{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-54ecfb0859735b04", "name": "Possibly dead Python function: detected_json_keys", "shortDescription": {"text": "Possibly dead Python function: detected_json_keys"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-77077da833166da7", "name": "Possibly dead Python function: load_jsonc_object", "shortDescription": {"text": "Possibly dead Python function: load_jsonc_object"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b6b07cf87cf6f243", "name": "Possibly dead Python function: format_backtick_list", "shortDescription": {"text": "Possibly dead Python function: format_backtick_list"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "0 test file(s) for 33 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 56 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: ci, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing ci, tests. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bea357a6497a2d5d", "name": "Agent authority lacks a verifier contract: CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a0bafeb067f328e0", "name": "Agent authority lacks a verifier contract: skills/codex/migrate-to-codex/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/codex/migrate-to-codex/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d397de609a75869d", "name": "Agent authority lacks a verifier contract: skills/codex/chatgpt-share-fetch/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/codex/chatgpt-share-fetch/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bad5bead8448125f", "name": "Agent authority lacks a verifier contract: skills/shared/gu-log/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shared/gu-log/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e18a1b7ea998984d", "name": "Agent authority lacks a verifier contract: skills/shared/wrap/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shared/wrap/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-037fe7f8a4292e2d", "name": "Agent authority lacks a verifier contract: skills/shared/fetching-websites/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shared/fetching-websites/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e10030e4a1a45b1e", "name": "Agent authority lacks a verifier contract: skills/shared/chill/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shared/chill/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e36b592b3402d4e", "name": "Agent authority lacks a verifier contract: skills/shared/file-review-loop/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shared/file-review-loop/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30b68b9582cbba23", "name": "Agent authority lacks a verifier contract: skills/shared/iterate-worker-reviewer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shared/iterate-worker-reviewer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c153c8436296c94", "name": "Agent authority lacks a verifier contract: skills/shared/html-artifacts/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shared/html-artifacts/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-048ff0b231fba211", "name": "Agent authority lacks a verifier contract: skills/claude/headless-agents/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/claude/headless-agents/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1341980f86cb9d57", "name": "Agent authority lacks a verifier contract: skills/claude/command-development/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/claude/command-development/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7244b02d50b57348", "name": "Agent authority lacks a verifier contract: skills/claude/gcal/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/claude/gcal/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-77520401b2324adb", "name": "Agent instruction/config may expose a secret: yolo-cc/CLAUDE.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: yolo-cc/CLAUDE.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-51d3362e6c0c0b86", "name": "Agent authority lacks a verifier contract: yolo-cc/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: yolo-cc/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c338bd32661dc1ea", "name": "Agent instruction contains unpinned remote install: yolo-cc/CLAUDE.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: yolo-cc/CLAUDE.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a505024e7b925f5b", "name": "Agent authority lacks a verifier contract: claude/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: claude/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-601e519b63493fab", "name": "Agent authority lacks a verifier contract: claude/plugins/cth-plugins/skills/wife-pdf/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: claude/plugins/cth-plugins/skills/wife-pdf/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a23217524c148a60", "name": "Network/subprocess call without timeout or try/except \u2014 skills/codex/hatch-pet/scripts/render_animation_videos.py:101", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/codex/hatch-pet/scripts/render_animation_videos.py:101"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-acc79dcd7ca564b2", "name": "Network/subprocess call without timeout or try/except \u2014 skills/codex/hatch-pet/scripts/generate_pet_images.py:108", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/codex/hatch-pet/scripts/generate_pet_images.py:108"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0dc87b11a2aec2b1", "name": "Network/subprocess call without timeout or try/except \u2014 skills/codex/hatch-pet/scripts/finalize_pet_run.py:19", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/codex/hatch-pet/scripts/finalize_pet_run.py:19"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/codex/migrate-to-codex/scripts/cli.py:planned_paths, skills/codex/migrate-to-codex/scripts/cli.py:plan\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/codex/hatch-pet/scripts/derive_running_left_from_running_right.py:load_manifest, skills/codex/hatch-pet/scripts/generate_pet_images.py:load_manifest, skills/codex/hatch-pet/scripts/pet_job_status.py:load_manifest\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/codex/hatch-pet/scripts/derive_running_left_from_running_right.py:job_list, skills/codex/hatch-pet/scripts/record_imagegen_result.py:job_list, skills/codex/hatch-pet/scripts/queue_pet_repairs.py:job_list, skills/codex/hatch-pet/scripts/generate_pet_images.py:manifest_jobs\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24930"}, "properties": {"repository": "ChiTienHsieh/dotfiles", "repoUrl": "https://github.com/ChiTienHsieh/dotfiles", "branch": "main"}, "results": [{"ruleId": "scanner-54ecfb0859735b04", "level": "note", "message": {"text": "Possibly dead Python function: detected_json_keys"}, "properties": {"repobilityId": "a4a8d49a00f02baa", "scanner": "scanner-primary", "fingerprint": "54ecfb0859735b04", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/codex/migrate-to-codex/scripts/utils/util.py:18"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-77077da833166da7", "level": "note", "message": {"text": "Possibly dead Python function: load_jsonc_object"}, "properties": {"repobilityId": "f7c7d8cd2c0777ae", "scanner": "scanner-primary", "fingerprint": "77077da833166da7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/codex/migrate-to-codex/scripts/utils/util.py:59"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b6b07cf87cf6f243", "level": "note", "message": {"text": "Possibly dead Python function: format_backtick_list"}, "properties": {"repobilityId": "f3e7826e34379bb3", "scanner": "scanner-primary", "fingerprint": "b6b07cf87cf6f243", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/codex/migrate-to-codex/scripts/utils/util.py:271"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "a8ba0b54fc157877", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "498efbedd2c859f9", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "b2318d1eadecee4b", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "49373b65a4ecf07a", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-bea357a6497a2d5d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "properties": {"repobilityId": "aae72df3934829ac", "scanner": "scanner-primary", "fingerprint": "bea357a6497a2d5d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0bafeb067f328e0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/codex/migrate-to-codex/SKILL.md"}, "properties": {"repobilityId": "3fa002206a962aff", "scanner": "scanner-primary", "fingerprint": "a0bafeb067f328e0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/codex/migrate-to-codex/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d397de609a75869d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/codex/chatgpt-share-fetch/SKILL.md"}, "properties": {"repobilityId": "d28e777fb3886675", "scanner": "scanner-primary", "fingerprint": "d397de609a75869d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/codex/chatgpt-share-fetch/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bad5bead8448125f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shared/gu-log/SKILL.md"}, "properties": {"repobilityId": "73f7e712d7b4a22f", "scanner": "scanner-primary", "fingerprint": "bad5bead8448125f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shared/gu-log/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e18a1b7ea998984d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shared/wrap/SKILL.md"}, "properties": {"repobilityId": "06682a9e46544fb0", "scanner": "scanner-primary", "fingerprint": "e18a1b7ea998984d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shared/wrap/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-037fe7f8a4292e2d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shared/fetching-websites/SKILL.md"}, "properties": {"repobilityId": "c04a3830361aded9", "scanner": "scanner-primary", "fingerprint": "037fe7f8a4292e2d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shared/fetching-websites/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e10030e4a1a45b1e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shared/chill/SKILL.md"}, "properties": {"repobilityId": "481eade382feeac7", "scanner": "scanner-primary", "fingerprint": "e10030e4a1a45b1e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shared/chill/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e36b592b3402d4e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shared/file-review-loop/SKILL.md"}, "properties": {"repobilityId": "13ca97b3639d4e1d", "scanner": "scanner-primary", "fingerprint": "2e36b592b3402d4e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shared/file-review-loop/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30b68b9582cbba23", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shared/iterate-worker-reviewer/SKILL.md"}, "properties": {"repobilityId": "b40558c5134c9d5d", "scanner": "scanner-primary", "fingerprint": "30b68b9582cbba23", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shared/iterate-worker-reviewer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5c153c8436296c94", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shared/html-artifacts/SKILL.md"}, "properties": {"repobilityId": "5abb51772f918be3", "scanner": "scanner-primary", "fingerprint": "5c153c8436296c94", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shared/html-artifacts/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-048ff0b231fba211", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/claude/headless-agents/SKILL.md"}, "properties": {"repobilityId": "62b181687ea21723", "scanner": "scanner-primary", "fingerprint": "048ff0b231fba211", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/claude/headless-agents/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1341980f86cb9d57", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/claude/command-development/SKILL.md"}, "properties": {"repobilityId": "468ebd1d5760fde7", "scanner": "scanner-primary", "fingerprint": "1341980f86cb9d57", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/claude/command-development/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7244b02d50b57348", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/claude/gcal/SKILL.md"}, "properties": {"repobilityId": "bc54a4cd9fae6410", "scanner": "scanner-primary", "fingerprint": "7244b02d50b57348", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/claude/gcal/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-77520401b2324adb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: yolo-cc/CLAUDE.md"}, "properties": {"repobilityId": "fbd5688e7d353736", "scanner": "scanner-primary", "fingerprint": "77520401b2324adb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yolo-cc/CLAUDE.md"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-51d3362e6c0c0b86", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: yolo-cc/CLAUDE.md"}, "properties": {"repobilityId": "73238874978d822b", "scanner": "scanner-primary", "fingerprint": "51d3362e6c0c0b86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yolo-cc/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c338bd32661dc1ea", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: yolo-cc/CLAUDE.md"}, "properties": {"repobilityId": "89b22b772c979591", "scanner": "scanner-primary", "fingerprint": "c338bd32661dc1ea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yolo-cc/CLAUDE.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-a505024e7b925f5b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: claude/CLAUDE.md"}, "properties": {"repobilityId": "0471fd1489275440", "scanner": "scanner-primary", "fingerprint": "a505024e7b925f5b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "claude/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-601e519b63493fab", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: claude/plugins/cth-plugins/skills/wife-pdf/SKILL.md"}, "properties": {"repobilityId": "3eeb4cb09a688030", "scanner": "scanner-primary", "fingerprint": "601e519b63493fab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "claude/plugins/cth-plugins/skills/wife-pdf/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a23217524c148a60", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/codex/hatch-pet/scripts/render_animation_videos.py:101"}, "properties": {"repobilityId": "48ad7bf954985aff", "scanner": "scanner-primary", "fingerprint": "a23217524c148a60", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-acc79dcd7ca564b2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/codex/hatch-pet/scripts/generate_pet_images.py:108"}, "properties": {"repobilityId": "1c37c901a0f74e15", "scanner": "scanner-primary", "fingerprint": "acc79dcd7ca564b2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0dc87b11a2aec2b1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/codex/hatch-pet/scripts/finalize_pet_run.py:19"}, "properties": {"repobilityId": "dcd59ae0ebd56c06", "scanner": "scanner-primary", "fingerprint": "0dc87b11a2aec2b1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f3624bcd3f3d152e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f3a892cd7cfc957b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b741bf17863faead", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e3dc9c4b8bb72d57", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "10a8523d23cb7c48", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "eeb58dfb85a09834", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "9c26751b24e8b591", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "04253bd52fc9eee0", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b5c62f41631934df", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "fd31409d5a432719", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7d0738d03fce05f7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3886d9be6d0d101a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ba9bc1a93281960f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ec39d39d329b35af", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}