{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-33f539f7c1ce4ad9", "name": "Possibly dead Python function: create_agent", "shortDescription": {"text": "Possibly dead Python function: create_agent"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5d2f2c16500381f1", "name": "Insecure pattern 'node_child_process' in README.md:321", "shortDescription": {"text": "Insecure pattern 'node_child_process' in README.md:321"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e36f7fa282b2d0a", "name": "Insecure pattern 'node_child_process' in tools/integration-test-compaction.mjs:21", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/integration-test-compaction.mjs:21"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9ee6214083245e5c", "name": "Insecure pattern 'node_child_process' in tools/preflight-version.mjs:13", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/preflight-version.mjs:13"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-146d92f2faeb536e", "name": "Insecure pattern 'node_child_process' in tools/test-impact.mjs:26", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/test-impact.mjs:26"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5fb8ac1e0d298122", "name": "Insecure pattern 'node_child_process' in tools/run-suites.mjs:30", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/run-suites.mjs:30"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d2f999f6ca3497e", "name": "Insecure pattern 'node_child_process' in tools/integration-test-indirect-write.mjs:22", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/integration-test-indirect-write.mjs:22"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0586ded0a3c39bd1", "name": "Insecure pattern 'node_child_process' in tools/it-helpers.mjs:13", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/it-helpers.mjs:13"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bc8a9eeee34bcef4", "name": "Insecure pattern 'node_child_process' in tools/integration-test-hooks.mjs:18", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/integration-test-hooks.mjs:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ddd5d88948e5c72", "name": "Insecure pattern 'node_child_process' in tools/integration-test-contract-hook.mjs:24", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/integration-test-contract-hook.mjs:24"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e57b8a4a31f1b731", "name": "Insecure pattern 'node_child_process' in tools/install/exclude.mjs:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/install/exclude.mjs:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1838a141491ce38c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "50 tests / 243 src (ratio 0.21)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53fa7f3bc8f00600", "name": "Node manifest has dependencies but no lockfile: templates/contextkit/starters/tanstack/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: templates/contextkit/starters/tanstack/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 773 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 53 placeholder/mock markers across 21 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11825279136b53a3", "name": "CI is configured but no tests are detected", "shortDescription": {"text": "CI is configured but no tests are detected"}, "fullDescription": {"text": "A CI pipeline exists, but the scan found no test files to gate. Opus labeled this generated-code pattern as config theater: release machinery exists, but it has little behavioral signal."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: tests, lockfile. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing tests, lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0dabe22f49a9e69f", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-worktree-new/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-worktree-new/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-baafec2e2cce8177", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-refresh-matrix/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-refresh-matrix/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-247e09f8cdcd315c", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-resume/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-resume/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8bfd2bd3deb6ec3", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-autonomy/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-autonomy/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc1a0f0f0722b3a8", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-route/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-route/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c4fa85e861b455f", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-tech-debt-sweep/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-tech-debt-sweep/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-946b33fa46e1c4d8", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-workflow/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-workflow/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-871d157bd131e2a6", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-release/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-release/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2fa6ad82ed379be8", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-playbook/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-playbook/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d5838fed3978073c", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-context-refresh/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-context-refresh/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4d0ade16ceddcc1", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-watch/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-watch/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b449a1c0c78f320", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-dev-start/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-dev-start/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-37d0478b9cdebd0d", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-docs-reindex/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-docs-reindex/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9781d2248cdfe1a7", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-plan-week/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-plan-week/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1e817d7121f6854", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-policy/