{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-d250912176047b61", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/HQOverview.tsx:138", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/HQOverview.tsx:138"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-439a7dc587e70153", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/SkillDetail.tsx:103", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/SkillDetail.tsx:103"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-54d0489f3973d699", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/McpPanel.tsx:170", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/McpPanel.tsx:170"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9263b1f74c9f6e73", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/TopBar.tsx:30", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/TopBar.tsx:30"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e0b21c7a536e5261", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/RightPanel.tsx:71", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/RightPanel.tsx:71"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bbe13eceee9ce062", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/LeftSidebar.tsx:50", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/LeftSidebar.tsx:50"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fee7ee8d5a0405cb", "name": "Insecure pattern 'node_child_process' in apps/a2a-server/src/index.ts:25", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/a2a-server/src/index.ts:25"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a789580a74b5d77", "name": "Insecure pattern 'cors_wildcard' in apps/a2a-server/src/index.ts:429", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in apps/a2a-server/src/index.ts:429"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1994a58394c0191a", "name": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/sync/route.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/sync/route.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c79550ed0fa11c16", "name": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/auth/route.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/auth/route.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1f6c228fbb6b5b1", "name": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/analytics/route.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/analytics/route.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76cbc21199068077", "name": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/runs/route.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/runs/route.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-15b1168e8fa2d370", "name": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/runs/[id]/logs/route.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/runs/[id]/logs/route.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25f53eb1f689cad2", "name": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/secrets/route.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/secrets/route.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-736a454303328ea8", "name": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/skills/route.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/skills/route.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1067b770efea807d", "name": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/skills/[name]/run/route.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/skills/[name]/run/route.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79866db3a5af06cb", "name": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/outputs/route.ts:4", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/outputs/route.ts:4"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-10af6ed486d31c55", "name": "Insecure pattern 'node_child_process' in apps/dashboard/lib/gh.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/lib/gh.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76ad2c8c3fa84c57", "name": "Insecure pattern 'node_child_process' in apps/dashboard/lib/gateway.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/lib/gateway.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50a512318c9460fa", "name": "Insecure pattern 'node_child_process' in apps/mcp-server/src/index.ts:24", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/mcp-server/src/index.ts:24"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-999f3fd368a1d435", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e1c3a69c84b49f7b", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-961e2657dc2f814a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31bd570868b1d53a", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f32ddc789125a51c", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a414afe66aa9ea1b", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84462016b127b17a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-890f837b12d81822", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "6 test file(s) for 67 source file(s) (ratio 0.09). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-83f55113f893dbd2", "name": "Node manifest has dependencies but no lockfile: apps/a2a-server/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/a2a-server/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ee587f5d68d35bca", "name": "Node manifest has dependencies but no lockfile: apps/webhook/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/webhook/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e7b2bc4b44100d7a", "name": "Node manifest has dependencies but no lockfile: apps/mcp-server/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/mcp-server/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 19 placeholder/mock markers across 10 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bea357a6497a2d5d", "name": "Agent authority lacks a verifier contract: CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7455f8fb041394f1", "name": "Agent authority lacks a verifier contract: skill-templates/community-manager/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skill-templates/community-manager/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5cd491555ca66ee6", "name": "Agent authority lacks a verifier contract: skill-templates/social-monitor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skill-templates/social-monitor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cee05ea62ee1daa7", "name": "Agent authority lacks a verifier contract: skill-templates/crypto-tracker/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skill-templates/crypto-tracker/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3cda492a3e74471", "name": "Agent authority lacks a verifier contract: examples/mcp/claude_desktop_config.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: examples/mcp/claude_desktop_config.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-849e3953a4270337", "name": "Agent authority lacks a verifier contract: skills/research-brief/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/research-brief/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8295e6c6b4b2bfb9", "name": "Agent authority lacks a verifier contract: skills/tx-explain/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/tx-explain/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a9788cc5f630515", "name": "Agent authority lacks a verifier contract: skills/token-report/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/token-report/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-23f0e33b96efbbd8", "name": "Agent authority lacks a verifier contract: skills/builder-map/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/builder-map/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c2f217bbc736a3c", "name": "Agent authority lacks a verifier contract: skills/picks-tracker/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/picks-tracker/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9587af829bc29248", "name": "Agent authority lacks a verifier contract: skills/farcaster-digest/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/farcaster-digest/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc4143dafa3cfde8", "name": "Agent authority lacks a verifier contract: skills/push-recap/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/push-recap/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-320c522f2f760709", "name": "Agent authority lacks a verifier contract: skills/run-frequency-guard/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/run-frequency-guard/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5e0ef73be8c73cbc", "name": "Agent