{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-e9a3c3da93b17bac", "name": "Possibly dead Python function: cmd_add", "shortDescription": {"text": "Possibly dead Python function: cmd_add"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2216d29ffc0c4f48", "name": "Possibly dead Python function: cmd_remove", "shortDescription": {"text": "Possibly dead Python function: cmd_remove"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c2489aefe4fed14", "name": "Possibly dead Python function: cmd_list", "shortDescription": {"text": "Possibly dead Python function: cmd_list"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-546a0147db9fd7a8", "name": "Possibly dead Python function: cmd_delta", "shortDescription": {"text": "Possibly dead Python function: cmd_delta"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2516be56586f5c41", "name": "Possibly dead Python function: cmd_run_one", "shortDescription": {"text": "Possibly dead Python function: cmd_run_one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf5d8caf3ae36efb", "name": "Possibly dead Python function: cmd_run_all", "shortDescription": {"text": "Possibly dead Python function: cmd_run_all"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68369ead4c6716ab", "name": "Possibly dead Python function: cmd_config", "shortDescription": {"text": "Possibly dead Python function: cmd_config"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-864020cba87bcb4c", "name": "Possibly dead Python function: delete_finding", "shortDescription": {"text": "Possibly dead Python function: delete_finding"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-437369a615b26fbe", "name": "Possibly dead Python function: dismiss_finding", "shortDescription": {"text": "Possibly dead Python function: dismiss_finding"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5bbce7fe223b1a1b", "name": "Possibly dead Python function: extract_firefox_cookies", "shortDescription": {"text": "Possibly dead Python function: extract_firefox_cookies"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71b165408a816178", "name": "Possibly dead Python function: extract_chrome_cookies", "shortDescription": {"text": "Possibly dead Python function: extract_chrome_cookies"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-06b599cc2ea0379d", "name": "Possibly dead Python function: extract_brave_cookies", "shortDescription": {"text": "Possibly dead Python function: extract_brave_cookies"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f490df0a99db904", "name": "Possibly dead Python function: extract_safari_cookies", "shortDescription": {"text": "Possibly dead Python function: extract_safari_cookies"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d422b1820cfc7a88", "name": "Possibly dead Python function: market_volume", "shortDescription": {"text": "Possibly dead Python function: market_volume"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28672af0838760fe", "name": "Possibly dead Python function: enrich_top_stories", "shortDescription": {"text": "Possibly dead Python function: enrich_top_stories"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec49f9c0b703d8a7", "name": "Possibly dead Python function: collect_html_warnings_comparison", "shortDescription": {"text": "Possibly dead Python function: collect_html_warnings_comparison"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d1f0d89d3bbf06c1", "name": "Possibly dead Python function: extract_chatgpt_account_id", "shortDescription": {"text": "Possibly dead Python function: extract_chatgpt_account_id"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4a3a1fdbfe5e5eca", "name": "Possibly dead Python function: config_exists", "shortDescription": {"text": "Possibly dead Python function: config_exists"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92df0ee0238ce3f5", "name": "Possibly dead Python function: is_ytdlp_available", "shortDescription": {"text": "Possibly dead Python function: is_ytdlp_available"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4c5dff3097c03412", "name": "Possibly dead Python function: is_hackernews_available", "shortDescription": {"text": "Possibly dead Python function: is_hackernews_available"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-82dc948a1dc4f640", "name": "Possibly dead Python function: is_polymarket_available", "shortDescription": {"text": "Possibly dead Python function: is_polymarket_available"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4240c788800b74d2", "name": "Possibly dead Python function: is_tiktok_available", "shortDescription": {"text": "Possibly dead Python function: is_tiktok_available"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5aaecc06ec642638", "name": "Possibly dead Python function: is_instagram_available", "shortDescription": {"text": "Possibly dead Python function: is_instagram_available"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58141027c8aaba7d", "name": "Possibly dead Python function: score_index", "shortDescription": {"text": "Possibly dead Python function: score_index"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c617f01305906b05", "name": "Possibly dead Python function: hybrid_similarity", "shortDescription": {"text": "Possibly dead Python function: hybrid_similarity"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dd405488fde69ca8", "name": "Possibly dead Python function: fetch_transcript", "shortDescription": {"text": "Possibly dead Python function: fetch_transcript"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bead75b0f9233e05", "name": "No API endpoints detected", "shortDescription": {"text": "No API endpoints detected"}, "fullDescription": {"text": "The scanner did not find FastAPI/Flask/Express/NestJS/GraphQL/gRPC routes. If this repo exposes APIs, the framework may be unsupported."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "info", "confidence": 1.0}}, {"id": "scanner-80e75485a39a4acd", "name": "Stray `console.log` in TS/JS \u2014 .claude/skills/webapp-playwright-testing/scripts/test-helper.js:48", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/skills/webapp-playwright-testing/scripts/test-helper.js:48"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-943beae1afa3015b", "name": "Stray `console.log` in TS/JS \u2014 .claude/skills/writing-skills/render-graphs.js:124", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/skills/writing-skills/render-graphs.js:124"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-526ac417c1e1d15f", "name": "Insecure pattern 'node_child_process' in scripts/build-dashboard.mjs:12", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/build-dashboard.mjs:12"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0f57a300b584fe02", "name": "Insecure pattern 'node_child_process' in scripts/verify-kit.mjs:6", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/verify-kit.mjs:6"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-16696b036dbd8800", "name": "Insecure pattern 'node_child_process' in scripts/check-upstreams.mjs:6", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/check-upstreams.mjs:6"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-067404ed8c3fcfdc", "name": "Insecure pattern 'node_child_process' in daemon/factory-daemon.mjs:16", "shortDescription": {"text": "Insecure pattern 'node_child_process' in daemon/factory-daemon.mjs:16"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ebf00ff8e8b9f80e", "name": "Insecure pattern 'node_child_process' in .claude/skills/writing-skills/render-graphs.js:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/skills/writing-skills/render-graphs.js:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18058b9df564ae76", "name": "Possible secret in .claude/skills/qa-test-planner/SKILL.md", "shortDescription": {"text": "Possible secret in .claude/skills/qa-test-planner/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-7bb6185ab7da25c8", "name": "Insecure pattern 'eval_used' in .claude/skills/qa-test-planner/SKILL.md:297", "shortDescription": {"text": "Insecure pattern 'eval_used' in .claude/skills/qa-test-planner/SKILL.md:297"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f4b419cef68eff3", "name": "Possible secret in .claude/skills/api-test-suite-generator/SKILL.md", "shortDescription": {"text": "Possible secret in .claude/skills/api-test-suite-generator/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-903ec4ad0e452b7a", "name": "Insecure pattern 'weak_hash' in .claude/skills/consult-oracle/scripts/refresh_cookies.py:40", "shortDescription": {"text": "Insecure pattern 'weak_hash' in .claude/skills/consult-oracle/scripts/refresh_cookies.py:40"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a89383605e350a15", "name": "Very large file: scripts/build-dashboard.mjs (937 lines)", "shortDescription": {"text": "Very large file: scripts/build-dashboard.mjs (937 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8fe8cab1031bb0c7", "name": "Very large file: daemon/factory-daemon.mjs (1519 lines)", "shortDescription": {"text": "Very large file: daemon/factory-daemon.mjs (1519 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b95d5bbb3bf13b70", "name": "Very large file: .claude/skills/last30days/scripts/lib/render.py (1779 lines)", "shortDescription": {"text": "Very large file: .claude/skills/last30days/scripts/lib/render.py (1779 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "3 test file(s) for 79 source file(s) (ratio 0.04). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 94 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 53 placeholder/mock markers across 8 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-94f5070f9e393260", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/references/research-documentation-lookup.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/references/research-documentation-lookup.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c163b6d7bf0b2f52", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/model-profile-resolution.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/model-profile-resolution.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-125adc91c0077110", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/planner-chunked.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/planner-chunked.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-99aaf50f96023fcc", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/decimal-phase-calculation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/decimal-phase-calculation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-54c28aaef56c66bd", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/phase-argument-parsing.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/phase-argument-parsing.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5199503fa8b88820", "name": "Agent instruction/config may expose a secret: .claude/gsd-core/references/workstream-flag.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/gsd-core/references/workstream-flag.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-352a014fdd6a9231", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/workstream-flag.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/workstream-flag.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f5e8804f3df8a2a", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/continuation-format.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/continuation-format.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-53ba910aa8e3d2af", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/sketch-theme-system.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/sketch-theme-system.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa3b0adc0041c2b6", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/spidr-splitting.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/spidr-splitting.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4477fe0551851f50", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/git-planning-commit.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/git-planning-commit.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1078a0480e13ec7b", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/planner-load-graph-context.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/planner-load-graph-context.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c4dd93f110605568", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/references/planner-load-graph-context.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/references/planner-load-graph-context.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d69fddf2c64a7dbc", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/references/artifact-types.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/artifact-types.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ec87b4575ca09465", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/contexts/dev.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/contexts/dev.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-33b126a9b2a3e1b7", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/dev-preferences.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/dev-preferences.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fd8fa0f307883d5e", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/copilot-instructions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/copilot-instructions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-309e5c4e7cb38415", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/AI-SPEC.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/AI-SPEC.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ba5b5179ca27ee8", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/state.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/state.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b11e4f41698ee7d0", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/claude-md.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/claude-md.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa4e8bf27421ffa0", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/SECURITY.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/SECURITY.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d8b57dd82f00d06", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/milestone-archive.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/milestone-archive.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97fefd4a4db3204d", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/codebase/architecture.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/codebase/architecture.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e9fe6818e9935e7", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/templates/codebase/stack.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/templates/codebase/stack.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8e779e1181252c7", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/research-project/STACK.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/research-project/STACK.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ed9f70dd7f3ef2a", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ultraplan-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ultraplan-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7755831dcfd0730b", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/new-milestone.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/new-milestone.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e57ba4a9baa02b3f", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/audit-fix.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/audit-fix.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ccde780cbe803e2e", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/audit-milestone.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/audit-milestone.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d07b5e82f2a43346", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/profile-user.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/profile-user.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d4371f2a304441a", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/code-review-fix.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/code-review-fix.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5bd11077ec6ffdd9", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/diagnose-issues.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/diagnose-issues.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-113cafc9af8793d7", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/remove-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/remove-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2fc0b44e362a28cc", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/next.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/next.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a95c9bb31f98f4f4", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/transition.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/transition.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80593dc1d11bb041", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/eval-review.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/eval-review.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a30c980437ff97a", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ui-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ui-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-19eb62595bc256d9", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/progress.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/progress.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc84c8b0b0581f73", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase-power.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase-power.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3fc35bfa78370c2", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/forensics.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/forensics.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f8dec1aaa87e56cc", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/health.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/health.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c372d1351002af2", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/health.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/health.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7bf0d1ccd291e9f2", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/autonomous.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/autonomous.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69e179e51bfabf23", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/sketch-wrap-up.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/sketch-wrap-up.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ff940825f7fd6aa", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plan-milestone-gaps.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plan-milestone-gaps.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3bde285b9735ebfe", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/thread.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/thread.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-134e10e7b7d2b19b", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/remove-workspace.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/remove-workspace.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f366bf36a09a243", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/explore.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/explore.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-73a3536777b02dd1", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/explore.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/explore.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-21f8b85bc43b8f21", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ui-review.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ui-review.