{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-b0175f1c8fdcd008", "name": "Possibly dead Python function: generate_cloudformation_template", "shortDescription": {"text": "Possibly dead Python function: generate_cloudformation_template"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ba396407678ea83", "name": "Possibly dead Python function: generate_cdk_stack", "shortDescription": {"text": "Possibly dead Python function: generate_cdk_stack"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a0d96867f689e32", "name": "Possibly dead Python function: generate_terraform_configuration", "shortDescription": {"text": "Possibly dead Python function: generate_terraform_configuration"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d30f6e1e5d7a3f4", "name": "Possibly dead Python function: analyze_and_optimize", "shortDescription": {"text": "Possibly dead Python function: analyze_and_optimize"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ea7a34a09a7ac9a", "name": "Possibly dead Python function: generate_optimization_checklist", "shortDescription": {"text": "Possibly dead Python function: generate_optimization_checklist"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7eb666b2547e2842", "name": "Possibly dead Python function: generate_service_checklist", "shortDescription": {"text": "Possibly dead Python function: generate_service_checklist"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e229b7df4a30dfc4", "name": "Possibly dead Python function: ease_in_quad", "shortDescription": {"text": "Possibly dead Python function: ease_in_quad"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f245ff06ec5425cb", "name": "Possibly dead Python function: ease_out_quad", "shortDescription": {"text": "Possibly dead Python function: ease_out_quad"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c0fa681903818469", "name": "Possibly dead Python function: ease_in_out_quad", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_quad"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-625e7047d611e6d5", "name": "Possibly dead Python function: ease_in_cubic", "shortDescription": {"text": "Possibly dead Python function: ease_in_cubic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d76bc3dd2f0ddfd", "name": "Possibly dead Python function: ease_out_cubic", "shortDescription": {"text": "Possibly dead Python function: ease_out_cubic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-70f3429700fff596", "name": "Possibly dead Python function: ease_in_out_cubic", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_cubic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9f7b820c8042c676", "name": "Possibly dead Python function: ease_in_out_bounce", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_bounce"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9f00a7fcf2e1f59a", "name": "Possibly dead Python function: ease_in_elastic", "shortDescription": {"text": "Possibly dead Python function: ease_in_elastic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ffe6fb8644a1bb0a", "name": "Possibly dead Python function: ease_out_elastic", "shortDescription": {"text": "Possibly dead Python function: ease_out_elastic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25bcc96298101ce8", "name": "Possibly dead Python function: ease_in_out_elastic", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_elastic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-247b8237bff4c566", "name": "Possibly dead Python function: interpolate", "shortDescription": {"text": "Possibly dead Python function: interpolate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e486c70a416bc7bd", "name": "Possibly dead Python function: ease_back_in", "shortDescription": {"text": "Possibly dead Python function: ease_back_in"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4febd1298df66d82", "name": "Possibly dead Python function: ease_back_out", "shortDescription": {"text": "Possibly dead Python function: ease_back_out"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-06a0d423352163e6", "name": "Possibly dead Python function: ease_back_in_out", "shortDescription": {"text": "Possibly dead Python function: ease_back_in_out"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6eb5fb38a329f74c", "name": "Possibly dead Python function: apply_squash_stretch", "shortDescription": {"text": "Possibly dead Python function: apply_squash_stretch"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3cb4f0f5b17108af", "name": "Possibly dead Python function: calculate_arc_motion", "shortDescription": {"text": "Possibly dead Python function: calculate_arc_motion"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e698c5a3690a6626", "name": "Possibly dead Python function: add_frames", "shortDescription": {"text": "Possibly dead Python function: add_frames"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d5f3fb55eac4526c", "name": "Possibly dead Python function: clear", "shortDescription": {"text": "Possibly dead Python function: clear"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e7558d00684cc45d", "name": "Possibly dead Python function: create_blank_frame", "shortDescription": {"text": "Possibly dead Python function: create_blank_frame"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1be7e822e2a88920", "name": "Possibly dead Python function: draw_circle", "shortDescription": {"text": "Possibly dead Python function: draw_circle"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-75a23f01279546a8", "name": "Possibly dead Python function: draw_text", "shortDescription": {"text": "Possibly dead Python function: draw_text"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b700beafbac3e509", "name": "Possibly dead Python function: create_gradient_background", "shortDescription": {"text": "Possibly dead Python function: create_gradient_background"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1290039c9461684c", "name": "Possibly dead Python function: draw_star", "shortDescription": {"text": "Possibly dead Python function: draw_star"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7db7279fd7a3f3af", "name": "Stray `console.log` in TS/JS \u2014 tests/harness-checkpoints-signatures.test.js:48", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/harness-checkpoints-signatures.test.js:48"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2dcff907e507f6f6", "name": "Stray `console.log` in TS/JS \u2014 src/integrations/pi/rstack-sdlc.ts:2189", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/integrations/pi/rstack-sdlc.ts:2189"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eb6ad4b3733ec63f", "name": "Stray `console.log` in TS/JS \u2014 src/notifications/index.js:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/notifications/index.js:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a3a74a740271622", "name": "Stray `console.log` in TS/JS \u2014 src/commands/validate.js:133", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/validate.js:133"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c5e0c78dfa5f1678", "name": "Stray `console.log` in TS/JS \u2014 src/commands/list.js:108", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/list.js:108"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-049bc9d1c1892bd7", "name": "Stray `console.log` in TS/JS \u2014 src/utils/logger.js:11", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/utils/logger.js:11"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-467e49f369daf4bc", "name": "Stray `console.log` in TS/JS \u2014 src/observability/dashboard/server.js:438", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/observability/dashboard/server.js:438"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-476e11d51ec465ca", "name": "Icon-only button without accessible name \u2014 src/observability/dashboard/ui/studio3d.js:103", "shortDescription": {"text": "Icon-only button without accessible name \u2014 src/observability/dashboard/ui/studio3d.js:103"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9a365d10751ce127", "name": "Stray `console.log` in TS/JS \u2014 src/observability/collectors/legacy.js:372", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/observability/collectors/legacy.js:372"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ac9d033bb4dcabd", "name": "Stray `console.log` in TS/JS \u2014 src/hooks/auto-launch.js:28", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/auto-launch.js:28"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fcf8aa1e64689d9c", "name": "Privileged port 3 in use", "shortDescription": {"text": "Privileged port 3 in use"}, "fullDescription": {"text": "Port 3 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-068199870794cc47", "name": "Privileged port 48 in use", "shortDescription": {"text": "Privileged port 48 in use"}, "fullDescription": {"text": "Port 48 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7418b5b11aeba768", "name": "Insecure pattern 'cors_wildcard' in skills/devops-deployment/aws-serverless/SKILL.md:49", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in skills/devops-deployment/aws-serverless/SKILL.md:49"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b87bce539aba48db", "name": "Possible secret in skills/security-compliance/cc-skill-security-review/SKILL.md", "shortDescription": {"text": "Possible secret in skills/security-compliance/cc-skill-security-review/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-48aa60ac12dad74d", "name": "Insecure pattern 'dangerous_innerhtml' in skills/security-compliance/cc-skill-security-review/SKILL.md:209", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/security-compliance/cc-skill-security-review/SKILL.md:209"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-52825736b7bfb4f0", "name": "Insecure pattern 'local_storage_auth_token' in skills/security-compliance/cc-skill-security-review/SKILL.md:147", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in skills/security-compliance/cc-skill-security-review/SKILL.md:147"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c0e4d245cddb864", "name": "Possible secret in skills/security-compliance/api-fuzzing-bug-bounty/SKILL.md", "shortDescription": {"text": "Possible secret in skills/security-compliance/api-fuzzing-bug-bounty/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-87070f87578dfb5d", "name": "Insecure pattern 'eval_used' in skills/cso/SKILL.md:573", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/cso/SKILL.md:573"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2fdc0135d95788dd", "name": "Insecure pattern 'exec_used' in skills/cso/SKILL.md:573", "shortDescription": {"text": "Insecure pattern 'exec_used' in skills/cso/SKILL.md:573"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-727ef023d969daa3", "name": "Insecure pattern 'dangerous_innerhtml' in skills/cso/SKILL.md:570", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/cso/SKILL.md:570"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-533d8d444bc40831", "name": "Insecure pattern 'weak_hash' in skills/cso/SKILL.md:616", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/cso/SKILL.md:616"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6cd70bbd24c8242e", "name": "Insecure pattern 'subprocess_shell_true' in skills/webapp-testing/scripts/with_server.py:71", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in skills/webapp-testing/scripts/with_server.py:71"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf5d36a5c7159e36", "name": "Insecure pattern 'eval_used' in skills/code-review-pr/SKILL.md:686", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/code-review-pr/SKILL.md:686"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c238a79bb2674b29", "name": "Insecure pattern 'document_write' in skills/architecture-design/best-practices/SKILL.md:131", "shortDescription": {"text": "Insecure pattern 'document_write' in skills/architecture-design/best-practices/SKILL.md:131"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-668765f0b5b880ac", "name": "Insecure pattern 'direct_innerhtml_assignment' in skills/architecture-design/best-practices/SKILL.md:130", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in skills/architecture-design/best-practices/SKILL.md:130"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-31e20e1c06b403f5", "name": "Insecure pattern 'local_storage_auth_token' in skills/architecture-design/best-practices/SKILL.md:145", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in skills/architecture-design/best-practices/SKILL.md:145"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4bfdb1f61ea9ce31", "name": "Possible secret in skills/architecture-design/api-endpoint-builder/SKILL.md", "shortDescription": {"text": "Possible secret in skills/architecture-design/api-endpoint-builder/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-0eed5c0641ea32f2", "name": "Insecure pattern 'eval_used' in skills/ship/SKILL.md:847", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/ship/SKILL.md:847"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ee234ecdaa79e7e6", "name": "Insecure pattern 'eval_used' in skills/plan-eng-review/SKILL.md:570", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/plan-eng-review/SKILL.md:570"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-71cfff74fdf8abb7", "name": "Insecure pattern 'direct_innerhtml_assignment' in skills/code-patterns/browser-extension-builder/SKILL.md:133", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in skills/code-patterns/browser-extension-builder/SKILL.md:133"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-039c75aa657755c2", "name": "Insecure pattern 'eval_used' in skills/security-owasp/SKILL.md:465", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/security-owasp/SKILL.md:465"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-87f70b1ef8dd271f", "name": "Insecure pattern 'exec_used' in skills/security-owasp/SKILL.md:465", "shortDescription": {"text": "Insecure pattern 'exec_used' in skills/security-owasp/SKILL.md:465"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-52d2b49afc39b29a", "name": "Insecure pattern 'dangerous_innerhtml' in skills/security-owasp/SKILL.md:462", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/security-owasp/SKILL.md:462"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cecc5a3979adb6eb", "name": "Insecure pattern 'weak_hash' in skills/security-owasp/SKILL.md:514", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/security-owasp/SKILL.md:514"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-10b17c5d4351b73f", "name": "Insecure pattern 'node_child_process' in src/integrations/pi/rstack-sdlc.ts:4", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/integrations/pi/rstack-sdlc.ts:4"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-35c0def2992c20d5", "name": "Insecure pattern 'node_child_process' in src/observability/dashboard/server.js:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/observability/dashboard/server.js:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27c7fc0f13963a94", "name": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/dashboard/ui/artifact-render.js:195", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/dashboard/ui/artifact-render.js:195"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-26ace531d81ae62f", "name": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/dashboard/ui/client.js:258", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/dashboard/ui/client.js:258"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad5234ebd4cf7595", "name": "Insecure pattern 'local_storage_auth_token' in src/observability/dashboard/ui/client.js:1802", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in src/observability/dashboard/ui/client.js:1802"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a435e56879503d34", "name": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/dashboard/ui/studio3d.js:350", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/dashboard/ui/studio3d.js:350"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f1434eaaaf04356", "name": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/collectors/legacy.js:249", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/collectors/legacy.js:249"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-adde4ca9cae41166", "name": "Insecure pattern 'cors_wildcard' in src/observability/collectors/legacy.js:19", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in src/observability/collectors/legacy.js:19"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f33e4a6a3d8e69e", "name": "Insecure pattern 'node_child_process' in src/hooks/auto-launch.js:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/hooks/auto-launch.js:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d66b937d376bc83", "name": "Insecure pattern 'node_child_process' in src/core/harness/identity.js:11", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/core/harness/identity.js:11"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-92f08f2fc31671ab", "name": "Possible secret in plugins/developer-essentials/skills/e2e-testing-patterns/SKILL.md", "shortDescription": {"text": "Possible secret in plugins/developer-essentials/skills/e2e-testing-patterns/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-469daace9fa7dd03", "name": "Insecure pattern 'eval_used' in plugins/developer-essentials/skills/code-review-excellence/SKILL.md:424", "shortDescription": {"text": "Insecure pattern 'eval_used' in plugins/developer-essentials/skills/code-review-excellence/SKILL.md:424"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-61bb86b61cb4e23f", "name": "Insecure pattern 'private_key_in_repo' in plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md:224", "shortDescription": {"text": "Insecure pattern 'private_key_in_repo' in plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md:224"}, "fullDescription": {"text": "Found a known-risky pattern (private_key_in_repo). