8b0e7d81", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/code-simplicity-reviewer.md"}, "properties": {"repobilityId": "63979044cbae17b5", "scanner": "scanner-primary", "fingerprint": "816ec2fc8b0e7d81", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/code-simplicity-reviewer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4c9cf940ca502ebc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/gemini/SKILL.md"}, "properties": {"repobilityId": "48834d4cd3504998", "scanner": "scanner-primary", "fingerprint": "4c9cf940ca502ebc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/gemini/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-75eb19051b3bfda8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ux-ui-guidelines/resources/design-system.md"}, "properties": {"repobilityId": "6debeb4411cb6e7e", "scanner": "scanner-primary", "fingerprint": "75eb19051b3bfda8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ux-ui-guidelines/resources/design-system.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a46708dbdb02d32", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ux-ui-guidelines/resources/animations.md"}, "properties": {"repobilityId": "b13ce9752513db5f", "scanner": "scanner-primary", "fingerprint": "0a46708dbdb02d32", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ux-ui-guidelines/resources/animations.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f85258348d0b952", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ux-ui-guidelines/resources/patterns.md"}, "properties": {"repobilityId": "3e8c8287d281617a", "scanner": "scanner-primary", "fingerprint": "7f85258348d0b952", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ux-ui-guidelines/resources/patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-29f3ee4f2dfc1914", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/dev-docs-update/SKILL.md"}, "properties": {"repobilityId": "0eccf98a4078e9c6", "scanner": "scanner-primary", "fingerprint": "29f3ee4f2dfc1914", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/dev-docs-update/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5784a83e0d22194c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/coolify-manager/references/api_endpoints.md"}, "properties": {"repobilityId": "ade8f3e0fea62489", "scanner": "scanner-primary", "fingerprint": "5784a83e0d22194c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/coolify-manager/references/api_endpoints.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-605a51d72f6f5931", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/sentry-integration/resources/react-sentry-patterns.md"}, "properties": {"repobilityId": "487fda01aa1499a7", "scanner": "scanner-primary", "fingerprint": "605a51d72f6f5931", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/sentry-integration/resources/react-sentry-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-69a35087a4b9fcea", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/security/resources/owasp-react-supabase.md"}, "properties": {"repobilityId": "96f89663d4d49ce9", "scanner": "scanner-primary", "fingerprint": "69a35087a4b9fcea", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/security/resources/owasp-react-supabase.md"}, "region": {"startLine": 91}}}]}, {"ruleId": "scanner-c91744296895f190", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/security/resources/owasp-react-supabase.md"}, "properties": {"repobilityId": "039b9772dd5bb4c1", "scanner": "scanner-primary", "fingerprint": "c91744296895f190", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/security/resources/owasp-react-supabase.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b85836834e9e3d6e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/security/resources/auth-security-patterns.md"}, "properties": {"repobilityId": "e3b87d558685766d", "scanner": "scanner-primary", "fingerprint": "b85836834e9e3d6e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/security/resources/auth-security-patterns.md"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-73ae7548b0cd135f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/code-review/resources/review-patterns.md"}, "properties": {"repobilityId": "7c2d9cb60c18133d", "scanner": "scanner-primary", "fingerprint": "73ae7548b0cd135f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/code-review/resources/review-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-098bf5055361b7da", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/code-review/resources/common-issues.md"}, "properties": {"repobilityId": "5930b24f67d074b1", "scanner": "scanner-primary", "fingerprint": "098bf5055361b7da", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/code-review/resources/common-issues.md"}, "region": {"startLine": 250}}}]}, {"ruleId": "scanner-5dd0093af1e51a78", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/agent-browser/SKILL.md"}, "properties": {"repobilityId": "3c25b39195a01891", "scanner": "scanner-primary", "fingerprint": "5dd0093af1e51a78", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agent-browser/SKILL.md"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-85e3997353fc5369", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/agent-browser/references/snapshot-refs.md"}, "properties": {"repobilityId": "4b35833b0e38e3a3", "scanner": "scanner-primary", "fingerprint": "85e3997353fc5369", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agent-browser/references/snapshot-refs.