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3501b21307f5aee5", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/list-workspaces.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/list-workspaces.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6312483b4b284509", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/list-workspaces.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/list-workspaces.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d1c35defb6b568a", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase-assumptions.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase-assumptions.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3cc06ada84a99fa9", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/pause-work.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/pause-work.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-99d8b5f835f0b45f", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/spike-wrap-up.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/spike-wrap-up.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a11f64b14a003de4", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/new-project.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/new-project.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60ad6f43a0f361f1", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ai-integration-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ai-integration-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-278ffc53fae23f94", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/insert-phase.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/insert-phase.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-636956ae21c2bc0a", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/insert-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/insert-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1884b5fe780e08ea", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/verify-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/verify-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-96583056beaf1216", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/spike.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/spike.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e70fe2179fe2e346", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/code-review.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/code-review.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d3639d388799383", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b6e52de995bee9b", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ship.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ship.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a4b5f76e73962cf", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-backlog.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-backlog.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-34fb41fe83f950f2", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/mvp-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/mvp-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f6b1fca3fcf6ae01", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/check-todos.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/check-todos.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cfb0f38a9a883a3f", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/check-todos.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/check-todos.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2fcde4f56943e0fc", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/validate-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/validate-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b55100c15c54a636", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/scan.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/scan.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5e96abdabcc53f29", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/scan.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/scan.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3e759e7075414bff", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/stats.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/stats.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30d242f4fb0ad611", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/stats.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/stats.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7ef562963dd8ed1", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/graduation.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/graduation.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e68a8723113ca86", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/add-todo.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/add-todo.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d8bccc0f2cf9a47", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-todo.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-todo.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ba6989925501e4a3", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ingest-docs.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ingest-docs.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d59a0a2703e8d541", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/do.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/do.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-99a00edfb65b55b6", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/quick.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/quick.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3bbd47d2622a711b", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/spec-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/spec-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-07e710963c215bf2", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/verify-work.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/verify-work.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d858deb309700df", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plant-seed.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plant-seed.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7624ad17a7cc73f", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/docs-update.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/docs-update.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97474ea77ac50663", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/secure-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/secure-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e199f4da24e208dd", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plan-review-convergence.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plan-review-convergence.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5bb10488861e66a0", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/settings-integrations.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/settings-integrations.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0ef8aafcc367ae38", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/new-workspace.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/new-workspace.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1bbcf0ac4cfcc602", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/new-workspace.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/new-workspace.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7bfcc234b84b0fd", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-tests.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-tests.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f493ee8042bdadf", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/resume-project.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/resume-project.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a30d0b7599e9b6e2", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/pr-branch.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/pr-branch.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36a51bdf4fb1d9b8", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/debug.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/debug.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5a32a6ef2369d551", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/update.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/update.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-949ca75e49192473", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad5061c7b804c2b3", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/add-phase.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/add-phase.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-98a6c6c472962892", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-20f1c62f80db3de9", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/settings-advanced.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/settings-advanced.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b72894911a4ee5f4", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/audit-uat.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/audit-uat.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f498d43048c04787", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/help.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/help.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ac638a855f54b63e", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/settings.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/settings.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a68caa17d374b90b", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/complete-milestone.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/complete-milestone.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a9fbfcbfc86e726", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/import.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/import.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-41091225b5d59a7a", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/extract-learnings.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/extract-learnings.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1268b603f3c21951", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/map-codebase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/map-codebase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38ce9497827edfa1", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/edit-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/edit-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eda965395f6d41df", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/cleanup.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/cleanup.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9cc6eaa8e90f998d", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/cleanup.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/cleanup.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8766e9e4c5e8a3fb", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/milestone-summary.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/milestone-summary.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1e2dc3e4ce9c5ca", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/review.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/review.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e8d91caeb893fbe", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/manager.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/manager.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-826ba4368dc14674", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plan-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plan-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ec102a62050b4569", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-plan.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-plan.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-822e694d395c6b5c", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/sketch.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/sketch.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-954e35c0718a155a", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/help/modes/brief.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/help/modes/brief.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5778387715ca8c4", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/text.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/text.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ac35fa1a2534a9b8", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/power.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/power.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-41bf2e9632d08523", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/chain.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/chain.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-99630735160cfceb", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase/modes/chain.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase/modes/chain.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1728e6ec7bd0c040", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/all.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/all.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d537eedb663ea925", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/default.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/default.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1783c4530a3d2db", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase/modes/advisor.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase/modes/advisor.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c04999b4e8385532", "name": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/auto.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/auto.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-39a6541fb7e925f2", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase/modes/auto.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase/modes/auto.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-edfc43cf8625b774", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-phase/steps/post-merge-gate.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-phase/steps/post-merge-gate.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-649f1bdb2c3c8603", "name": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-phase/steps/codebase-drift-gate.m", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-phase/steps/codebase-drift-gate.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-102c44fb8d3cf648", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/ultraplan-phase.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/ultraplan-phase.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7dd7af5d6e6b568", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/new-milestone.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/new-milestone.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1aba06e131434a67", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/resume-work.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/resume-work.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a3ff8bcca97b166", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/profile-user.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/profile-user.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-64426808f5146233", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/workstreams.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/workstreams.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-165c3127aa52b8e6", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/health.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/health.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8549997a13e43f36", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/autonomous.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/autonomous.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3bfd1056786b6c7f", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/thread.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/thread.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-43b0422770f7357d", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/explore.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/explore.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9da71014ad1431df", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/ui-review.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/ui-review.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11a1b23f165e726f", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/phase.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/phase.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bd95557fc7497e98", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/ns-manage.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/ns-manage.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-78fe4a6035c5436f", "name": "Agent instruction contains unpinned remote install: .claude/commands/gsd/graphify.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/commands/gsd/graphify.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ad2090000f31390", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/pause-work.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/pause-work.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c02de24e4d7a9ba", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/new-project.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/new-project.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d26cd8040c5f0f7e", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/ai-integration-phase.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/ai-integration-phase.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-214b74abb6c5018c", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/code-review.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/code-review.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-95a0b0bfe60eda5a", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/mvp-phase.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/mvp-phase.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-74c1732a44c4241c", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/mempalace-recall.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/mempalace-recall.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-adee8005f954ba01", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/stats.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/stats.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-10196b5d2632e7db", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/plan-review-convergence.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/plan-review-convergence.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f77ce2804903e92a", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/pr-branch.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/pr-branch.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47fc8354b99bddf1", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/workspace.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/workspace.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-31d62f6a7ead23de", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/debug.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/debug.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f67588ffd7007ad1", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/update.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/update.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4af6e026f163b31", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/undo.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/undo.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bda20c47ee9748a4", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/discuss-phase.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/discuss-phase.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a96e56b144ed1715", "name": "Agent instruction contains unpinned remote install: .claude/commands/gsd/discuss-phase.