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-c708a818fd149173", "name": "Possible secret in plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md", "shortDescription": {"text": "Possible secret in plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-0ee3bd8a2d3ae9ee", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-905fc3c0b6fb0794", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93fc0e7c3bf66200", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a53bf972e19b52fd", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ffa33751be3d771", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c6de06a63b5b81f2", "name": "Very large file: skills/architecture-design/api-design-reviewer/scripts/api_scorecard.py (1660 lines)", "shortDescription": {"text": "Very large file: skills/architecture-design/api-design-reviewer/scripts/api_scorecard.py (1660 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c8f43341f7ffe310", "name": "Very large file: src/integrations/pi/rstack-sdlc.ts (2203 lines)", "shortDescription": {"text": "Very large file: src/integrations/pi/rstack-sdlc.ts (2203 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-966572d374bb4eea", "name": "Very large file: src/observability/dashboard/ui/client.js (1960 lines)", "shortDescription": {"text": "Very large file: src/observability/dashboard/ui/client.js (1960 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "40 tests / 167 src (ratio 0.24)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 717 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 12 placeholder/mock markers across 4 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-34be9d2bde9d9668", "name": "Agent authority lacks a verifier contract: skills/automation/bottleneck-identifier/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/automation/bottleneck-identifier/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8d552fc091f65b5", "name": "Agent instruction/config may expose a secret: skills/devops-deployment/aws-solution-architect/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/devops-deployment/aws-solution-architect/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4d4668bf1afe8895", "name": "Agent authority lacks a verifier contract: skills/devops-deployment/argocd-app-deployer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/devops-deployment/argocd-app-deployer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-095c54f095ba2a6b", "name": "Agent instruction/config may expose a secret: skills/devops-deployment/aws-iam-best-practices/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/devops-deployment/aws-iam-best-practices/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-70b1ca0f1a1bb106", "name": "Agent instruction/config may expose a secret: skills/devops-deployment/aws-serverless/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/devops-deployment/aws-serverless/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e0ae40e0719b3766", "name": "Agent authority lacks a verifier contract: skills/gstack-upgrade/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/gstack-upgrade/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a85221f689db84a6", "name": "Agent instruction/config may expose a secret: skills/security-compliance/broken-authentication/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/security-compliance/broken-authentication/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-26edb26fe18cc640", "name": "Agent authority lacks a verifier contract: skills/security-compliance/api-key-auth-setup/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/security-compliance/api-key-auth-setup/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-66626b025bb193b0", "name": "Agent instruction/config may expose a secret: skills/security-compliance/cc-skill-security-review/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/security-compliance/cc-skill-security-review/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3ee99c7a3adaf1ec", "name": "Agent instruction/config may expose a secret: skills/security-compliance/api-security-best-practices/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/security-compliance/api-security-best-practices/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b548e982450c95d9", "name": "Agent authority lacks a verifier contract: skills/security-compliance/attack-surface-analyzer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/security-compliance/attack-surface-analyzer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c01f06865dbfa160", "name": "Agent authority lacks a verifier contract: skills/security-compliance/authentication-validator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/security-compliance/authentication-validator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-437a8379a6139ba4", "name": "Agent authority lacks a verifier contract: skills/slack-gif-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/slack-gif-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc83f90645435b98", "name": "Agent authority lacks a verifier contract: skills/internal-comms/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/internal-comms/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8366db1dd933c200", "name": "Agent authority lacks a verifier contract: skills/freeze/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/freeze/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1427b789767efa85", "name": "Agent instruction contains unpinned remote install: skills/code-review-pr/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/code-review-pr/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76787711fb978ce0", "name": "Agent authority lacks a verifier contract: skills/unfreeze/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/unfreeze/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc9165350f9e6621", "name": "Agent authority lacks a verifier contract: skills/testing-qa/api-mock-generator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/testing-qa/api-mock-generator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e35a7a4f238e443", "name": "Agent authority lacks a verifier contract: skills/performance-monitoring/creating-alerting-rules/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/creating-alerting-rules/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c5452a0924c31a23", "name": "Agent authority lacks a verifier contract: skills/performance-monitoring/application-profiler/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/application-profiler/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ac67e8505d223da", "name": "Agent authority lacks a verifier contract: skills/performance-monitoring/bundle-size-analyzer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/bundle-size-analyzer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-584692f27c56ee0a", "name": "Agent authority lacks a verifier contract: skills/performance-monitoring/benchmark-suite-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/benchmark-suite-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0f290fe67194c9df", "name": "Agent authority lacks a verifier contract: skills/performance-monitoring/cache-performance-optimizer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/cache-performance-optimizer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a5b5315c6101711", "name": "Agent authority lacks a verifier contract: skills/performance-monitoring/creating-apm-dashboards/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/creating-apm-dashboards/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2513ca09c6d2480d", "name": "Agent authority lacks a verifier contract: skills/performance-monitoring/datadog-cli/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/datadog-cli/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69d78b6bd831f5a4", "name": "Agent authority lacks a verifier contract: skills/architecture-design/best-practices/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/architecture-design/best-practices/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c4ebc4ddb41b92e", "name": "Agent instruction/config may expose a secret: skills/architecture-design/api-design/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/architecture-design/api-design/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f23f44796d355f6a", "name": "Agent instruction/config may expose a secret: skills/architecture-design/api-design-reviewer/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/architecture-design/api-design-reviewer/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-55292da5bb42d99d", "name": "Agent instruction/config may expose a secret: skills/architecture-design/backend-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/architecture-design/backend-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e07dd50363e23bd", "name": "Agent authority lacks a verifier contract: skills/architecture-design/backend-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/architecture-design/backend-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a744833eb7e93b81", "name": "Agent instruction/config may expose a secret: skills/architecture-design/backend-patterns/cc-skill-backend-patterns/SKIL", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/architecture-design/backend-patterns/cc-skill-backend-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c65244a17e31bec7", "name": "Agent authority lacks a verifier contract: skills/architecture-design/backend-patterns/cc-skill-backend-patterns/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/architecture-design/backend-patterns/cc-skill-backend-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-61e0cb741327c3fc", "name": "Agent instruction/config may expose a secret: skills/architecture-design/api-integration-specialist/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/architecture-design/api-integration-specialist/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7bf6a88bcc0d5b8c", "name": "Agent instruction contains unpinned remote install: skills/ship/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/ship/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-89a929596ce58261", "name": "Agent authority lacks a verifier contract: skills/requirements-planning/okr-tracker-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/requirements-planning/okr-tracker-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1a3e582f28c0c25", "name": "Agent authority lacks a verifier contract: skills/requirements-planning/project-management/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/requirements-planning/project-management/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1207d4b00fbb125d", "name": "Agent instruction/config may expose a secret: skills/requirements-planning/project-management/senior-pm/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/requirements-planning/project-management/senior-pm/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e617d674c4f9d070", "name": "Agent authority lacks a verifier contract: skills/requirements-planning/roadmap-communicator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/requirements-planning/roadmap-communicator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fb476a9dbb2ca014", "name": "Agent authority lacks a verifier contract: skills/requirements-planning/backlog-grooming-assistant/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/requirements-planning/backlog-grooming-assistant/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e67e3e7ce5cf4cb", "name": "Agent authority lacks a verifier contract: skills/docx/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/docx/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8203b35b1799ebb", "name": "Agent instruction contains unpinned remote install: skills/docx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/docx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e2c993606573a1d", "name": "Agent instruction contains unpinned remote install: skills/pptx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/pptx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-54b077a0603d88f8", "name": "Agent authority lacks a verifier contract: skills/source-command-prime/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/source-command-prime/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c8b2287b5be3113", "name": "Agent authority lacks a verifier contract: skills/code-patterns/fastapi-router-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/code-patterns/fastapi-router-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48bc84ebaa9665be", "name": "Agent authority lacks a verifier contract: skills/code-patterns/express-route-generator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/code-patterns/express-route-generator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b34bb940da40e713", "name": "Agent authority lacks a verifier contract: skills/code-patterns/flask-blueprint-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/code-patterns/flask-blueprint-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03c70469aa557cba", "name": "Agent instruction/config may expose a secret: skills/code-patterns/django-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/code-patterns/django-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-730b54be59752bc0", "name": "Agent authority lacks a verifier contract: skills/code-patterns/go-handler-generator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/code-patterns/go-handler-generator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-540b391e5ffa0035", "name": "Agent authority lacks a verifier contract: skills/source-command-check-owasp/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/source-command-check-owasp/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6aa30ab4daafd1c4", "name": "Agent authority lacks a verifier contract: skills/brand-guidelines/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/brand-guidelines/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9fca5cd75b8cd603", "name": "Agent authority lacks a verifier contract: skills/documentation-writing/documentation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/documentation-writing/documentation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a60a7cf2134a1bd", "name": "Agent authority lacks a verifier contract: skills/documentation-writing/architecture-doc-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/documentation-writing/architecture-doc-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-365428a5851bdae8", "name": "Agent authority lacks a verifier contract: skills/documentation-writing/documentation-templates/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/documentation-writing/documentation-templates/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d40029c9a6cec8f1", "name": "Agent authority lacks a verifier contract: skills/documentation-writing/mermaid-diagrams/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/documentation-writing/mermaid-diagrams/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38e4e731c5fb0c81", "name": "Agent instruction contains