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49944422e6a36fa0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/agent-browser/references/profiling.md"}, "properties": {"repobilityId": "76ec401ae0e4c3ab", "scanner": "scanner-primary", "fingerprint": "49944422e6a36fa0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agent-browser/references/profiling.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b025c816d8c7982c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/SKILL.md"}, "properties": {"repobilityId": "f41c215b7e0e346b", "scanner": "scanner-primary", "fingerprint": "b025c816d8c7982c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/supabase-dev-guidelines/SKILL.md"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-e3e2a96e5faa1167", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/SKILL.md"}, "properties": {"repobilityId": "f85a46eb146159c0", "scanner": "scanner-primary", "fingerprint": "e3e2a96e5faa1167", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/supabase-dev-guidelines/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0c71db06d76b5e3d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/resources/security.md"}, "properties": {"repobilityId": "e1ee54fd7534fcfd", "scanner": "scanner-primary", "fingerprint": "0c71db06d76b5e3d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/supabase-dev-guidelines/resources/security.md"}, "region": {"startLine": 352}}}]}, {"ruleId": "scanner-4be3de81eddaa5a8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/resources/security.md"}, "properties": {"repobilityId": "2da441af1f7a3f6c", "scanner": "scanner-primary", "fingerprint": "4be3de81eddaa5a8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/supabase-dev-guidelines/resources/security.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2003a299f6ccb94a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/resources/edge-functions.md"}, "properties": {"repobilityId": "9d9a83b25445000b", "scanner": "scanner-primary", "fingerprint": "2003a299f6ccb94a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/supabase-dev-guidelines/resources/edge-functions.md"}, "region": {"startLine": 139}}}]}, {"ruleId": "scanner-ed2ddb1e0833ae08", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/supabase-dev-guidelines/resources/database-patterns.md"}, "properties": {"repobilityId": "bc537700526f0796", "scanner": "scanner-primary", "fingerprint": "ed2ddb1e0833ae08", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/supabase-dev-guidelines/resources/database-patterns.md"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-7f6c99e1204bd6b9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/resources/database-patterns.md"}, "properties": {"repobilityId": "2c3bfa3edf5f6e45", "scanner": "scanner-primary", "fingerprint": "7f6c99e1204bd6b9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/supabase-dev-guidelines/resources/database-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7c41522ead76d8bf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/supabase-dev-guidelines/resources/cli-guide.md"}, "properties": {"repobilityId": "79ba1e2f61e4aab9", "scanner": "scanner-primary", "fingerprint": "7c41522ead76d8bf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/supabase-dev-guidelines/resources/cli-guide.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8bcef37865afa823", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/tailwind-react-guidelines/resources/forms.md"}, "properties": {"repobilityId": "052e422b08e335a6", "scanner": "scanner-primary", "fingerprint": "8bcef37865afa823", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/tailwind-react-guidelines/resources/forms.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-badddb08d191ee3a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/tailwind-react-guidelines/resources/component-patterns.md"}, "properties": {"repobilityId": "ee4dd33029568b15", "scanner": "scanner-primary", "fingerprint": "badddb08d191ee3a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/tailwind-react-guidelines/resources/component-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-42745cf6e99d6cc3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/tailwind-react-guidelines/resources/performance.md"}, "properties": {"repobilityId": "fb5799c3c9cdda22", "scanner": "scanner-primary", "fingerprint": "42745cf6e99d6cc3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/tailwind-react-guidelines/resources/performance.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a86df61049c7e62", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/lib/supabase.ts:25"}, "properties": {"repobilityId": "e6ad52555e81237e", "scanner": "scanner-primary", "fingerprint": "6a86df61049c7e62", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-319e66a630e14977", "level": "none", "message": {"text": "2 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "d838d1fc5d8231c9", "scanner": "scanner-primary", "fingerprint": "319e66a630e14977", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-5db78d847f5a9c27", "level": "warning", "message": {"text": "Frontend route `/projekt/:id` has no Link/navigate to it \u2014 src/pages/ProjektSzczegolyPage.test.tsx"}, "properties": {"repobilityId": "a764312271fdc13d", "scanner": "scanner-primary", "fingerprint": "5db78d847f5a9c27", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}]}]}