authority lacks a verifier contract: skills/follow-up-patrol/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/follow-up-patrol/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ea67cd158adecf5", "name": "Agent authority lacks a verifier contract: skills/monitor-runners/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/monitor-runners/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03dc6e5e43cd4730", "name": "Agent authority lacks a verifier contract: skills/defi-overview/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/defi-overview/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84d1661ed68c86c6", "name": "Agent authority lacks a verifier contract: skills/fork-first-run-alert/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/fork-first-run-alert/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1eff36b881aba169", "name": "Agent authority lacks a verifier contract: skills/pr-triage/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/pr-triage/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e6382c2b5214e29", "name": "Agent instruction/config may expose a secret: skills/rug-scan/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/rug-scan/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f4adc3b755d2859b", "name": "Agent authority lacks a verifier contract: skills/content-performance/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/content-performance/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8210baa233826015", "name": "Agent authority lacks a verifier contract: skills/approval-audit/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/approval-audit/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-68fb8dd4117b5e53", "name": "Agent authority lacks a verifier contract: skills/hacker-news-digest/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hacker-news-digest/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7bf17d44211c4751", "name": "Agent authority lacks a verifier contract: skills/token-pick/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/token-pick/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7dabc4c61e395eeb", "name": "Agent instruction contains unpinned remote install: skills/vuln-scanner/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/vuln-scanner/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-242d3448cea2f8e4", "name": "Agent instruction/config may expose a secret: skills/investigation-report/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/investigation-report/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-828403e6cb63a031", "name": "Agent authority lacks a verifier contract: skills/base-mcp/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/base-mcp/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-da381789e5ac26a0", "name": "Agent authority lacks a verifier contract: skills/github-monitor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/github-monitor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38914cfd909a8498", "name": "Agent authority lacks a verifier contract: skills/narrative-tracker/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/narrative-tracker/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72dd1d2377309e78", "name": "Agent instruction/config may expose a secret: skills/mcp-pulse/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/mcp-pulse/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9461f857f3b1e5c3", "name": "Agent authority lacks a verifier contract: skills/pm-pulse/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/pm-pulse/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-102c58e1bfd5d81b", "name": "Agent authority lacks a verifier contract: skills/paper-pick/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/paper-pick/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b63c5dc2fd450e28", "name": "Agent authority lacks a verifier contract: skills/technical-explainer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/technical-explainer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afe58ae1354cd979", "name": "Agent instruction/config may expose a secret: skills/polymarket/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/polymarket/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a242db2e426f496d", "name": "Agent authority lacks a verifier contract: skills/polymarket/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/polymarket/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-401dca0e47e94583", "name": "Agent authority lacks a verifier contract: skills/spend-monitor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/spend-monitor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e31dbe314cd36d17", "name": "Agent authority lacks a verifier contract: skills/security-digest/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/security-digest/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4584f04c20ba15dc", "name": "Agent authority lacks a verifier contract: skills/holder-concentration/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/holder-concentration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f7020064f220d5f", "name": "Agent authority lacks a verifier contract: skills/fear-divergence-scout/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/fear-divergence-scout/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-510b43cdea21a7d8", "name": "Agent authority lacks a verifier contract: skills/refresh-x/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/refresh-x/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-55d1b82e3bee1b6a", "name": "Agent authority lacks a verifier contract: skills/telegram-digest/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/telegram-digest/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-57c0f3aba585cdc4", "name": "Agent authority lacks a verifier contract: skills/wallet-profile/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/wallet-profile/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f7822410835bc1b", "name": "Agent authority lacks a verifier contract: skills/api-health-probe/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/api-health-probe/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-58d3bc76a6cfb300", "name": "Agent authority lacks a verifier contract: skills/routine/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/routine/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-094676ba8fd93cbd", "name": "Agent authority lacks a verifier contract: skills/digest/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/digest/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e58a75cba276837", "name": "Agent authority lacks a verifier contract: skills/beat-tracker/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/beat-tracker/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a54361e5b7dafdfd", "name": "Agent authority lacks a verifier contract: skills/repo-revive/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/repo-revive/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-874b93e0b1858b86", "name": "Agent authority lacks a verifier contract: skills/search-skill/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/search-skill/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b55aeb49e114b801", "name": "Agent authority lacks a verifier contract: skills/reflect/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/reflect/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97462c9d041e9cdf", "name": "Agent authority lacks a verifier contract: skills/aixbt-pulse/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/aixbt-pulse/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9014eb040f8edac", "name": "Agent authority lacks a verifier contract: skills/star-milestone/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/star-milestone/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-64f70438263ad6a5", "name": "Agent authority lacks a verifier contract: skills/market-context-refresh/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/market-context-refresh/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b616e4f5e1f1e6bd", "name": "Agent authority lacks a verifier contract: skills/x402-monitor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/x402-monitor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6405254100afdaed", "name": "Agent authority lacks a verifier contract: skills/rwa-pulse/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/rwa-pulse/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a90da66e35ee8241", "name": "Agent authority lacks a verifier contract: skills/wallet-risk-audit/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/wallet-risk-audit/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8241765ce4252a06", "name": "Agent authority lacks a verifier contract: skills/token-alert/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/token-alert/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-37ac6bfa06d6078b", "name": "Agent authority lacks a verifier contract: skills/paper-digest/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/paper-digest/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dbd73f89f6b61c25", "name": "Agent authority lacks a verifier contract: skills/defi-monitor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/defi-monitor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c4a05ae5905e8f85", "name": "Agent authority lacks a verifier contract: skills/milestone-tracker/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/milestone-tracker/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1bae34b1d48dca78", "name": "Agent authority lacks a verifier contract: skills/pvr-triage-monitor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/pvr-triage-monitor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-35ffb69249d0dd08", "name": "Agent authority lacks a verifier contract: skills/cost-report/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/cost-report/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a0c8daa3bb4deee4", "name": "Agent instruction/config may expose a secret: skills/honeypot-check/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/honeypot-check/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7078e0eeb1cd072c", "name": "Agent authority lacks a verifier contract: skills/honeypot-check/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/honeypot-check/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8181ca12a4a733bc", "name": "Agent authority lacks a verifier contract: skills/on-chain-monitor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/on-chain-monitor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-804cc150cfb967aa", "name": "Agent authority lacks a verifier contract: skills/github-issues/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/github-issues/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a42f9c317ee7fa17", "name": "Agent authority lacks a verifier contract: skills/idea-capture/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/idea-capture/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ae50d70f2c05e81", "name": "Agent authority lacks a verifier contract: skills/goal-tracker/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/goal-tracker/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-946e1cad36884fac", "name": "Agent authority lacks a verifier contract: skills/autoresearch/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/autoresearch/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11aabc13117c6814", "name": "Agent authority lacks a verifier contract: skills/idea-validator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/idea-validator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c569073c0845823d", "name": "Agent authority lacks a verifier contract: skills/ops-recap/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/ops-recap/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12d81299b9bb6d3c", "name": "Agent authority lacks a verifier contract: skills/reg-monitor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/reg-monitor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-78d57cb050e4fa34", "name": "Agent authority lacks a verifier contract: skills/skill-spotlight/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/skill-spotlight/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-95ab6b87f5d2882d", "name": "Agent authority lacks a verifier contract: skills/polymarket-comments/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/polymarket-comments/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c127bee882932ea", "name": "Agent authority lacks a verifier contract: skills/thread-formatter/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/thread-formatter/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8b74acb3cac0a29", "name": "Agent authority lacks a verifier contract: skills/tweet-digest/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/tweet-digest/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0df09feb4a63de4f", "name": "Agent authority lacks a verifier contract: skills/repo-article/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/repo-article/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-09aab6de9e1f1cd1", "name": "Agent authority lacks a verifier contract: skills/issue-triage/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/issue-triage/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eab155c68d528d57", "name": "Agent authority lacks a verifier contract: skills/token-movers/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/token-movers/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-700a1ed4f3545ad3", "name": "Agent authority lacks a verifier contract: skills/signal-verdict/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/signal-verdict/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5e65cee1f3a2afc3", "name": "Agent instruction/config may expose a secret: skills/distribute-tokens/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/distribute-tokens/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e7e6ac0dbe1249cf", "name": "Agent authority lacks a verifier contract: skills/deployer-trace/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/deployer-trace/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5bd3f9523916b9e1", "name": "Agent authority lacks a verifier contract: skills/wallet-digest/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/wallet-digest/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25eaac2540aeccff", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/webhook/src/worker.js:20", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/webhook/src/worker.js:20"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d3660b1ef41034f6", "name": "Commented-code block (6 lines) in apps/dashboard/components/ui/ServiceIcon.tsx:5", "shortDescription": {"text": "Commented-code block (6 lines) in apps/dashboard/components/ui/ServiceIcon.tsx:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-63b7dbef2a2bddb0", "name": "Commented-code block (5 lines) in apps/dashboard/components/ui/Linkify.tsx:3", "shortDescription": {"text": "Commented-code block (5 lines) in apps/dashboard/components/ui/Linkify.tsx:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7adfd6212395bd73", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/dashboard/app/page.tsx:160", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/dashboard/app/page.tsx:160"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f50fcc40fc720096", "name": "Commented-code block (6 lines) in apps/dashboard/lib/frontmatter.ts:39", "shortDescription": {"text": "Commented-code block (6 lines) in apps/dashboard/lib/frontmatter.ts:39"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2d73c949090ab1b1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/dashboard/lib/github.ts:38", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/dashboard/lib/github.ts:38"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b2c8c39ea46c5e4", "name": "Commented-code block (5 lines) in apps/dashboard/lib/mcp-catalog.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in apps/dashboard/lib/mcp-catalog.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6a29fff006ba473b", "name": "Commented-code block (6 lines) in apps/dashboard/lib/auth-provider.mjs:1", "shortDescription": {"text": "Commented-code block (6 lines) in apps/dashboard/lib/auth-provider.