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-policy/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-683a9326a1a8e428", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-runs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-runs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6657ce1d0e43804c", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-changelog-social/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-changelog-social/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f698f85319cbdf1", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-killswitch/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-killswitch/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8b3b5008794ab88f", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-landing-page/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-landing-page/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5b34aae5b872c68", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-close-version/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-close-version/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11eedda044c8a644", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-validate-doc/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-validate-doc/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb8fefa0ddc3db2c", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-state/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-state/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9592da0c6adbf342", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-deprecate/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-deprecate/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80b781a3611394b8", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-list/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-list/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9aee7f41547bfc7d", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-seo-audit/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-seo-audit/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-924bf34daca0ce23", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-security-setup/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-security-setup/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-458c0a2dab717250", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-context-doctor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-context-doctor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c01b279ab0a9f946", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-dashboard/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-dashboard/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf69d68ee4cfb226", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-retro/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-retro/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-74545f464f1c7f8d", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-distill-apply/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-distill-apply/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-271c12868a1a0829", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-context-config/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-context-config/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9fff288cb626038c", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-fleet/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-fleet/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9792cee9ff64b8be", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-new-adr/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-new-adr/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b199478d3028cad7", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-doctor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-doctor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-58a1613b3fc9a1b0", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-context-level/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-context-level/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ecd401f5c4a2cc1", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-context-stats/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-context-stats/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-349359589c383113", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-show/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-show/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76e4b3654c0af5ad", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-claim/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-claim/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-46e4d5fc36f99b60", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-workflow-assist/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-workflow-assist/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca6dac6b0225f417", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-git/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-git/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d73fc0f251c75c7", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-contract-check/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-contract-check/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3afa10a76ce99c09", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-eval/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-eval/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d4f5b48c02a16954", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-audit/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-audit/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88832dbc31f23593", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-budget/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-budget/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf0dc38889cb34e8", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-redteam/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-redteam/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c6c765db4aaa7a1", "name": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-predictions-review/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-predictions-review/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fea113833cd8f863", "name": "Legacy-named symbol `migrateLegacy` in install.mjs:32", "shortDescription": {"text": "Legacy-named symbol `migrateLegacy` in install.mjs:32"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5569329d3a69ab48", "name": "Legacy-named symbol `readLegacy` in templates/contextkit/tools/scripts/workflow-pack.mjs:212", "shortDescription": {"text": "Legacy-named