fix: update skill specs for upstream restructures, removals, and scanner FPs by JAORMX · Pull Request #808 · stacklok/dockyard

JAORMX · 2026-07-27T11:27:12Z

Summary

Fixes 18 failing renovate PRs by addressing the root causes renovate can't fix: upstream repo restructures, upstream skill removals, and security scanner false positives that need human judgement.

Changes

Upstream restructures (renamed/updated paths)

mongodb/agent-skills: atlas-stream-processing → mongodb-atlas-stream-processing (upstream renamed the directory and SKILL.md name: field)
datadog-labs/agent-skills: dd-llmo/ → agent-observability/ (4 skills renamed and re-pathed)

Upstream removals (deleted spec.yaml)

firebase/agent-skills: developing-genkit-js, developing-genkit-go, developing-genkit-dart — removed upstream

Security scanner false positive allowlists

Each entry was verified against the actual upstream SKILL.md content:

Skill	Rule(s)	Why it's a FP
grilling	`ATR_2026_00051`	Conversational interview instruction, not code execution
cloudflare	`BEHAVIOR_BASH_TAINT_FLOW`	Flagship API curl examples in documentation
claude-api	10 × `ATR_2026_*`	API documentation patterns (`role:"system"`, `env;`, `_SECRET_`, etc.)
agentic-actions-auditor	4 × `ATR_2026_*` + `LLM_PROMPT_INJECTION`	Security audit skill — reference files intentionally describe attack patterns
gha-security-review	`BEHAVIOR_BASH_TAINT_FLOW`	Security audit skill — attack pattern docs for detection
mongodb-schema-design	`BEHAVIOR_BASH_TAINT_FLOW`	Mongo shell examples in docs
firebase-firestore	`BEHAVIOR_BASH_TAINT_FLOW`	Firestore API curl examples in docs
skill-writer	`BEHAVIOR_BASH_TAINT_FLOW`	Meta-skill with example code patterns

Ref updates

All 20 modified skills updated to the full-SHA digests proposed by renovate.

NOT addressed (left as open renovate PRs)

chore(deps): update stripe/agent-toolkit digest to 84c364c #697 stripe-projects — LLM_PROMPT_INJECTION + LLM_SKILL_DISCOVERY_ABUSE are genuine design concerns (instructs agent to blindly trust a runtime-installed skill; trigger-phrase stuffing to intercept non-Stripe queries)
chore(deps): update google-gemini/gemini-skills digest to 47d75ca #688 gemini-api-dev, gemini-interactions-api — LLM_HARMFUL_CONTENT (fabricated model names presented as real) + LLM_PROMPT_INJECTION (explicit "override your training data" directive)

Validation

All modified skills pass dockhand validate-skill locally.

Supersedes (once merged, these renovate PRs can be closed):
#691, #699, #697 (partially — the security concern remains), #692, #688 (partially), #685, #684, #682, #675, #671

…ner FPs Path fixes for upstream repo restructures: - mongodb/agent-skills: atlas-stream-processing renamed to mongodb-atlas-stream-processing - datadog-labs/agent-skills: dd-llmo/ restructured to agent-observability/ (4 skills renamed) Removed skills deleted upstream: - firebase/agent-skills: developing-genkit-js/go/dart removed Security scanner false positive allowlists added for: - grilling (ATR_2026_00051 — conversational prose) - cloudflare (BEHAVIOR_BASH_TAINT_FLOW — curl examples in docs) - claude-api (10 new ATR_2026_* — API documentation patterns) - agentic-actions-auditor (5 rules — security audit skill with intentional attack pattern docs) - gha-security-review (BEHAVIOR_BASH_TAINT_FLOW — attack pattern docs) - mongodb-schema-design (BEHAVIOR_BASH_TAINT_FLOW — mongo shell examples) - firebase-firestore (BEHAVIOR_BASH_TAINT_FLOW — Firestore API examples) - skill-writer (BEHAVIOR_BASH_TAINT_FLOW — meta-skill code patterns) All refs updated to match renovate digest proposals (full SHAs). Local validation passes for all modified skills. Not addressed (left as open renovate PRs with genuine findings): - stripe-projects (#697): prompt injection + skill discovery abuse - gemini-api-dev/interactions-api (#688): fabricated model names + training-data override