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-967b6f24eb15b85b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/dashboard/lib/security/api-gate.ts:29", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/dashboard/lib/security/api-gate.ts:29"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c862342326fd1b6", "name": "Commented-code block (8 lines) in scripts/ccr-sanitize.js:10", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/ccr-sanitize.js:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-232aecb6a3966241", "name": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/langchain_client.py:30", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/langchain_client.py:30"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aec69feef6b9b818", "name": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/crewai_task.py:31", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/crewai_task.py:31"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4ffff8ec16b2910b", "name": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/autogen_workflow.py:31", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/autogen_workflow.py:31"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b6cff8fbc13ceaa", "name": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/openai_agents_client.py:30", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/openai_agents_client.py:30"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b334d875f2339fa1", "name": "5 env vars used in code but missing from .env.example", "shortDescription": {"text": "5 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `A2A_GATEWAY_URL`, `A2A_PORT`, `A2A_URL`, `AEON_DASHBOARD_ALLOWED_HOSTS`, `AEON_DASHBOARD_ALLOW_ANY_HOST`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21986"}, "properties": {"repository": "usiclabs/managr", "repoUrl": "https://github.com/usiclabs/managr", "branch": "main"}, "results": [{"ruleId": "scanner-d250912176047b61", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/HQOverview.tsx:138"}, "properties": {"repobilityId": "cd5c6c342a8a89eb", "scanner": "scanner-primary", "fingerprint": "d250912176047b61", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-439a7dc587e70153", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/SkillDetail.tsx:103"}, "properties": {"repobilityId": "6edc60ef48dee940", "scanner": "scanner-primary", "fingerprint": "439a7dc587e70153", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-54d0489f3973d699", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/McpPanel.tsx:170"}, "properties": {"repobilityId": "3c22863c94f8f4e1", "scanner": "scanner-primary", "fingerprint": "54d0489f3973d699", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-9263b1f74c9f6e73", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/TopBar.tsx:30"}, "properties": {"repobilityId": "adaeb7cb1a5db0e6", "scanner": "scanner-primary", "fingerprint": "9263b1f74c9f6e73", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-e0b21c7a536e5261", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/RightPanel.tsx:71"}, "properties": {"repobilityId": "f62b6c6f7d766cc1", "scanner": "scanner-primary", "fingerprint": "e0b21c7a536e5261", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-bbe13eceee9ce062", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/dashboard/components/LeftSidebar.tsx:50"}, "properties": {"repobilityId": "407c5070ebd5688e", "scanner": "scanner-primary", "fingerprint": "bbe13eceee9ce062", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-fee7ee8d5a0405cb", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/a2a-server/src/index.ts:25"}, "properties": {"repobilityId": "d0cd979267b9b3f4", "scanner": "scanner-primary", "fingerprint": "fee7ee8d5a0405cb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/a2a-server/src/index.ts"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-3a789580a74b5d77", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in apps/a2a-server/src/index.ts:429"}, "properties": {"repobilityId": "76a5600a914e42ab", "scanner": "scanner-primary", "fingerprint": "3a789580a74b5d77", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/a2a-server/src/index.ts"}, "region": {"startLine": 429}}}]}, {"ruleId": "scanner-1994a58394c0191a", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/sync/route.ts:2"}, "properties": {"repobilityId": "f4e59d4e254419cd", "scanner": "scanner-primary", "fingerprint": "1994a58394c0191a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/app/api/sync/route.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-c79550ed0fa11c16", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/auth/route.ts:2"}, "properties": {"repobilityId": "d926ba399732f3a8", "scanner": "scanner-primary", "fingerprint": "c79550ed0fa11c16", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/app/api/auth/route.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-a1f6c228fbb6b5b1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/analytics/route.ts:2"}, "properties": {"repobilityId": "2f03e9ebbc5a8a48", "scanner": "scanner-primary", "fingerprint": "a1f6c228fbb6b5b1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/app/api/analytics/route.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-76cbc21199068077", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/runs/route.ts:2"}, "properties": {"repobilityId": "d28d2ffa922dc4bf", "scanner": "scanner-primary", "fingerprint": "76cbc21199068077", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/app/api/runs/route.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-15b1168e8fa2d370", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/runs/[id]/logs/route.ts:2"}, "properties": {"repobilityId": "c4d0e92b5092afba", "scanner": "scanner-primary", "fingerprint": "15b1168e8fa2d370", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/app/api/runs/[id]/logs/route.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-25f53eb1f689cad2", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/secrets/route.ts:2"}, "properties": {"repobilityId": "40846e96bed7d96d", "scanner": "scanner-primary", "fingerprint": "25f53eb1f689cad2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/app/api/secrets/route.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-736a454303328ea8", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/skills/route.ts:2"}, "properties": {"repobilityId": "78e3c67d579bf394", "scanner": "scanner-primary", "fingerprint": "736a454303328ea8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/app/api/skills/route.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-1067b770efea807d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/skills/[name]/run/route.ts:2"}, "properties": {"repobilityId": "0755551b25443a7b", "scanner": "scanner-primary", "fingerprint": "1067b770efea807d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/app/api/skills/[name]/run/route.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-79866db3a5af06cb", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/app/api/outputs/route.ts:4"}, "properties": {"repobilityId": "6843b3f148666186", "scanner": "scanner-primary", "fingerprint": "79866db3a5af06cb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/app/api/outputs/route.ts"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-10af6ed486d31c55", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/lib/gh.ts:1"}, "properties": {"repobilityId": "fc95a6b466800b49", "scanner": "scanner-primary", "fingerprint": "10af6ed486d31c55", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/lib/gh.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76ad2c8c3fa84c57", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/dashboard/lib/gateway.ts:1"}, "properties": {"repobilityId": "9816b81bf5c92ee2", "scanner": "scanner-primary", "fingerprint": "76ad2c8c3fa84c57", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/dashboard/lib/gateway.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-50a512318c9460fa", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/mcp-server/src/index.ts:24"}, "properties": {"repobilityId": "1827caf1d2e03bfd", "scanner": "scanner-primary", "fingerprint": "50a512318c9460fa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/mcp-server/src/index.ts"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-999f3fd368a1d435", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6c6818e88cddd8d8", "scanner": "scanner-primary", "fingerprint": "999f3fd368a1d435", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/chain-runner.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-e1c3a69c84b49f7b", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "f776f3ffbf132378", "scanner": "scanner-primary", "fingerprint": "e1c3a69c84b49f7b", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/chain-runner.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-961e2657dc2f814a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2e8f3fd83f8a3ecc", "scanner": "scanner-primary", "fingerprint": "961e2657dc2f814a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/aeon.yml"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-961e2657dc2f814a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2e8f3fd83f8a3ecc", "scanner": "scanner-primary", "fingerprint": "961e2657dc2f814a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/aeon.yml"}, "region": {"startLine": 115}}}]}, {"ruleId": "scanner-961e2657dc2f814a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "52c7569c63ebc32d", "scanner": "scanner-primary", "fingerprint": "961e2657dc2f814a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/aeon.yml"}, "region": {"startLine": 127}}}]}, {"ruleId": "scanner-31bd570868b1d53a", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "53e0c16eaa774df0", "scanner": "scanner-primary", "fingerprint": "31bd570868b1d53a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/aeon.