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/commands/gsd/discuss-phase.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9e0d58d7daeb659", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/settings.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/settings.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8bc6e14d636ddcef", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/import.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/import.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-63340d62252987c5", "name": "Agent instruction contains unpinned remote install: .claude/commands/gsd/import.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/commands/gsd/import.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ae5852f44335ac4", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/inbox.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/inbox.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-746f34135b5c7480", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/cleanup.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/cleanup.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7492d02d38086a19", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/surface.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/surface.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-449ba7e43e25207b", "name": "Agent authority lacks a verifier contract: .claude/commands/gsd/manager.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/manager.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7951d3c81154e32d", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-planner.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-planner.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7af71908d078ca65", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-debugger.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-debugger.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1afe7d42676f3fa", "name": "Agent authority lacks a verifier contract: .claude/agents/gsd-assumptions-analyzer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/gsd-assumptions-analyzer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ebde4b85a45f6430", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-debug-session-manager.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-debug-session-manager.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c3ff4c13cfcb49ba", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-phase-researcher.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-phase-researcher.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4da58675167625ea", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-plan-checker.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-plan-checker.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8edeca507360ee3", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-research-synthesizer.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-research-synthesizer.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb81028d22b46b3f", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-project-researcher.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-project-researcher.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc297937a28a0940", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-verifier.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-verifier.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df13ca1b0f52664f", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-executor.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-executor.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9568a4f28f442b48", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-ui-researcher.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-ui-researcher.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f32b9f3f642897f2", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-code-fixer.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-code-fixer.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d1970bd49d391bb", "name": "Agent instruction contains unpinned remote install: .claude/agents/gsd-intel-updater.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-intel-updater.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e35d3c598ade9c8f", "name": "Agent authority lacks a verifier contract: .claude/agents/gsd-doc-classifier.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/gsd-doc-classifier.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c876dd1e13a275a1", "name": "Agent authority lacks a verifier contract: .claude/skills/commit-staged-push/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/commit-staged-push/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e9e670d72728d790", "name": "Agent authority lacks a verifier contract: .claude/skills/reply-to-pr-conversation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/reply-to-pr-conversation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d05e1a329e7b899f", "name": "Agent authority lacks a verifier contract: .claude/skills/finalize/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/finalize/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-13f87d69ecc23ce5", "name": "Agent authority lacks a verifier contract: .claude/skills/review-code/references/api-usage-review.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/review-code/references/api-usage-review.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4ee12d831791023", "name": "Agent authority lacks a verifier contract: .claude/skills/resolve-findings/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/resolve-findings/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c9b4d2ff3f46da4", "name": "Agent authority lacks a verifier contract: .claude/skills/resolve-findings/references/direct-path.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/resolve-findings/references/direct-path.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e696705ac15e9727", "name": "Agent authority lacks a verifier contract: .claude/skills/resolve-findings/references/plan-path.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/resolve-findings/references/plan-path.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65dedea978124781", "name": "Agent instruction/config may expose a secret: .claude/skills/cso/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/cso/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0360b7083442212c", "name": "Agent authority lacks a verifier contract: .claude/skills/cso/sections/manifest.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/cso/sections/manifest.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bac4ee7d0aea55c0", "name": "Agent authority lacks a verifier contract: .claude/skills/github-voice/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/github-voice/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-233e4875d6269226", "name": "Agent authority lacks a verifier contract: .claude/skills/create-pr/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-pr/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bda95f80868440c7", "name": "Agent authority lacks a verifier contract: .claude/skills/create-handoff/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-handoff/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08d9e5de274ec188", "name": "Agent authority lacks a verifier contract: .claude/skills/brutalist-skill/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/brutalist-skill/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f7d03559210bb50", "name": "Agent instruction/config may expose a secret: .claude/skills/health/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/health/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-33df0cd71f18425b", "name": "Agent instruction/config may expose a secret: .claude/skills/plan-design-review/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/plan-design-review/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8fe1df60abfb9dc8", "name": "Agent authority lacks a verifier contract: .claude/skills/recall-reasoning/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/recall-reasoning/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e5733d2ac9ad40d", "name": "Agent instruction/config may expose a secret: .claude/skills/office-hours/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/office-hours/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-481ec28a667c7892", "name": "Agent instruction contains unpinned remote install: .claude/skills/deploy/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/deploy/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aec8e3277b6c9dc7", "name": "Agent authority lacks a verifier contract: .claude/skills/commit-staged/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/commit-staged/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ada416469c6d78d1", "name": "Agent instruction contains unpinned remote install: .claude/skills/playwright-cli/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/playwright-cli/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ec880f5c45be7ec8", "name": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/element-attributes.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/element-attributes.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47b71897f33be8c4", "name": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/storage-state.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/storage-state.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce349b621e2986b5", "name": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/running-code.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/running-code.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72a82bcfa89e6a5c", "name": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/request-mocking.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/request-mocking.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f5bfc1618e6d9c9", "name": "Agent instruction/config may expose a secret: .claude/skills/writing-skills/anthropic-best-practices.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/writing-skills/anthropic-best-practices.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9e96dedca784af88", "name": "Agent instruction contains unpinned remote install: .claude/skills/review-dependencies/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/review-dependencies/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f541fe6510aa8d8", "name": "Agent instruction/config may expose a secret: .claude/skills/autoplan/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/autoplan/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-234ae64617ba0ee6", "name": "Agent authority lacks a verifier contract: .claude/skills/code-style/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/code-style/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6506321906c789c8", "name": "Agent authority lacks a verifier contract: .claude/skills/reply-to-pr-threads/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/reply-to-pr-threads/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-37bb91c46cad6ba8", "name": "Agent authority lacks a verifier contract: .claude/skills/release/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/release/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6fd51e80fce28f7a", "name": "Agent authority lacks a verifier contract: .claude/skills/codex-review/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/codex-review/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-07e9f236b267b1ee", "name": "Agent authority lacks a verifier contract: .claude/skills/answer-reviewer-questions/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/answer-reviewer-questions/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8588a16d33e68fbb", "name": "Agent instruction/config may expose a secret: .claude/skills/design-consultation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/design-consultation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dbe8743696cae793", "name": "Agent authority lacks a verifier contract: .claude/skills/stage-commit-push/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/stage-commit-push/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1c357a2459d67910", "name": "Agent instruction/config may expose a secret: .claude/skills/design-html/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/design-html/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0de43e5f60893875", "name": "Agent instruction/config may expose a secret: .claude/skills/document-generate/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/document-generate/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bb6802038a637dae", "name": "Agent authority lacks a verifier contract: .claude/skills/ship/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ship/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d262fb052d37764", "name": "Agent authority lacks a verifier contract: .claude/skills/interpret-feedback/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/interpret-feedback/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad1613ae3f416a4d", "name": "Agent instruction/config may expose a secret: .claude/skills/design-review/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/design-review/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a7937962f3f3f06e", "name": "Agent instruction/config may expose a secret: .claude/skills/plan-eng-review/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/plan-eng-review/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1dc719fdcc36e626", "name": "Agent instruction contains unpinned remote install: .claude/skills/plan-eng-review/sections/review-sections.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/plan-eng-review/sections/review-sections.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4118c39534b1668f", "name": "Agent authority lacks a verifier contract: .claude/skills/commit-rules/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/commit-rules/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e478e9d0e889a78", "name": "Agent instruction/config may expose a secret: .claude/skills/document-release/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/document-release/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9bffed49d591d0b3", "name": "Agent instruction contains unpinned remote install: .claude/skills/document-release/sections/release-body.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/document-release/sections/release-body.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c97fa30e2cf50947", "name": "Agent instruction/config may expose a secret: .claude/skills/plan-ceo-review/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/plan-ceo-review/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a4915bdd281b009f", "name": "Agent instruction contains unpinned remote install: .claude/skills/plan-ceo-review/sections/review-sections.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/plan-ceo-review/sections/review-sections.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7e55d1ea7d19c48b", "name": "Agent authority lacks a verifier contract: .claude/skills/codex-exec/references/parallel-execution.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/codex-exec/references/parallel-execution.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-67e06a252b959269", "name": "Agent instruction/config may expose a secret: .claude/skills/api-test-suite-generator/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/api-test-suite-generator/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-325d737056962fe1", "name": "Agent authority lacks a verifier contract: .claude/skills/review-pr/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/review-pr/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2fe16aa9d1ead832", "name": "Agent authority lacks a verifier contract: .claude/skills/fetch-pr-comments/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/fetch-pr-comments/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b9e046eaf239a87", "name": "Agent authority lacks a verifier contract: .claude/skills/stage-commit/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/stage-commit/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ff1d08910a02548", "name": "Agent authority lacks a verifier contract: .claude/skills/peer-review/references/subagent-wrapping.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/peer-review/references/subagent-wrapping.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94e84e85466449fc", "name": "Agent authority lacks a verifier contract: .claude/skills/simplify-code/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/simplify-code/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-848d85925c5a945d", "name": "Agent instruction/config may expose a secret: .claude/skills/plan-devex-review/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/plan-devex-review/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ce24cb7a64b4569c", "name": "Agent instruction contains unpinned remote install: .claude/skills/plan-devex-review/sections/review-sections.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/plan-devex-review/sections/review-sections.