toolhive-release-app · 2026-07-27T11:34:22Z

🛡️ Skill Security Scan Results

✅ agent-observability-eval-bootstrap

Status: Passed
Findings: 131
Allowed (not blocking): 85
- PG_EXFIL_MARKDOWN_LINK (Allowed: False positive - the flagged pattern is a markdown link template
  [Trace {first_8}...](https://app.datadoghq.com/llm/traces?query=trace_id:{full_32_char_id})
  used by the skill to cite trace evidence to the USER. The destination
  (app.datadoghq.com) is the user's own Datadog SaaS tenant; the encoded
  value is a trace_id surfaced from the user's own LLM Observability data
  — not exfiltrated agent context. The link is rendered for the user to
  click and verify the cited trace, which is the explicit purpose stated
  in the "Show your work" operating rule. Verified at digest
  98343f304cbd4439b3d7640cfe64f78070e44d68 (SKILL.md:681).
  )
- ATR_2026_00213 (Allowed: FP: matched the literal words 'system prompt' / 'System Prompt' in prose describing Datadog span fields and eval dimensions. Documentation, not a system-prompt-extraction attack. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00091 (Allowed: FP: matched literal \n newline escapes inside JSON/code example blocks. Documentation/code, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00091 (Allowed: FP: matched literal \n newline escapes inside JSON/code example blocks. Documentation/code, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00091 (Allowed: FP: matched literal \n newline escapes inside JSON/code example blocks. Documentation/code, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00091 (Allowed: FP: matched literal \n newline escapes inside JSON/code example blocks. Documentation/code, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00213 (Allowed: FP: matched the literal words 'system prompt' / 'System Prompt' in prose describing Datadog span fields and eval dimensions. Documentation, not a system-prompt-extraction attack. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00091 (Allowed: FP: matched literal \n newline escapes inside JSON/code example blocks. Documentation/code, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00091 (Allowed: FP: matched literal \n newline escapes inside JSON/code example blocks. Documentation/code, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00091 (Allowed: FP: matched literal \n newline escapes inside JSON/code example blocks. Documentation/code, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00091 (Allowed: FP: matched literal \n newline escapes inside JSON/code example blocks. Documentation/code, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00111 (Allowed: FP: word-fragment matches — summarizing a policy (example intent category), eval_scope (identifier). Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00111 (Allowed: FP: word-fragment matches — summarizing a policy (example intent category), eval_scope (identifier). Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00111 (Allowed: FP: word-fragment matches — summarizing a policy (example intent category), eval_scope (identifier). Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00040 (Allowed: FP: matched the word 'Deploy' in prose 'Deploy to Datadog LLM Experiments' (SKILL.md:729). Documentation step, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00051 (Allowed: FP: matched the prose phrase 'For each' (loop-over-traces guidance). Documentation, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00051 (Allowed: FP: matched the prose phrase 'For each' (loop-over-traces guidance). Documentation, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00051 (Allowed: FP: matched the prose phrase 'For each' (loop-over-traces guidance). Documentation, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- PG_EXFIL_MARKDOWN_LINK (Allowed: False positive - the flagged pattern is a markdown link template
  [Trace {first_8}...](https://app.datadoghq.com/llm/traces?query=trace_id:{full_32_char_id})
  used by the skill to cite trace evidence to the USER. The destination
  (app.datadoghq.com) is the user's own Datadog SaaS tenant; the encoded
  value is a trace_id surfaced from the user's own LLM Observability data
  — not exfiltrated agent context. The link is rendered for the user to
  click and verify the cited trace, which is the explicit purpose stated
  in the "Show your work" operating rule. Verified at digest
  98343f304cbd4439b3d7640cfe64f78070e44d68 (SKILL.md:681).
  )
- ATR_2026_00111 (Allowed: FP: word-fragment matches — summarizing a policy (example intent category), eval_scope (identifier). Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00066 (Allowed: FP: matched Datadog eval-prompt template placeholders — {{input_data}}, {{output_data}}, {{span_input}}, {{meta.input.messages[*].content}}. These are the documented templating syntax for LLM-judge prompts, not injected payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00010 (Allowed: FP: matched backtick-wrapped upstream tool/CLI names — get_llmobs_evaluator, list_llmobs_eval*, create_or_update_llmobs_eval*, pup llm-obs evals get-eval, /eval. Documentation references to tools the skill instructs the agent to call against the user's own Datadog tenant, not executed payloads. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00012 (Allowed: FP: word-fragment matches — integration_account_id, table cells, tool-name fragments like get_llmobs_span_details(trace_id. Documentation strings, no executable threat. datadog-labs/agent-skills @9bcb3ce.)
- ATR_2026_00091 (Allowed: FP: matched literal \n newline escapes inside JSON/code example blocks. Documentation/code, no executable threat. datadog-labs/agent-skills @9bcb3ce.)

✅ agent-observability-experiment-analyzer

Status: Passed
Findings: 3

✅ agent-observability-session-classify

Status: Passed
Findings: 2

✅ agent-observability-trace-rca

Status: Passed
Findings: 4

❌ agentic-actions-auditor

Status: Failed
Findings: 62
Blocking: 41

Blocking issues:

[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/vector-f-subshell-expansion.md:79)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-f-subshell-expansion.md:80)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-f-subshell-expansion.md:82)
[ATR_2026_00012] (HIGH) Pattern detected: | GitHub AI Inference | Primary conc (references/vector-g-eval-of-ai-output.md:11)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ steps..outputs.response }} (references/vector-g-eval-of-ai-output.md:24)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/vector-g-eval-of-ai-output.md:25)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/vector-g-eval-of-ai-output.md:26)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-g-eval-of-ai-output.md:37)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-g-eval-of-ai-output.md:47)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ github.event.issue.title }} (references/vector-g-eval-of-ai-output.md:63)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ github.event.issue.body }} (references/vector-g-eval-of-ai-output.md:64)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ steps.ai-inference.outputs.response }} (references/vector-g-eval-of-ai-output.md:70)
[ATR_2026_00010] (CRITICAL) Pattern detected: python3 -c (references/vector-g-eval-of-ai-output.md:72)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-g-eval-of-ai-output.md:77)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-g-eval-of-ai-output.md:87)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-g-eval-of-ai-output.md:88)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-h-dangerous-sandbox-configs.md:3)
[ATR_2026_00040] (CRITICAL) Pattern detected: Bash (references/vector-h-dangerous-sandbox-configs.md:9)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-h-dangerous-sandbox-configs.md:12)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/vector-h-dangerous-sandbox-configs.md:25)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-h-dangerous-sandbox-configs.md:28)
[ATR_2026_00040] (CRITICAL) Pattern detected: Bash (references/vector-h-dangerous-sandbox-configs.md:34)
[ATR_2026_00066] (CRITICAL) Pattern detected: `Bash (references/vector-h-dangerous-sandbox-configs.md:35)
[ATR_2026_00012] (HIGH) Pattern detected: ` -- disables all filesystem (references/vector-h-dangerous-sandbox-configs.md:40)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/vector-h-dangerous-sandbox-configs.md:47)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-h-dangerous-sandbox-configs.md:48)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/vector-h-dangerous-sandbox-configs.md:60)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/vector-h-dangerous-sandbox-configs.md:62)
[ATR_2026_00063] (CRITICAL) Pattern detected: exfil (references/vector-h-dangerous-sandbox-configs.md:65)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-h-dangerous-sandbox-configs.md:73)
[ATR_2026_00040] (CRITICAL) Pattern detected: Bash (references/vector-h-dangerous-sandbox-configs.md:76)
[ATR_2026_00062] (CRITICAL) Pattern detected: sandbox disabled (references/vector-h-dangerous-sandbox-configs.md:86)
[ATR_2026_00040] (CRITICAL) Pattern detected: Bash (references/vector-h-dangerous-sandbox-configs.md:96)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/vector-h-dangerous-sandbox-configs.md:98)
[ATR_2026_00012] (HIGH) Pattern detected: "*") that permit ANY GitHub user -- inc (references/vector-i-wildcard-allowlists.md:3)
[ATR_2026_00012] (HIGH) Pattern detected: | GitHub AI Inferenc (references/vector-i-wildcard-allowlists.md:12)
[ATR_2026_00010] (CRITICAL) Pattern detected: push-triggered workflows are less conc (references/vector-i-wildcard-allowlists.md:22)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ github.event.issue.body }} (references/vector-i-wildcard-allowlists.md:71)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ github.event.issue.body }} (references/vector-i-wildcard-allowlists.md:78)
[ATR_2026_00010] (CRITICAL) Pattern detected: allowed_bots: "*" without a wildcard on the user allowlist -- lower risk since bots typically do not open issues with attacker-crafted content, though this should still be noted as a secondary conc (references/vector-i-wildcard-allowlists.md:85)
[ATR_2026_00012] (HIGH) Pattern detected: push events with wildcard allowlists -- push (references/vector-i-wildcard-allowlists.md:86)

Allowlisted (not blocking):

ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00081 (Allowed: FP: security audit skill reference file describing restriction bypass patterns for detection purposes.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)
ATR_2026_00111 (Allowed: FP: security audit skill reference file containing example exfiltration commands for detection purposes — these are PoC descriptions, not agent instructions.)