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f32ddc789125a51c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "50ede0bb781a9511", "scanner": "scanner-primary", "fingerprint": "f32ddc789125a51c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/messages.yml"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-f32ddc789125a51c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "50ede0bb781a9511", "scanner": "scanner-primary", "fingerprint": "f32ddc789125a51c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/messages.yml"}, "region": {"startLine": 618}}}]}, {"ruleId": "scanner-f32ddc789125a51c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a035916a912edc8b", "scanner": "scanner-primary", "fingerprint": "f32ddc789125a51c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/messages.yml"}, "region": {"startLine": 630}}}]}, {"ruleId": "scanner-a414afe66aa9ea1b", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "aad278c9d9d843f3", "scanner": "scanner-primary", "fingerprint": "a414afe66aa9ea1b", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/messages.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-84462016b127b17a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9ca70ea3d4cf5b9f", "scanner": "scanner-primary", "fingerprint": "84462016b127b17a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/sync-upstream.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-890f837b12d81822", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "6cda87aa36377328", "scanner": "scanner-primary", "fingerprint": "890f837b12d81822", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/sync-upstream.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-83f55113f893dbd2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/a2a-server/package.json"}, "properties": {"repobilityId": "5b89b584a4a09595", "scanner": "scanner-primary", "fingerprint": "83f55113f893dbd2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/a2a-server/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ee587f5d68d35bca", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/webhook/package.json"}, "properties": {"repobilityId": "d1d49f3485719835", "scanner": "scanner-primary", "fingerprint": "ee587f5d68d35bca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/webhook/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e7b2bc4b44100d7a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/mcp-server/package.json"}, "properties": {"repobilityId": "1be24d56910c6c53", "scanner": "scanner-primary", "fingerprint": "e7b2bc4b44100d7a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/mcp-server/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "da64660f9dba858f", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "fbe0228f9a7db406", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "65591a7a97e26dd1", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "f1d785f8e5b3ecfb", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "34cb0c49a729f3c8", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-bea357a6497a2d5d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "properties": {"repobilityId": "aae72df3934829ac", "scanner": "scanner-primary", "fingerprint": "bea357a6497a2d5d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7455f8fb041394f1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skill-templates/community-manager/SKILL.md"}, "properties": {"repobilityId": "7b4273b2982af55a", "scanner": "scanner-primary", "fingerprint": "7455f8fb041394f1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-templates/community-manager/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5cd491555ca66ee6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skill-templates/social-monitor/SKILL.md"}, "properties": {"repobilityId": "0e207a1ed533954a", "scanner": "scanner-primary", "fingerprint": "5cd491555ca66ee6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-templates/social-monitor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cee05ea62ee1daa7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skill-templates/crypto-tracker/SKILL.md"}, "properties": {"repobilityId": "3c72b20344016321", "scanner": "scanner-primary", "fingerprint": "cee05ea62ee1daa7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-templates/crypto-tracker/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3cda492a3e74471", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: examples/mcp/claude_desktop_config.json"}, "properties": {"repobilityId": "bd76daca8f328dc5", "scanner": "scanner-primary", "fingerprint": "e3cda492a3e74471", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/mcp/claude_desktop_config.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-849e3953a4270337", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/research-brief/SKILL.md"}, "properties": {"repobilityId": "b029b46da43be782", "scanner": "scanner-primary", "fingerprint": "849e3953a4270337", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/research-brief/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8295e6c6b4b2bfb9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/tx-explain/SKILL.md"}, "properties": {"repobilityId": "2eb7cbf452d8376d", "scanner": "scanner-primary", "fingerprint": "8295e6c6b4b2bfb9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/tx-explain/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a9788cc5f630515", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/token-report/SKILL.md"}, "properties": {"repobilityId": "d64c5977f1121307", "scanner": "scanner-primary", "fingerprint": "2a9788cc5f630515", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/token-report/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-23f0e33b96efbbd8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/builder-map/SKILL.md"}, "properties": {"repobilityId": "17d329d895840b58", "scanner": "scanner-primary", "fingerprint": "23f0e33b96efbbd8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/builder-map/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c2f217bbc736a3c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/picks-tracker/SKILL.md"}, "properties": {"repobilityId": "efab85645258eb85", "scanner": "scanner-primary", "fingerprint": "8c2f217bbc736a3c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/picks-tracker/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9587af829bc29248", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/farcaster-digest/SKILL.md"}, "properties": {"repobilityId": "c1a44add95faaf6e", "scanner": "scanner-primary", "fingerprint": "9587af829bc29248", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/farcaster-digest/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dc4143dafa3cfde8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/push-recap/SKILL.md"}, "properties": {"repobilityId": "98ecc53d8d3aa4d1", "scanner": "scanner-primary", "fingerprint": "dc4143dafa3cfde8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/push-recap/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-320c522f2f760709", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/run-frequency-guard/SKILL.md"}, "properties": {"repobilityId": "8122eebf681d9a20", "scanner": "scanner-primary", "fingerprint": "320c522f2f760709", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/run-frequency-guard/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5e0ef73be8c73cbc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/follow-up-patrol/SKILL.md"}, "properties": {"repobilityId": "b69b2eb391ab35b4", "scanner": "scanner-primary", "fingerprint": "5e0ef73be8c73cbc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/follow-up-patrol/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7ea67cd158adecf5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/monitor-runners/SKILL.md"}, "properties": {"repobilityId": "7ff4fb6aee2a5b29", "scanner": "scanner-primary", "fingerprint": "7ea67cd158adecf5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/monitor-runners/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03dc6e5e43cd4730", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/defi-overview/SKILL.md"}, "properties": {"repobilityId": "7344c7cd6e7f14ca", "scanner": "scanner-primary", "fingerprint": "03dc6e5e43cd4730", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/defi-overview/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-84d1661ed68c86c6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/fork-first-run-alert/SKILL.md"}, "properties": {"repobilityId": "c98f51d71c2e1934", "scanner": "scanner-primary", "fingerprint": "84d1661ed68c86c6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/fork-first-run-alert/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1eff36b881aba169", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/pr-triage/SKILL.md"}, "properties": {"repobilityId": "8ed1f926d2d5d568", "scanner": "scanner-primary", "fingerprint": "1eff36b881aba169", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/pr-triage/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e6382c2b5214e29", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/rug-scan/SKILL.md"}, "properties": {"repobilityId": "19d105a9d79a2e5c", "scanner": "scanner-primary", "fingerprint": "4e6382c2b5214e29", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/rug-scan/SKILL.