unpinned remote install: skills/documentation-writing/mermaid-diagrams/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/documentation-writing/mermaid-diagrams/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-802c276e9924f0c2", "name": "Agent authority lacks a verifier contract: skills/documentation-writing/changelog-generator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/documentation-writing/changelog-generator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-59a0b97259e577be", "name": "Agent instruction/config may expose a secret: plugins/ui-design/skills/web-component-design/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/ui-design/skills/web-component-design/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-11b16ce07170a24b", "name": "Agent instruction/config may expose a secret: plugins/llm-application-dev/skills/embedding-strategies/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/llm-application-dev/skills/embedding-strategies/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-987625d4d4cbcbf7", "name": "Agent instruction/config may expose a secret: plugins/llm-application-dev/skills/hybrid-search-implementation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/llm-application-dev/skills/hybrid-search-implementation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b11a85758ca56ab3", "name": "Agent authority lacks a verifier contract: plugins/llm-application-dev/skills/similarity-search-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/llm-application-dev/skills/similarity-search-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b50f14d3ebdb2c18", "name": "Agent instruction/config may expose a secret: plugins/systems-programming/skills/rust-async-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ce09a893a38d6884", "name": "Agent authority lacks a verifier contract: plugins/systems-programming/skills/rust-async-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b423345f8b416cc4", "name": "Agent authority lacks a verifier contract: plugins/game-development/skills/godot-gdscript-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/game-development/skills/godot-gdscript-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dd922bf9b451d11a", "name": "Agent instruction/config may expose a secret: plugins/observability-monitoring/skills/prometheus-configuration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/observability-monitoring/skills/prometheus-configuration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8a93eb05da8ad59a", "name": "Agent instruction/config may expose a secret: plugins/frontend-mobile-development/skills/react-state-management/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/frontend-mobile-development/skills/react-state-management/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bc3c130e69a9650f", "name": "Agent instruction/config may expose a secret: plugins/blockchain-web3/skills/nft-standards/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/blockchain-web3/skills/nft-standards/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0ce4328a41bcd9bc", "name": "Agent instruction contains unpinned remote install: plugins/python-development/skills/uv-package-manager/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: plugins/python-development/skills/uv-package-manager/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c63d89a7282469a", "name": "Agent instruction/config may expose a secret: plugins/python-development/skills/python-configuration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/python-development/skills/python-configuration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-77894e1cbc989c4f", "name": "Agent authority lacks a verifier contract: plugins/python-development/skills/python-configuration/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/python-development/skills/python-configuration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0bfaa490695b71c7", "name": "Agent instruction/config may expose a secret: plugins/python-development/skills/python-testing-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/python-development/skills/python-testing-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1026b6ce673e1d24", "name": "Agent instruction/config may expose a secret: plugins/reverse-engineering/skills/protocol-reverse-engineering/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/reverse-engineering/skills/protocol-reverse-engineering/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6b653cb49f31aa68", "name": "Agent authority lacks a verifier contract: plugins/database-design/skills/postgresql/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/database-design/skills/postgresql/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bea1861e8b044904", "name": "Agent instruction/config may expose a secret: plugins/developer-essentials/skills/auth-implementation-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/developer-essentials/skills/auth-implementation-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ed995a2c7d25a4a5", "name": "Agent authority lacks a verifier contract: plugins/developer-essentials/skills/sql-optimization-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/developer-essentials/skills/sql-optimization-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c73a43a6783c4b9c", "name": "Agent instruction/config may expose a secret: plugins/kubernetes-operations/skills/gitops-workflow/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/kubernetes-operations/skills/gitops-workflow/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c65fca86800a6915", "name": "Agent authority lacks a verifier contract: plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3e577566c5970121", "name": "Agent instruction/config may expose a secret: plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d98b51d0eb53dc7", "name": "Agent instruction/config may expose a secret: plugins/quantitative-trading/skills/risk-metrics-calculation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/quantitative-trading/skills/risk-metrics-calculation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-37f68825ae6ee8ac", "name": "Agent instruction/config may expose a secret: plugins/payment-processing/skills/pci-compliance/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/payment-processing/skills/pci-compliance/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c97edb73b2e37a24", "name": "Agent instruction/config may expose a secret: plugins/payment-processing/skills/paypal-integration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/payment-processing/skills/paypal-integration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-47844ae60377e3c1", "name": "Agent instruction/config may expose a secret: plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8e46a11d11208e61", "name": "Agent instruction/config may expose a secret: plugins/javascript-typescript/skills/nodejs-backend-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/javascript-typescript/skills/nodejs-backend-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d7fe42ecdab4a235", "name": "Agent instruction/config may expose a secret: plugins/javascript-typescript/skills/modern-javascript-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/javascript-typescript/skills/modern-javascript-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-faec0b020efc5628", "name": "Agent authority lacks a verifier contract: plugins/backend-development/skills/event-store-design/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/backend-development/skills/event-store-design/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f35a49459b043c30", "name": "Agent authority lacks a verifier contract: plugins/backend-development/skills/saga-orchestration/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/backend-development/skills/saga-orchestration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-58843f324cf7c833", "name": "Agent instruction/config may expose a secret: plugins/backend-development/skills/microservices-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a35f09751716b8e4", "name": "Agent authority lacks a verifier contract: plugins/backend-development/skills/microservices-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50083e8c825d8351", "name": "Agent instruction/config may expose a secret: plugins/cicd-automation/skills/secrets-management/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/cicd-automation/skills/secrets-management/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5ec7608b00ce18d0", "name": "Agent instruction contains unpinned remote install: plugins/documentation-generation/skills/openapi-spec-generation/SKIL", "shortDescription": {"text": "Agent instruction contains unpinned remote install: plugins/documentation-generation/skills/openapi-spec-generation/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d9154cf47925849e", "name": "Agent instruction/config may expose a secret: plugins/cloud-infrastructure/skills/mtls-configuration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/cloud-infrastructure/skills/mtls-configuration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-49af2a525fa2869a", "name": "Agent authority lacks a verifier contract: plugins/cloud-infrastructure/skills/service-mesh-observability/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/cloud-infrastructure/skills/service-mesh-observability/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2a56b16a3fd7e8d", "name": "Agent instruction contains unpinned remote install: plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f9aed2de3c9d9d2a", "name": "Agent authority lacks a verifier contract: plugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a2e049d38a188eb5", "name": "Agent authority lacks a verifier contract: plugins/agent-teams/skills/parallel-feature-development/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/agent-teams/skills/parallel-feature-development/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8a48c52a7e00e774", "name": "Agent instruction/config may expose a secret: plugins/agent-teams/skills/task-coordination-strategies/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/agent-teams/skills/task-coordination-strategies/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b2d408e4576ccec4", "name": "Commented-code block (5 lines) in tests/dashboard-server-hardening.test.js:318", "shortDescription": {"text": "Commented-code block (5 lines) in tests/dashboard-server-hardening.test.js:318"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3104414acb59ddcd", "name": "Network/subprocess call without timeout or try/except \u2014 skills/docx/scripts/office/soffice.py:14", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/docx/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b934bda00fca712c", "name": "Network/subprocess call without timeout or try/except \u2014 skills/docx/scripts/office/validators/redlining.py:138", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/docx/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b2b3b83dce5d96c", "name": "Legacy-named symbol `xml_copy` in skills/docx/scripts/office/validators/base.py:705", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in skills/docx/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-716aa6125b3a1ed2", "name": "Network/subprocess call without timeout or try/except \u2014 skills/pptx/scripts/thumbnail.py:161", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/pptx/scripts/thumbnail.py:161"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4cf6998ebf17d47", "name": "Network/subprocess call without timeout or try/except \u2014 skills/pptx/scripts/office/soffice.py:14", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/pptx/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c700782e722a100", "name": "Network/subprocess call without timeout or try/except \u2014 skills/pptx/scripts/office/validators/redlining.py:138", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/pptx/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6eceaedc510d0881", "name": "Legacy-named symbol `xml_copy` in skills/pptx/scripts/office/validators/base.py:705", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in skills/pptx/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-077eadac6c6987c2", "name": "Network/subprocess call without timeout or try/except \u2014 skills/xlsx/scripts/recalc.py:92", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/xlsx/scripts/recalc.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bdd2cf8599b1e753", "name": "Network/subprocess call without timeout or try/except \u2014 skills/xlsx/scripts/office/soffice.py:14", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/xlsx/scripts/office/soffice.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8f1a20209ec20cf", "name": "Network/subprocess call without timeout or try/except \u2014 skills/xlsx/scripts/office/validators/redlining.py:138", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/xlsx/scripts/office/validators/redlining.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f94da7c4871fbba8", "name": "Legacy-named symbol `xml_copy` in skills/xlsx/scripts/office/validators/base.py:705", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in skills/xlsx/scripts/office/validators/base.py:705"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-90d7dc70f403a31a", "name": "Commented-code block (8 lines) in skills/algorithmic-art/templates/generator_template.js:15", "shortDescription": {"text": "Commented-code block (8 lines) in skills/algorithmic-art/templates/generator_template.js:15"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5375f8b79d23a397", "name": "Commented-code block (6 lines) in src/integrations/pi/rstack-sdlc.ts:1495", "shortDescription": {"text": "Commented-code block (6 lines) in src/integrations/pi/rstack-sdlc.ts:1495"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3eac0b6b087a40bc", "name": "Commented-code block (10 lines) in src/observability/dashboard/hardening.js:100", "shortDescription": {"text": "Commented-code block (10 lines) in src/observability/dashboard/hardening.js:100"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8d25805424a53fa2", "name": "Commented-code block (5 lines) in src/observability/dashboard/ui/artifact-render.js:3", "shortDescription": {"text": "Commented-code block (5 lines) in src/observability/dashboard/ui/artifact-render.js:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0885f14313da011b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/observability/dashboard/ui/client.js:1342", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/observability/dashboard/ui/client.js:1342"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a00a5e21d19c6274", "name": "Legacy-named symbol `hoursOld` in src/memory/index.js:202", "shortDescription": {"text": "Legacy-named symbol `hoursOld` in src/memory/index.js:202"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/security-compliance/auditing-access-control/scripts/access_control_audit.py:analyze_directory, skills/testing-qa/analyzing-test-coverage/scripts/analyze_coverage.py:analyze_directory, skills/architecture-design/analyzing-database-indexes/scripts/analyze_indexes.py:analyze_directory\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/architecture-design/api-design-principles/assets/rest-api-template.py:http_exception_handler, plugins/backend-development/skills/api-design-principles/assets/rest-api-template.py:http_exception_handler\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-04ed7001c3ebc23d", "name": "Dangling fetch: GET http://localhost:${port}/api/metrics (tests/harness-dashboard.test.js:64)", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${port}/api/metrics (tests/harness-dashboard.test.js:64)"}, "fullDescription": {"text": "`tests/harness-dashboard.test.js:64` calls `GET http://localhost:${port}/api/metrics` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>/api/metrics`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4680e43c2188be43", "name": "Dangling fetch: GET /api/state (src/observability/dashboard/ui/client.js:1819)", "shortDescription": {"text": "Dangling fetch: GET /api/state (src/observability/dashboard/ui/client.js:1819)"}, "fullDescription": {"text": "`src/observability/dashboard/ui/client.js:1819` calls `GET /api/state` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/state`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9750c66f680cad49", "name": "Dangling fetch: GET /api/state (src/observability/dashboard/ui/studio3d.js:590)", "shortDescription": {"text": "Dangling fetch: GET /api/state (src/observability/dashboard/ui/studio3d.js:590)"}, "fullDescription": {"text": "`src/observability/dashboard/ui/studio3d.js:590` calls `GET /api/state` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/state`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e3b3068c10a01f84", "name": "Dangling fetch: GET /api/metrics (src/observability/collectors/legacy.js:237)", "shortDescription": {"text": "Dangling fetch: GET /api/metrics (src/observability/collectors/legacy.js:237)"}, "fullDescription": {"text": "`src/observability/collectors/legacy.js:237` calls `GET /api/metrics` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/metrics`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9852b00783826ad5", "name": "Dangling fetch: GET /api/memory-health (src/observability/collectors/legacy.js:290)", "shortDescription": {"text": "Dangling fetch: GET /api/memory-health (src/observability/collectors/legacy.js:290)"}, "fullDescription": {"text": "`src/observability/collectors/legacy.js:290` calls `GET /api/memory-health` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/memory-health`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a3c45156489b020", "name": "Unused endpoint: GET /api/users", "shortDescription": {"text": "Unused endpoint: GET /api/users"}, "fullDescription": {"text": "`skills/architecture-design/api-design-principles/assets/rest-api-template.py` declares `GET /api/users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49546f6900fb04c5", "name": "Unused endpoint: POST /api/users", "shortDescription": {"text": "Unused endpoint: POST /api/users"}, "fullDescription": {"text": "`skills/architecture-design/api-design-principles/assets/rest-api-template.py` declares `POST /api/users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ffef5a07597afc9", "name": "Unused endpoint: GET /api/users/{user_id}", "shortDescription": {"text": "Unused endpoint: GET /api/users/{user_id}"}, "fullDescription": {"text": "`skills/architecture-design/api-design-principles/assets/rest-api-template.py` declares `GET /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-887c385438b11bc5", "name": "Unused endpoint: PATCH /api/users/{user_id}", "shortDescription": {"text": "Unused endpoint: PATCH /api/users/{user_id}"}, "fullDescription": {"text": "`skills/architecture-design/api-design-principles/assets/rest-api-template.py` declares `PATCH /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c3fb176c336b8818", "name": "Unused endpoint: DELETE /api/users/{user_id}", "shortDescription": {"text": "Unused endpoint: DELETE /api/users/{user_id}"}, "fullDescription": {"text": "`skills/architecture-design/api-design-principles/assets/rest-api-template.py` declares `DELETE /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/18132"}, "properties": {"repository": "richard-devbot/SDLC-rstack", "repoUrl": "https://github.com/richard-devbot/SDLC-rstack", "branch": "main"}, "results": [{"ruleId": "scanner-b0175f1c8fdcd008", "level": "note", "message": {"text": "Possibly dead Python function: generate_cloudformation_template"}, "properties": {"repobilityId": "497a255532dc2c28", "scanner": "scanner-primary", "fingerprint": "b0175f1c8fdcd008", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/aws-solution-architect/scripts/serverless_stack.py:24"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ba396407678ea83", "level": "note", "message": {"text": "Possibly dead Python function: generate_cdk_stack"}, "properties": {"repobilityId": "fdc2ffcba65350f2", "scanner": "scanner-primary", "fingerprint": "6ba396407678ea83", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/aws-solution-architect/scripts/serverless_stack.py:234"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a0d96867f689e32", "level": "note", "message": {"text": "Possibly dead Python function: generate_terraform_configuration"}, "properties": {"repobilityId": "04d75258e4048192", "scanner": "scanner-primary", "fingerprint": "2a0d96867f689e32", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/aws-solution-architect/scripts/serverless_stack.py:372"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6d30f6e1e5d7a3f4", "level": "note", "message": {"text": "Possibly dead Python function: analyze_and_optimize"}, "properties": {"repobilityId": "c9dd32bbb6a5d224", "scanner": "scanner-primary", "fingerprint": "6d30f6e1e5d7a3f4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/aws-solution-architect/scripts/cost_optimizer.py:24"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ea7a34a09a7ac9a", "level": "note", "message": {"text": "Possibly dead Python function: generate_optimization_checklist"}, "properties": {"repobilityId": "c83bac50dbdf0e34", "scanner": "scanner-primary", "fingerprint": "6ea7a34a09a7ac9a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/aws-solution-architect/scripts/cost_optimizer.py:307"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7eb666b2547e2842", "level": "note", "message": {"text": "Possibly dead Python function: generate_service_checklist"}, "properties": {"repobilityId": "e73c976d7290af4b", "scanner": "scanner-primary", "fingerprint": "7eb666b2547e2842", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/aws-solution-architect/scripts/architecture_designer.py:744"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e229b7df4a30dfc4", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_quad"}, "properties": {"repobilityId": "9c54008225f34fad", "scanner": "scanner-primary", "fingerprint": "e229b7df4a30dfc4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:17"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f245ff06ec5425cb", "level": "note", "message": {"text": "Possibly dead Python function: ease_out_quad"}, "properties": {"repobilityId": "74b589b882a977ff", "scanner": "scanner-primary", "fingerprint": "f245ff06ec5425cb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:22"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c0fa681903818469", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_quad"}, "properties": {"repobilityId": "142c853223e69301", "scanner": "scanner-primary", "fingerprint": "c0fa681903818469", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:27"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-625e7047d611e6d5", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_cubic"}, "properties": {"repobilityId": "04c4b3dd3a4c80b5", "scanner": "scanner-primary", "fingerprint": "625e7047d611e6d5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:34"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d76bc3dd2f0ddfd", "level": "note", "message": {"text": "Possibly dead Python function: ease_out_cubic"}, "properties": {"repobilityId": "1527d30f50a4943b", "scanner": "scanner-primary", "fingerprint": "2d76bc3dd2f0ddfd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:39"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-70f3429700fff596", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_cubic"}, "properties": {"repobilityId": "4e32e71f9a5016ac", "scanner": "scanner-primary", "fingerprint": "70f3429700fff596", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:44"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9f7b820c8042c676", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_bounce"}, "properties": {"repobilityId": "0185838c943af0e6", "scanner": "scanner-primary", "fingerprint": "9f7b820c8042c676", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:71"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9f00a7fcf2e1f59a", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_elastic"}, "properties": {"repobilityId": "4a3d8bcbd5ff465b", "scanner": "scanner-primary", "fingerprint": "9f00a7fcf2e1f59a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:78"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ffe6fb8644a1bb0a", "level": "note", "message": {"text": "Possibly dead Python function: ease_out_elastic"}, "properties": {"repobilityId": "fa5c6451007cfca8", "scanner": "scanner-primary", "fingerprint": "ffe6fb8644a1bb0a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:85"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-25bcc96298101ce8", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_elastic"}, "properties": {"repobilityId": "00839dd091318e93", "scanner": "scanner-primary", "fingerprint": "25bcc96298101ce8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:92"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-247b8237bff4c566", "level": "note", "message": {"text": "Possibly dead Python function: interpolate"}, "properties": {"repobilityId": "7f46b343ca4d0a22", "scanner": "scanner-primary", "fingerprint": "247b8237bff4c566", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:122"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e486c70a416bc7bd", "level": "note", "message": {"text": "Possibly dead Python function: ease_back_in"}, "properties": {"repobilityId": "56b2b016f0ad05d0", "scanner": "scanner-primary", "fingerprint": "e486c70a416bc7bd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:140"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4febd1298df66d82", "level": "note", "message": {"text": "Possibly dead Python function: ease_back_out"}, "properties": {"repobilityId": "32646da19ba276ce", "scanner": "scanner-primary", "fingerprint": "4febd1298df66d82", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:147"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06a0d423352163e6", "level": "note", "message": {"text": "Possibly dead Python function: ease_back_in_out"}, "properties": {"repobilityId": "2b283166adb35df2", "scanner": "scanner-primary", "fingerprint": "06a0d423352163e6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:154"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6eb5fb38a329f74c", "level": "note", "message": {"text": "Possibly dead Python function: apply_squash_stretch"}, "properties": {"repobilityId": "69472943e1b79017", "scanner": "scanner-primary", "fingerprint": "6eb5fb38a329f74c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:163"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3cb4f0f5b17108af", "level": "note", "message": {"text": "Possibly dead Python function: calculate_arc_motion"}, "properties": {"repobilityId": "624162caad1aec81", "scanner": "scanner-primary", "fingerprint": "3cb4f0f5b17108af", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/easing.py:195"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e698c5a3690a6626", "level": "note", "message": {"text": "Possibly dead Python function: add_frames"}, "properties": {"repobilityId": "6e6433335a7f3a8b", "scanner": "scanner-primary", "fingerprint": "e698c5a3690a6626", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/gif_builder.py:54"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d5f3fb55eac4526c", "level": "note", "message": {"text": "Possibly dead Python function: clear"}, "properties": {"repobilityId": "6a258a943234091d", "scanner": "scanner-primary", "fingerprint": "d5f3fb55eac4526c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/gif_builder.py:267"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e7558d00684cc45d", "level": "note", "message": {"text": "Possibly dead Python function: create_blank_frame"}, "properties": {"repobilityId": "bb029a02d78c810d", "scanner": "scanner-primary", "fingerprint": "e7558d00684cc45d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/frame_composer.py:15"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1be7e822e2a88920", "level": "note", "message": {"text": "Possibly dead Python function: draw_circle"}, "properties": {"repobilityId": "1122ecc0aa850a7e", "scanner": "scanner-primary", "fingerprint": "1be7e822e2a88920", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/frame_composer.py:32"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-75a23f01279546a8", "level": "note", "message": {"text": "Possibly dead Python function: draw_text"}, "properties": {"repobilityId": "aac6f85884a43483", "scanner": "scanner-primary", "fingerprint": "75a23f01279546a8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/frame_composer.py:61"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b700beafbac3e509", "level": "note", "message": {"text": "Possibly dead Python function: create_gradient_background"}, "properties": {"repobilityId": "6a61e41865c295ed", "scanner": "scanner-primary", "fingerprint": "b700beafbac3e509", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/frame_composer.py:99"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1290039c9461684c", "level": "note", "message": {"text": "Possibly dead Python function: draw_star"}, "properties": {"repobilityId": "69b7011c25b836c3", "scanner": "scanner-primary", "fingerprint": "1290039c9461684c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/core/frame_composer.py:137"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7db7279fd7a3f3af", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/harness-checkpoints-signatures.test.js:48"}, "properties": {"repobilityId": "8364bce32b6393ec", "scanner": "scanner-primary", "fingerprint": "7db7279fd7a3f3af", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2dcff907e507f6f6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/integrations/pi/rstack-sdlc.ts:2189"}, "properties": {"repobilityId": "bb5c90ed5239d87f", "scanner": "scanner-primary", "fingerprint": "2dcff907e507f6f6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-eb6ad4b3733ec63f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/notifications/index.js:33"}, "properties": {"repobilityId": "4b1b48415a8cbc6b", "scanner": "scanner-primary", "fingerprint": "eb6ad4b3733ec63f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6a3a74a740271622", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/validate.js:133"}, "properties": {"repobilityId": "205e7a46f969b615", "scanner": "scanner-primary", "fingerprint": "6a3a74a740271622", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c5e0c78dfa5f1678", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/commands/list.js:108"}, "properties": {"repobilityId": "2b814a9ec793ed88", "scanner": "scanner-primary", "fingerprint": "c5e0c78dfa5f1678", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-049bc9d1c1892bd7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/utils/logger.js:11"}, "properties": {"repobilityId": "f9810dc1fdf3724c", "scanner": "scanner-primary", "fingerprint": "049bc9d1c1892bd7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-467e49f369daf4bc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/observability/dashboard/server.js:438"}, "properties": {"repobilityId": "ab247605e7f35c23", "scanner": "scanner-primary", "fingerprint": "467e49f369daf4bc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-476e11d51ec465ca", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 src/observability/dashboard/ui/studio3d.js:103"}, "properties": {"repobilityId": "78bb31fa2ec981f0", "scanner": "scanner-primary", "fingerprint": "476e11d51ec465ca", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-9a365d10751ce127", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/observability/collectors/legacy.js:372"}, "properties": {"repobilityId": "2fe2ab3a5877ce51", "scanner": "scanner-primary", "fingerprint": "9a365d10751ce127", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7ac9d033bb4dcabd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/hooks/auto-launch.js:28"}, "properties": {"repobilityId": "aca723f6d65964f9", "scanner": "scanner-primary", "fingerprint": "7ac9d033bb4dcabd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fcf8aa1e64689d9c", "level": "warning", "message": {"text": "Privileged port 3 in use"}, "properties": {"repobilityId": "261b7b1c6a18d412", "scanner": "scanner-primary", "fingerprint": "fcf8aa1e64689d9c", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performance-monitoring/deploying-monitoring-stacks/scripts/deploy_grafana.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-068199870794cc47", "level": "warning", "message": {"text": "Privileged port 48 in use"}, "properties": {"repobilityId": "6a483602fa277896", "scanner": "scanner-primary", "fingerprint": "068199870794cc47", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performance-monitoring/deploying-monitoring-stacks/scripts/deploy_grafana.