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad6d92a3fe377cc6", "name": "Legacy-named symbol `factoryChat_v1` in scripts/build-dashboard.mjs:879", "shortDescription": {"text": "Legacy-named symbol `factoryChat_v1` in scripts/build-dashboard.mjs:879"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a355806a452f7dd7", "name": "Commented-code block (8 lines) in scripts/build-dashboard.mjs:2", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/build-dashboard.mjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b8d2210da2956876", "name": "Commented-code block (5 lines) in scripts/build-vault.mjs:2", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/build-vault.mjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7790e2c745b90a2b", "name": "Commented-code block (5 lines) in scripts/monitor.mjs:2", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/monitor.mjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-621c1476aba107b1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 cloud/dashboard-worker.js:5", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cloud/dashboard-worker.js:5"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d369c04673cba4ba", "name": "Commented-code block (5 lines) in daemon/factory-daemon.mjs:437", "shortDescription": {"text": "Commented-code block (5 lines) in daemon/factory-daemon.mjs:437"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-65fc22e6ae95e205", "name": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/recall-reasoning/scripts/find_transcript.py:29", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/recall-reasoning/scripts/find_transcript.py:29"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c9953ea6ee6c2a3", "name": "Commented-code block (8 lines) in .claude/skills/systematic-debugging/condition-based-waiting-example.ts:140", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/skills/systematic-debugging/condition-based-waiting-example.ts:140"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-18587a30bf6e3fe7", "name": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/last30days/scripts/evaluate_search_quality.py:338", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/last30days/scripts/evaluate_search_quality.py:338"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12ba7efed474cdeb", "name": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/last30days.py:522", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/last30days.py:522"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-05b3e46fd57d62fa", "name": "Commented-code block (7 lines) in .claude/skills/last30days/scripts/lib/rerank.py:11", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/skills/last30days/scripts/lib/rerank.py:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f44e4aebcb18855b", "name": "Commented-code block (6 lines) in .claude/skills/last30days/scripts/lib/bluesky.py:213", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/skills/last30days/scripts/lib/bluesky.py:213"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c17b2abc2757bab9", "name": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/lib/http.py:161", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/lib/http.py:161"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-17b940899b1cca50", "name": "Commented-code block (7 lines) in .claude/skills/last30days/scripts/lib/render.py:129", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/skills/last30days/scripts/lib/render.py:129"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0b2dcd17d76b0a2f", "name": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/lib/env.py:345", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/lib/env.py:345"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-18904764755eb270", "name": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/lib/pipeline.py:533", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/lib/pipeline.py:533"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-342858413db7d92b", "name": "Commented-code block (9 lines) in .claude/skills/last30days/scripts/lib/planner.py:125", "shortDescription": {"text": "Commented-code block (9 lines) in .claude/skills/last30days/scripts/lib/planner.py:125"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d14e6850656ae975", "name": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/consult-oracle/scripts/refresh_cookies.py:32", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/consult-oracle/scripts/refresh_cookies.py:32"}, "fullDescription": {"text": "`subprocess.check_output(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n.claude/skills/last30days/scripts/lib/bluesky.py:search_bluesky, .claude/skills/last30days/scripts/lib/truthsocial.py:search_truthsocial\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33a6b62e30ce7ab4", "name": "Near-duplicate function bodies in 6 places", "shortDescription": {"text": "Near-duplicate function bodies in 6 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n.claude/skills/last30days/scripts/lib/polymarket.py:search_polymarket, .claude/skills/last30days/scripts/lib/hackernews.py:search_hackernews, .claude/skills/last30days/scripts/lib/youtube_yt.py:search_youtube, .claude/skills/last30days/scripts/lib/youtube_yt.py:search_and_transcribe\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46969939caf8120b", "name": "Near-duplicate function bodies in 9 places", "shortDescription": {"text": "Near-duplicate function bodies in 9 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n.claude/skills/last30days/scripts/lib/threads.py:search_threads, .claude/skills/last30days/scripts/lib/youtube_yt.py:search_youtube_sc, .claude/skills/last30days/scripts/lib/pinterest.py:search_pinterest, .claude/skills/last30days/scripts/lib/reddit.py:search_reddit\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n.claude/skills/last30days/scripts/lib/html_render.py:replace, .claude/skills/last30days/scripts/lib/html_render.py:replace, .claude/skills/last30days/scripts/lib/html_render.py:replace\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/18244"}, "properties": {"repository": "rm91learn-lab/aifactory", "repoUrl": "https://github.com/rm91learn-lab/aifactory", "branch": "main"}, "results": [{"ruleId": "scanner-e9a3c3da93b17bac", "level": "note", "message": {"text": "Possibly dead Python function: cmd_add"}, "properties": {"repobilityId": "3b364c25c0f2804a", "scanner": "scanner-primary", "fingerprint": "e9a3c3da93b17bac", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/watchlist.py:75"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2216d29ffc0c4f48", "level": "note", "message": {"text": "Possibly dead Python function: cmd_remove"}, "properties": {"repobilityId": "d39b296d61583f94", "scanner": "scanner-primary", "fingerprint": "2216d29ffc0c4f48", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/watchlist.py:88"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c2489aefe4fed14", "level": "note", "message": {"text": "Possibly dead Python function: cmd_list"}, "properties": {"repobilityId": "bd09044da90857da", "scanner": "scanner-primary", "fingerprint": "8c2489aefe4fed14", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/watchlist.py:102"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-546a0147db9fd7a8", "level": "note", "message": {"text": "Possibly dead Python function: cmd_delta"}, "properties": {"repobilityId": "e276a0bc7da36f5e", "scanner": "scanner-primary", "fingerprint": "546a0147db9fd7a8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/watchlist.py:114"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2516be56586f5c41", "level": "note", "message": {"text": "Possibly dead Python function: cmd_run_one"}, "properties": {"repobilityId": "57a1ea364394ece1", "scanner": "scanner-primary", "fingerprint": "2516be56586f5c41", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/watchlist.py:122"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf5d8caf3ae36efb", "level": "note", "message": {"text": "Possibly dead Python function: cmd_run_all"}, "properties": {"repobilityId": "debdd6aa8cd0364c", "scanner": "scanner-primary", "fingerprint": "cf5d8caf3ae36efb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/watchlist.py:130"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-68369ead4c6716ab", "level": "note", "message": {"text": "Possibly dead Python function: cmd_config"}, "properties": {"repobilityId": "713345609a6761b5", "scanner": "scanner-primary", "fingerprint": "68369ead4c6716ab", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/watchlist.py:233"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-864020cba87bcb4c", "level": "note", "message": {"text": "Possibly dead Python function: delete_finding"}, "properties": {"repobilityId": "82e0495ce6585df0", "scanner": "scanner-primary", "fingerprint": "864020cba87bcb4c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/store.py:699"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-437369a615b26fbe", "level": "note", "message": {"text": "Possibly dead Python function: dismiss_finding"}, "properties": {"repobilityId": "546aeec1979043ac", "scanner": "scanner-primary", "fingerprint": "437369a615b26fbe", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/store.py:709"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5bbce7fe223b1a1b", "level": "note", "message": {"text": "Possibly dead Python function: extract_firefox_cookies"}, "properties": {"repobilityId": "1a5287cda42f957c", "scanner": "scanner-primary", "fingerprint": "5bbce7fe223b1a1b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/cookie_extract.py:200"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71b165408a816178", "level": "note", "message": {"text": "Possibly dead Python function: extract_chrome_cookies"}, "properties": {"repobilityId": "f8507920c83407d8", "scanner": "scanner-primary", "fingerprint": "71b165408a816178", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/cookie_extract.py:236"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06b599cc2ea0379d", "level": "note", "message": {"text": "Possibly dead Python function: extract_brave_cookies"}, "properties": {"repobilityId": "262d15ed2f24c297", "scanner": "scanner-primary", "fingerprint": "06b599cc2ea0379d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/cookie_extract.py:258"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f490df0a99db904", "level": "note", "message": {"text": "Possibly dead Python function: extract_safari_cookies"}, "properties": {"repobilityId": "c233900f90826c69", "scanner": "scanner-primary", "fingerprint": "2f490df0a99db904", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/cookie_extract.py:281"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d422b1820cfc7a88", "level": "note", "message": {"text": "Possibly dead Python function: market_volume"}, "properties": {"repobilityId": "39578533e042b114", "scanner": "scanner-primary", "fingerprint": "d422b1820cfc7a88", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/polymarket.py:614"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-28672af0838760fe", "level": "note", "message": {"text": "Possibly dead Python function: enrich_top_stories"}, "properties": {"repobilityId": "fa426a1f57686573", "scanner": "scanner-primary", "fingerprint": "28672af0838760fe", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/hackernews.py:290"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ec49f9c0b703d8a7", "level": "note", "message": {"text": "Possibly dead Python function: collect_html_warnings_comparison"}, "properties": {"repobilityId": "321867ca665b981d", "scanner": "scanner-primary", "fingerprint": "ec49f9c0b703d8a7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/render.py:272"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d1f0d89d3bbf06c1", "level": "note", "message": {"text": "Possibly dead Python function: extract_chatgpt_account_id"}, "properties": {"repobilityId": "429bf6119cd57fa2", "scanner": "scanner-primary", "fingerprint": "d1f0d89d3bbf06c1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/env.py:182"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a3a1fdbfe5e5eca", "level": "note", "message": {"text": "Possibly dead Python function: config_exists"}, "properties": {"repobilityId": "73b1fa0356d7f8ff", "scanner": "scanner-primary", "fingerprint": "4a3a1fdbfe5e5eca", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/env.py:460"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-92df0ee0238ce3f5", "level": "note", "message": {"text": "Possibly dead Python function: is_ytdlp_available"}, "properties": {"repobilityId": "c572d9e53b4313b6", "scanner": "scanner-primary", "fingerprint": "92df0ee0238ce3f5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/env.py:523"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4c5dff3097c03412", "level": "note", "message": {"text": "Possibly dead Python function: is_hackernews_available"}, "properties": {"repobilityId": "0ce6c281c81f8ebe", "scanner": "scanner-primary", "fingerprint": "4c5dff3097c03412", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/env.py:560"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-82dc948a1dc4f640", "level": "note", "message": {"text": "Possibly dead Python function: is_polymarket_available"}, "properties": {"repobilityId": "05878e651ed6ce68", "scanner": "scanner-primary", "fingerprint": "82dc948a1dc4f640", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/env.py:584"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4240c788800b74d2", "level": "note", "message": {"text": "Possibly dead Python function: is_tiktok_available"}, "properties": {"repobilityId": "fcd198b521cae0ee", "scanner": "scanner-primary", "fingerprint": "4240c788800b74d2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/env.py:592"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5aaecc06ec642638", "level": "note", "message": {"text": "Possibly dead Python function: is_instagram_available"}, "properties": {"repobilityId": "843bbd4791a68c9f", "scanner": "scanner-primary", "fingerprint": "5aaecc06ec642638", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/env.py:622"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58141027c8aaba7d", "level": "note", "message": {"text": "Possibly dead Python function: score_index"}, "properties": {"repobilityId": "b9c81cff17e6694c", "scanner": "scanner-primary", "fingerprint": "58141027c8aaba7d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/reddit_listing.py:172"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c617f01305906b05", "level": "note", "message": {"text": "Possibly dead Python function: hybrid_similarity"}, "properties": {"repobilityId": "f71dd9f91843e038", "scanner": "scanner-primary", "fingerprint": "c617f01305906b05", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/dedupe.py:75"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd405488fde69ca8", "level": "note", "message": {"text": "Possibly dead Python function: fetch_transcript"}, "properties": {"repobilityId": "6e1577bf6e6ce9d2", "scanner": "scanner-primary", "fingerprint": "dd405488fde69ca8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/last30days/scripts/lib/youtube_yt.py:539"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bead75b0f9233e05", "level": "none", "message": {"text": "No API endpoints detected"}, "properties": {"repobilityId": "0f8bb852027c38f8", "scanner": "scanner-primary", "fingerprint": "bead75b0f9233e05", "layer": "api", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-80e75485a39a4acd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/skills/webapp-playwright-testing/scripts/test-helper.js:48"}, "properties": {"repobilityId": "987c8e0b1328414a", "scanner": "scanner-primary", "fingerprint": "80e75485a39a4acd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-943beae1afa3015b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/skills/writing-skills/render-graphs.js:124"}, "properties": {"repobilityId": "6e582e4deae5da8e", "scanner": "scanner-primary", "fingerprint": "943beae1afa3015b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-526ac417c1e1d15f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/build-dashboard.mjs:12"}, "properties": {"repobilityId": "c2311e5745bc7069", "scanner": "scanner-primary", "fingerprint": "526ac417c1e1d15f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/build-dashboard.mjs"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-0f57a300b584fe02", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/verify-kit.mjs:6"}, "properties": {"repobilityId": "5414d60f0eabb062", "scanner": "scanner-primary", "fingerprint": "0f57a300b584fe02", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/verify-kit.mjs"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-16696b036dbd8800", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/check-upstreams.mjs:6"}, "properties": {"repobilityId": "14a6cd1e04945618", "scanner": "scanner-primary", "fingerprint": "16696b036dbd8800", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/check-upstreams.mjs"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-067404ed8c3fcfdc", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in daemon/factory-daemon.mjs:16"}, "properties": {"repobilityId": "8fcb6fb964c5d461", "scanner": "scanner-primary", "fingerprint": "067404ed8c3fcfdc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "daemon/factory-daemon.mjs"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-ebf00ff8e8b9f80e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/skills/writing-skills/render-graphs.js:18"}, "properties": {"repobilityId": "d6f864ee14420aa9", "scanner": "scanner-primary", "fingerprint": "ebf00ff8e8b9f80e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/writing-skills/render-graphs.js"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-18058b9df564ae76", "level": "error", "message": {"text": "Possible secret in .claude/skills/qa-test-planner/SKILL.md"}, "properties": {"repobilityId": "f81869668f726de3", "scanner": "scanner-primary", "fingerprint": "18058b9df564ae76", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/qa-test-planner/SKILL.md"}, "region": {"startLine": 272}}}]}, {"ruleId": "scanner-7bb6185ab7da25c8", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in .claude/skills/qa-test-planner/SKILL.md:297"}, "properties": {"repobilityId": "0b7e30cbd313dac1", "scanner": "scanner-primary", "fingerprint": "7bb6185ab7da25c8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/qa-test-planner/SKILL.md"}, "region": {"startLine": 297}}}]}, {"ruleId": "scanner-3f4b419cef68eff3", "level": "error", "message": {"text": "Possible secret in .claude/skills/api-test-suite-generator/SKILL.md"}, "properties": {"repobilityId": "43dbea4592435e26", "scanner": "scanner-primary", "fingerprint": "3f4b419cef68eff3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/api-test-suite-generator/SKILL.md"}, "region": {"startLine": 333}}}]}, {"ruleId": "scanner-3f4b419cef68eff3", "level": "error", "message": {"text": "Possible secret in .claude/skills/api-test-suite-generator/SKILL.md"}, "properties": {"repobilityId": "43dbea4592435e26", "scanner": "scanner-primary", "fingerprint": "3f4b419cef68eff3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/api-test-suite-generator/SKILL.md"}, "region": {"startLine": 476}}}]}, {"ruleId": "scanner-3f4b419cef68eff3", "level": "error", "message": {"text": "Possible secret in .claude/skills/api-test-suite-generator/SKILL.md"}, "properties": {"repobilityId": "43dbea4592435e26", "scanner": "scanner-primary", "fingerprint": "3f4b419cef68eff3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/api-test-suite-generator/SKILL.md"}, "region": {"startLine": 1306}}}]}, {"ruleId": "scanner-903ec4ad0e452b7a", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in .claude/skills/consult-oracle/scripts/refresh_cookies.py:40"}, "properties": {"repobilityId": "2f2b8698e2feaa1b", "scanner": "scanner-primary", "fingerprint": "903ec4ad0e452b7a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/consult-oracle/scripts/refresh_cookies.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-a89383605e350a15", "level": "note", "message": {"text": "Very large file: scripts/build-dashboard.mjs (937 lines)"}, "properties": {"repobilityId": "58a41b5db9924f5b", "scanner": "scanner-primary", "fingerprint": "a89383605e350a15", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-8fe8cab1031bb0c7", "level": "note", "message": {"text": "Very large file: daemon/factory-daemon.mjs (1519 lines)"}, "properties": {"repobilityId": "092e25f2e8241892", "scanner": "scanner-primary", "fingerprint": "8fe8cab1031bb0c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b95d5bbb3bf13b70", "level": "note", "message": {"text": "Very large file: .claude/skills/last30days/scripts/lib/render.py (1779 lines)"}, "properties": {"repobilityId": "3cf3c050c7bff639", "scanner": "scanner-primary", "fingerprint": "b95d5bbb3bf13b70", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "1f9516f0a88a8e2b", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "90139c5c90bcd90e", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "e841b81a89c9e15f", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "b786ce3be64a64e1", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "35b840cdcdc61ae1", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "cf55b8d3fc8a940c", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "ed7733d30f672fed", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "c7547ec8e893e43e", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-94f5070f9e393260", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/references/research-documentation-lookup.md"}, "properties": {"repobilityId": "9995b949138fafc7", "scanner": "scanner-primary", "fingerprint": "94f5070f9e393260", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/research-documentation-lookup.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-c163b6d7bf0b2f52", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/model-profile-resolution.md"}, "properties": {"repobilityId": "f967babdd4754a7c", "scanner": "scanner-primary", "fingerprint": "c163b6d7bf0b2f52", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/model-profile-resolution.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-125adc91c0077110", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/planner-chunked.md"}, "properties": {"repobilityId": "4c6e7b4b571fa371", "scanner": "scanner-primary", "fingerprint": "125adc91c0077110", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/planner-chunked.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-99aaf50f96023fcc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/decimal-phase-calculation.md"}, "properties": {"repobilityId": "36b939abf52b1652", "scanner": "scanner-primary", "fingerprint": "99aaf50f96023fcc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/decimal-phase-calculation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-54c28aaef56c66bd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/phase-argument-parsing.md"}, "properties": {"repobilityId": "e9ecde6762293293", "scanner": "scanner-primary", "fingerprint": "54c28aaef56c66bd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/phase-argument-parsing.