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-f4adc3b755d2859b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/content-performance/SKILL.md"}, "properties": {"repobilityId": "74122a546a588870", "scanner": "scanner-primary", "fingerprint": "f4adc3b755d2859b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/content-performance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8210baa233826015", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/approval-audit/SKILL.md"}, "properties": {"repobilityId": "de4b4a55cb20fb85", "scanner": "scanner-primary", "fingerprint": "8210baa233826015", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/approval-audit/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-68fb8dd4117b5e53", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hacker-news-digest/SKILL.md"}, "properties": {"repobilityId": "2ba60886aae58674", "scanner": "scanner-primary", "fingerprint": "68fb8dd4117b5e53", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hacker-news-digest/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7bf17d44211c4751", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/token-pick/SKILL.md"}, "properties": {"repobilityId": "60755bbf6df317ae", "scanner": "scanner-primary", "fingerprint": "7bf17d44211c4751", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/token-pick/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7dabc4c61e395eeb", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/vuln-scanner/SKILL.md"}, "properties": {"repobilityId": "5ef3bc7e0b2d6bb0", "scanner": "scanner-primary", "fingerprint": "7dabc4c61e395eeb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/vuln-scanner/SKILL.md"}, "region": {"startLine": 249}}}]}, {"ruleId": "scanner-242d3448cea2f8e4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/investigation-report/SKILL.md"}, "properties": {"repobilityId": "0046bfc88fc01540", "scanner": "scanner-primary", "fingerprint": "242d3448cea2f8e4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/investigation-report/SKILL.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-828403e6cb63a031", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/base-mcp/SKILL.md"}, "properties": {"repobilityId": "9b8bef9a136bda82", "scanner": "scanner-primary", "fingerprint": "828403e6cb63a031", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/base-mcp/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da381789e5ac26a0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/github-monitor/SKILL.md"}, "properties": {"repobilityId": "56c9588ba0b817eb", "scanner": "scanner-primary", "fingerprint": "da381789e5ac26a0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/github-monitor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38914cfd909a8498", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/narrative-tracker/SKILL.md"}, "properties": {"repobilityId": "8a382a7fb1b14e3c", "scanner": "scanner-primary", "fingerprint": "38914cfd909a8498", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/narrative-tracker/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72dd1d2377309e78", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/mcp-pulse/SKILL.md"}, "properties": {"repobilityId": "fe4056bc1c2ab020", "scanner": "scanner-primary", "fingerprint": "72dd1d2377309e78", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/mcp-pulse/SKILL.md"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-9461f857f3b1e5c3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/pm-pulse/SKILL.md"}, "properties": {"repobilityId": "5ed5b34df603b387", "scanner": "scanner-primary", "fingerprint": "9461f857f3b1e5c3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/pm-pulse/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-102c58e1bfd5d81b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/paper-pick/SKILL.md"}, "properties": {"repobilityId": "f445f70220e14e3e", "scanner": "scanner-primary", "fingerprint": "102c58e1bfd5d81b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/paper-pick/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b63c5dc2fd450e28", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/technical-explainer/SKILL.md"}, "properties": {"repobilityId": "a3e4df9699b3cd8d", "scanner": "scanner-primary", "fingerprint": "b63c5dc2fd450e28", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/technical-explainer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-afe58ae1354cd979", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/polymarket/SKILL.md"}, "properties": {"repobilityId": "ab484e2959be28f3", "scanner": "scanner-primary", "fingerprint": "afe58ae1354cd979", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/polymarket/SKILL.md"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-a242db2e426f496d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/polymarket/SKILL.md"}, "properties": {"repobilityId": "ac6340ab7b322bc4", "scanner": "scanner-primary", "fingerprint": "a242db2e426f496d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/polymarket/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-401dca0e47e94583", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/spend-monitor/SKILL.md"}, "properties": {"repobilityId": "778b9c7ff2d11432", "scanner": "scanner-primary", "fingerprint": "401dca0e47e94583", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/spend-monitor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e31dbe314cd36d17", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/security-digest/SKILL.md"}, "properties": {"repobilityId": "d6730c5463feda63", "scanner": "scanner-primary", "fingerprint": "e31dbe314cd36d17", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/security-digest/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4584f04c20ba15dc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/holder-concentration/SKILL.md"}, "properties": {"repobilityId": "95a6e1c31751cb24", "scanner": "scanner-primary", "fingerprint": "4584f04c20ba15dc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/holder-concentration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f7020064f220d5f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/fear-divergence-scout/SKILL.md"}, "properties": {"repobilityId": "95bc76956797fea5", "scanner": "scanner-primary", "fingerprint": "2f7020064f220d5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/fear-divergence-scout/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-510b43cdea21a7d8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/refresh-x/SKILL.md"}, "properties": {"repobilityId": "a7ace84da3a346c8", "scanner": "scanner-primary", "fingerprint": "510b43cdea21a7d8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/refresh-x/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-55d1b82e3bee1b6a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/telegram-digest/SKILL.md"}, "properties": {"repobilityId": "ee7b2045a4c8f7a2", "scanner": "scanner-primary", "fingerprint": "55d1b82e3bee1b6a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/telegram-digest/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-57c0f3aba585cdc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/wallet-profile/SKILL.md"}, "properties": {"repobilityId": "9a243b1fcf8bfb38", "scanner": "scanner-primary", "fingerprint": "57c0f3aba585cdc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/wallet-profile/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f7822410835bc1b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/api-health-probe/SKILL.md"}, "properties": {"repobilityId": "5df099caf4c84e5c", "scanner": "scanner-primary", "fingerprint": "2f7822410835bc1b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/api-health-probe/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58d3bc76a6cfb300", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/routine/SKILL.md"}, "properties": {"repobilityId": "21c54128f591878f", "scanner": "scanner-primary", "fingerprint": "58d3bc76a6cfb300", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/routine/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-094676ba8fd93cbd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/digest/SKILL.md"}, "properties": {"repobilityId": "60ca572ef079662f", "scanner": "scanner-primary", "fingerprint": "094676ba8fd93cbd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/digest/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e58a75cba276837", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/beat-tracker/SKILL.md"}, "properties": {"repobilityId": "b0ba03845095fe46", "scanner": "scanner-primary", "fingerprint": "4e58a75cba276837", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/beat-tracker/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a54361e5b7dafdfd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/repo-revive/SKILL.md"}, "properties": {"repobilityId": "04ecbbfa51f568b0", "scanner": "scanner-primary", "fingerprint": "a54361e5b7dafdfd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/repo-revive/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-874b93e0b1858b86", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/search-skill/SKILL.md"}, "properties": {"repobilityId": "2d00d215ea1e1281", "scanner": "scanner-primary", "fingerprint": "874b93e0b1858b86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/search-skill/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b55aeb49e114b801", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/reflect/SKILL.md"}, "properties": {"repobilityId": "d78e1cf3fef52b26", "scanner": "scanner-primary", "fingerprint": "b55aeb49e114b801", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/reflect/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97462c9d041e9cdf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/aixbt-pulse/SKILL.md"}, "properties": {"repobilityId": "d5f023a9c43f9d1a", "scanner": "scanner-primary", "fingerprint": "97462c9d041e9cdf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/aixbt-pulse/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a9014eb040f8edac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/star-milestone/SKILL.md"}, "properties": {"repobilityId": "7291cd3ad386cf45", "scanner": "scanner-primary", "fingerprint": "a9014eb040f8edac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/star-milestone/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-64f70438263ad6a5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/market-context-refresh/SKILL.md"}, "properties": {"repobilityId": "2a2d77b0837c1249", "scanner": "scanner-primary", "fingerprint": "64f70438263ad6a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/market-context-refresh/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b616e4f5e1f1e6bd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/x402-monitor/SKILL.md"}, "properties": {"repobilityId": "453d9309a8eae50b", "scanner": "scanner-primary", "fingerprint": "b616e4f5e1f1e6bd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/x402-monitor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6405254100afdaed", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/rwa-pulse/SKILL.md"}, "properties": {"repobilityId": "83e36cc2df0c7db7", "scanner": "scanner-primary", "fingerprint": "6405254100afdaed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/rwa-pulse/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a90da66e35ee8241", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/wallet-risk-audit/SKILL.md"}, "properties": {"repobilityId": "80cc3b21465f32b6", "scanner": "scanner-primary", "fingerprint": "a90da66e35ee8241", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/wallet-risk-audit/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8241765ce4252a06", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/token-alert/SKILL.md"}, "properties": {"repobilityId": "17601bc421fac18e", "scanner": "scanner-primary", "fingerprint": "8241765ce4252a06", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/token-alert/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37ac6bfa06d6078b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/paper-digest/SKILL.md"}, "properties": {"repobilityId": "ea31cce3b9b9c17b", "scanner": "scanner-primary", "fingerprint": "37ac6bfa06d6078b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/paper-digest/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dbd73f89f6b61c25", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/defi-monitor/SKILL.md"}, "properties": {"repobilityId": "f885ab9a99b63ade", "scanner": "scanner-primary", "fingerprint": "dbd73f89f6b61c25", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/defi-monitor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c4a05ae5905e8f85", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/milestone-tracker/SKILL.md"}, "properties": {"repobilityId": "f5177fc7e7f3931a", "scanner": "scanner-primary", "fingerprint": "c4a05ae5905e8f85", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/milestone-tracker/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1bae34b1d48dca78", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/pvr-triage-monitor/SKILL.md"}, "properties": {"repobilityId": "1e51a7b053fa6302", "scanner": "scanner-primary", "fingerprint": "1bae34b1d48dca78", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/pvr-triage-monitor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-35ffb69249d0dd08", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/cost-report/SKILL.md"}, "properties": {"repobilityId": "b151d22772bac8da", "scanner": "scanner-primary", "fingerprint": "35ffb69249d0dd08", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/cost-report/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0c8daa3bb4deee4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/honeypot-check/SKILL.md"}, "properties": {"repobilityId": "42b47207b12e99f1", "scanner": "scanner-primary", "fingerprint": "a0c8daa3bb4deee4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/honeypot-check/SKILL.md"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-7078e0eeb1cd072c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/honeypot-check/SKILL.md"}, "properties": {"repobilityId": "6ea17ef1e53779f6", "scanner": "scanner-primary", "fingerprint": "7078e0eeb1cd072c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/honeypot-check/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8181ca12a4a733bc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/on-chain-monitor/SKILL.md"}, "properties": {"repobilityId": "0d861bae05a4c41c", "scanner": "scanner-primary", "fingerprint": "8181ca12a4a733bc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/on-chain-monitor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-804cc150cfb967aa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/github-issues/SKILL.md"}, "properties": {"repobilityId": "fd441f14c38c8365", "scanner": "scanner-primary", "fingerprint": "804cc150cfb967aa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/github-issues/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a42f9c317ee7fa17", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/idea-capture/SKILL.md"}, "properties": {"repobilityId": "27a0978a682f0570", "scanner": "scanner-primary", "fingerprint": "a42f9c317ee7fa17", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/idea-capture/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7ae50d70f2c05e81", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/goal-tracker/SKILL.md"}, "properties": {"repobilityId": "355bc161aef992a7", "scanner": "scanner-primary", "fingerprint": "7ae50d70f2c05e81", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/goal-tracker/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-946e1cad36884fac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/autoresearch/SKILL.md"}, "properties": {"repobilityId": "601a3b38e99d2009", "scanner": "scanner-primary", "fingerprint": "946e1cad36884fac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/autoresearch/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11aabc13117c6814", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/idea-validator/SKILL.md"}, "properties": {"repobilityId": "dc