symbol `readLegacy` in templates/contextkit/tools/scripts/workflow-pack.mjs:212"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-57cc5d025e132abe", "name": "`fetch()` without try/.catch or AbortSignal \u2014 templates/contextkit/tools/scripts/git.mjs:81", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 templates/contextkit/tools/scripts/git.mjs:81"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-16ad94c594fc756f", "name": "Commented-code block (6 lines) in templates/contextkit/squads/agent-forge/templates/agent-package/adapters/node/index.js", "shortDescription": {"text": "Commented-code block (6 lines) in templates/contextkit/squads/agent-forge/templates/agent-package/adapters/node/index.js:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-57afcd33bc4b99ab", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tools/selfcheck-source-cases-recent.mjs:109", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/selfcheck-source-cases-recent.mjs:109"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-32377c45f49d895c", "name": "Legacy-named symbol `makeLegacy` in tools/integration-test-migrate.mjs:25", "shortDescription": {"text": "Legacy-named symbol `makeLegacy` in tools/integration-test-migrate.mjs:25"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fe53f6e9dce308a1", "name": "Commented-code block (5 lines) in tools/integration-test-migrate.mjs:162", "shortDescription": {"text": "Commented-code block (5 lines) in tools/integration-test-migrate.mjs:162"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fb91a8ebf887577d", "name": "Commented-code block (9 lines) in tools/selfcheck-gates.mjs:58", "shortDescription": {"text": "Commented-code block (9 lines) in tools/selfcheck-gates.mjs:58"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-114b648514cfc278", "name": "Commented-code block (6 lines) in tools/integration-test-capabilities.mjs:50", "shortDescription": {"text": "Commented-code block (6 lines) in tools/integration-test-capabilities.mjs:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a2f2980c66eff528", "name": "Legacy-named symbol `detectLegacy` in tools/install/migrate.mjs:67", "shortDescription": {"text": "Legacy-named symbol `detectLegacy` in tools/install/migrate.mjs:67"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-977d4e239847eea3", "name": "Legacy-named symbol `migrateLegacy` in tools/install/engine.mjs:76", "shortDescription": {"text": "Legacy-named symbol `migrateLegacy` in tools/install/engine.mjs:76"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/18001"}, "properties": {"repository": "reiTavares/ContextDevKit", "repoUrl": "https://github.com/reiTavares/ContextDevKit", "branch": "main"}, "results": [{"ruleId": "scanner-33f539f7c1ce4ad9", "level": "note", "message": {"text": "Possibly dead Python function: create_agent"}, "properties": {"repobilityId": "34f0551595cc42ec", "scanner": "scanner-primary", "fingerprint": "33f539f7c1ce4ad9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/contextkit/squads/agent-forge/templates/agent-package/adapters/python/agent.py:15"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-5d2f2c16500381f1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in README.md:321"}, "properties": {"repobilityId": "9f8f3278c0d7b2a2", "scanner": "scanner-primary", "fingerprint": "5d2f2c16500381f1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "README.md"}, "region": {"startLine": 321}}}]}, {"ruleId": "scanner-9e36f7fa282b2d0a", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/integration-test-compaction.mjs:21"}, "properties": {"repobilityId": "8c32c31a84357285", "scanner": "scanner-primary", "fingerprint": "9e36f7fa282b2d0a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/integration-test-compaction.mjs"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-9ee6214083245e5c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/preflight-version.mjs:13"}, "properties": {"repobilityId": "0ba4ecbd138724ac", "scanner": "scanner-primary", "fingerprint": "9ee6214083245e5c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/preflight-version.mjs"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-146d92f2faeb536e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/test-impact.mjs:26"}, "properties": {"repobilityId": "899499a069645395", "scanner": "scanner-primary", "fingerprint": "146d92f2faeb536e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/test-impact.mjs"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-5fb8ac1e0d298122", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/run-suites.mjs:30"}, "properties": {"repobilityId": "c493ea1eb7adfeb0", "scanner": "scanner-primary", "fingerprint": "5fb8ac1e0d298122", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/run-suites.mjs"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-1d2f999f6ca3497e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/integration-test-indirect-write.mjs:22"}, "properties": {"repobilityId": "87c95f822bf9fcc2", "scanner": "scanner-primary", "fingerprint": "1d2f999f6ca3497e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/integration-test-indirect-write.mjs"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-0586ded0a3c39bd1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/it-helpers.mjs:13"}, "properties": {"repobilityId": "2a8cf9600be3d1c8", "scanner": "scanner-primary", "fingerprint": "0586ded0a3c39bd1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/it-helpers.mjs"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-bc8a9eeee34bcef4", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/integration-test-hooks.mjs:18"}, "properties": {"repobilityId": "f10bdeda17ff79f1", "scanner": "scanner-primary", "fingerprint": "bc8a9eeee34bcef4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/integration-test-hooks.mjs"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-3ddd5d88948e5c72", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/integration-test-contract-hook.mjs:24"}, "properties": {"repobilityId": "fbce5331fba7c302", "scanner": "scanner-primary", "fingerprint": "3ddd5d88948e5c72", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/integration-test-contract-hook.mjs"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-e57b8a4a31f1b731", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/install/exclude.mjs:15"}, "properties": {"repobilityId": "4f0a0fc993ccdffd", "scanner": "scanner-primary", "fingerprint": "e57b8a4a31f1b731", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/install/exclude.mjs"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-1838a141491ce38c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b8fd4f5048f96576", "scanner": "scanner-primary", "fingerprint": "1838a141491ce38c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-53fa7f3bc8f00600", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: templates/contextkit/starters/tanstack/package.json"}, "properties": {"repobilityId": "25fac160983480bd", "scanner": "scanner-primary", "fingerprint": "53fa7f3bc8f00600", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/contextkit/starters/tanstack/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "8956bf3f15f3e850", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "e02abe1a54a1db9b", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "d7e307eeb4ad2a50", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-11825279136b53a3", "level": "warning", "message": {"text": "CI is configured but no tests are detected"}, "properties": {"repobilityId": "2ee2b430f51af10a", "scanner": "scanner-primary", "fingerprint": "11825279136b53a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "ci", "config-theater", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "de7c9ac9a66735c4", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "2ec65db33a59eebf", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "874f89bb7f25254d", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "454325dc93ad8361", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-0dabe22f49a9e69f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-worktree-new/SKILL.md"}, "properties": {"repobilityId": "bc1f3e1793abceb3", "scanner": "scanner-primary", "fingerprint": "0dabe22f49a9e69f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-vcs-worktree-new/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-baafec2e2cce8177", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-refresh-matrix/SKILL.md"}, "properties": {"repobilityId": "c4eb3b31816e07e2", "scanner": "scanner-primary", "fingerprint": "baafec2e2cce8177", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-refresh-matrix/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-247e09f8cdcd315c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-resume/SKILL.md"}, "properties": {"repobilityId": "9f1d7f9f2139a9bc", "scanner": "scanner-primary", "fingerprint": "247e09f8cdcd315c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-pipeline-resume/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a8bfd2bd3deb6ec3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-autonomy/SKILL.md"}, "properties": {"repobilityId": "9ad36b51c1a0e05a", "scanner": "scanner-primary", "fingerprint": "a8bfd2bd3deb6ec3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-setup-autonomy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc1a0f0f0722b3a8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-route/SKILL.md"}, "properties": {"repobilityId": "a7e8fa6a24a9bb74", "scanner": "scanner-primary", "fingerprint": "cc1a0f0f0722b3a8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-route/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c4fa85e861b455f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-tech-debt-sweep/SKILL.md"}, "properties": {"repobilityId": "af5002b1753869b3", "scanner": "scanner-primary", "fingerprint": "8c4fa85e861b455f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-audit-tech-debt-sweep/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-946b33fa46e1c4d8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-workflow/SKILL.md"}, "properties": {"repobilityId": "d0b0cce0224c1505", "scanner": "scanner-primary", "fingerprint": "946b33fa46e1c4d8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-pipeline-workflow/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-871d157bd131e2a6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-release/SKILL.md"}, "properties": {"repobilityId": "0436d9f50324d0d4", "scanner": "scanner-primary", "fingerprint": "871d157bd131e2a6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-vcs-release/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2fa6ad82ed379be8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-playbook/SKILL.md"}, "properties": {"repobilityId": "5d3013f485cded94", "scanner": "scanner-primary", "fingerprint": "2fa6ad82ed379be8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-playbook/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d5838fed3978073c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-context-refresh/SKILL.md"}, "properties": {"repobilityId": "e78eb3e96ea32413", "scanner": "scanner-primary", "fingerprint": "d5838fed3978073c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-context-refresh/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a4d0ade16ceddcc1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-watch/SKILL.md"}, "properties": {"repobilityId": "09058dc5cd7ff6e3", "scanner": "scanner-primary", "fingerprint": "a4d0ade16ceddcc1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-watch/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b449a1c0c78f320", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-dev-start/SKILL.md"}, "properties": {"repobilityId": "4784d5bd34bd96b5", "scanner": "scanner-primary", "fingerprint": "7b449a1c0c78f320", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-pipeline-dev-start/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37d0478b9cdebd0d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-docs-reindex/SKILL.md"}, "properties": {"repobilityId": "09580a8d8edfdc1d", "scanner": "scanner-primary", "fingerprint": "37d0478b9cdebd0d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-docs-reindex/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9781d2248cdfe1a7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-plan-week/SKILL.md"}, "properties": {"repobilityId": "697fa64489554e1b", "scanner": "scanner-primary", "fingerprint": "9781d2248cdfe1a7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-pipeline-plan-week/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1e817d7121f6854", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-policy/SKILL.md"}, "properties": {"repobilityId": "f356585d71dddd8b", "scanner": "scanner-primary", "fingerprint": "a1e817d7121f6854", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-policy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-683a9326a1a8e428", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-runs/SKILL.md"}, "properties": {"repobilityId": "ca1e1cf509e4361f", "scanner": "scanner-primary", "fingerprint": "683a9326a1a8e428", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-pipeline-runs