{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-1d0b1ebb2a008ffd", "name": "Agent instruction/config may expose a secret: SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/29764"}, "properties": {"repository": "sunrf-renlab-ai/zero-cost-deploy", "repoUrl": "https://github.com/sunrf-renlab-ai/zero-cost-deploy", "branch": "main"}, "results": [{"ruleId": "scanner-1d0b1ebb2a008ffd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: SKILL.md"}, "properties": {"repobilityId": "395e4d093c91128b", "scanner": "scanner-primary", "fingerprint": "1d0b1ebb2a008ffd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "SKILL.md"}, "region": {"startLine": 132}}}]}]}]}