24ef526e817d3a", "scanner": "scanner-primary", "fingerprint": "11aabc13117c6814", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/idea-validator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c569073c0845823d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/ops-recap/SKILL.md"}, "properties": {"repobilityId": "ad46387580577d97", "scanner": "scanner-primary", "fingerprint": "c569073c0845823d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/ops-recap/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12d81299b9bb6d3c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/reg-monitor/SKILL.md"}, "properties": {"repobilityId": "99af0d7fc2c653e1", "scanner": "scanner-primary", "fingerprint": "12d81299b9bb6d3c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/reg-monitor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78d57cb050e4fa34", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/skill-spotlight/SKILL.md"}, "properties": {"repobilityId": "35a7246f1c2a7e45", "scanner": "scanner-primary", "fingerprint": "78d57cb050e4fa34", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/skill-spotlight/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95ab6b87f5d2882d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/polymarket-comments/SKILL.md"}, "properties": {"repobilityId": "e7b902a47ff79926", "scanner": "scanner-primary", "fingerprint": "95ab6b87f5d2882d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/polymarket-comments/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4c127bee882932ea", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/thread-formatter/SKILL.md"}, "properties": {"repobilityId": "4c86e72cc52aadf0", "scanner": "scanner-primary", "fingerprint": "4c127bee882932ea", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/thread-formatter/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a8b74acb3cac0a29", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/tweet-digest/SKILL.md"}, "properties": {"repobilityId": "ee32055c297f3874", "scanner": "scanner-primary", "fingerprint": "a8b74acb3cac0a29", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/tweet-digest/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0df09feb4a63de4f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/repo-article/SKILL.md"}, "properties": {"repobilityId": "f63acb48e7330e13", "scanner": "scanner-primary", "fingerprint": "0df09feb4a63de4f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/repo-article/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09aab6de9e1f1cd1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/issue-triage/SKILL.md"}, "properties": {"repobilityId": "c889635ee3a0f3ef", "scanner": "scanner-primary", "fingerprint": "09aab6de9e1f1cd1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/issue-triage/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eab155c68d528d57", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/token-movers/SKILL.md"}, "properties": {"repobilityId": "c142fd19c3487543", "scanner": "scanner-primary", "fingerprint": "eab155c68d528d57", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/token-movers/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-700a1ed4f3545ad3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/signal-verdict/SKILL.md"}, "properties": {"repobilityId": "979e35a037785648", "scanner": "scanner-primary", "fingerprint": "700a1ed4f3545ad3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/signal-verdict/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5e65cee1f3a2afc3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/distribute-tokens/SKILL.md"}, "properties": {"repobilityId": "cd060e6f71e3cb4f", "scanner": "scanner-primary", "fingerprint": "5e65cee1f3a2afc3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/distribute-tokens/SKILL.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-e7e6ac0dbe1249cf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/deployer-trace/SKILL.md"}, "properties": {"repobilityId": "bf1104d133614832", "scanner": "scanner-primary", "fingerprint": "e7e6ac0dbe1249cf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deployer-trace/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5bd3f9523916b9e1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/wallet-digest/SKILL.md"}, "properties": {"repobilityId": "3032f17e5152670f", "scanner": "scanner-primary", "fingerprint": "5bd3f9523916b9e1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/wallet-digest/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-25eaac2540aeccff", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/webhook/src/worker.js:20"}, "properties": {"repobilityId": "9817607e86dbf7d1", "scanner": "scanner-primary", "fingerprint": "25eaac2540aeccff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d3660b1ef41034f6", "level": "none", "message": {"text": "Commented-code block (6 lines) in apps/dashboard/components/ui/ServiceIcon.tsx:5"}, "properties": {"repobilityId": "978d6ef5ce3dc7f7", "scanner": "scanner-primary", "fingerprint": "d3660b1ef41034f6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-63b7dbef2a2bddb0", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/dashboard/components/ui/Linkify.tsx:3"}, "properties": {"repobilityId": "9c0ed2b6bc8eccbf", "scanner": "scanner-primary", "fingerprint": "63b7dbef2a2bddb0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7adfd6212395bd73", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/dashboard/app/page.tsx:160"}, "properties": {"repobilityId": "66b67ed90ceb6908", "scanner": "scanner-primary", "fingerprint": "7adfd6212395bd73", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f50fcc40fc720096", "level": "none", "message": {"text": "Commented-code block (6 lines) in apps/dashboard/lib/frontmatter.ts:39"}, "properties": {"repobilityId": "05a7699f6296f9f7", "scanner": "scanner-primary", "fingerprint": "f50fcc40fc720096", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2d73c949090ab1b1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/dashboard/lib/github.ts:38"}, "properties": {"repobilityId": "6a4e105186af32d3", "scanner": "scanner-primary", "fingerprint": "2d73c949090ab1b1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3b2c8c39ea46c5e4", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/dashboard/lib/mcp-catalog.ts:1"}, "properties": {"repobilityId": "f179b2b8199683ed", "scanner": "scanner-primary", "fingerprint": "3b2c8c39ea46c5e4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6a29fff006ba473b", "level": "none", "message": {"text": "Commented-code block (6 lines) in apps/dashboard/lib/auth-provider.mjs:1"}, "properties": {"repobilityId": "a9e7b9cb9ea2aea2", "scanner": "scanner-primary", "fingerprint": "6a29fff006ba473b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-967b6f24eb15b85b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/dashboard/lib/security/api-gate.ts:29"}, "properties": {"repobilityId": "9b3be6d3e949b2bd", "scanner": "scanner-primary", "fingerprint": "967b6f24eb15b85b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4c862342326fd1b6", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/ccr-sanitize.js:10"}, "properties": {"repobilityId": "3bb7e4fb2ada0c7c", "scanner": "scanner-primary", "fingerprint": "4c862342326fd1b6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-232aecb6a3966241", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/langchain_client.py:30"}, "properties": {"repobilityId": "56be2c15c462e003", "scanner": "scanner-primary", "fingerprint": "232aecb6a3966241", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-aec69feef6b9b818", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/crewai_task.py:31"}, "properties": {"repobilityId": "b88a3e32817c528c", "scanner": "scanner-primary", "fingerprint": "aec69feef6b9b818", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4ffff8ec16b2910b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/autogen_workflow.py:31"}, "properties": {"repobilityId": "2555bd4dcfd2c761", "scanner": "scanner-primary", "fingerprint": "4ffff8ec16b2910b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9b6cff8fbc13ceaa", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/a2a/openai_agents_client.py:30"}, "properties": {"repobilityId": "632bea8b34f0d16a", "scanner": "scanner-primary", "fingerprint": "9b6cff8fbc13ceaa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b334d875f2339fa1", "level": "note", "message": {"text": "5 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "faa38682016f5d53", "scanner": "scanner-primary", "fingerprint": "b334d875f2339fa1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}]}]}