❌ claude-api

Status: Failed
Findings: 1095
Blocking: 9

Blocking issues:

[ATR_2026_00113] (CRITICAL) Pattern detected: get a short-lived token with `ant auth print-credentials (SKILL.md:205)
[ATR_2026_00113] (CRITICAL) Pattern detected: Read shared/managed-agents-onboarding.md immediately** and follow its interview script: describe → configure the agent (propose, don't interrogate) → environment → session (same arc as the Console quickstart, auth deferred to the session step) — defaults and inline suggestions do the work, with a silent viability gate (job vs tools/credentials (SKILL.md:391)
[ATR_2026_00032] (HIGH) Pattern detected: instead of the deprecated (SKILL.md:520)
[ATR_2026_00021] (CRITICAL) Pattern detected: ANTHROPIC_API_KEY="your-api-key" (curl/managed-agents.md:8)
[ATR_2026_00062] (CRITICAL) Pattern detected: SECRET (shared/claude-platform-on-aws.md:49)
[ATR_2026_00030] (CRITICAL) Pattern detected: role:"system" (shared/model-migration.md:899)
[ATR_2026_00030] (CRITICAL) Pattern detected: run (a deliverable, a progress update with specific numbers, a direct answer) (shared/model-migration.md:1495)
[ATR_2026_00030] (CRITICAL) Pattern detected: role: "system" (shared/prompt-caching.md:67)
[ATR_2026_00030] (CRITICAL) Pattern detected: role: "system" (shared/prompt-caching.md:79)

Allowlisted (not blocking):

SOCIAL_ENG_ANTHROPIC_IMPERSONATION (Allowed: claude-api is packaged from anthropics/skills — the Anthropic branding is authentic, not impersonation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00090 (Allowed: FP: matched 'max_token' in API parameter documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00064 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00142 (Allowed: FP: matched URL fragment 'ps://platform.claude.com/workspaces/...' in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00140 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00140 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00084 (Allowed: FP: matched 'Override API host' in API configuration documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00020 (Allowed: FP: matched 'You are a helpful assistant' and 'system prompt:' in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00115 (Allowed: FP: matched 'env;' in code examples within API documentation.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
PG_PII_CREDENTIAL_HARVESTING (Allowed: FP: matched prose 'Store MCP credential'; documentation, not credential exfiltration.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
PG_PII_CREDENTIAL_HARVESTING (Allowed: FP: matched prose 'Store MCP credential'; documentation, not credential exfiltration.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00064 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00064 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00001 (Allowed: FP: matched prose 'become a concern' in model-migration.md.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00064 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00064 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00051 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00064 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00051 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00064 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00265 (Allowed: FP: matched 'disregard the previous instruction' — this appears in prompt-injection documentation that teaches developers about the attack, not as an actual injection.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00140 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00020 (Allowed: FP: matched 'You are a helpful assistant' and 'system prompt:' in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00235 (Allowed: FP: matched 'prompt:' in API code examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00064 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00140 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00051 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00088 (Allowed: FP: matched 'output is billed at normal' in API pricing documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00083 (Allowed: FP: matched 'new instruction' in API documentation prose.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00090 (Allowed: FP: matched 'max_token' in API parameter documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00213 (Allowed: FP: matched the literal phrase 'system prompt' in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00051 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
PG_PII_SSN_HARVESTING (Allowed: FP: matched prose fragments ('ask the user...', toggle thinking); rule is also misconfigured upstream (unknown category 'pii_exposure').)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00240 (Allowed: FP: matched 'execute anything' in API documentation prose.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00004 (Allowed: FP: matched {"role": " JSON message examples in API docs.)
ATR_2026_00051 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00066 (Allowed: FP: matched code-fence language tokens (python/bash/sh) in docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00111 (Allowed: FP: matched file references and plain words (e.g. shared/models.md, id, set).)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00063 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
PG_PII_CREDENTIAL_HARVESTING (Allowed: FP: matched prose 'Store MCP credential'; documentation, not credential exfiltration.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00091 (Allowed: FP: substring/keyword match on upstream documentation prose; no executable threat.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00012 (Allowed: FP: matched 'system', $ANTHROPIC_API_KEY and getenv() in API documentation examples.)
ATR_2026_00010 (Allowed: FP: matched word fragments in prose (e.g. 'onc'/'balanc'/'differenc'/'intelligenc') and effort/thinking parameter docs.)
ATR_2026_00040 (Allowed: FP: matched the keyword 'EXEC'/exec in documentation.)

✅ cloudflare

Status: Passed
Findings: 13
Allowed (not blocking): 10
- MANIFEST_MISSING_LICENSE (Allowed: cloudflare/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)
- BEHAVIOR_BASH_TAINT_FLOW (Allowed: FP: matched bash code examples in Flagship API documentation (references/flagship/gotchas.md, patterns.md). These are curl command examples showing API usage — documentation, not agent-executable scripts.)
- BEHAVIOR_BASH_TAINT_FLOW (Allowed: FP: matched bash code examples in Flagship API documentation (references/flagship/gotchas.md, patterns.md). These are curl command examples showing API usage — documentation, not agent-executable scripts.)
- BEHAVIOR_BASH_TAINT_FLOW (Allowed: FP: matched bash code examples in Flagship API documentation (references/flagship/gotchas.md, patterns.md). These are curl command examples showing API usage — documentation, not agent-executable scripts.)
- BEHAVIOR_BASH_TAINT_FLOW (Allowed: FP: matched bash code examples in Flagship API documentation (references/flagship/gotchas.md, patterns.md). These are curl command examples showing API usage — documentation, not agent-executable scripts.)
- BEHAVIOR_BASH_TAINT_FLOW (Allowed: FP: matched bash code examples in Flagship API documentation (references/flagship/gotchas.md, patterns.md). These are curl command examples showing API usage — documentation, not agent-executable scripts.)
- BEHAVIOR_BASH_TAINT_FLOW (Allowed: FP: matched bash code examples in Flagship API documentation (references/flagship/gotchas.md, patterns.md). These are curl command examples showing API usage — documentation, not agent-executable scripts.)
- BEHAVIOR_BASH_TAINT_FLOW (Allowed: FP: matched bash code examples in Flagship API documentation (references/flagship/gotchas.md, patterns.md). These are curl command examples showing API usage — documentation, not agent-executable scripts.)
- BEHAVIOR_BASH_TAINT_FLOW (Allowed: FP: matched bash code examples in Flagship API documentation (references/flagship/gotchas.md, patterns.md). These are curl command examples showing API usage — documentation, not agent-executable scripts.)
- BEHAVIOR_BASH_TAINT_FLOW (Allowed: FP: matched bash code examples in Flagship API documentation (references/flagship/gotchas.md, patterns.md). These are curl command examples showing API usage — documentation, not agent-executable scripts.)