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5199503fa8b88820", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/gsd-core/references/workstream-flag.md"}, "properties": {"repobilityId": "851511fd9d058651", "scanner": "scanner-primary", "fingerprint": "5199503fa8b88820", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/workstream-flag.md"}, "region": {"startLine": 101}}}]}, {"ruleId": "scanner-352a014fdd6a9231", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/workstream-flag.md"}, "properties": {"repobilityId": "63f2f8cffdcbf97c", "scanner": "scanner-primary", "fingerprint": "352a014fdd6a9231", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/workstream-flag.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f5e8804f3df8a2a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/continuation-format.md"}, "properties": {"repobilityId": "50236b3aef492439", "scanner": "scanner-primary", "fingerprint": "2f5e8804f3df8a2a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/continuation-format.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-53ba910aa8e3d2af", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/sketch-theme-system.md"}, "properties": {"repobilityId": "3d9abbf3094ef981", "scanner": "scanner-primary", "fingerprint": "53ba910aa8e3d2af", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/sketch-theme-system.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa3b0adc0041c2b6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/spidr-splitting.md"}, "properties": {"repobilityId": "76c30230b95906e0", "scanner": "scanner-primary", "fingerprint": "fa3b0adc0041c2b6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/spidr-splitting.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4477fe0551851f50", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/git-planning-commit.md"}, "properties": {"repobilityId": "bb1f6a3dc5824df3", "scanner": "scanner-primary", "fingerprint": "4477fe0551851f50", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/git-planning-commit.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1078a0480e13ec7b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/planner-load-graph-context.md"}, "properties": {"repobilityId": "0bd8cc92c49c0707", "scanner": "scanner-primary", "fingerprint": "1078a0480e13ec7b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/planner-load-graph-context.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c4dd93f110605568", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/references/planner-load-graph-context.md"}, "properties": {"repobilityId": "13f11f8199dcd60f", "scanner": "scanner-primary", "fingerprint": "c4dd93f110605568", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/planner-load-graph-context.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-d69fddf2c64a7dbc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/references/artifact-types.md"}, "properties": {"repobilityId": "6ce64654e6811737", "scanner": "scanner-primary", "fingerprint": "d69fddf2c64a7dbc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/references/artifact-types.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ec87b4575ca09465", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/contexts/dev.md"}, "properties": {"repobilityId": "d25bfb681d82e18a", "scanner": "scanner-primary", "fingerprint": "ec87b4575ca09465", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/contexts/dev.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-33b126a9b2a3e1b7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/dev-preferences.md"}, "properties": {"repobilityId": "ac2e4c9b610b08b6", "scanner": "scanner-primary", "fingerprint": "33b126a9b2a3e1b7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/templates/dev-preferences.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd8fa0f307883d5e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/copilot-instructions.md"}, "properties": {"repobilityId": "7d5db429b946e683", "scanner": "scanner-primary", "fingerprint": "fd8fa0f307883d5e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/templates/copilot-instructions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-309e5c4e7cb38415", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/AI-SPEC.md"}, "properties": {"repobilityId": "161d497db0c63380", "scanner": "scanner-primary", "fingerprint": "309e5c4e7cb38415", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/templates/AI-SPEC.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2ba5b5179ca27ee8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/state.md"}, "properties": {"repobilityId": "b76ca4decef13e93", "scanner": "scanner-primary", "fingerprint": "2ba5b5179ca27ee8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/templates/state.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b11e4f41698ee7d0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/claude-md.md"}, "properties": {"repobilityId": "04d43304e3d876e2", "scanner": "scanner-primary", "fingerprint": "b11e4f41698ee7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/templates/claude-md.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa4e8bf27421ffa0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/SECURITY.md"}, "properties": {"repobilityId": "9f1038af5a812e34", "scanner": "scanner-primary", "fingerprint": "aa4e8bf27421ffa0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/templates/SECURITY.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9d8b57dd82f00d06", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/milestone-archive.md"}, "properties": {"repobilityId": "d299e28bdd3286ef", "scanner": "scanner-primary", "fingerprint": "9d8b57dd82f00d06", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/templates/milestone-archive.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97fefd4a4db3204d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/codebase/architecture.md"}, "properties": {"repobilityId": "156b421a81b46550", "scanner": "scanner-primary", "fingerprint": "97fefd4a4db3204d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/templates/codebase/architecture.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e9fe6818e9935e7", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/templates/codebase/stack.md"}, "properties": {"repobilityId": "ce8b2e8ea25497b5", "scanner": "scanner-primary", "fingerprint": "1e9fe6818e9935e7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/templates/codebase/stack.md"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-e8e779e1181252c7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/templates/research-project/STACK.md"}, "properties": {"repobilityId": "7de6ae04b8697445", "scanner": "scanner-primary", "fingerprint": "e8e779e1181252c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/templates/research-project/STACK.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ed9f70dd7f3ef2a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ultraplan-phase.md"}, "properties": {"repobilityId": "3245516591b031ef", "scanner": "scanner-primary", "fingerprint": "6ed9f70dd7f3ef2a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/ultraplan-phase.md"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-7755831dcfd0730b", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/new-milestone.md"}, "properties": {"repobilityId": "cad951de5e66e07b", "scanner": "scanner-primary", "fingerprint": "7755831dcfd0730b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/new-milestone.md"}, "region": {"startLine": 184}}}]}, {"ruleId": "scanner-e57ba4a9baa02b3f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/audit-fix.md"}, "properties": {"repobilityId": "78b8c4031cee0856", "scanner": "scanner-primary", "fingerprint": "e57ba4a9baa02b3f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/audit-fix.md"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-ccde780cbe803e2e", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/audit-milestone.md"}, "properties": {"repobilityId": "5e41ad89dd46b220", "scanner": "scanner-primary", "fingerprint": "ccde780cbe803e2e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/audit-milestone.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-d07b5e82f2a43346", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/profile-user.md"}, "properties": {"repobilityId": "9fd33f48fb914ed5", "scanner": "scanner-primary", "fingerprint": "d07b5e82f2a43346", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/profile-user.md"}, "region": {"startLine": 133}}}]}, {"ruleId": "scanner-6d4371f2a304441a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/code-review-fix.md"}, "properties": {"repobilityId": "232f24b0b0af5ca9", "scanner": "scanner-primary", "fingerprint": "6d4371f2a304441a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/code-review-fix.md"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-5bd11077ec6ffdd9", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/diagnose-issues.md"}, "properties": {"repobilityId": "39e266bd1e0bffed", "scanner": "scanner-primary", "fingerprint": "5bd11077ec6ffdd9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/diagnose-issues.md"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-113cafc9af8793d7", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/remove-phase.md"}, "properties": {"repobilityId": "15e6bfc3268e183d", "scanner": "scanner-primary", "fingerprint": "113cafc9af8793d7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/remove-phase.md"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-2fc0b44e362a28cc", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/next.md"}, "properties": {"repobilityId": "e083f3465799ba7a", "scanner": "scanner-primary", "fingerprint": "2fc0b44e362a28cc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/next.md"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-a95c9bb31f98f4f4", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/transition.md"}, "properties": {"repobilityId": "e1266b04e3088dc6", "scanner": "scanner-primary", "fingerprint": "a95c9bb31f98f4f4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/transition.md"}, "region": {"startLine": 166}}}]}, {"ruleId": "scanner-80593dc1d11bb041", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/eval-review.md"}, "properties": {"repobilityId": "415337a7cef6d99d", "scanner": "scanner-primary", "fingerprint": "80593dc1d11bb041", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/eval-review.md"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-1a30c980437ff97a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ui-phase.md"}, "properties": {"repobilityId": "9bdb46e19685a596", "scanner": "scanner-primary", "fingerprint": "1a30c980437ff97a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/ui-phase.md"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-19eb62595bc256d9", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/progress.md"}, "properties": {"repobilityId": "0e906d5c8d4f0b95", "scanner": "scanner-primary", "fingerprint": "19eb62595bc256d9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/progress.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-dc84c8b0b0581f73", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase-power.md"}, "properties": {"repobilityId": "1f1535afaa94e322", "scanner": "scanner-primary", "fingerprint": "dc84c8b0b0581f73", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase-power.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3fc35bfa78370c2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/forensics.md"}, "properties": {"repobilityId": "0ff6c582fa904685", "scanner": "scanner-primary", "fingerprint": "e3fc35bfa78370c2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/forensics.md"}, "region": {"startLine": 275}}}]}, {"ruleId": "scanner-f8dec1aaa87e56cc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/health.md"}, "properties": {"repobilityId": "0640f6481d63c556", "scanner": "scanner-primary", "fingerprint": "f8dec1aaa87e56cc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/health.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4c372d1351002af2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/health.md"}, "properties": {"repobilityId": "63c534edc8613d5b", "scanner": "scanner-primary", "fingerprint": "4c372d1351002af2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/health.md"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-7bf0d1ccd291e9f2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/autonomous.md"}, "properties": {"repobilityId": "a854ed92e8d10981", "scanner": "scanner-primary", "fingerprint": "7bf0d1ccd291e9f2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/autonomous.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-69e179e51bfabf23", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/sketch-wrap-up.md"}, "properties": {"repobilityId": "59227f9ea35d6c6f", "scanner": "scanner-primary", "fingerprint": "69e179e51bfabf23", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/sketch-wrap-up.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-5ff940825f7fd6aa", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plan-milestone-gaps.md"}, "properties": {"repobilityId": "a23339e6ce697197", "scanner": "scanner-primary", "fingerprint": "5ff940825f7fd6aa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/plan-milestone-gaps.md"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-3bde285b9735ebfe", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/thread.md"}, "properties": {"repobilityId": "26a08b6b3132b18a", "scanner": "scanner-primary", "fingerprint": "3bde285b9735ebfe", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/thread.md"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-134e10e7b7d2b19b", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/remove-workspace.md"}, "properties": {"repobilityId": "fbd9b9c8de00860f", "scanner": "scanner-primary", "fingerprint": "134e10e7b7d2b19b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/remove-workspace.md"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-1f366bf36a09a243", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/explore.md"}, "properties": {"repobilityId": "ca363cbd824a1b6e", "scanner": "scanner-primary", "fingerprint": "1f366bf36a09a243", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/explore.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73a3536777b02dd1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/explore.md"}, "properties": {"repobilityId": "adcd332ebf5d0cf9", "scanner": "scanner-primary", "fingerprint": "73a3536777b02dd1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/explore.md"}, "region": {"startLine": 120}}}]}, {"ruleId": "scanner-21f8b85bc43b8f21", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ui-review.md"}, "properties": {"repobilityId": "d7c4aa98193e5ac2", "scanner": "scanner-primary", "fingerprint": "21f8b85bc43b8f21", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/ui-review.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-3501b21307f5aee5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/list-workspaces.md"}, "properties": {"repobilityId": "4c8ad111404fee13", "scanner": "scanner-primary", "fingerprint": "3501b21307f5aee5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/list-workspaces.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6312483b4b284509", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/list-workspaces.md"}, "properties": {"repobilityId": "ae31a528b016a4c7", "scanner": "scanner-primary", "fingerprint": "6312483b4b284509", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/list-workspaces.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-4d1c35defb6b568a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase-assumptions.md"}, "properties": {"repobilityId": "49ea0ac0a3463d66", "scanner": "scanner-primary", "fingerprint": "4d1c35defb6b568a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase-assumptions.md"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-3cc06ada84a99fa9", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/pause-work.md"}, "properties": {"repobilityId": "5a89bbe53e375ed1", "scanner": "scanner-primary", "fingerprint": "3cc06ada84a99fa9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/pause-work.md"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-99d8b5f835f0b45f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/spike-wrap-up.md"}, "properties": {"repobilityId": "70d0935344495654", "scanner": "scanner-primary", "fingerprint": "99d8b5f835f0b45f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/spike-wrap-up.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-a11f64b14a003de4", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/new-project.md"}, "properties": {"repobilityId": "de1932c54a3a9ede", "scanner": "scanner-primary", "fingerprint": "a11f64b14a003de4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/new-project.md"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-60ad6f43a0f361f1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ai-integration-phase.md"}, "properties": {"repobilityId": "f6264e48c07b5b7c", "scanner": "scanner-primary", "fingerprint": "60ad6f43a0f361f1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/ai-integration-phase.md"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-278ffc53fae23f94", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/insert-phase.md"}, "properties": {"repobilityId": "89604ca78d79ed29", "scanner": "scanner-primary", "fingerprint": "278ffc53fae23f94", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/insert-phase.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-636956ae21c2bc0a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/insert-phase.md"}, "properties": {"repobilityId": "e121af8c64eb2ba9", "scanner": "scanner-primary", "fingerprint": "636956ae21c2bc0a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/insert-phase.md"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-1884b5fe780e08ea", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/verify-phase.md"}, "properties": {"repobilityId": "378a34415c9e0275", "scanner": "scanner-primary", "fingerprint": "1884b5fe780e08ea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/verify-phase.md"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-96583056beaf1216", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/spike.md"}, "properties": {"repobilityId": "d58952e3a5910e25", "scanner": "scanner-primary", "fingerprint": "96583056beaf1216", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/spike.md"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-e70fe2179fe2e346", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/code-review.md"}, "properties": {"repobilityId": "9d88ce8bbeef2dce", "scanner": "scanner-primary", "fingerprint": "e70fe2179fe2e346", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/code-review.md"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-3d3639d388799383", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-phase.md"}, "properties": {"repobilityId": "99de71be06a5c62b", "scanner": "scanner-primary", "fingerprint": "3d3639d388799383", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/execute-phase.md"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-5b6e52de995bee9b", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ship.md"}, "properties": {"repobilityId": "279e7262d7dba7ff", "scanner": "scanner-primary", "fingerprint": "5b6e52de995bee9b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/ship.md"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-1a4b5f76e73962cf", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-backlog.md"}, "properties": {"repobilityId": "8fd8eff91e539cda", "scanner": "scanner-primary", "fingerprint": "1a4b5f76e73962cf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/add-backlog.md"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-34fb41fe83f950f2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/mvp-phase.md"}, "properties": {"repobilityId": "af83ad751daa40ee", "scanner": "scanner-primary", "fingerprint": "34fb41fe83f950f2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/mvp-phase.md"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-f6b1fca3fcf6ae01", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/check-todos.md"}, "properties": {"repobilityId": "773f38141a40619e", "scanner": "scanner-primary", "fingerprint": "f6b1fca3fcf6ae01", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/check-todos.