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7418b5b11aeba768", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in skills/devops-deployment/aws-serverless/SKILL.md:49"}, "properties": {"repobilityId": "51500f2c161eac09", "scanner": "scanner-primary", "fingerprint": "7418b5b11aeba768", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/aws-serverless/SKILL.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-b87bce539aba48db", "level": "error", "message": {"text": "Possible secret in skills/security-compliance/cc-skill-security-review/SKILL.md"}, "properties": {"repobilityId": "b3842135fb8ba902", "scanner": "scanner-primary", "fingerprint": "b87bce539aba48db", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/cc-skill-security-review/SKILL.md"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-48aa60ac12dad74d", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/security-compliance/cc-skill-security-review/SKILL.md:209"}, "properties": {"repobilityId": "21f230dc66d835dd", "scanner": "scanner-primary", "fingerprint": "48aa60ac12dad74d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/cc-skill-security-review/SKILL.md"}, "region": {"startLine": 209}}}]}, {"ruleId": "scanner-52825736b7bfb4f0", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in skills/security-compliance/cc-skill-security-review/SKILL.md:147"}, "properties": {"repobilityId": "059b39074fee1c06", "scanner": "scanner-primary", "fingerprint": "52825736b7bfb4f0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/cc-skill-security-review/SKILL.md"}, "region": {"startLine": 147}}}]}, {"ruleId": "scanner-2c0e4d245cddb864", "level": "error", "message": {"text": "Possible secret in skills/security-compliance/api-fuzzing-bug-bounty/SKILL.md"}, "properties": {"repobilityId": "84080893811f4777", "scanner": "scanner-primary", "fingerprint": "2c0e4d245cddb864", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/api-fuzzing-bug-bounty/SKILL.md"}, "region": {"startLine": 211}}}]}, {"ruleId": "scanner-2c0e4d245cddb864", "level": "error", "message": {"text": "Possible secret in skills/security-compliance/api-fuzzing-bug-bounty/SKILL.md"}, "properties": {"repobilityId": "84080893811f4777", "scanner": "scanner-primary", "fingerprint": "2c0e4d245cddb864", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/api-fuzzing-bug-bounty/SKILL.md"}, "region": {"startLine": 222}}}]}, {"ruleId": "scanner-2c0e4d245cddb864", "level": "error", "message": {"text": "Possible secret in skills/security-compliance/api-fuzzing-bug-bounty/SKILL.md"}, "properties": {"repobilityId": "84080893811f4777", "scanner": "scanner-primary", "fingerprint": "2c0e4d245cddb864", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/api-fuzzing-bug-bounty/SKILL.md"}, "region": {"startLine": 223}}}]}, {"ruleId": "scanner-2c0e4d245cddb864", "level": "error", "message": {"text": "Possible secret in skills/security-compliance/api-fuzzing-bug-bounty/SKILL.md"}, "properties": {"repobilityId": "84080893811f4777", "scanner": "scanner-primary", "fingerprint": "2c0e4d245cddb864", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/api-fuzzing-bug-bounty/SKILL.md"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-87070f87578dfb5d", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/cso/SKILL.md:573"}, "properties": {"repobilityId": "cd1c8c95ed27c5b3", "scanner": "scanner-primary", "fingerprint": "87070f87578dfb5d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/cso/SKILL.md"}, "region": {"startLine": 573}}}]}, {"ruleId": "scanner-2fdc0135d95788dd", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in skills/cso/SKILL.md:573"}, "properties": {"repobilityId": "855fcd9ef2c04bbe", "scanner": "scanner-primary", "fingerprint": "2fdc0135d95788dd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/cso/SKILL.md"}, "region": {"startLine": 573}}}]}, {"ruleId": "scanner-727ef023d969daa3", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/cso/SKILL.md:570"}, "properties": {"repobilityId": "fa7144bdaa9f4c32", "scanner": "scanner-primary", "fingerprint": "727ef023d969daa3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/cso/SKILL.md"}, "region": {"startLine": 570}}}]}, {"ruleId": "scanner-533d8d444bc40831", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/cso/SKILL.md:616"}, "properties": {"repobilityId": "fef86c185bbb7230", "scanner": "scanner-primary", "fingerprint": "533d8d444bc40831", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/cso/SKILL.md"}, "region": {"startLine": 616}}}]}, {"ruleId": "scanner-6cd70bbd24c8242e", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in skills/webapp-testing/scripts/with_server.py:71"}, "properties": {"repobilityId": "e88e06767954d64c", "scanner": "scanner-primary", "fingerprint": "6cd70bbd24c8242e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/webapp-testing/scripts/with_server.py"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-bf5d36a5c7159e36", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/code-review-pr/SKILL.md:686"}, "properties": {"repobilityId": "3ac5c3c0fd91fc37", "scanner": "scanner-primary", "fingerprint": "bf5d36a5c7159e36", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/code-review-pr/SKILL.md"}, "region": {"startLine": 686}}}]}, {"ruleId": "scanner-c238a79bb2674b29", "level": "note", "message": {"text": "Insecure pattern 'document_write' in skills/architecture-design/best-practices/SKILL.md:131"}, "properties": {"repobilityId": "a4a4eed7339056f1", "scanner": "scanner-primary", "fingerprint": "c238a79bb2674b29", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/best-practices/SKILL.md"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-668765f0b5b880ac", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in skills/architecture-design/best-practices/SKILL.md:130"}, "properties": {"repobilityId": "ff61c64bfc275e31", "scanner": "scanner-primary", "fingerprint": "668765f0b5b880ac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/best-practices/SKILL.md"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-31e20e1c06b403f5", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in skills/architecture-design/best-practices/SKILL.md:145"}, "properties": {"repobilityId": "b1d1828ef6236c0d", "scanner": "scanner-primary", "fingerprint": "31e20e1c06b403f5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/best-practices/SKILL.md"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-4bfdb1f61ea9ce31", "level": "error", "message": {"text": "Possible secret in skills/architecture-design/api-endpoint-builder/SKILL.md"}, "properties": {"repobilityId": "1eccbb322ca52f37", "scanner": "scanner-primary", "fingerprint": "4bfdb1f61ea9ce31", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/api-endpoint-builder/SKILL.md"}, "region": {"startLine": 286}}}]}, {"ruleId": "scanner-4bfdb1f61ea9ce31", "level": "error", "message": {"text": "Possible secret in skills/architecture-design/api-endpoint-builder/SKILL.md"}, "properties": {"repobilityId": "1eccbb322ca52f37", "scanner": "scanner-primary", "fingerprint": "4bfdb1f61ea9ce31", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/api-endpoint-builder/SKILL.md"}, "region": {"startLine": 301}}}]}, {"ruleId": "scanner-0eed5c0641ea32f2", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/ship/SKILL.md:847"}, "properties": {"repobilityId": "f3683d44308c8a6b", "scanner": "scanner-primary", "fingerprint": "0eed5c0641ea32f2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/ship/SKILL.md"}, "region": {"startLine": 847}}}]}, {"ruleId": "scanner-ee234ecdaa79e7e6", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/plan-eng-review/SKILL.md:570"}, "properties": {"repobilityId": "5f22a4c70c4ecd03", "scanner": "scanner-primary", "fingerprint": "ee234ecdaa79e7e6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/plan-eng-review/SKILL.md"}, "region": {"startLine": 570}}}]}, {"ruleId": "scanner-71cfff74fdf8abb7", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in skills/code-patterns/browser-extension-builder/SKILL.md:133"}, "properties": {"repobilityId": "5ef33d69763d1d8c", "scanner": "scanner-primary", "fingerprint": "71cfff74fdf8abb7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/code-patterns/browser-extension-builder/SKILL.md"}, "region": {"startLine": 133}}}]}, {"ruleId": "scanner-039c75aa657755c2", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/security-owasp/SKILL.md:465"}, "properties": {"repobilityId": "a969844b629b86ff", "scanner": "scanner-primary", "fingerprint": "039c75aa657755c2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-owasp/SKILL.md"}, "region": {"startLine": 465}}}]}, {"ruleId": "scanner-87f70b1ef8dd271f", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in skills/security-owasp/SKILL.md:465"}, "properties": {"repobilityId": "24faad449f71fc40", "scanner": "scanner-primary", "fingerprint": "87f70b1ef8dd271f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-owasp/SKILL.md"}, "region": {"startLine": 465}}}]}, {"ruleId": "scanner-52d2b49afc39b29a", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/security-owasp/SKILL.md:462"}, "properties": {"repobilityId": "c258232e223d1c1f", "scanner": "scanner-primary", "fingerprint": "52d2b49afc39b29a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-owasp/SKILL.md"}, "region": {"startLine": 462}}}]}, {"ruleId": "scanner-cecc5a3979adb6eb", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/security-owasp/SKILL.md:514"}, "properties": {"repobilityId": "c6d8cd8e08fe0735", "scanner": "scanner-primary", "fingerprint": "cecc5a3979adb6eb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-owasp/SKILL.md"}, "region": {"startLine": 514}}}]}, {"ruleId": "scanner-10b17c5d4351b73f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/integrations/pi/rstack-sdlc.ts:4"}, "properties": {"repobilityId": "6890fb3b804dd5f9", "scanner": "scanner-primary", "fingerprint": "10b17c5d4351b73f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/integrations/pi/rstack-sdlc.ts"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-35c0def2992c20d5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/observability/dashboard/server.js:2"}, "properties": {"repobilityId": "8c258c4a3cee602c", "scanner": "scanner-primary", "fingerprint": "35c0def2992c20d5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/observability/dashboard/server.js"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-27c7fc0f13963a94", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/dashboard/ui/artifact-render.js:195"}, "properties": {"repobilityId": "cecae2910fc6b15b", "scanner": "scanner-primary", "fingerprint": "27c7fc0f13963a94", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/observability/dashboard/ui/artifact-render.js"}, "region": {"startLine": 195}}}]}, {"ruleId": "scanner-26ace531d81ae62f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/dashboard/ui/client.js:258"}, "properties": {"repobilityId": "2bfab250e72d72d8", "scanner": "scanner-primary", "fingerprint": "26ace531d81ae62f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/observability/dashboard/ui/client.js"}, "region": {"startLine": 258}}}]}, {"ruleId": "scanner-ad5234ebd4cf7595", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in src/observability/dashboard/ui/client.js:1802"}, "properties": {"repobilityId": "306de8d609b08367", "scanner": "scanner-primary", "fingerprint": "ad5234ebd4cf7595", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/observability/dashboard/ui/client.js"}, "region": {"startLine": 1802}}}]}, {"ruleId": "scanner-a435e56879503d34", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/dashboard/ui/studio3d.js:350"}, "properties": {"repobilityId": "f3bdbc7c3408826b", "scanner": "scanner-primary", "fingerprint": "a435e56879503d34", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/observability/dashboard/ui/studio3d.js"}, "region": {"startLine": 350}}}]}, {"ruleId": "scanner-5f1434eaaaf04356", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/observability/collectors/legacy.js:249"}, "properties": {"repobilityId": "464373c1fcc3355f", "scanner": "scanner-primary", "fingerprint": "5f1434eaaaf04356", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/observability/collectors/legacy.js"}, "region": {"startLine": 249}}}]}, {"ruleId": "scanner-adde4ca9cae41166", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in src/observability/collectors/legacy.js:19"}, "properties": {"repobilityId": "59da7c918d6cfc77", "scanner": "scanner-primary", "fingerprint": "adde4ca9cae41166", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/observability/collectors/legacy.js"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-5f33e4a6a3d8e69e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/hooks/auto-launch.js:1"}, "properties": {"repobilityId": "2ea6ce8ad5006110", "scanner": "scanner-primary", "fingerprint": "5f33e4a6a3d8e69e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hooks/auto-launch.js"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6d66b937d376bc83", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/core/harness/identity.js:11"}, "properties": {"repobilityId": "f84ed9a721c491d3", "scanner": "scanner-primary", "fingerprint": "6d66b937d376bc83", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/core/harness/identity.js"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-92f08f2fc31671ab", "level": "error", "message": {"text": "Possible secret in plugins/developer-essentials/skills/e2e-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "bf5fdec11ca748c5", "scanner": "scanner-primary", "fingerprint": "92f08f2fc31671ab", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/developer-essentials/skills/e2e-testing-patterns/SKILL.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-469daace9fa7dd03", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in plugins/developer-essentials/skills/code-review-excellence/SKILL.md:424"}, "properties": {"repobilityId": "bf45b86647a8684c", "scanner": "scanner-primary", "fingerprint": "469daace9fa7dd03", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/developer-essentials/skills/code-review-excellence/SKILL.md"}, "region": {"startLine": 424}}}]}, {"ruleId": "scanner-61bb86b61cb4e23f", "level": "error", "message": {"text": "Insecure pattern 'private_key_in_repo' in plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md:224"}, "properties": {"repobilityId": "bec56bebfa08f031", "scanner": "scanner-primary", "fingerprint": "61bb86b61cb4e23f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["owasp", "private_key_in_repo"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-c708a818fd149173", "level": "error", "message": {"text": "Possible secret in plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "9b4200f14f0cde17", "scanner": "scanner-primary", "fingerprint": "c708a818fd149173", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "region": {"startLine": 522}}}]}, {"ruleId": "scanner-c708a818fd149173", "level": "error", "message": {"text": "Possible secret in plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "9b4200f14f0cde17", "scanner": "scanner-primary", "fingerprint": "c708a818fd149173", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "region": {"startLine": 542}}}]}, {"ruleId": "scanner-c708a818fd149173", "level": "error", "message": {"text": "Possible secret in plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "9b4200f14f0cde17", "scanner": "scanner-primary", "fingerprint": "c708a818fd149173", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "region": {"startLine": 557}}}]}, {"ruleId": "scanner-c708a818fd149173", "level": "error", "message": {"text": "Possible secret in plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "9b4200f14f0cde17", "scanner": "scanner-primary", "fingerprint": "c708a818fd149173", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "region": {"startLine": 576}}}]}, {"ruleId": "scanner-c708a818fd149173", "level": "error", "message": {"text": "Possible secret in plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "9b4200f14f0cde17", "scanner": "scanner-primary", "fingerprint": "c708a818fd149173", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "region": {"startLine": 607}}}]}, {"ruleId": "scanner-c708a818fd149173", "level": "error", "message": {"text": "Possible secret in plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "9b4200f14f0cde17", "scanner": "scanner-primary", "fingerprint": "c708a818fd149173", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "region": {"startLine": 612}}}]}, {"ruleId": "scanner-c708a818fd149173", "level": "error", "message": {"text": "Possible secret in plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "9b4200f14f0cde17", "scanner": "scanner-primary", "fingerprint": "c708a818fd149173", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "region": {"startLine": 