❌ codeql

Status: Failed
Findings: 277
Blocking: 143

Blocking issues:

[ATR_2026_00012] (HIGH) Pattern detected: src.zip) includes system (references/quality-assessment.md:48)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/quality-assessment.md:50)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(python3 -c "print(f'{$EXTRACTOR_ERRORS/$PROJECT_SRC_COUNT*100:.1f}%') (references/quality-assessment.md:70)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/quality-assessment.md:79)
[ATR_2026_00010] (CRITICAL) Pattern detected: codeql-database.yml | true | false (inc (references/quality-assessment.md:100)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/quality-assessment.md:116)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/quality-assessment.md:121)
[ATR_2026_00040] (CRITICAL) Pattern detected: root= (references/quality-assessment.md:122)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/quality-assessment.md:128)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/quality-assessment.md:130)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/quality-assessment.md:139)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/quality-assessment.md:152)
[ATR_2026_00111] (CRITICAL) Pattern detected: | tee (references/quality-assessment.md:153)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/quality-assessment.md:158)
[ATR_2026_00010] (CRITICAL) Pattern detected: security-and-quality and security-experimental are complementary. security-and-quality excludes experimental/ query paths. security-experimental inc (references/ruleset-catalog.md:11)
[ATR_2026_00111] (CRITICAL) Pattern detected: python (references/ruleset-catalog.md:15)
[ATR_2026_00010] (CRITICAL) Pattern detected: trailofbits/go-queries | Go | Concurrenc (references/ruleset-catalog.md:24)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/ruleset-catalog.md:28)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/ruleset-catalog.md:49)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/ruleset-catalog.md:59)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/run-all-suite.md:3)
[ATR_2026_00010] (CRITICAL) Pattern detected: security-experimental = stable security + experimental security (re-inc (references/run-all-suite.md:11)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/run-all-suite.md:46)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${CODEQL_LANG} (references/run-all-suite.md:55)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${CODEQL_LANG} (references/run-all-suite.md:56)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${CODEQL_LANG} (references/run-all-suite.md:57)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${CODEQL_LANG} (references/run-all-suite.md:58)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${PACK} (references/run-all-suite.md:65)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${CODEQL_LANG:?ERROR: CODEQL_LANG must be set before generating suite} (references/run-all-suite.md:84)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${SUITE_FILE:?ERROR: SUITE_FILE must be set} (references/run-all-suite.md:85)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/sarif-processing.md:13)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/sarif-processing.md:19)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/sarif-processing.md:31)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/sarif-processing.md:46)
[ATR_2026_00010] (CRITICAL) Pattern detected: security-severity < 6.0 from the report. The suite includes all medium-precision security queries to let CodeQL eval (references/sarif-processing.md:53)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/sarif-processing.md:57)
[ATR_2026_00012] (HIGH) Pattern detected: | Model | Sources Inc (references/threat-models.md:7)
[ATR_2026_00111] (CRITICAL) Pattern detected: environment (references/threat-models.md:11)
[ATR_2026_00063] (CRITICAL) Pattern detected: upload (references/threat-models.md:13)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/threat-models.md:23)
[ATR_2026_00010] (CRITICAL) Pattern detected: $OUTPUT_DIR from the parent skill (resolved onc (workflows/build-database.md:44)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:46)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:56)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(date -Iseconds) (workflows/build-database.md:59)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:65)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(date -Iseconds) (workflows/build-database.md:66)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(date -Iseconds) (workflows/build-database.md:67)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(date -Iseconds) (workflows/build-database.md:68)
[ATR_2026_00012] (HIGH) Pattern detected: CODEQL_LANG variable set to a valid (workflows/build-database.md:78)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:82)
[ATR_2026_00111] (CRITICAL) Pattern detected: python (workflows/build-database.md:90)
[ATR_2026_00111] (CRITICAL) Pattern detected: ruby (workflows/build-database.md:93)
[ATR_2026_00012] (HIGH) Pattern detected: | C# | `csh (workflows/build-database.md:96)
[ATR_2026_00012] (HIGH) Pattern detected: withpaths-ignoreentries fornode (workflows/build-database.md:104)
[ATR_2026_00066] (CRITICAL) Pattern detected: -- " (workflows/build-database.md:111)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:115)
[ATR_2026_00040] (CRITICAL) Pattern detected: CMD (workflows/build-database.md:117)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (workflows/build-database.md:118)
[ATR_2026_00111] (CRITICAL) Pattern detected: | tee (workflows/build-database.md:119)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:130)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(uname -s) (workflows/build-database.md:132)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(find "$(dirname "$(command -v codeql) (workflows/build-database.md:133)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(lipo -archs "$LIBTRACE" 2>/dev/null) (workflows/build-database.md:135)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(lipo -archs /usr/bin/make 2>/dev/null) (workflows/build-database.md:137)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:154)
[ATR_2026_00040] (CRITICAL) Pattern detected: CMD (workflows/build-database.md:156)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (workflows/build-database.md:157)
[ATR_2026_00111] (CRITICAL) Pattern detected: | tee (workflows/build-database.md:158)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(nproc) (workflows/build-database.md:169)
[ATR_2026_00012] (HIGH) Pattern detected: build.sh, `compile.sh (workflows/build-database.md:176)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:178)
[ATR_2026_00040] (CRITICAL) Pattern detected: CMD (workflows/build-database.md:180)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (workflows/build-database.md:181)
[ATR_2026_00111] (CRITICAL) Pattern detected: | tee (workflows/build-database.md:182)
[ATR_2026_00012] (HIGH) Pattern detected: `.** Replaces Methods 1 and 2 on affected system (workflows/build-database.md:187)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:197)