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cfb0f38a9a883a3f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/check-todos.md"}, "properties": {"repobilityId": "173711a09c2ae34c", "scanner": "scanner-primary", "fingerprint": "cfb0f38a9a883a3f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/check-todos.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-2fcde4f56943e0fc", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/validate-phase.md"}, "properties": {"repobilityId": "c621c9f2b24e3ca1", "scanner": "scanner-primary", "fingerprint": "2fcde4f56943e0fc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/validate-phase.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-b55100c15c54a636", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/scan.md"}, "properties": {"repobilityId": "78fb23b49e7d1fdd", "scanner": "scanner-primary", "fingerprint": "b55100c15c54a636", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/scan.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5e96abdabcc53f29", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/scan.md"}, "properties": {"repobilityId": "94c71acb0c8a5c2f", "scanner": "scanner-primary", "fingerprint": "5e96abdabcc53f29", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/scan.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-3e759e7075414bff", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/stats.md"}, "properties": {"repobilityId": "21794ca2322cd501", "scanner": "scanner-primary", "fingerprint": "3e759e7075414bff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/stats.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30d242f4fb0ad611", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/stats.md"}, "properties": {"repobilityId": "20a4097fd9913174", "scanner": "scanner-primary", "fingerprint": "30d242f4fb0ad611", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/stats.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-b7ef562963dd8ed1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/graduation.md"}, "properties": {"repobilityId": "7ea5d1b525b75f5a", "scanner": "scanner-primary", "fingerprint": "b7ef562963dd8ed1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/graduation.md"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-0e68a8723113ca86", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/add-todo.md"}, "properties": {"repobilityId": "dfa95c57036ab542", "scanner": "scanner-primary", "fingerprint": "0e68a8723113ca86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/add-todo.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d8bccc0f2cf9a47", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-todo.md"}, "properties": {"repobilityId": "6477b55bc19ee63d", "scanner": "scanner-primary", "fingerprint": "3d8bccc0f2cf9a47", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/add-todo.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-ba6989925501e4a3", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/ingest-docs.md"}, "properties": {"repobilityId": "dae26e04bed34744", "scanner": "scanner-primary", "fingerprint": "ba6989925501e4a3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/ingest-docs.md"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-d59a0a2703e8d541", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/do.md"}, "properties": {"repobilityId": "06a7a0e8e844a224", "scanner": "scanner-primary", "fingerprint": "d59a0a2703e8d541", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/do.md"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-99a00edfb65b55b6", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/quick.md"}, "properties": {"repobilityId": "96b89847cca5638a", "scanner": "scanner-primary", "fingerprint": "99a00edfb65b55b6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/quick.md"}, "region": {"startLine": 128}}}]}, {"ruleId": "scanner-3bbd47d2622a711b", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/spec-phase.md"}, "properties": {"repobilityId": "da39548334557f8b", "scanner": "scanner-primary", "fingerprint": "3bbd47d2622a711b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/spec-phase.md"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-07e710963c215bf2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/verify-work.md"}, "properties": {"repobilityId": "82085a99e0a4054e", "scanner": "scanner-primary", "fingerprint": "07e710963c215bf2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/verify-work.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-1d858deb309700df", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plant-seed.md"}, "properties": {"repobilityId": "caa54018ab0f69e1", "scanner": "scanner-primary", "fingerprint": "1d858deb309700df", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/plant-seed.md"}, "region": {"startLine": 138}}}]}, {"ruleId": "scanner-f7624ad17a7cc73f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/docs-update.md"}, "properties": {"repobilityId": "a4cae0939344a80c", "scanner": "scanner-primary", "fingerprint": "f7624ad17a7cc73f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/docs-update.md"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-97474ea77ac50663", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/secure-phase.md"}, "properties": {"repobilityId": "d6a49f98b24c5afe", "scanner": "scanner-primary", "fingerprint": "97474ea77ac50663", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/secure-phase.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-e199f4da24e208dd", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plan-review-convergence.md"}, "properties": {"repobilityId": "dd9896247c65fff3", "scanner": "scanner-primary", "fingerprint": "e199f4da24e208dd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/plan-review-convergence.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-5bb10488861e66a0", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/settings-integrations.md"}, "properties": {"repobilityId": "a7f80e48ce3643ca", "scanner": "scanner-primary", "fingerprint": "5bb10488861e66a0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/settings-integrations.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-0ef8aafcc367ae38", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/new-workspace.md"}, "properties": {"repobilityId": "89405cc9f04626f1", "scanner": "scanner-primary", "fingerprint": "0ef8aafcc367ae38", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/new-workspace.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1bbcf0ac4cfcc602", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/new-workspace.md"}, "properties": {"repobilityId": "b765600cd90867dc", "scanner": "scanner-primary", "fingerprint": "1bbcf0ac4cfcc602", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/new-workspace.md"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-f7bfcc234b84b0fd", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-tests.md"}, "properties": {"repobilityId": "ba41c12978a15671", "scanner": "scanner-primary", "fingerprint": "f7bfcc234b84b0fd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/add-tests.md"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-5f493ee8042bdadf", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/resume-project.md"}, "properties": {"repobilityId": "ea4e98f1fe745d4d", "scanner": "scanner-primary", "fingerprint": "5f493ee8042bdadf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/resume-project.md"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-a30d0b7599e9b6e2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/pr-branch.md"}, "properties": {"repobilityId": "9200645c6cafc450", "scanner": "scanner-primary", "fingerprint": "a30d0b7599e9b6e2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/pr-branch.md"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-36a51bdf4fb1d9b8", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/debug.md"}, "properties": {"repobilityId": "389e39fe6a1da6cd", "scanner": "scanner-primary", "fingerprint": "36a51bdf4fb1d9b8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/debug.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-5a32a6ef2369d551", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/update.md"}, "properties": {"repobilityId": "35fc149e32f168cc", "scanner": "scanner-primary", "fingerprint": "5a32a6ef2369d551", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/update.md"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-949ca75e49192473", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase.md"}, "properties": {"repobilityId": "d963031f79dd4ffd", "scanner": "scanner-primary", "fingerprint": "949ca75e49192473", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase.md"}, "region": {"startLine": 119}}}]}, {"ruleId": "scanner-ad5061c7b804c2b3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/add-phase.md"}, "properties": {"repobilityId": "ea4b4d66504eb143", "scanner": "scanner-primary", "fingerprint": "ad5061c7b804c2b3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/add-phase.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-98a6c6c472962892", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/add-phase.md"}, "properties": {"repobilityId": "edba51048180ce62", "scanner": "scanner-primary", "fingerprint": "98a6c6c472962892", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/add-phase.md"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-20f1c62f80db3de9", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/settings-advanced.md"}, "properties": {"repobilityId": "e97ec31c3984b54b", "scanner": "scanner-primary", "fingerprint": "20f1c62f80db3de9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/settings-advanced.md"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-b72894911a4ee5f4", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/audit-uat.md"}, "properties": {"repobilityId": "1143b10b7e08dbbe", "scanner": "scanner-primary", "fingerprint": "b72894911a4ee5f4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/audit-uat.md"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-f498d43048c04787", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/help.md"}, "properties": {"repobilityId": "286b78ff41ed0696", "scanner": "scanner-primary", "fingerprint": "f498d43048c04787", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/help.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ac638a855f54b63e", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/settings.md"}, "properties": {"repobilityId": "7ebf25f905d8077f", "scanner": "scanner-primary", "fingerprint": "ac638a855f54b63e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/settings.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-a68caa17d374b90b", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/complete-milestone.md"}, "properties": {"repobilityId": "1c59d96dbf5f75f0", "scanner": "scanner-primary", "fingerprint": "a68caa17d374b90b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/complete-milestone.md"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-3a9fbfcbfc86e726", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/import.md"}, "properties": {"repobilityId": "a6c0834f787c52ec", "scanner": "scanner-primary", "fingerprint": "3a9fbfcbfc86e726", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/import.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-41091225b5d59a7a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/extract-learnings.md"}, "properties": {"repobilityId": "bea12f4e17ad8959", "scanner": "scanner-primary", "fingerprint": "41091225b5d59a7a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/extract-learnings.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-1268b603f3c21951", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/map-codebase.md"}, "properties": {"repobilityId": "7fe12a82cdc8ea69", "scanner": "scanner-primary", "fingerprint": "1268b603f3c21951", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/map-codebase.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-38ce9497827edfa1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/edit-phase.md"}, "properties": {"repobilityId": "192ae004219d17d1", "scanner": "scanner-primary", "fingerprint": "38ce9497827edfa1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/edit-phase.md"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-eda965395f6d41df", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/cleanup.md"}, "properties": {"repobilityId": "b42a244f955c8048", "scanner": "scanner-primary", "fingerprint": "eda965395f6d41df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/cleanup.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9cc6eaa8e90f998d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/cleanup.md"}, "properties": {"repobilityId": "03e7ec96c0b85ad8", "scanner": "scanner-primary", "fingerprint": "9cc6eaa8e90f998d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/cleanup.md"}, "region": {"startLine": 164}}}]}, {"ruleId": "scanner-8766e9e4c5e8a3fb", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/milestone-summary.md"}, "properties": {"repobilityId": "bd2b18c472674b69", "scanner": "scanner-primary", "fingerprint": "8766e9e4c5e8a3fb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/milestone-summary.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-f1e2dc3e4ce9c5ca", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/review.md"}, "properties": {"repobilityId": "13b4db7fafc477e0", "scanner": "scanner-primary", "fingerprint": "f1e2dc3e4ce9c5ca", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/review.md"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-6e8d91caeb893fbe", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/manager.md"}, "properties": {"repobilityId": "8e78ca0756f805b2", "scanner": "scanner-primary", "fingerprint": "6e8d91caeb893fbe", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/manager.md"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-826ba4368dc14674", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/plan-phase.md"}, "properties": {"repobilityId": "d058cfa49f31a999", "scanner": "scanner-primary", "fingerprint": "826ba4368dc14674", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/plan-phase.md"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-ec102a62050b4569", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-plan.md"}, "properties": {"repobilityId": "c29723afa197385c", "scanner": "scanner-primary", "fingerprint": "ec102a62050b4569", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/execute-plan.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-822e694d395c6b5c", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/sketch.md"}, "properties": {"repobilityId": "3701ce9243991101", "scanner": "scanner-primary", "fingerprint": "822e694d395c6b5c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/sketch.md"}, "region": {"startLine": 102}}}]}, {"ruleId": "scanner-954e35c0718a155a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/help/modes/brief.md"}, "properties": {"repobilityId": "16cb33c8e41fa942", "scanner": "scanner-primary", "fingerprint": "954e35c0718a155a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/help/modes/brief.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e5778387715ca8c4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/text.md"}, "properties": {"repobilityId": "237014402200c359", "scanner": "scanner-primary", "fingerprint": "e5778387715ca8c4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase/modes/text.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ac35fa1a2534a9b8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/power.md"}, "properties": {"repobilityId": "af019b4cc18e3c29", "scanner": "scanner-primary", "fingerprint": "ac35fa1a2534a9b8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase/modes/power.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-41bf2e9632d08523", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/chain.md"}, "properties": {"repobilityId": "ad300d0453a46d8a", "scanner": "scanner-primary", "fingerprint": "41bf2e9632d08523", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase/modes/chain.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-99630735160cfceb", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase/modes/chain.md"}, "properties": {"repobilityId": "2b1610a3ae0d92e1", "scanner": "scanner-primary", "fingerprint": "99630735160cfceb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase/modes/chain.md"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-1728e6ec7bd0c040", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/all.md"}, "properties": {"repobilityId": "0d901cd19f20dbae", "scanner": "scanner-primary", "fingerprint": "1728e6ec7bd0c040", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase/modes/all.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d537eedb663ea925", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/default.md"}, "properties": {"repobilityId": "22f2bfba4f81f646", "scanner": "scanner-primary", "fingerprint": "d537eedb663ea925", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase/modes/default.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f1783c4530a3d2db", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase/modes/advisor.md"}, "properties": {"repobilityId": "9516935d064b3010", "scanner": "scanner-primary", "fingerprint": "f1783c4530a3d2db", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase/modes/advisor.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-c04999b4e8385532", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gsd-core/workflows/discuss-phase/modes/auto.md"}, "properties": {"repobilityId": "f10e14e4e477f905", "scanner": "scanner-primary", "fingerprint": "c04999b4e8385532", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase/modes/auto.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-39a6541fb7e925f2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/discuss-phase/modes/auto.md"}, "properties": {"repobilityId": "a23cafaf0fced2cf", "scanner": "scanner-primary", "fingerprint": "39a6541fb7e925f2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/discuss-phase/modes/auto.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-edfc43cf8625b774", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-phase/steps/post-merge-gate.md"}, "properties": {"repobilityId": "a695cf8d86cf70cf", "scanner": "scanner-primary", "fingerprint": "edfc43cf8625b774", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/execute-phase/steps/post-merge-gate.md"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-649f1bdb2c3c8603", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/gsd-core/workflows/execute-phase/steps/codebase-drift-gate.md"}, "properties": {"repobilityId": "dd5a98fbbf94a3ba", "scanner": "scanner-primary", "fingerprint": "649f1bdb2c3c8603", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gsd-core/workflows/execute-phase/steps/codebase-drift-gate.md"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-102c44fb8d3cf648", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/ultraplan-phase.md"}, "properties": {"repobilityId": "c79ecd536998974b", "scanner": "scanner-primary", "fingerprint": "102c44fb8d3cf648", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/ultraplan-phase.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a7dd7af5d6e6b568", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/new-milestone.md"}, "properties": {"repobilityId": "f1eb7662b2b0fedb", "scanner": "scanner-primary", "fingerprint": "a7dd7af5d6e6b568", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/new-milestone.