676}}}]}, {"ruleId": "scanner-c708a818fd149173", "level": "error", "message": {"text": "Possible secret in plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "9b4200f14f0cde17", "scanner": "scanner-primary", "fingerprint": "c708a818fd149173", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "region": {"startLine": 688}}}]}, {"ruleId": "scanner-0ee3bd8a2d3ae9ee", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "59d6f89863794647", "scanner": "scanner-primary", "fingerprint": "0ee3bd8a2d3ae9ee", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate-agents.yml"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-0ee3bd8a2d3ae9ee", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "019ec2845a7f7bd8", "scanner": "scanner-primary", "fingerprint": "0ee3bd8a2d3ae9ee", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate-agents.yml"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ae16880318b99912", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "989a74409a402368", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ae16880318b99912", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "989a74409a402368", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d8772e445ad1bf7d", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-905fc3c0b6fb0794", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0ac7041164875a0b", "scanner": "scanner-primary", "fingerprint": "905fc3c0b6fb0794", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-observer.yml"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-905fc3c0b6fb0794", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6fa994e3b460f536", "scanner": "scanner-primary", "fingerprint": "905fc3c0b6fb0794", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-observer.yml"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-905fc3c0b6fb0794", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fae5214cc879ea89", "scanner": "scanner-primary", "fingerprint": "905fc3c0b6fb0794", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-observer.yml"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-905fc3c0b6fb0794", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0ac7041164875a0b", "scanner": "scanner-primary", "fingerprint": "905fc3c0b6fb0794", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-observer.yml"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-905fc3c0b6fb0794", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "34757f0c27bfdb9c", "scanner": "scanner-primary", "fingerprint": "905fc3c0b6fb0794", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-observer.yml"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-905fc3c0b6fb0794", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "03860e07ad2255b4", "scanner": "scanner-primary", "fingerprint": "905fc3c0b6fb0794", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-observer.yml"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-93fc0e7c3bf66200", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "f24f7a2a1bb4b9d5", "scanner": "scanner-primary", "fingerprint": "93fc0e7c3bf66200", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-observer.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3ff29596dff0eef0", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b2a2052e1c570c41", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-7ffa33751be3d771", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "491a3ad29cbaf189", "scanner": "scanner-primary", "fingerprint": "7ffa33751be3d771", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c6de06a63b5b81f2", "level": "note", "message": {"text": "Very large file: skills/architecture-design/api-design-reviewer/scripts/api_scorecard.py (1660 lines)"}, "properties": {"repobilityId": "af07ada8cd380ce6", "scanner": "scanner-primary", "fingerprint": "c6de06a63b5b81f2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c8f43341f7ffe310", "level": "note", "message": {"text": "Very large file: src/integrations/pi/rstack-sdlc.ts (2203 lines)"}, "properties": {"repobilityId": "1e45b4547c8afade", "scanner": "scanner-primary", "fingerprint": "c8f43341f7ffe310", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-966572d374bb4eea", "level": "note", "message": {"text": "Very large file: src/observability/dashboard/ui/client.js (1960 lines)"}, "properties": {"repobilityId": "e058aa8fc4ae12c6", "scanner": "scanner-primary", "fingerprint": "966572d374bb4eea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "56dcc82ee8418403", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "d0152dcaa876baab", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "d67d38a7db473d3a", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "8bb28607ae9f8fcc", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "8a716bfdb78c9dc6", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-34be9d2bde9d9668", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/automation/bottleneck-identifier/SKILL.md"}, "properties": {"repobilityId": "630acd3da671e94c", "scanner": "scanner-primary", "fingerprint": "34be9d2bde9d9668", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/automation/bottleneck-identifier/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a8d552fc091f65b5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/devops-deployment/aws-solution-architect/SKILL.md"}, "properties": {"repobilityId": "839198ed75e390da", "scanner": "scanner-primary", "fingerprint": "a8d552fc091f65b5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/aws-solution-architect/SKILL.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-4d4668bf1afe8895", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/devops-deployment/argocd-app-deployer/SKILL.md"}, "properties": {"repobilityId": "c86d5ab2441e2e0d", "scanner": "scanner-primary", "fingerprint": "4d4668bf1afe8895", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/argocd-app-deployer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-095c54f095ba2a6b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/devops-deployment/aws-iam-best-practices/SKILL.md"}, "properties": {"repobilityId": "00334c5b410afa40", "scanner": "scanner-primary", "fingerprint": "095c54f095ba2a6b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/aws-iam-best-practices/SKILL.md"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-70b1ca0f1a1bb106", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/devops-deployment/aws-serverless/SKILL.md"}, "properties": {"repobilityId": "f383336247add5f4", "scanner": "scanner-primary", "fingerprint": "70b1ca0f1a1bb106", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/devops-deployment/aws-serverless/SKILL.md"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-e0ae40e0719b3766", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/gstack-upgrade/SKILL.md"}, "properties": {"repobilityId": "8374ef042bf3b031", "scanner": "scanner-primary", "fingerprint": "e0ae40e0719b3766", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/gstack-upgrade/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a85221f689db84a6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/security-compliance/broken-authentication/SKILL.md"}, "properties": {"repobilityId": "b7e4f468bfcf515f", "scanner": "scanner-primary", "fingerprint": "a85221f689db84a6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/broken-authentication/SKILL.md"}, "region": {"startLine": 189}}}]}, {"ruleId": "scanner-26edb26fe18cc640", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/security-compliance/api-key-auth-setup/SKILL.md"}, "properties": {"repobilityId": "cb31b9e4e5dbb22f", "scanner": "scanner-primary", "fingerprint": "26edb26fe18cc640", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/api-key-auth-setup/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-66626b025bb193b0", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/security-compliance/cc-skill-security-review/SKILL.md"}, "properties": {"repobilityId": "7ac9899af759890c", "scanner": "scanner-primary", "fingerprint": "66626b025bb193b0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/cc-skill-security-review/SKILL.md"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-3ee99c7a3adaf1ec", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/security-compliance/api-security-best-practices/SKILL.md"}, "properties": {"repobilityId": "51bf26ff8fb81284", "scanner": "scanner-primary", "fingerprint": "3ee99c7a3adaf1ec", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/api-security-best-practices/SKILL.md"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-b548e982450c95d9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/security-compliance/attack-surface-analyzer/SKILL.md"}, "properties": {"repobilityId": "79a8501e44539b45", "scanner": "scanner-primary", "fingerprint": "b548e982450c95d9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/attack-surface-analyzer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c01f06865dbfa160", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/security-compliance/authentication-validator/SKILL.md"}, "properties": {"repobilityId": "3729adc0c2dc8fb3", "scanner": "scanner-primary", "fingerprint": "c01f06865dbfa160", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-compliance/authentication-validator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-437a8379a6139ba4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/slack-gif-creator/SKILL.md"}, "properties": {"repobilityId": "2e9d658eb66c12bf", "scanner": "scanner-primary", "fingerprint": "437a8379a6139ba4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/slack-gif-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dc83f90645435b98", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/internal-comms/SKILL.md"}, "properties": {"repobilityId": "5919c437e13cb934", "scanner": "scanner-primary", "fingerprint": "dc83f90645435b98", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/internal-comms/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8366db1dd933c200", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/freeze/SKILL.md"}, "properties": {"repobilityId": "c5f6ae6d59223409", "scanner": "scanner-primary", "fingerprint": "8366db1dd933c200", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/freeze/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1427b789767efa85", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/code-review-pr/SKILL.md"}, "properties": {"repobilityId": "2faf08264a61d740", "scanner": "scanner-primary", "fingerprint": "1427b789767efa85", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/code-review-pr/SKILL.md"}, "region": {"startLine": 1012}}}]}, {"ruleId": "scanner-76787711fb978ce0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/unfreeze/SKILL.md"}, "properties": {"repobilityId": "84861bbdeb4cd9c2", "scanner": "scanner-primary", "fingerprint": "76787711fb978ce0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/unfreeze/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc9165350f9e6621", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/testing-qa/api-mock-generator/SKILL.md"}, "properties": {"repobilityId": "20acc249ed8fac45", "scanner": "scanner-primary", "fingerprint": "cc9165350f9e6621", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-qa/api-mock-generator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e35a7a4f238e443", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/creating-alerting-rules/SKILL.md"}, "properties": {"repobilityId": "36e11c1ea31f36f6", "scanner": "scanner-primary", "fingerprint": "1e35a7a4f238e443", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performance-monitoring/creating-alerting-rules/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c5452a0924c31a23", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/application-profiler/SKILL.md"}, "properties": {"repobilityId": "ea987dedb8bcd49f", "scanner": "scanner-primary", "fingerprint": "c5452a0924c31a23", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performance-monitoring/application-profiler/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ac67e8505d223da", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/bundle-size-analyzer/SKILL.md"}, "properties": {"repobilityId": "e2943c27806f5e8c", "scanner": "scanner-primary", "fingerprint": "5ac67e8505d223da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performance-monitoring/bundle-size-analyzer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-584692f27c56ee0a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/benchmark-suite-creator/SKILL.md"}, "properties": {"repobilityId": "57a5c665f976d391", "scanner": "scanner-primary", "fingerprint": "584692f27c56ee0a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performance-monitoring/benchmark-suite-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f290fe67194c9df", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/cache-performance-optimizer/SKILL.md"}, "properties": {"repobilityId": "7e0f044ee50ac138", "scanner": "scanner-primary", "fingerprint": "0f290fe67194c9df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performance-monitoring/cache-performance-optimizer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a5b5315c6101711", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/creating-apm-dashboards/SKILL.md"}, "properties": {"repobilityId": "b7c31e201b0ab840", "scanner": "scanner-primary", "fingerprint": "4a5b5315c6101711", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performance-monitoring/creating-apm-dashboards/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2513ca09c6d2480d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performance-monitoring/datadog-cli/SKILL.md"}, "properties": {"repobilityId": "958b185fba8bced3", "scanner": "scanner-primary", "fingerprint": "2513ca09c6d2480d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performance-monitoring/datadog-cli/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-69d78b6bd831f5a4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/architecture-design/best-practices/SKILL.md"}, "properties": {"repobilityId": "418a271ce10f2f4f", "scanner": "scanner-primary", "fingerprint": "69d78b6bd831f5a4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/best-practices/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c4ebc4ddb41b92e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/architecture-design/api-design/SKILL.md"}, "properties": {"repobilityId": "153820bd2fa1d87a", "scanner": "scanner-primary", "fingerprint": "2c4ebc4ddb41b92e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/api-design/SKILL.md"}, "region": {"startLine": 307}}}]}, {"ruleId": "scanner-f23f44796d355f6a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/architecture-design/api-design-reviewer/SKILL.md"}, "properties": {"repobilityId": "e16182492135f9ea", "scanner": "scanner-primary", "fingerprint": "f23f44796d355f6a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/api-design-reviewer/SKILL.md"}, "region": {"startLine": 256}}}]}, {"ruleId": "scanner-55292da5bb42d99d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/architecture-design/backend-patterns/SKILL.md"}, "properties": {"repobilityId": "e141e0892479972c", "scanner": "scanner-primary", "fingerprint": "55292da5bb42d99d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/backend-patterns/SKILL.md"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-7e07dd50363e23bd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/architecture-design/backend-patterns/SKILL.md"}, "properties": {"repobilityId": "f1cb066c176c551e", "scanner": "scanner-primary", "fingerprint": "7e07dd50363e23bd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/backend-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a744833eb7e93b81", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/architecture-design/backend-patterns/cc-skill-backend-patterns/SKILL.md"}, "properties": {"repobilityId": "aef301cceb2542e7", "scanner": "scanner-primary", "fingerprint": "a744833eb7e93b81", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/backend-patterns/cc-skill-backend-patterns/SKILL.md"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-c65244a17e31bec7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/architecture-design/backend-patterns/cc-skill-backend-patterns/SKILL.md"}, "properties": {"repobilityId": "c4896fbafae20c92", "scanner": "scanner-primary", "fingerprint": "c65244a17e31bec7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/backend-patterns/cc-skill-backend-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-61e0cb741327c3fc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/architecture-design/api-integration-specialist/SKILL.md"}, "properties": {"repobilityId": "d4c6836e37ce0950", "scanner": "scanner-primary", "fingerprint": "61e0cb741327c3fc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/architecture-design/api-integration-specialist/SKILL.md"}, "region": {"startLine": 