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6657ce1d0e43804c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-changelog-social/SKILL.md"}, "properties": {"repobilityId": "4828aa2f72381c1c", "scanner": "scanner-primary", "fingerprint": "6657ce1d0e43804c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-vcs-changelog-social/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f698f85319cbdf1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-killswitch/SKILL.md"}, "properties": {"repobilityId": "ccda8db0159876be", "scanner": "scanner-primary", "fingerprint": "7f698f85319cbdf1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-killswitch/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8b3b5008794ab88f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-landing-page/SKILL.md"}, "properties": {"repobilityId": "183d2373acc7938a", "scanner": "scanner-primary", "fingerprint": "8b3b5008794ab88f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-landing-page/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e5b34aae5b872c68", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-close-version/SKILL.md"}, "properties": {"repobilityId": "72d0ea4e3c275de8", "scanner": "scanner-primary", "fingerprint": "e5b34aae5b872c68", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-close-version/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11eedda044c8a644", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-validate-doc/SKILL.md"}, "properties": {"repobilityId": "f4394d7a77ceb61f", "scanner": "scanner-primary", "fingerprint": "11eedda044c8a644", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-audit-validate-doc/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb8fefa0ddc3db2c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-state/SKILL.md"}, "properties": {"repobilityId": "60f560581202cc7f", "scanner": "scanner-primary", "fingerprint": "eb8fefa0ddc3db2c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-state/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9592da0c6adbf342", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-deprecate/SKILL.md"}, "properties": {"repobilityId": "ead31708a7f73c24", "scanner": "scanner-primary", "fingerprint": "9592da0c6adbf342", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-deprecate/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80b781a3611394b8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-list/SKILL.md"}, "properties": {"repobilityId": "ac28773bd938b0c5", "scanner": "scanner-primary", "fingerprint": "80b781a3611394b8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-list/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9aee7f41547bfc7d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-seo-audit/SKILL.md"}, "properties": {"repobilityId": "77cfdc7df1eb6171", "scanner": "scanner-primary", "fingerprint": "9aee7f41547bfc7d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-audit-seo-audit/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-924bf34daca0ce23", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-security-setup/SKILL.md"}, "properties": {"repobilityId": "f0311c79e6508138", "scanner": "scanner-primary", "fingerprint": "924bf34daca0ce23", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-audit-security-setup/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-458c0a2dab717250", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-context-doctor/SKILL.md"}, "properties": {"repobilityId": "c57ec465b92a60ba", "scanner": "scanner-primary", "fingerprint": "458c0a2dab717250", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-setup-context-doctor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c01b279ab0a9f946", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-dashboard/SKILL.md"}, "properties": {"repobilityId": "bda8fa509429be90", "scanner": "scanner-primary", "fingerprint": "c01b279ab0a9f946", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-dashboard/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bf69d68ee4cfb226", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-retro/SKILL.md"}, "properties": {"repobilityId": "a20ddbcadbf6f47f", "scanner": "scanner-primary", "fingerprint": "bf69d68ee4cfb226", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-pipeline-retro/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74545f464f1c7f8d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-distill-apply/SKILL.md"}, "properties": {"repobilityId": "c22acd17dc6e755b", "scanner": "scanner-primary", "fingerprint": "74545f464f1c7f8d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-distill-apply/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-271c12868a1a0829", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-context-config/SKILL.md"}, "properties": {"repobilityId": "caf0de3207598115", "scanner": "scanner-primary", "fingerprint": "271c12868a1a0829", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-setup-context-config/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9fff288cb626038c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-fleet/SKILL.md"}, "properties": {"repobilityId": "f568f6392b967758", "scanner": "scanner-primary", "fingerprint": "9fff288cb626038c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-fleet/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9792cee9ff64b8be", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-new-adr/SKILL.md"}, "properties": {"repobilityId": "11c869fae061b091", "scanner": "scanner-primary", "fingerprint": "9792cee9ff64b8be", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-new-adr/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b199478d3028cad7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-doctor/SKILL.md"}, "properties": {"repobilityId": "50b3a996b0f41d0f", "scanner": "scanner-primary", "fingerprint": "b199478d3028cad7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-doctor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58a1613b3fc9a1b0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-setup-context-level/SKILL.md"}, "properties": {"repobilityId": "15586407674f3497", "scanner": "scanner-primary", "fingerprint": "58a1613b3fc9a1b0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-setup-context-level/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2ecd401f5c4a2cc1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-context-stats/SKILL.md"}, "properties": {"repobilityId": "a0b7939afc790f2e", "scanner": "scanner-primary", "fingerprint": "2ecd401f5c4a2cc1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-context-stats/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-349359589c383113", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-show/SKILL.md"}, "properties": {"repobilityId": "87a6a0a4b0068840", "scanner": "scanner-primary", "fingerprint": "349359589c383113", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-show/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76e4b3654c0af5ad", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-claim/SKILL.md"}, "properties": {"repobilityId": "a80bb3cde5142f1f", "scanner": "scanner-primary", "fingerprint": "76e4b3654c0af5ad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-vcs-claim/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-46e4d5fc36f99b60", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-pipeline-workflow-assist/SKILL.md"}, "properties": {"repobilityId": "0884a306c22db9f0", "scanner": "scanner-primary", "fingerprint": "46e4d5fc36f99b60", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-pipeline-workflow-assist/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ca6dac6b0225f417", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-vcs-git/SKILL.md"}, "properties": {"repobilityId": "e71f9066633b0a7d", "scanner": "scanner-primary", "fingerprint": "ca6dac6b0225f417", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-vcs-git/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d73fc0f251c75c7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-audit-contract-check/SKILL.md"}, "properties": {"repobilityId": "5dbd6f0bc3928c7c", "scanner": "scanner-primary", "fingerprint": "1d73fc0f251c75c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-audit-contract-check/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3afa10a76ce99c09", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-eval/SKILL.md"}, "properties": {"repobilityId": "08b7d4b9797143ca", "scanner": "scanner-primary", "fingerprint": "3afa10a76ce99c09", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-eval/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d4f5b48c02a16954", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-audit/SKILL.md"}, "properties": {"repobilityId": "95e38474a665815e", "scanner": "scanner-primary", "fingerprint": "d4f5b48c02a16954", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-audit/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-88832dbc31f23593", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-budget/SKILL.md"}, "properties": {"repobilityId": "30194e75e9550ead", "scanner": "scanner-primary", "fingerprint": "88832dbc31f23593", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-budget/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bf0dc38889cb34e8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-forge-forge-redteam/SKILL.md"}, "properties": {"repobilityId": "856073c4c3fa44df", "scanner": "scanner-primary", "fingerprint": "bf0dc38889cb34e8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-forge-forge-redteam/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5c6c765db4aaa7a1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/codex/skills/source-command-predictions-review/SKILL.md"}, "properties": {"repobilityId": "7ff6f248059207fb", "scanner": "scanner-primary", "fingerprint": "5c6c765db4aaa7a1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/codex/skills/source-command-predictions-review/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fea113833cd8f863", "level": "note", "message": {"text": "Legacy-named symbol `migrateLegacy` in install.mjs:32"}, "properties": {"repobilityId": "7d33935656e56902", "scanner": "scanner-primary", "fingerprint": "fea113833cd8f863", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-5569329d3a69ab48", "level": "note", "message": {"text": "Legacy-named symbol `readLegacy` in templates/contextkit/tools/scripts/workflow-pack.mjs:212"}, "properties": {"repobilityId": "4ef88206754dc39e", "scanner": "scanner-primary", "fingerprint": "5569329d3a69ab48", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-57cc5d025e132abe", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 templates/contextkit/tools/scripts/git.mjs:81"}, "properties": {"repobilityId": "3e8b1a94d11361fc", "scanner": "scanner-primary", "fingerprint": "57cc5d025e132abe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-16ad94c594fc756f", "level": "none", "message": {"text": "Commented-code block (6 lines) in templates/contextkit/squads/agent-forge/templates/agent-package/adapters/node/index.js:5"}, "properties": {"repobilityId": "94d4601495afb55b", "scanner": "scanner-primary", "fingerprint": "16ad94c594fc756f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-57afcd33bc4b99ab", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/selfcheck-source-cases-recent.mjs:109"}, "properties": {"repobilityId": "f121834591e1b38c", "scanner": "scanner-primary", "fingerprint": "57afcd33bc4b99ab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-32377c45f49d895c", "level": "note", "message": {"text": "Legacy-named symbol `makeLegacy` in tools/integration-test-migrate.mjs:25"}, "properties": {"repobilityId": "d96b62691373a9b5", "scanner": "scanner-primary", "fingerprint": "32377c45f49d895c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fe53f6e9dce308a1", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/integration-test-migrate.mjs:162"}, "properties": {"repobilityId": "c8fee0300ec8eecd", "scanner": "scanner-primary", "fingerprint": "fe53f6e9dce308a1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fb91a8ebf887577d", "level": "none", "message": {"text": "Commented-code block (9 lines) in tools/selfcheck-gates.mjs:58"}, "properties": {"repobilityId": "4ecc974d437b289b", "scanner": "scanner-primary", "fingerprint": "fb91a8ebf887577d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-114b648514cfc278", "level": "none", "message": {"text": "Commented-code block (6 lines) in tools/integration-test-capabilities.mjs:50"}, "properties": {"repobilityId": "5e99e1990ce988a5", "scanner": "scanner-primary", "fingerprint": "114b648514cfc278", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a2f2980c66eff528", "level": "note", "message": {"text": "Legacy-named symbol `detectLegacy` in tools/install/migrate.mjs:67"}, "properties": {"repobilityId": "25b1b405bc2e4ae8", "scanner": "scanner-primary", "fingerprint": "a2f2980c66eff528", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-977d4e239847eea3", "level": "note", "message": {"text": "Legacy-named symbol `migrateLegacy` in tools/install/engine.mjs:76"}, "properties": {"repobilityId": "9fc0c1f1c7cac9a9", "scanner": "scanner-primary", "fingerprint": "977d4e239847eea3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}]}]}