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1aba06e131434a67", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/resume-work.md"}, "properties": {"repobilityId": "8958448a0934ef74", "scanner": "scanner-primary", "fingerprint": "1aba06e131434a67", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/resume-work.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a3ff8bcca97b166", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/profile-user.md"}, "properties": {"repobilityId": "680e4d20513689d7", "scanner": "scanner-primary", "fingerprint": "6a3ff8bcca97b166", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/profile-user.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-64426808f5146233", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/workstreams.md"}, "properties": {"repobilityId": "b20106f4d4469cd2", "scanner": "scanner-primary", "fingerprint": "64426808f5146233", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/workstreams.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-165c3127aa52b8e6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/health.md"}, "properties": {"repobilityId": "346866edda491907", "scanner": "scanner-primary", "fingerprint": "165c3127aa52b8e6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/health.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8549997a13e43f36", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/autonomous.md"}, "properties": {"repobilityId": "effa7c3701057bbc", "scanner": "scanner-primary", "fingerprint": "8549997a13e43f36", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/autonomous.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3bfd1056786b6c7f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/thread.md"}, "properties": {"repobilityId": "2ecc96bf52d1933e", "scanner": "scanner-primary", "fingerprint": "3bfd1056786b6c7f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/thread.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43b0422770f7357d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/explore.md"}, "properties": {"repobilityId": "ddf4d5ebed6fadf8", "scanner": "scanner-primary", "fingerprint": "43b0422770f7357d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/explore.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9da71014ad1431df", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/ui-review.md"}, "properties": {"repobilityId": "ba8fab744b310e03", "scanner": "scanner-primary", "fingerprint": "9da71014ad1431df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/ui-review.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11a1b23f165e726f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/phase.md"}, "properties": {"repobilityId": "673c66a4308d7285", "scanner": "scanner-primary", "fingerprint": "11a1b23f165e726f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/phase.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd95557fc7497e98", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/ns-manage.md"}, "properties": {"repobilityId": "47ae0ba2141cbbcd", "scanner": "scanner-primary", "fingerprint": "bd95557fc7497e98", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/ns-manage.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78fe4a6035c5436f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/commands/gsd/graphify.md"}, "properties": {"repobilityId": "e3f64d26f776a6ba", "scanner": "scanner-primary", "fingerprint": "78fe4a6035c5436f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/graphify.md"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-8ad2090000f31390", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/pause-work.md"}, "properties": {"repobilityId": "cb79eaade31af3c3", "scanner": "scanner-primary", "fingerprint": "8ad2090000f31390", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/pause-work.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c02de24e4d7a9ba", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/new-project.md"}, "properties": {"repobilityId": "1261c6ed2ce31cc0", "scanner": "scanner-primary", "fingerprint": "6c02de24e4d7a9ba", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/new-project.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d26cd8040c5f0f7e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/ai-integration-phase.md"}, "properties": {"repobilityId": "45368c27abd03173", "scanner": "scanner-primary", "fingerprint": "d26cd8040c5f0f7e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/ai-integration-phase.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-214b74abb6c5018c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/code-review.md"}, "properties": {"repobilityId": "d97952e348e9abe5", "scanner": "scanner-primary", "fingerprint": "214b74abb6c5018c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/code-review.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95a0b0bfe60eda5a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/mvp-phase.md"}, "properties": {"repobilityId": "e8b45d313ab87129", "scanner": "scanner-primary", "fingerprint": "95a0b0bfe60eda5a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/mvp-phase.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74c1732a44c4241c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/mempalace-recall.md"}, "properties": {"repobilityId": "fcd0d378e0d982c9", "scanner": "scanner-primary", "fingerprint": "74c1732a44c4241c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/mempalace-recall.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-adee8005f954ba01", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/stats.md"}, "properties": {"repobilityId": "d153e925fc443d8d", "scanner": "scanner-primary", "fingerprint": "adee8005f954ba01", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/stats.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-10196b5d2632e7db", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/plan-review-convergence.md"}, "properties": {"repobilityId": "5477abfb55a617ea", "scanner": "scanner-primary", "fingerprint": "10196b5d2632e7db", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/plan-review-convergence.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f77ce2804903e92a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/pr-branch.md"}, "properties": {"repobilityId": "54262020a2e3fb1c", "scanner": "scanner-primary", "fingerprint": "f77ce2804903e92a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/pr-branch.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47fc8354b99bddf1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/workspace.md"}, "properties": {"repobilityId": "7d2c7f77c016276f", "scanner": "scanner-primary", "fingerprint": "47fc8354b99bddf1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/workspace.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-31d62f6a7ead23de", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/debug.md"}, "properties": {"repobilityId": "58e9cb1b4965d852", "scanner": "scanner-primary", "fingerprint": "31d62f6a7ead23de", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/debug.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f67588ffd7007ad1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/update.md"}, "properties": {"repobilityId": "31de8655f00298c2", "scanner": "scanner-primary", "fingerprint": "f67588ffd7007ad1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/update.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e4af6e026f163b31", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/undo.md"}, "properties": {"repobilityId": "091018ed99a7854b", "scanner": "scanner-primary", "fingerprint": "e4af6e026f163b31", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/undo.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bda20c47ee9748a4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/discuss-phase.md"}, "properties": {"repobilityId": "2d72542f7d1aae53", "scanner": "scanner-primary", "fingerprint": "bda20c47ee9748a4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/discuss-phase.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a96e56b144ed1715", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/commands/gsd/discuss-phase.md"}, "properties": {"repobilityId": "7ea7cee5beb9ac22", "scanner": "scanner-primary", "fingerprint": "a96e56b144ed1715", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/discuss-phase.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-a9e0d58d7daeb659", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/settings.md"}, "properties": {"repobilityId": "1325a7aae985a8ea", "scanner": "scanner-primary", "fingerprint": "a9e0d58d7daeb659", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/settings.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8bc6e14d636ddcef", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/import.md"}, "properties": {"repobilityId": "ada3d223776a8773", "scanner": "scanner-primary", "fingerprint": "8bc6e14d636ddcef", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/import.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-63340d62252987c5", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/commands/gsd/import.md"}, "properties": {"repobilityId": "f07882186fdba657", "scanner": "scanner-primary", "fingerprint": "63340d62252987c5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/import.md"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-6ae5852f44335ac4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/inbox.md"}, "properties": {"repobilityId": "624434e91a8e1e61", "scanner": "scanner-primary", "fingerprint": "6ae5852f44335ac4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/inbox.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-746f34135b5c7480", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/cleanup.md"}, "properties": {"repobilityId": "ce45d26c73653a9e", "scanner": "scanner-primary", "fingerprint": "746f34135b5c7480", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/cleanup.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7492d02d38086a19", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/surface.md"}, "properties": {"repobilityId": "ee7612ee8dff17b3", "scanner": "scanner-primary", "fingerprint": "7492d02d38086a19", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/surface.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-449ba7e43e25207b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/gsd/manager.md"}, "properties": {"repobilityId": "32401fd2cc93b5ca", "scanner": "scanner-primary", "fingerprint": "449ba7e43e25207b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/gsd/manager.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7951d3c81154e32d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-planner.md"}, "properties": {"repobilityId": "a5aebf6b118a5778", "scanner": "scanner-primary", "fingerprint": "7951d3c81154e32d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-planner.md"}, "region": {"startLine": 667}}}]}, {"ruleId": "scanner-7af71908d078ca65", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-debugger.md"}, "properties": {"repobilityId": "d0697f003003c6f7", "scanner": "scanner-primary", "fingerprint": "7af71908d078ca65", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-debugger.md"}, "region": {"startLine": 1153}}}]}, {"ruleId": "scanner-f1afe7d42676f3fa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/gsd-assumptions-analyzer.md"}, "properties": {"repobilityId": "132045128296813c", "scanner": "scanner-primary", "fingerprint": "f1afe7d42676f3fa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-assumptions-analyzer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ebde4b85a45f6430", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-debug-session-manager.md"}, "properties": {"repobilityId": "49c1f0ed6405a62d", "scanner": "scanner-primary", "fingerprint": "ebde4b85a45f6430", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-debug-session-manager.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-c3ff4c13cfcb49ba", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-phase-researcher.md"}, "properties": {"repobilityId": "15f81bf4fa69ad7c", "scanner": "scanner-primary", "fingerprint": "c3ff4c13cfcb49ba", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-phase-researcher.md"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-4da58675167625ea", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-plan-checker.md"}, "properties": {"repobilityId": "06c1d9c7c92b1f5b", "scanner": "scanner-primary", "fingerprint": "4da58675167625ea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-plan-checker.md"}, "region": {"startLine": 658}}}]}, {"ruleId": "scanner-e8edeca507360ee3", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-research-synthesizer.md"}, "properties": {"repobilityId": "d25f1a9bc97a05b9", "scanner": "scanner-primary", "fingerprint": "e8edeca507360ee3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-research-synthesizer.md"}, "region": {"startLine": 154}}}]}, {"ruleId": "scanner-cb81028d22b46b3f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-project-researcher.md"}, "properties": {"repobilityId": "ea6b0bc2e22c62e5", "scanner": "scanner-primary", "fingerprint": "cb81028d22b46b3f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-project-researcher.md"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-cc297937a28a0940", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-verifier.md"}, "properties": {"repobilityId": "2cb553b8a8a9b72d", "scanner": "scanner-primary", "fingerprint": "cc297937a28a0940", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-verifier.md"}, "region": {"startLine": 102}}}]}, {"ruleId": "scanner-df13ca1b0f52664f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-executor.md"}, "properties": {"repobilityId": "a1b7c48672d08ba8", "scanner": "scanner-primary", "fingerprint": "df13ca1b0f52664f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-executor.md"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-9568a4f28f442b48", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-ui-researcher.md"}, "properties": {"repobilityId": "55a95cfb237e41b9", "scanner": "scanner-primary", "fingerprint": "9568a4f28f442b48", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-ui-researcher.md"}, "region": {"startLine": 289}}}]}, {"ruleId": "scanner-f32b9f3f642897f2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-code-fixer.md"}, "properties": {"repobilityId": "360b838cd0ee2b2f", "scanner": "scanner-primary", "fingerprint": "f32b9f3f642897f2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-code-fixer.md"}, "region": {"startLine": 459}}}]}, {"ruleId": "scanner-9d1970bd49d391bb", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/agents/gsd-intel-updater.md"}, "properties": {"repobilityId": "973796af3fbf9243", "scanner": "scanner-primary", "fingerprint": "9d1970bd49d391bb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-intel-updater.md"}, "region": {"startLine": 215}}}]}, {"ruleId": "scanner-e35d3c598ade9c8f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/gsd-doc-classifier.md"}, "properties": {"repobilityId": "a668e7a6586e8f51", "scanner": "scanner-primary", "fingerprint": "e35d3c598ade9c8f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/gsd-doc-classifier.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c876dd1e13a275a1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/commit-staged-push/SKILL.md"}, "properties": {"repobilityId": "4af40840097e854d", "scanner": "scanner-primary", "fingerprint": "c876dd1e13a275a1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/commit-staged-push/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e9e670d72728d790", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/reply-to-pr-conversation/SKILL.md"}, "properties": {"repobilityId": "f69e0941c5c624c2", "scanner": "scanner-primary", "fingerprint": "e9e670d72728d790", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/reply-to-pr-conversation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d05e1a329e7b899f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/finalize/SKILL.md"}, "properties": {"repobilityId": "7e8e1c06a39339a1", "scanner": "scanner-primary", "fingerprint": "d05e1a329e7b899f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/finalize/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-13f87d69ecc23ce5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/review-code/references/api-usage-review.md"}, "properties": {"repobilityId": "bcbbdb8d404911d5", "scanner": "scanner-primary", "fingerprint": "13f87d69ecc23ce5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/review-code/references/api-usage-review.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b4ee12d831791023", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/resolve-findings/SKILL.md"}, "properties": {"repobilityId": "0b818cf9e6ba1d94", "scanner": "scanner-primary", "fingerprint": "b4ee12d831791023", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/resolve-findings/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c9b4d2ff3f46da4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/resolve-findings/references/direct-path.md"}, "properties": {"repobilityId": "1b5be711ddce8a26", "scanner": "scanner-primary", "fingerprint": "6c9b4d2ff3f46da4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/resolve-findings/references/direct-path.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e696705ac15e9727", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/resolve-findings/references/plan-path.md"}, "properties": {"repobilityId": "8a0f1b66833b6311", "scanner": "scanner-primary", "fingerprint": "e696705ac15e9727", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/resolve-findings/references/plan-path.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65dedea978124781", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/cso/SKILL.md"}, "properties": {"repobilityId": "35167c33507f27b7", "scanner": "scanner-primary", "fingerprint": "65dedea978124781", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cso/SKILL.md"}, "region": {"startLine": 696}}}]}, {"ruleId": "scanner-0360b7083442212c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/cso/sections/manifest.json"}, "properties": {"repobilityId": "46efce4e95f0abb3", "scanner": "scanner-primary", "fingerprint": "0360b7083442212c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/cso/sections/manifest.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bac4ee7d0aea55c0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/github-voice/SKILL.md"}, "properties": {"repobilityId": "7eb10503b297e9d3", "scanner": "scanner-primary", "fingerprint": "bac4ee7d0aea55c0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/github-voice/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-233e4875d6269226", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-pr/SKILL.md"}, "properties": {"repobilityId": "7dadc879565e226e", "scanner": "scanner-primary", "fingerprint": "233e4875d6269226", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-pr/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bda95f80868440c7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-handoff/SKILL.md"}, "properties": {"repobilityId": "9e4ef0bde0e42304", "scanner": "scanner-primary", "fingerprint": "bda95f80868440c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-handoff/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08d9e5de274ec188", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/brutalist-skill/SKILL.md"}, "properties": {"repobilityId": "00833e7dfb3c4712", "scanner": "scanner-primary", "fingerprint": "08d9e5de274ec188", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/brutalist-skill/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f7d03559210bb50", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/health/SKILL.md"}, "properties": {"repobilityId": "4d9f83725e3fa99c", "scanner": "scanner-primary", "fingerprint": "3f7d03559210bb50", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/health/SKILL.md"}, "region": {"startLine": 692}}}]}, {"ruleId": "scanner-33df0cd71f18425b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/plan-design-review/SKILL.md"}, "properties": {"repobilityId": "ed1a86ba0f249c6c", "scanner": "scanner-primary", "fingerprint": "33df0cd71f18425b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/plan-design-review/SKILL.md"}, "region": {"startLine": 693}}}]}, {"ruleId": "scanner-8fe1df60abfb9dc8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/recall-reasoning/SKILL.md"}, "properties": {"repobilityId": "3c4bf4ee4db732bc", "scanner": "scanner-primary", "fingerprint": "8fe1df60abfb9dc8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/recall-reasoning/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6e5733d2ac9ad40d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/office-hours/SKILL.md"}, "properties": {"repobilityId": "2fb123a338899a30", "scanner": "scanner-primary", "fingerprint": "6e5733d2ac9ad40d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/office-hours/SKILL.md"}, "region": {"startLine": 727}}}]}, {"ruleId": "scanner-481ec28a667c7892", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/deploy/SKILL.md"}, "properties": {"repobilityId": "d582ae70aacde4be", "scanner": "scanner-primary", "fingerprint": "481ec28a667c7892", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/deploy/SKILL.