210}}}]}, {"ruleId": "scanner-7bf6a88bcc0d5b8c", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/ship/SKILL.md"}, "properties": {"repobilityId": "52c94780def05db4", "scanner": "scanner-primary", "fingerprint": "7bf6a88bcc0d5b8c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/ship/SKILL.md"}, "region": {"startLine": 1505}}}]}, {"ruleId": "scanner-89a929596ce58261", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/requirements-planning/okr-tracker-creator/SKILL.md"}, "properties": {"repobilityId": "a125bc4ca629753b", "scanner": "scanner-primary", "fingerprint": "89a929596ce58261", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/requirements-planning/okr-tracker-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1a3e582f28c0c25", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/requirements-planning/project-management/SKILL.md"}, "properties": {"repobilityId": "d31e20b3fd56e91e", "scanner": "scanner-primary", "fingerprint": "a1a3e582f28c0c25", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/requirements-planning/project-management/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1207d4b00fbb125d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/requirements-planning/project-management/senior-pm/SKILL.md"}, "properties": {"repobilityId": "5766c090df368421", "scanner": "scanner-primary", "fingerprint": "1207d4b00fbb125d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/requirements-planning/project-management/senior-pm/SKILL.md"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-e617d674c4f9d070", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/requirements-planning/roadmap-communicator/SKILL.md"}, "properties": {"repobilityId": "3c103899cfbd2dad", "scanner": "scanner-primary", "fingerprint": "e617d674c4f9d070", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/requirements-planning/roadmap-communicator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb476a9dbb2ca014", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/requirements-planning/backlog-grooming-assistant/SKILL.md"}, "properties": {"repobilityId": "03c4f35d831e841a", "scanner": "scanner-primary", "fingerprint": "fb476a9dbb2ca014", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/requirements-planning/backlog-grooming-assistant/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e67e3e7ce5cf4cb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/docx/SKILL.md"}, "properties": {"repobilityId": "3fc96bc82687c796", "scanner": "scanner-primary", "fingerprint": "2e67e3e7ce5cf4cb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/docx/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c8203b35b1799ebb", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/docx/SKILL.md"}, "properties": {"repobilityId": "28116d3da9ac930a", "scanner": "scanner-primary", "fingerprint": "c8203b35b1799ebb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/docx/SKILL.md"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-9e2c993606573a1d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/pptx/SKILL.md"}, "properties": {"repobilityId": "e882f5fbd014f794", "scanner": "scanner-primary", "fingerprint": "9e2c993606573a1d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/pptx/SKILL.md"}, "region": {"startLine": 265}}}]}, {"ruleId": "scanner-54b077a0603d88f8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/source-command-prime/SKILL.md"}, "properties": {"repobilityId": "99ef823fe1da4082", "scanner": "scanner-primary", "fingerprint": "54b077a0603d88f8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/source-command-prime/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7c8b2287b5be3113", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/code-patterns/fastapi-router-creator/SKILL.md"}, "properties": {"repobilityId": "eb76c1554b53cec6", "scanner": "scanner-primary", "fingerprint": "7c8b2287b5be3113", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/code-patterns/fastapi-router-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-48bc84ebaa9665be", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/code-patterns/express-route-generator/SKILL.md"}, "properties": {"repobilityId": "e30966e35583de5b", "scanner": "scanner-primary", "fingerprint": "48bc84ebaa9665be", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/code-patterns/express-route-generator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b34bb940da40e713", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/code-patterns/flask-blueprint-creator/SKILL.md"}, "properties": {"repobilityId": "f4103b32a8455482", "scanner": "scanner-primary", "fingerprint": "b34bb940da40e713", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/code-patterns/flask-blueprint-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03c70469aa557cba", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/code-patterns/django-patterns/SKILL.md"}, "properties": {"repobilityId": "00a9b407128ae48b", "scanner": "scanner-primary", "fingerprint": "03c70469aa557cba", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/code-patterns/django-patterns/SKILL.md"}, "region": {"startLine": 514}}}]}, {"ruleId": "scanner-730b54be59752bc0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/code-patterns/go-handler-generator/SKILL.md"}, "properties": {"repobilityId": "1c0d379b56dca061", "scanner": "scanner-primary", "fingerprint": "730b54be59752bc0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/code-patterns/go-handler-generator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-540b391e5ffa0035", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/source-command-check-owasp/SKILL.md"}, "properties": {"repobilityId": "ef54beccf5d5f5a3", "scanner": "scanner-primary", "fingerprint": "540b391e5ffa0035", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/source-command-check-owasp/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6aa30ab4daafd1c4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/brand-guidelines/SKILL.md"}, "properties": {"repobilityId": "b5f22400ae8d4885", "scanner": "scanner-primary", "fingerprint": "6aa30ab4daafd1c4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/brand-guidelines/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9fca5cd75b8cd603", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/documentation-writing/documentation/SKILL.md"}, "properties": {"repobilityId": "24e317be9f05b7f3", "scanner": "scanner-primary", "fingerprint": "9fca5cd75b8cd603", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/documentation-writing/documentation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1a60a7cf2134a1bd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/documentation-writing/architecture-doc-creator/SKILL.md"}, "properties": {"repobilityId": "c384d26ba9702b6b", "scanner": "scanner-primary", "fingerprint": "1a60a7cf2134a1bd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/documentation-writing/architecture-doc-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-365428a5851bdae8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/documentation-writing/documentation-templates/SKILL.md"}, "properties": {"repobilityId": "f4b79a0ed79a4c7c", "scanner": "scanner-primary", "fingerprint": "365428a5851bdae8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/documentation-writing/documentation-templates/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d40029c9a6cec8f1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/documentation-writing/mermaid-diagrams/SKILL.md"}, "properties": {"repobilityId": "836595a36ce05e8c", "scanner": "scanner-primary", "fingerprint": "d40029c9a6cec8f1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/documentation-writing/mermaid-diagrams/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38e4e731c5fb0c81", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/documentation-writing/mermaid-diagrams/SKILL.md"}, "properties": {"repobilityId": "c0e637a1cffef9c6", "scanner": "scanner-primary", "fingerprint": "38e4e731c5fb0c81", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/documentation-writing/mermaid-diagrams/SKILL.md"}, "region": {"startLine": 192}}}]}, {"ruleId": "scanner-802c276e9924f0c2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/documentation-writing/changelog-generator/SKILL.md"}, "properties": {"repobilityId": "313108a6bad44ce3", "scanner": "scanner-primary", "fingerprint": "802c276e9924f0c2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/documentation-writing/changelog-generator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-59a0b97259e577be", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/ui-design/skills/web-component-design/SKILL.md"}, "properties": {"repobilityId": "8b0e8c1ecce65bc4", "scanner": "scanner-primary", "fingerprint": "59a0b97259e577be", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/ui-design/skills/web-component-design/SKILL.md"}, "region": {"startLine": 217}}}]}, {"ruleId": "scanner-11b16ce07170a24b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/llm-application-dev/skills/embedding-strategies/SKILL.md"}, "properties": {"repobilityId": "63f20460b23161bc", "scanner": "scanner-primary", "fingerprint": "11b16ce07170a24b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/llm-application-dev/skills/embedding-strategies/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-987625d4d4cbcbf7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/llm-application-dev/skills/hybrid-search-implementation/SKILL.md"}, "properties": {"repobilityId": "b3e7ba8db32b619a", "scanner": "scanner-primary", "fingerprint": "987625d4d4cbcbf7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/llm-application-dev/skills/hybrid-search-implementation/SKILL.md"}, "region": {"startLine": 429}}}]}, {"ruleId": "scanner-b11a85758ca56ab3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/llm-application-dev/skills/similarity-search-patterns/SKILL.md"}, "properties": {"repobilityId": "e332bf23fddea2e6", "scanner": "scanner-primary", "fingerprint": "b11a85758ca56ab3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/llm-application-dev/skills/similarity-search-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b50f14d3ebdb2c18", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "properties": {"repobilityId": "e4c8b1769a8f9b82", "scanner": "scanner-primary", "fingerprint": "b50f14d3ebdb2c18", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "region": {"startLine": 256}}}]}, {"ruleId": "scanner-ce09a893a38d6884", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "properties": {"repobilityId": "719516790ec62a18", "scanner": "scanner-primary", "fingerprint": "ce09a893a38d6884", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/systems-programming/skills/rust-async-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b423345f8b416cc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/game-development/skills/godot-gdscript-patterns/SKILL.md"}, "properties": {"repobilityId": "b030045ab0b9bb47", "scanner": "scanner-primary", "fingerprint": "b423345f8b416cc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/game-development/skills/godot-gdscript-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd922bf9b451d11a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/observability-monitoring/skills/prometheus-configuration/SKILL.md"}, "properties": {"repobilityId": "7e6cf1560ff35722", "scanner": "scanner-primary", "fingerprint": "dd922bf9b451d11a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/observability-monitoring/skills/prometheus-configuration/SKILL.md"}, "region": {"startLine": 157}}}]}, {"ruleId": "scanner-8a93eb05da8ad59a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/frontend-mobile-development/skills/react-state-management/SKILL.md"}, "properties": {"repobilityId": "74a8a062e56f5b2e", "scanner": "scanner-primary", "fingerprint": "8a93eb05da8ad59a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/frontend-mobile-development/skills/react-state-management/SKILL.md"}, "region": {"startLine": 299}}}]}, {"ruleId": "scanner-bc3c130e69a9650f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/blockchain-web3/skills/nft-standards/SKILL.md"}, "properties": {"repobilityId": "87f47fa7315da01e", "scanner": "scanner-primary", "fingerprint": "bc3c130e69a9650f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/blockchain-web3/skills/nft-standards/SKILL.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-0ce4328a41bcd9bc", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: plugins/python-development/skills/uv-package-manager/SKILL.md"}, "properties": {"repobilityId": "13b1a15248e16c80", "scanner": "scanner-primary", "fingerprint": "0ce4328a41bcd9bc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/python-development/skills/uv-package-manager/SKILL.md"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-6c63d89a7282469a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/python-development/skills/python-configuration/SKILL.md"}, "properties": {"repobilityId": "623b113766d881b7", "scanner": "scanner-primary", "fingerprint": "6c63d89a7282469a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/python-development/skills/python-configuration/SKILL.md"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-77894e1cbc989c4f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/python-development/skills/python-configuration/SKILL.md"}, "properties": {"repobilityId": "7998b6cbd7d1c96a", "scanner": "scanner-primary", "fingerprint": "77894e1cbc989c4f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/python-development/skills/python-configuration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0bfaa490695b71c7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/python-development/skills/python-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "39228f6c2bd034bc", "scanner": "scanner-primary", "fingerprint": "0bfaa490695b71c7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/python-development/skills/python-testing-patterns/SKILL.md"}, "region": {"startLine": 454}}}]}, {"ruleId": "scanner-1026b6ce673e1d24", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/reverse-engineering/skills/protocol-reverse-engineering/SKILL.md"}, "properties": {"repobilityId": "cb4618c1ae90f1df", "scanner": "scanner-primary", "fingerprint": "1026b6ce673e1d24", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/reverse-engineering/skills/protocol-reverse-engineering/SKILL.md"}, "region": {"startLine": 316}}}]}, {"ruleId": "scanner-6b653cb49f31aa68", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/database-design/skills/postgresql/SKILL.md"}, "properties": {"repobilityId": "aae268e02cb2473e", "scanner": "scanner-primary", "fingerprint": "6b653cb49f31aa68", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/database-design/skills/postgresql/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bea1861e8b044904", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/developer-essentials/skills/auth-implementation-patterns/SKILL.md"}, "properties": {"repobilityId": "ac22eee6e2432b8f", "scanner": "scanner-primary", "fingerprint": "bea1861e8b044904", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/developer-essentials/skills/auth-implementation-patterns/SKILL.md"}, "region": {"startLine": 116}}}]}, {"ruleId": "scanner-ed995a2c7d25a4a5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/developer-essentials/skills/sql-optimization-patterns/SKILL.md"}, "properties": {"repobilityId": "6f9f359380c80e86", "scanner": "scanner-primary", "fingerprint": "ed995a2c7d25a4a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/developer-essentials/skills/sql-optimization-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c73a43a6783c4b9c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/kubernetes-operations/skills/gitops-workflow/SKILL.md"}, "properties": {"repobilityId": "1518b1f63788e25c", "scanner": "scanner-primary", "fingerprint": "c73a43a6783c4b9c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/kubernetes-operations/skills/gitops-workflow/SKILL.md"}, "region": {"startLine": 