[ATR_2026_00040] (CRITICAL) Pattern detected: root= (workflows/build-database.md:199)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:209)
[ATR_2026_00040] (CRITICAL) Pattern detected: CMD (workflows/build-database.md:211)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (workflows/build-database.md:212)
[ATR_2026_00111] (CRITICAL) Pattern detected: | tee (workflows/build-database.md:213)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/build-database.md:253)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(date -Iseconds) (workflows/build-database.md:255)
[ATR_2026_00066] (CRITICAL) Pattern detected: -- " (workflows/build-database.md:258)
[ATR_2026_00012] (HIGH) Pattern detected: | Report coverage is adequate, finish (workflows/create-data-extensions.md:22)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/create-data-extensions.md:35)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(dirname "$f") (workflows/create-data-extensions.md:39)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/create-data-extensions.md:67)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(dirname "$yml") (workflows/create-data-extensions.md:71)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${#FOUND_DBS[@]} (workflows/create-data-extensions.md:74)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${#FOUND_DBS[@]} (workflows/create-data-extensions.md:76)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${FOUND_DBS[0]} (workflows/create-data-extensions.md:77)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(codeql resolve database --format=json -- "$DB_NAME" | jq -r '.languages[0]') (workflows/create-data-extensions.md:84)
[ATR_2026_00010] (CRITICAL) Pattern detected: Write tool to create $DIAG_DIR/list-sources.ql using the source template from [diagnostic-query-templates.md](../referenc (workflows/create-data-extensions.md:91)
[ATR_2026_00010] (CRITICAL) Pattern detected: Write tool to create $DIAG_DIR/list-sinks.ql using the language-specific sink template from [diagnostic-query-templates.md](../referenc (workflows/create-data-extensions.md:95)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (workflows/create-data-extensions.md:97)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/create-data-extensions.md:101)
[ATR_2026_00066] (CRITICAL) Pattern detected: -- " (workflows/create-data-extensions.md:102)
[ATR_2026_00066] (CRITICAL) Pattern detected: -- " (workflows/create-data-extensions.md:103)
[ATR_2026_00066] (CRITICAL) Pattern detected: -- " (workflows/create-data-extensions.md:105)
[ATR_2026_00066] (CRITICAL) Pattern detected: -- " (workflows/create-data-extensions.md:106)
[PG_PII_SSN_HARVESTING] (CRITICAL) Pattern detected: request handlers | Custom request parsin (workflows/create-data-extensions.md:128)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (workflows/create-data-extensions.md:130)
[ATR_2026_00111] (CRITICAL) Pattern detected: summaryModel (workflows/create-data-extensions.md:136)
[ATR_2026_00051] (HIGH) Pattern detected: For each (workflows/create-data-extensions.md:142)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (workflows/create-data-extensions.md:170)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (workflows/create-data-extensions.md:185)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (workflows/create-data-extensions.md:187)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (workflows/create-data-extensions.md:195)
[ATR_2026_00012] (HIGH) Pattern detected: $DIAG_DIR (not results/) sinc (workflows/create-data-extensions.md:202)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/create-data-extensions.md:204)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/create-data-extensions.md:212)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/create-data-extensions.md:223)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(python3 -c "import json; print(sum(len(r.get('results',[]) (workflows/create-data-extensions.md:224)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(python3 -c "import json; print(sum(len(r.get('results',[]) (workflows/create-data-extensions.md:225)
[ATR_2026_00111] (CRITICAL) Pattern detected: $((WITH_EXT - BASELINE) (workflows/create-data-extensions.md:226)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (workflows/create-data-extensions.md:252)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (workflows/run-analysis.md:3)
[ATR_2026_00012] (HIGH) Pattern detected: | Mode | Description | Suite Referenc (workflows/run-analysis.md:9)
[ATR_2026_00010] (CRITICAL) Pattern detected: security-and-quality + security-experimental suites | [run-all-suite.md](../referenc (workflows/run-analysis.md:11)
[ATR_2026_00010] (CRITICAL) Pattern detected: defaultSuiteFile silently applies strict filters and can produce zero results. Always use an explicit suite referenc (workflows/run-analysis.md:14)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (workflows/run-analysis.md:26)
[ATR_2026_00012] (HIGH) Pattern detected: | User selects scan mode. Skip only if user said (workflows/run-analysis.md:34)
[ATR_2026_00001] (HIGH) Pattern detected: skip rules (workflows/run-analysis.md:38)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/run-analysis.md:53)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(dirname "$yml") (workflows/run-analysis.md:59)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${#FOUND_DBS[@]} (workflows/run-analysis.md:63)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(dirname "$yml") (workflows/run-analysis.md:65)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${#FOUND_DBS[@]} (workflows/run-analysis.md:69)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${#FOUND_DBS[@]} (workflows/run-analysis.md:72)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${FOUND_DBS[0]} (workflows/run-analysis.md:73)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(codeql resolve database --format=json -- "$DB_NAME" | jq -r '.languages[0]') (workflows/run-analysis.md:81)
[ATR_2026_00051] (HIGH) Pattern detected: For each (workflows/run-analysis.md:112)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (workflows/run-analysis.md:186)
[ATR_2026_00012] (HIGH) Pattern detected: $RAW_DIR/results.sarif exists and contains valid (workflows/run-analysis.md:189)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/run-analysis.md:195)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(date -Iseconds) (workflows/run-analysis.md:198)
[ATR_2026_00010] (CRITICAL) Pattern detected: .qls suite using the template and script in [important-only-suite.md](../referenc (workflows/run-analysis.md:216)
[ATR_2026_00010] (CRITICAL) Pattern detected: .qls suite using the template in [run-all-suite.md](../referenc (workflows/run-analysis.md:218)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/run-analysis.md:220)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/run-analysis.md:234)
[ATR_2026_00066] (CRITICAL) Pattern detected: -- " (workflows/run-analysis.md:242)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/run-analysis.md:267)