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-aec8e3277b6c9dc7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/commit-staged/SKILL.md"}, "properties": {"repobilityId": "2ce3a17a749379ac", "scanner": "scanner-primary", "fingerprint": "aec8e3277b6c9dc7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/commit-staged/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ada416469c6d78d1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/playwright-cli/SKILL.md"}, "properties": {"repobilityId": "d83e5d0a2626657c", "scanner": "scanner-primary", "fingerprint": "ada416469c6d78d1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/playwright-cli/SKILL.md"}, "region": {"startLine": 337}}}]}, {"ruleId": "scanner-ec880f5c45be7ec8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/element-attributes.md"}, "properties": {"repobilityId": "f7c6c7fe2f4ad232", "scanner": "scanner-primary", "fingerprint": "ec880f5c45be7ec8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/playwright-cli/references/element-attributes.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47b71897f33be8c4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/storage-state.md"}, "properties": {"repobilityId": "9088a18d5b75269c", "scanner": "scanner-primary", "fingerprint": "47b71897f33be8c4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/playwright-cli/references/storage-state.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce349b621e2986b5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/running-code.md"}, "properties": {"repobilityId": "46e572cf01508338", "scanner": "scanner-primary", "fingerprint": "ce349b621e2986b5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/playwright-cli/references/running-code.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72a82bcfa89e6a5c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/playwright-cli/references/request-mocking.md"}, "properties": {"repobilityId": "1213a367260c499a", "scanner": "scanner-primary", "fingerprint": "72a82bcfa89e6a5c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/playwright-cli/references/request-mocking.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f5bfc1618e6d9c9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/writing-skills/anthropic-best-practices.md"}, "properties": {"repobilityId": "619ed90bd7b53fa3", "scanner": "scanner-primary", "fingerprint": "3f5bfc1618e6d9c9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/writing-skills/anthropic-best-practices.md"}, "region": {"startLine": 1063}}}]}, {"ruleId": "scanner-9e96dedca784af88", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/review-dependencies/SKILL.md"}, "properties": {"repobilityId": "2e311b1bbc2bd809", "scanner": "scanner-primary", "fingerprint": "9e96dedca784af88", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/review-dependencies/SKILL.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-3f541fe6510aa8d8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/autoplan/SKILL.md"}, "properties": {"repobilityId": "5a75b48c7e3ab144", "scanner": "scanner-primary", "fingerprint": "3f541fe6510aa8d8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/autoplan/SKILL.md"}, "region": {"startLine": 698}}}]}, {"ruleId": "scanner-234ae64617ba0ee6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/code-style/SKILL.md"}, "properties": {"repobilityId": "bee0fbf60c099a44", "scanner": "scanner-primary", "fingerprint": "234ae64617ba0ee6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/code-style/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6506321906c789c8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/reply-to-pr-threads/SKILL.md"}, "properties": {"repobilityId": "d8b35166c173a0eb", "scanner": "scanner-primary", "fingerprint": "6506321906c789c8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/reply-to-pr-threads/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37bb91c46cad6ba8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/release/SKILL.md"}, "properties": {"repobilityId": "d38aa80da0ec8bf7", "scanner": "scanner-primary", "fingerprint": "37bb91c46cad6ba8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/release/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6fd51e80fce28f7a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/codex-review/SKILL.md"}, "properties": {"repobilityId": "18570f147c66eb53", "scanner": "scanner-primary", "fingerprint": "6fd51e80fce28f7a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/codex-review/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07e9f236b267b1ee", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/answer-reviewer-questions/SKILL.md"}, "properties": {"repobilityId": "61aa55e0c34b7b41", "scanner": "scanner-primary", "fingerprint": "07e9f236b267b1ee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/answer-reviewer-questions/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8588a16d33e68fbb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/design-consultation/SKILL.md"}, "properties": {"repobilityId": "6e730ff8fb078e24", "scanner": "scanner-primary", "fingerprint": "8588a16d33e68fbb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/design-consultation/SKILL.md"}, "region": {"startLine": 716}}}]}, {"ruleId": "scanner-dbe8743696cae793", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/stage-commit-push/SKILL.md"}, "properties": {"repobilityId": "c4dda73d5d0c5393", "scanner": "scanner-primary", "fingerprint": "dbe8743696cae793", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/stage-commit-push/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1c357a2459d67910", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/design-html/SKILL.md"}, "properties": {"repobilityId": "c409f2df165fab74", "scanner": "scanner-primary", "fingerprint": "1c357a2459d67910", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/design-html/SKILL.md"}, "region": {"startLine": 697}}}]}, {"ruleId": "scanner-0de43e5f60893875", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/document-generate/SKILL.md"}, "properties": {"repobilityId": "ee764faba66e144c", "scanner": "scanner-primary", "fingerprint": "0de43e5f60893875", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/document-generate/SKILL.md"}, "region": {"startLine": 696}}}]}, {"ruleId": "scanner-bb6802038a637dae", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ship/SKILL.md"}, "properties": {"repobilityId": "75865bd7143b5ad6", "scanner": "scanner-primary", "fingerprint": "bb6802038a637dae", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ship/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d262fb052d37764", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/interpret-feedback/SKILL.md"}, "properties": {"repobilityId": "c2726c527a012635", "scanner": "scanner-primary", "fingerprint": "1d262fb052d37764", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/interpret-feedback/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ad1613ae3f416a4d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/design-review/SKILL.md"}, "properties": {"repobilityId": "66fcdb1709fe3a11", "scanner": "scanner-primary", "fingerprint": "ad1613ae3f416a4d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/design-review/SKILL.md"}, "region": {"startLine": 694}}}]}, {"ruleId": "scanner-a7937962f3f3f06e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/plan-eng-review/SKILL.md"}, "properties": {"repobilityId": "3848d308a9875801", "scanner": "scanner-primary", "fingerprint": "a7937962f3f3f06e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/plan-eng-review/SKILL.md"}, "region": {"startLine": 697}}}]}, {"ruleId": "scanner-1dc719fdcc36e626", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/plan-eng-review/sections/review-sections.md"}, "properties": {"repobilityId": "c1a68ba50598027d", "scanner": "scanner-primary", "fingerprint": "1dc719fdcc36e626", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/plan-eng-review/sections/review-sections.md"}, "region": {"startLine": 361}}}]}, {"ruleId": "scanner-4118c39534b1668f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/commit-rules/SKILL.md"}, "properties": {"repobilityId": "7e4bd475cb718a37", "scanner": "scanner-primary", "fingerprint": "4118c39534b1668f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/commit-rules/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e478e9d0e889a78", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/document-release/SKILL.md"}, "properties": {"repobilityId": "38e847250952df39", "scanner": "scanner-primary", "fingerprint": "2e478e9d0e889a78", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/document-release/SKILL.md"}, "region": {"startLine": 694}}}]}, {"ruleId": "scanner-9bffed49d591d0b3", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/document-release/sections/release-body.md"}, "properties": {"repobilityId": "456488cafb93cd4c", "scanner": "scanner-primary", "fingerprint": "9bffed49d591d0b3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/document-release/sections/release-body.md"}, "region": {"startLine": 392}}}]}, {"ruleId": "scanner-c97fa30e2cf50947", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/plan-ceo-review/SKILL.md"}, "properties": {"repobilityId": "8f6407950ed09b91", "scanner": "scanner-primary", "fingerprint": "c97fa30e2cf50947", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/plan-ceo-review/SKILL.md"}, "region": {"startLine": 721}}}]}, {"ruleId": "scanner-a4915bdd281b009f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/plan-ceo-review/sections/review-sections.md"}, "properties": {"repobilityId": "c0c005a06c2d6b9f", "scanner": "scanner-primary", "fingerprint": "a4915bdd281b009f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/plan-ceo-review/sections/review-sections.md"}, "region": {"startLine": 285}}}]}, {"ruleId": "scanner-7e55d1ea7d19c48b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/codex-exec/references/parallel-execution.md"}, "properties": {"repobilityId": "d5c09eaa8397c2ee", "scanner": "scanner-primary", "fingerprint": "7e55d1ea7d19c48b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/codex-exec/references/parallel-execution.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-67e06a252b959269", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/api-test-suite-generator/SKILL.md"}, "properties": {"repobilityId": "710a7e60c6da0666", "scanner": "scanner-primary", "fingerprint": "67e06a252b959269", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/api-test-suite-generator/SKILL.md"}, "region": {"startLine": 336}}}]}, {"ruleId": "scanner-325d737056962fe1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/review-pr/SKILL.md"}, "properties": {"repobilityId": "b76d3aaf054dd7a3", "scanner": "scanner-primary", "fingerprint": "325d737056962fe1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/review-pr/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2fe16aa9d1ead832", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/fetch-pr-comments/SKILL.md"}, "properties": {"repobilityId": "8bbeae1894fcebdc", "scanner": "scanner-primary", "fingerprint": "2fe16aa9d1ead832", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/fetch-pr-comments/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b9e046eaf239a87", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/stage-commit/SKILL.md"}, "properties": {"repobilityId": "364d6c9ab8c9ea35", "scanner": "scanner-primary", "fingerprint": "6b9e046eaf239a87", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/stage-commit/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2ff1d08910a02548", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/peer-review/references/subagent-wrapping.md"}, "properties": {"repobilityId": "e7c4e7416f094fa0", "scanner": "scanner-primary", "fingerprint": "2ff1d08910a02548", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/peer-review/references/subagent-wrapping.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94e84e85466449fc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/simplify-code/SKILL.md"}, "properties": {"repobilityId": "c21299e43c147bc5", "scanner": "scanner-primary", "fingerprint": "94e84e85466449fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/simplify-code/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-848d85925c5a945d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/plan-devex-review/SKILL.md"}, "properties": {"repobilityId": "1d92815c400e2ca0", "scanner": "scanner-primary", "fingerprint": "848d85925c5a945d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/plan-devex-review/SKILL.md"}, "region": {"startLine": 699}}}]}, {"ruleId": "scanner-ce24cb7a64b4569c", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/plan-devex-review/sections/review-sections.md"}, "properties": {"repobilityId": "6133dc6e16a8dfb3", "scanner": "scanner-primary", "fingerprint": "ce24cb7a64b4569c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/plan-devex-review/sections/review-sections.md"}, "region": {"startLine": 271}}}]}, {"ruleId": "scanner-ad6d92a3fe377cc6", "level": "note", "message": {"text": "Legacy-named symbol `factoryChat_v1` in scripts/build-dashboard.mjs:879"}, "properties": {"repobilityId": "f05dc44fbdf6585d", "scanner": "scanner-primary", "fingerprint": "ad6d92a3fe377cc6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a355806a452f7dd7", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/build-dashboard.mjs:2"}, "properties": {"repobilityId": "6a4e94c211df98e5", "scanner": "scanner-primary", "fingerprint": "a355806a452f7dd7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b8d2210da2956876", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/build-vault.mjs:2"}, "properties": {"repobilityId": "a52f5d45b39aba5d", "scanner": "scanner-primary", "fingerprint": "b8d2210da2956876", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7790e2c745b90a2b", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/monitor.mjs:2"}, "properties": {"repobilityId": "2e0172a61d633fac", "scanner": "scanner-primary", "fingerprint": "7790e2c745b90a2b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-621c1476aba107b1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 cloud/dashboard-worker.js:5"}, "properties": {"repobilityId": "8321a89f989d1897", "scanner": "scanner-primary", "fingerprint": "621c1476aba107b1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d369c04673cba4ba", "level": "none", "message": {"text": "Commented-code block (5 lines) in daemon/factory-daemon.mjs:437"}, "properties": {"repobilityId": "43a0a80542a7b5f5", "scanner": "scanner-primary", "fingerprint": "d369c04673cba4ba", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-65fc22e6ae95e205", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/recall-reasoning/scripts/find_transcript.py:29"}, "properties": {"repobilityId": "2e44fc04a15ea62c", "scanner": "scanner-primary", "fingerprint": "65fc22e6ae95e205", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7c9953ea6ee6c2a3", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/skills/systematic-debugging/condition-based-waiting-example.ts:140"}, "properties": {"repobilityId": "06490708b3f96733", "scanner": "scanner-primary", "fingerprint": "7c9953ea6ee6c2a3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-18587a30bf6e3fe7", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/last30days/scripts/evaluate_search_quality.py:338"}, "properties": {"repobilityId": "74914c7284eba52b", "scanner": "scanner-primary", "fingerprint": "18587a30bf6e3fe7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-12ba7efed474cdeb", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/last30days.py:522"}, "properties": {"repobilityId": "35a4fb125b0fdcc8", "scanner": "scanner-primary", "fingerprint": "12ba7efed474cdeb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-05b3e46fd57d62fa", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/skills/last30days/scripts/lib/rerank.py:11"}, "properties": {"repobilityId": "4809d35b13635d4e", "scanner": "scanner-primary", "fingerprint": "05b3e46fd57d62fa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f44e4aebcb18855b", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/skills/last30days/scripts/lib/bluesky.py:213"}, "properties": {"repobilityId": "166262366a1820d1", "scanner": "scanner-primary", "fingerprint": "f44e4aebcb18855b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c17b2abc2757bab9", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/lib/http.py:161"}, "properties": {"repobilityId": "2844495a70ae3609", "scanner": "scanner-primary", "fingerprint": "c17b2abc2757bab9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-17b940899b1cca50", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/skills/last30days/scripts/lib/render.py:129"}, "properties": {"repobilityId": "ea3d0ebdcf8c5b03", "scanner": "scanner-primary", "fingerprint": "17b940899b1cca50", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0b2dcd17d76b0a2f", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/lib/env.py:345"}, "properties": {"repobilityId": "b9483276544c0cef", "scanner": "scanner-primary", "fingerprint": "0b2dcd17d76b0a2f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-18904764755eb270", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/skills/last30days/scripts/lib/pipeline.py:533"}, "properties": {"repobilityId": "1a1078a3d68c6fe7", "scanner": "scanner-primary", "fingerprint": "18904764755eb270", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-342858413db7d92b", "level": "none", "message": {"text": "Commented-code block (9 lines) in .claude/skills/last30days/scripts/lib/planner.py:125"}, "properties": {"repobilityId": "1fe8292f70f5504e", "scanner": "scanner-primary", "fingerprint": "342858413db7d92b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d14e6850656ae975", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 .claude/skills/consult-oracle/scripts/refresh_cookies.py:32"}, "properties": {"repobilityId": "21c5eccf09ba00dd", "scanner": "scanner-primary", "fingerprint": "d14e6850656ae975", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "40f2af6a28117818", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "06782c6de5b839c1", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "184d3207f407828d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9306c132df170e35", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-46969939caf8120b", "level": "note", "message": {"text": "Near-duplicate function bodies in 9 places"}, "properties": {"repobilityId": "e238fb1cc8cdbe2b", "scanner": "scanner-primary", "fingerprint": "46969939caf8120b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d5392ea12c0f58d7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "2f3680767775931b", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "d4abdfc6a7f5a6b8", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4117c1def47b3e7e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}