247}}}]}, {"ruleId": "scanner-c65fca86800a6915", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md"}, "properties": {"repobilityId": "0fccee3171deda08", "scanner": "scanner-primary", "fingerprint": "c65fca86800a6915", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3e577566c5970121", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md"}, "properties": {"repobilityId": "fb34473ebe0b441b", "scanner": "scanner-primary", "fingerprint": "3e577566c5970121", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/kubernetes-operations/skills/k8s-manifest-generator/SKILL.md"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-9d98b51d0eb53dc7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/quantitative-trading/skills/risk-metrics-calculation/SKILL.md"}, "properties": {"repobilityId": "7bacbd8dc83c91c7", "scanner": "scanner-primary", "fingerprint": "9d98b51d0eb53dc7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/quantitative-trading/skills/risk-metrics-calculation/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-37f68825ae6ee8ac", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/payment-processing/skills/pci-compliance/SKILL.md"}, "properties": {"repobilityId": "a18cd8e79f40cfc3", "scanner": "scanner-primary", "fingerprint": "37f68825ae6ee8ac", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/payment-processing/skills/pci-compliance/SKILL.md"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-c97edb73b2e37a24", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/payment-processing/skills/paypal-integration/SKILL.md"}, "properties": {"repobilityId": "6f876b4493a5b546", "scanner": "scanner-primary", "fingerprint": "c97edb73b2e37a24", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/payment-processing/skills/paypal-integration/SKILL.md"}, "region": {"startLine": 139}}}]}, {"ruleId": "scanner-47844ae60377e3c1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "properties": {"repobilityId": "85b637c7dae56939", "scanner": "scanner-primary", "fingerprint": "47844ae60377e3c1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/javascript-testing-patterns/SKILL.md"}, "region": {"startLine": 615}}}]}, {"ruleId": "scanner-8e46a11d11208e61", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/javascript-typescript/skills/nodejs-backend-patterns/SKILL.md"}, "properties": {"repobilityId": "a741f5dba254a870", "scanner": "scanner-primary", "fingerprint": "8e46a11d11208e61", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/nodejs-backend-patterns/SKILL.md"}, "region": {"startLine": 414}}}]}, {"ruleId": "scanner-d7fe42ecdab4a235", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/javascript-typescript/skills/modern-javascript-patterns/SKILL.md"}, "properties": {"repobilityId": "51d6d4ed710bd96b", "scanner": "scanner-primary", "fingerprint": "d7fe42ecdab4a235", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/javascript-typescript/skills/modern-javascript-patterns/SKILL.md"}, "region": {"startLine": 551}}}]}, {"ruleId": "scanner-faec0b020efc5628", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/backend-development/skills/event-store-design/SKILL.md"}, "properties": {"repobilityId": "29654240f683427f", "scanner": "scanner-primary", "fingerprint": "faec0b020efc5628", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/backend-development/skills/event-store-design/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f35a49459b043c30", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/backend-development/skills/saga-orchestration/SKILL.md"}, "properties": {"repobilityId": "35c6a0cecd192115", "scanner": "scanner-primary", "fingerprint": "f35a49459b043c30", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/backend-development/skills/saga-orchestration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58843f324cf7c833", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "properties": {"repobilityId": "548074316abb7403", "scanner": "scanner-primary", "fingerprint": "58843f324cf7c833", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "region": {"startLine": 306}}}]}, {"ruleId": "scanner-a35f09751716b8e4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "properties": {"repobilityId": "c0f744f1abde88b6", "scanner": "scanner-primary", "fingerprint": "a35f09751716b8e4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/backend-development/skills/microservices-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-50083e8c825d8351", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/cicd-automation/skills/secrets-management/SKILL.md"}, "properties": {"repobilityId": "5ad160c0a050734d", "scanner": "scanner-primary", "fingerprint": "50083e8c825d8351", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/cicd-automation/skills/secrets-management/SKILL.md"}, "region": {"startLine": 160}}}]}, {"ruleId": "scanner-5ec7608b00ce18d0", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: plugins/documentation-generation/skills/openapi-spec-generation/SKILL.md"}, "properties": {"repobilityId": "434e833e1fdb139c", "scanner": "scanner-primary", "fingerprint": "5ec7608b00ce18d0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/documentation-generation/skills/openapi-spec-generation/SKILL.md"}, "region": {"startLine": 895}}}]}, {"ruleId": "scanner-d9154cf47925849e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/cloud-infrastructure/skills/mtls-configuration/SKILL.md"}, "properties": {"repobilityId": "e1620f5ee3117e1d", "scanner": "scanner-primary", "fingerprint": "d9154cf47925849e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/cloud-infrastructure/skills/mtls-configuration/SKILL.md"}, "region": {"startLine": 137}}}]}, {"ruleId": "scanner-49af2a525fa2869a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/cloud-infrastructure/skills/service-mesh-observability/SKILL.md"}, "properties": {"repobilityId": "905a11f7888dc5dc", "scanner": "scanner-primary", "fingerprint": "49af2a525fa2869a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/cloud-infrastructure/skills/service-mesh-observability/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f2a56b16a3fd7e8d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md"}, "properties": {"repobilityId": "6a227e426e421b58", "scanner": "scanner-primary", "fingerprint": "f2a56b16a3fd7e8d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-f9aed2de3c9d9d2a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md"}, "properties": {"repobilityId": "fed16e81c86ae997", "scanner": "scanner-primary", "fingerprint": "f9aed2de3c9d9d2a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2e049d38a188eb5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/agent-teams/skills/parallel-feature-development/SKILL.md"}, "properties": {"repobilityId": "5aebcb4be7f1826c", "scanner": "scanner-primary", "fingerprint": "a2e049d38a188eb5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/agent-teams/skills/parallel-feature-development/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a48c52a7e00e774", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/agent-teams/skills/task-coordination-strategies/SKILL.md"}, "properties": {"repobilityId": "32baf03bd041e7c0", "scanner": "scanner-primary", "fingerprint": "8a48c52a7e00e774", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/agent-teams/skills/task-coordination-strategies/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-b2d408e4576ccec4", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/dashboard-server-hardening.test.js:318"}, "properties": {"repobilityId": "6b73fad068f485d5", "scanner": "scanner-primary", "fingerprint": "b2d408e4576ccec4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3104414acb59ddcd", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/docx/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "5d76b6bddf36e01b", "scanner": "scanner-primary", "fingerprint": "3104414acb59ddcd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b934bda00fca712c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/docx/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "fc54877be402186a", "scanner": "scanner-primary", "fingerprint": "b934bda00fca712c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0b2b3b83dce5d96c", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in skills/docx/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "00e6716852821ca4", "scanner": "scanner-primary", "fingerprint": "0b2b3b83dce5d96c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-716aa6125b3a1ed2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/pptx/scripts/thumbnail.py:161"}, "properties": {"repobilityId": "622ce68d0a651416", "scanner": "scanner-primary", "fingerprint": "716aa6125b3a1ed2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b4cf6998ebf17d47", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/pptx/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "654dc50437d2d29a", "scanner": "scanner-primary", "fingerprint": "b4cf6998ebf17d47", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5c700782e722a100", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/pptx/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "e137305e5e948743", "scanner": "scanner-primary", "fingerprint": "5c700782e722a100", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6eceaedc510d0881", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in skills/pptx/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "5fe4ce99c3e2fc77", "scanner": "scanner-primary", "fingerprint": "6eceaedc510d0881", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-077eadac6c6987c2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/xlsx/scripts/recalc.py:92"}, "properties": {"repobilityId": "0bfc9e52a4f37844", "scanner": "scanner-primary", "fingerprint": "077eadac6c6987c2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-bdd2cf8599b1e753", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/xlsx/scripts/office/soffice.py:14"}, "properties": {"repobilityId": "03f38bd21b7d8491", "scanner": "scanner-primary", "fingerprint": "bdd2cf8599b1e753", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e8f1a20209ec20cf", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/xlsx/scripts/office/validators/redlining.py:138"}, "properties": {"repobilityId": "2af85319ddefa384", "scanner": "scanner-primary", "fingerprint": "e8f1a20209ec20cf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f94da7c4871fbba8", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in skills/xlsx/scripts/office/validators/base.py:705"}, "properties": {"repobilityId": "4c3efb19afd9012b", "scanner": "scanner-primary", "fingerprint": "f94da7c4871fbba8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-90d7dc70f403a31a", "level": "none", "message": {"text": "Commented-code block (8 lines) in skills/algorithmic-art/templates/generator_template.js:15"}, "properties": {"repobilityId": "d0c2bab12f191f90", "scanner": "scanner-primary", "fingerprint": "90d7dc70f403a31a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5375f8b79d23a397", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/integrations/pi/rstack-sdlc.ts:1495"}, "properties": {"repobilityId": "4df2d3fa0954417f", "scanner": "scanner-primary", "fingerprint": "5375f8b79d23a397", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3eac0b6b087a40bc", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/observability/dashboard/hardening.js:100"}, "properties": {"repobilityId": "875fcaf0a0658ab1", "scanner": "scanner-primary", "fingerprint": "3eac0b6b087a40bc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8d25805424a53fa2", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/observability/dashboard/ui/artifact-render.js:3"}, "properties": {"repobilityId": "456c8ca6e80b668d", "scanner": "scanner-primary", "fingerprint": "8d25805424a53fa2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0885f14313da011b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/observability/dashboard/ui/client.js:1342"}, "properties": {"repobilityId": "efa9b565da94718c", "scanner": "scanner-primary", "fingerprint": "0885f14313da011b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a00a5e21d19c6274", "level": "note", "message": {"text": "Legacy-named symbol `hoursOld` in src/memory/index.js:202"}, "properties": {"repobilityId": "29904fb603e2afcf", "scanner": "scanner-primary", "fingerprint": "a00a5e21d19c6274", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "c966195c4d794b31", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "0195cf808c160219", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "0fa84bf7658bc8c7", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "81b9b5d56b86e5be", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "f9a972b53b5805c8", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "dcdb654d1d0c4796", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "46fc801e351d7c5d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f4e83c44656d4b56", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "eae2722d78a824a0", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b031dac43d072710", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "770e8ccdbb327700", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "08fae9d041e88f6d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "678f40918e8538b5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ce129902f50e0829", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "23bd24135d11ac13", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "400c7978235e8c41", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c5bbfe86be0da14a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "68d15a39d4d9430d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "536c107a8157bee9", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0e2130cecc1853fa", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-04ed7001c3ebc23d", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${port}/api/metrics (tests/harness-dashboard.test.js:64)"}, "properties": {"repobilityId": "531c2809abe5c1c8", "scanner": "scanner-primary", "fingerprint": "04ed7001c3ebc23d", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-4680e43c2188be43", "level": "error", "message": {"text": "Dangling fetch: GET /api/state (src/observability/dashboard/ui/client.js:1819)"}, "properties": {"repobilityId": "f52710cfe5b0c180", "scanner": "scanner-primary", "fingerprint": "4680e43c2188be43", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-9750c66f680cad49", "level": "error", "message": {"text": "Dangling fetch: GET /api/state (src/observability/dashboard/ui/studio3d.js:590)"}, "properties": {"repobilityId": "f284034c61d3f475", "scanner": "scanner-primary", "fingerprint": "9750c66f680cad49", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e3b3068c10a01f84", "level": "error", "message": {"text": "Dangling fetch: GET /api/metrics (src/observability/collectors/legacy.js:237)"}, "properties": {"repobilityId": "ac89104f5ccd6bb1", "scanner": "scanner-primary", "fingerprint": "e3b3068c10a01f84", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-9852b00783826ad5", "level": "error", "message": {"text": "Dangling fetch: GET /api/memory-health (src/observability/collectors/legacy.js:290)"}, "properties": {"repobilityId": "9149b198853f9c25", "scanner": "scanner-primary", "fingerprint": "9852b00783826ad5", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-3a3c45156489b020", "level": "note", "message": {"text": "Unused endpoint: GET /api/users"}, "properties": {"repobilityId": "3e5c6bbf60a4526e", "scanner": "scanner-primary", "fingerprint": "3a3c45156489b020", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-49546f6900fb04c5", "level": "note", "message": {"text": "Unused endpoint: POST /api/users"}, "properties": {"repobilityId": "3cd6941c47723e64", "scanner": "scanner-primary", "fingerprint": "49546f6900fb04c5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0ffef5a07597afc9", "level": "note", "message": {"text": "Unused endpoint: GET /api/users/{user_id}"}, "properties": {"repobilityId": "08d2d82433298cd5", "scanner": "scanner-primary", "fingerprint": "0ffef5a07597afc9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-887c385438b11bc5", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/users/{user_id}"}, "properties": {"repobilityId": "7490cbcfa2343dba", "scanner": "scanner-primary", "fingerprint": "887c385438b11bc5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c3fb176c336b8818", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/users/{user_id}"}, "properties": {"repobilityId": "ce7e7c0a00772429", "scanner": "scanner-primary", "fingerprint": "c3fb176c336b8818", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}