✅ constant-time-analysis

Status: Passed
Findings: 2

✅ firebase-data-connect-basics

Status: Passed
Findings: 257
Allowed (not blocking): 136
- ATR_2026_00063 (Allowed: FP: cisco-ai-skill-scanner matched documentation identifiers ('exFil' word fragment, 'SendMessage'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00111 (Allowed: FP: cisco-ai-skill-scanner matched SDK API method names in docs ('subscribe()', 'execute()', 'executeQuery', 'id: UUID!'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00111 (Allowed: FP: cisco-ai-skill-scanner matched SDK API method names in docs ('subscribe()', 'execute()', 'executeQuery', 'id: UUID!'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00111 (Allowed: FP: cisco-ai-skill-scanner matched SDK API method names in docs ('subscribe()', 'execute()', 'executeQuery', 'id: UUID!'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00051 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose ('for each'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00004 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose (markdown headers like '# Admin', '### Configuration'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00004 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose (markdown headers like '# Admin', '### Configuration'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00066 (Allowed: FP: cisco-ai-skill-scanner matched documentation code-fence markers ('`bash') and template-literal example syntax (${...}); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00111 (Allowed: FP: cisco-ai-skill-scanner matched SDK API method names in docs ('subscribe()', 'execute()', 'executeQuery', 'id: UUID!'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00013 (Allowed: FP: cisco-ai-skill-scanner matched local emulator addresses in docs (10.0.2.2, 127.0.0.1:9399); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00066 (Allowed: FP: cisco-ai-skill-scanner matched documentation code-fence markers ('`bash') and template-literal example syntax (${...}); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00066 (Allowed: FP: cisco-ai-skill-scanner matched documentation code-fence markers ('`bash') and template-literal example syntax (${...}); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00066 (Allowed: FP: cisco-ai-skill-scanner matched documentation code-fence markers ('`bash') and template-literal example syntax (${...}); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00066 (Allowed: FP: cisco-ai-skill-scanner matched documentation code-fence markers ('`bash') and template-literal example syntax (${...}); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00013 (Allowed: FP: cisco-ai-skill-scanner matched local emulator addresses in docs (10.0.2.2, 127.0.0.1:9399); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00066 (Allowed: FP: cisco-ai-skill-scanner matched documentation code-fence markers ('`bash') and template-literal example syntax (${...}); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00111 (Allowed: FP: cisco-ai-skill-scanner matched SDK API method names in docs ('subscribe()', 'execute()', 'executeQuery', 'id: UUID!'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00111 (Allowed: FP: cisco-ai-skill-scanner matched SDK API method names in docs ('subscribe()', 'execute()', 'executeQuery', 'id: UUID!'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00066 (Allowed: FP: cisco-ai-skill-scanner matched documentation code-fence markers ('`bash') and template-literal example syntax (${...}); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00066 (Allowed: FP: cisco-ai-skill-scanner matched documentation code-fence markers ('`bash') and template-literal example syntax (${...}); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00051 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose ('for each'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00066 (Allowed: FP: cisco-ai-skill-scanner matched documentation code-fence markers ('`bash') and template-literal example syntax (${...}); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00088 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00010 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples (GraphQL operation/filter descriptions, 'default' branch text); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00111 (Allowed: FP: cisco-ai-skill-scanner matched SDK API method names in docs ('subscribe()', 'execute()', 'executeQuery', 'id: UUID!'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00004 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose (markdown headers like '# Admin', '### Configuration'); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00066 (Allowed: FP: cisco-ai-skill-scanner matched documentation code-fence markers ('`bash') and template-literal example syntax (${...}); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00161 (Allowed: FP: cisco-ai-skill-scanner matched documentation prose/code examples; no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00012 (Allowed: FP: cisco-ai-skill-scanner matched GraphQL/SQL example syntax (named variables $id/$key, UPDATE/DELETE example statements); no executable threat. firebase/agent-skills @02c0a61.)
- ATR_2026_00040 (Allowed: FP: cisco-ai-skill-scanner matched word fragments 'exec'/'Exec' (from execute/Exec) and 'deploy'/'Deploy' in documentation; no executable threat. firebase/agent-skills @02c0a61.)

❌ firebase-firestore

Status: Failed
Findings: 43
Blocking: 21

Blocking issues:

[ATR_2026_00012] (HIGH) Pattern detected: `authorUid (references/standard/security_rules.md:313)
[ATR_2026_00012] (HIGH) Pattern detected: `allow update: if isOwner(resource.data.uid (references/standard/security_rules.md:336)
[ATR_2026_00010] (CRITICAL) Pattern detected: update rules, use `fieldUnc (references/standard/security_rules.md:350)
[ATR_2026_00012] (HIGH) Pattern detected: `request.auth.uid (references/standard/security_rules.md:351)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(database) (references/standard/security_rules.md:438)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(database) (references/standard/security_rules.md:439)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(database) (references/standard/security_rules.md:442)
[ATR_2026_00111] (CRITICAL) Pattern detected: $(database) (references/standard/security_rules.md:443)
[ATR_2026_00051] (HIGH) Pattern detected: For each (references/standard/security_rules.md:455)
[ATR_2026_00012] (HIGH) Pattern detected: create a valid (references/standard/security_rules.md:486)
[ATR_2026_00012] (HIGH) Pattern detected: create a valid (references/standard/security_rules.md:497)
[ATR_2026_00012] (HIGH) Pattern detected: update it into an invalid (references/standard/security_rules.md:498)
[ATR_2026_00010] (CRITICAL) Pattern detected: isAdmin: true to my user profile document? (Tests relianc (references/standard/security_rules.md:507)
[ATR_2026_00012] (HIGH) Pattern detected: likes/{userId})? Can I inc (references/standard/security_rules.md:529)
[ATR_2026_00012] (HIGH) Pattern detected: `status == 'publish (references/standard/security_rules.md:535)
[ATR_2026_00012] (HIGH) Pattern detected: list only when `resource.data.status == 'publish (references/standard/security_rules.md:536)
[ATR_2026_00010] (CRITICAL) Pattern detected: update rules (inc (references/standard/security_rules.md:537)
[ATR_2026_00010] (CRITICAL) Pattern detected: ` func (references/standard/security_rules.md:538)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/standard/security_rules.md:561)
[ATR_2026_00111] (CRITICAL) Pattern detected: setDoc (references/standard/web_sdk_usage.md:26)
[ATR_2026_00012] (HIGH) Pattern detected: `onSnapsh (references/standard/web_sdk_usage.md:131)

❌ gha-security-review

Status: Failed
Findings: 61
Blocking: 40

Blocking issues:

[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/runner-infrastructure.md:48)
[ATR_2026_00040] (CRITICAL) Pattern detected: bash (references/runner-infrastructure.md:50)
[ATR_2026_00161] (CRITICAL) Pattern detected: .env (references/runner-infrastructure.md:51)
[ATR_2026_00201] (CRITICAL) Pattern detected: curl -d @/home/runner/work/*/secret (references/runner-infrastructure.md:52)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/runner-infrastructure.md:62)
[ATR_2026_00013] (CRITICAL) Pattern detected: 0.0.0.0 (references/runner-infrastructure.md:65)
[ATR_2026_00263] (CRITICAL) Pattern detected: curl http://169.254.169.254/latest/meta-data (references/runner-infrastructure.md:69)
[ATR_2026_00010] (CRITICAL) Pattern detected: actions/cache stores and restores files between workflow runs using a key. The cache is scoped to a branch, but **feature branches can read caches from the default branc (references/runner-infrastructure.md:78)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ hashFiles('package-lock.json') }} (references/runner-infrastructure.md:84)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ hashFiles('package-lock.json') }} (references/runner-infrastructure.md:98)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ hashFiles('package-lock.json') }} (references/runner-infrastructure.md:112)
[ATR_2026_00012] (HIGH) Pattern detected: | Branc (references/runner-infrastructure.md:119)
[ATR_2026_00012] (HIGH) Pattern detected: | Default branc (references/runner-infrastructure.md:121)
[ATR_2026_00012] (HIGH) Pattern detected: | Feature branc (references/runner-infrastructure.md:122)
[ATR_2026_00012] (HIGH) Pattern detected: | PR from fork | Fork branch + main | Fork branc (references/runner-infrastructure.md:123)
[ATR_2026_00010] (CRITICAL) Pattern detected: main and write to their own branc (references/runner-infrastructure.md:125)
[ATR_2026_00063] (CRITICAL) Pattern detected: upload (references/runner-infrastructure.md:133)
[ATR_2026_00063] (CRITICAL) Pattern detected: upload (references/runner-infrastructure.md:141)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/runner-infrastructure.md:146)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ github.event.workflow_run.id }} (references/runner-infrastructure.md:155)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/runner-infrastructure.md:156)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/runner-infrastructure.md:169)
[ATR_2026_00063] (CRITICAL) Pattern detected: upload (references/runner-infrastructure.md:176)
[ATR_2026_00063] (CRITICAL) Pattern detected: upload (references/runner-infrastructure.md:177)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${{ github.ref }}-${{ hashFiles('package-lock.json') }} (references/runner-infrastructure.md:222)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/runner-infrastructure.md:238)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/runner-infrastructure.md:239)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/runner-infrastructure.md:246)
[ATR_2026_00010] (CRITICAL) Pattern detected: pull_request_target + fork checkout | Critical | Fork code + secrets + persistenc (references/runner-infrastructure.md:256)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/runner-infrastructure.md:258)
[ATR_2026_00010] (CRITICAL) Pattern detected: push to protected branc (references/runner-infrastructure.md:259)
[ATR_2026_00010] (CRITICAL) Pattern detected: uses:. If these actions are not pinned to immutable referenc (references/supply-chain.md:5)
[ATR_2026_00111] (CRITICAL) Pattern detected: | bash (references/supply-chain.md:59)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/supply-chain.md:61)
[ATR_2026_00111] (CRITICAL) Pattern detected: | bash (references/supply-chain.md:68)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/supply-chain.md:69)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/supply-chain.md:78)
[ATR_2026_00012] (HIGH) Pattern detected: | Action that curl (references/supply-chain.md:147)
[ATR_2026_00111] (CRITICAL) Pattern detected: |bash (references/supply-chain.md:155)
[ATR_2026_00040] (CRITICAL) Pattern detected: EXEC (references/supply-chain.md:159)

✅ grilling

Status: Passed
Findings: 4
Allowed (not blocking): 1
- MANIFEST_MISSING_LICENSE (Allowed: mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

❌ mongodb-atlas-stream-processing

Status: Failed
Findings: 435
Blocking: 156

Blocking issues:

[ATR_2026_00010] (CRITICAL) Pattern detected: responseFormat — `"conc (SKILL.md:33)
[ATR_2026_00010] (CRITICAL) Pattern detected: `inc (SKILL.md:38)
[ATR_2026_00013] (CRITICAL) Pattern detected: Kafka/ (SKILL.md:39)
[ATR_2026_00010] (CRITICAL) Pattern detected: projectId, workspaceName, cloudProvider, region, tier, `inc (SKILL.md:45)
[ATR_2026_00010] (CRITICAL) Pattern detected: projectId, workspaceName, connectionName, connectionType, connectionConfig. Leave empty: all workspace and processor fields. (See [references/connection-configs.md](referenc (SKILL.md:46)
[ATR_2026_00010] (CRITICAL) Pattern detected: connection | Blocks if referenc (SKILL.md:86)
[ATR_2026_00013] (CRITICAL) Pattern detected: mongodb/ (SKILL.md:107)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (SKILL.md:121)
[ATR_2026_00040] (CRITICAL) Pattern detected: terminal (SKILL.md:124)
[ATR_2026_00010] (CRITICAL) Pattern detected: $emit target** — Lambda uses `$externalFunc (SKILL.md:125)
[ATR_2026_00012] (HIGH) Pattern detected: withvalidationAction: "error"`** — crash (SKILL.md:126)
[ATR_2026_00012] (HIGH) Pattern detected: $source (change stream)**: inc (SKILL.md:129)
[ATR_2026_00012] (HIGH) Pattern detected: $emit (Kinesis)**: MUST inc (SKILL.md:131)
[ATR_2026_00010] (CRITICAL) Pattern detected: $https**: must inc (SKILL.md:133)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution (SKILL.md:134)
[ATR_2026_00010] (CRITICAL) Pattern detected: $validate**: must inc (SKILL.md:135)
[ATR_2026_00010] (CRITICAL) Pattern detected: $lookup**: inc (SKILL.md:136)
[ATR_2026_00012] (HIGH) Pattern detected: avro, not AVRO). See [referenc (SKILL.md:141)
[ATR_2026_00004] (CRITICAL) Pattern detected: {role: " (SKILL.md:150)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (SKILL.md:150)
[ATR_2026_00010] (CRITICAL) Pattern detected: `inc (SKILL.md:152)
[ATR_2026_00012] (HIGH) Pattern detected: | As Source ($source) | As Sink ($merge / $emit) | Mid (SKILL.md:172)
[ATR_2026_00012] (HIGH) Pattern detected: | Source MUST inc (SKILL.md:175)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (SKILL.md:177)
[ATR_2026_00012] (HIGH) Pattern detected: | Can be used mid (SKILL.md:178)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (SKILL.md:179)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "sync" (SKILL.md:184)
[ATR_2026_00051] (HIGH) Pattern detected: for each (SKILL.md:195)
[ATR_2026_00051] (HIGH) Pattern detected: for each (SKILL.md:196)
[ATR_2026_00013] (CRITICAL) Pattern detected: mongodb/ (SKILL.md:197)
[ATR_2026_00012] (HIGH) Pattern detected: $addFields / $project transforms (validate resh (SKILL.md:207)
[ATR_2026_00012] (HIGH) Pattern detected: →diagnose-processor` — one-sh (SKILL.md:217)
[ATR_2026_00040] (CRITICAL) Pattern detected: terminal (SKILL.md:231)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (SKILL.md:233)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (SKILL.md:235)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (SKILL.md:247)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (SKILL.md:251)
[ATR_2026_00010] (CRITICAL) Pattern detected: `referenc (SKILL.md:252)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (SKILL.md:258)
[PG_PII_CREDENTIAL_HARVESTING] (CRITICAL) Pattern detected: Store API authentication credential (SKILL.md:265)
[ATR_2026_00010] (CRITICAL) Pattern detected: references/pipeline-patterns.md](referenc (SKILL.md:271)
[ATR_2026_00010] (CRITICAL) Pattern detected: references/connection-configs.md](referenc (SKILL.md:272)
[ATR_2026_00010] (CRITICAL) Pattern detected: references/development-workflow.md](referenc (SKILL.md:273)
[ATR_2026_00010] (CRITICAL) Pattern detected: references/output-diagnostics.md](referenc (SKILL.md:274)
[ATR_2026_00010] (CRITICAL) Pattern detected: references/sizing-and-parallelism.md](referenc (SKILL.md:275)
[ATR_2026_00013] (CRITICAL) Pattern detected: mongodb/ (references/connection-configs.md:3)
[ATR_2026_00012] (HIGH) Pattern detected: | As Source ($source) | As Sink ($merge / $emit) | Mid (references/connection-configs.md:9)
[ATR_2026_00012] (HIGH) Pattern detected: | Source MUST inc (references/connection-configs.md:12)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/connection-configs.md:14)
[ATR_2026_00012] (HIGH) Pattern detected: | Can be used mid (references/connection-configs.md:15)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/connection-configs.md:16)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "sync" (references/connection-configs.md:22)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/connection-configs.md:26)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "sync" (references/connection-configs.md:27)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/connection-configs.md:28)
[ATR_2026_00051] (HIGH) Pattern detected: for each (references/connection-configs.md:62)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/connection-configs.md:67)
[ATR_2026_00012] (HIGH) Pattern detected: $https enrichment ONLY — they are NOT valid (references/connection-configs.md:70)
[PG_PII_CREDENTIAL_HARVESTING] (CRITICAL) Pattern detected: ask the user for password (references/connection-configs.md:114)
[ATR_2026_00004] (CRITICAL) Pattern detected: {role: " (references/connection-configs.md:119)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/connection-configs.md:119)
[ATR_2026_00021] (CRITICAL) Pattern detected: password": "my-password (references/connection-configs.md:130)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/connection-configs.md:162)
[ATR_2026_00004] (CRITICAL) Pattern detected: {role: " (references/connection-configs.md:170)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/connection-configs.md:170)
[ATR_2026_00013] (CRITICAL) Pattern detected: ::1 (references/connection-configs.md:178)
[ATR_2026_00063] (CRITICAL) Pattern detected: webhook (references/connection-configs.md:190)
[ATR_2026_00012] (HIGH) Pattern detected: $https enrichment stages ONLY. They are NOT valid (references/connection-configs.md:196)
[ATR_2026_00063] (CRITICAL) Pattern detected: base64 (references/connection-configs.md:214)
[ATR_2026_00013] (CRITICAL) Pattern detected: ::1 (references/connection-configs.md:226)
[ATR_2026_00013] (CRITICAL) Pattern detected: ::1 (references/connection-configs.md:238)
[PG_PII_CREDENTIAL_HARVESTING] (CRITICAL) Pattern detected: collect sensitive fields (password (references/connection-configs.md:261)
[ATR_2026_00010] (CRITICAL) Pattern detected: sample_stream_solar (default, auto-created when `inc (references/connection-configs.md:266)
[ATR_2026_00012] (HIGH) Pattern detected: action='get-networking' to find the PrivateLink_id (references/connection-configs.md:296)
[ATR_2026_00010] (CRITICAL) Pattern detected: `$func (references/development-workflow.md:14)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/development-workflow.md:15)
[ATR_2026_00010] (CRITICAL) Pattern detected: `inc (references/development-workflow.md:33)
[ATR_2026_00051] (HIGH) Pattern detected: for each (references/development-workflow.md:48)
[ATR_2026_00051] (HIGH) Pattern detected: for each (references/development-workflow.md:54)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/development-workflow.md:60)
[ATR_2026_00051] (HIGH) Pattern detected: for each (references/development-workflow.md:79)
[ATR_2026_00010] (CRITICAL) Pattern detected: `$externalFunc (references/development-workflow.md:86)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/development-workflow.md:144)
[ATR_2026_00098] (CRITICAL) Pattern detected: "amount": 1 (references/development-workflow.md:145)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/development-workflow.md:149)
[ATR_2026_00012] (HIGH) Pattern detected: →inspect-processor` — state sh (references/development-workflow.md:163)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/development-workflow.md:179)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/development-workflow.md:207)
[ATR_2026_00010] (CRITICAL) Pattern detected: $https has parallelism setting (inc (references/development-workflow.md:225)
[ATR_2026_00051] (HIGH) Pattern detected: for each (references/development-workflow.md:237)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/development-workflow.md:250)
[ATR_2026_00088] (HIGH) Pattern detected: output (alert) | Probably normal (references/development-workflow.md:253)
[ATR_2026_00012] (HIGH) Pattern detected: | OOM / processor crash (references/development-workflow.md:255)
[ATR_2026_00012] (HIGH) Pattern detected: | Slow throughput | Low parallelism on I/O stages | Inc (references/development-workflow.md:256)
[ATR_2026_00012] (HIGH) Pattern detected: sp.process() in mongosh (references/development-workflow.md:259)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/development-workflow.md:262)
[ATR_2026_00088] (HIGH) Pattern detected: stop → restart. Check log (references/development-workflow.md:266)
[ATR_2026_00012] (HIGH) Pattern detected: | 401 / 403 on API call | Invalid (references/development-workflow.md:269)
[ATR_2026_00012] (HIGH) Pattern detected: | Too many API calls | Wait and retry; avoid (references/development-workflow.md:270)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/development-workflow.md:272)
[ATR_2026_00010] (CRITICAL) Pattern detected: atlas-streams-discover → action: "inspect-connection" for EACH connection referenc (references/development-workflow.md:278)
[ATR_2026_00051] (HIGH) Pattern detected: for each (references/development-workflow.md:280)
[ATR_2026_00010] (CRITICAL) Pattern detected: $source and ends with $merge, $emit, $https, or $externalFunction (async (references/development-workflow.md:287)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/development-workflow.md:288)
[ATR_2026_00010] (CRITICAL) Pattern detected: $source inc (references/development-workflow.md:289)
[ATR_2026_00010] (CRITICAL) Pattern detected: $source with windowed pipeline inc (references/development-workflow.md:290)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution (references/development-workflow.md:294)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/development-workflow.md:297)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/mcp-troubleshooting.md:27)
[ATR_2026_00012] (HIGH) Pattern detected: sp.process() in mongosh (references/mcp-troubleshooting.md:38)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/mcp-troubleshooting.md:48)
[ATR_2026_00088] (HIGH) Pattern detected: output may be perfectly normal (references/output-diagnostics.md:5)
[ATR_2026_00088] (HIGH) Pattern detected: output during normal (references/output-diagnostics.md:20)
[ATR_2026_00012] (HIGH) Pattern detected: $match for valid (references/output-diagnostics.md:54)
[ATR_2026_00012] (HIGH) Pattern detected: find tool with `sort: {"_id (references/output-diagnostics.md:101)
[ATR_2026_00013] (CRITICAL) Pattern detected: mongodb/ (references/pipeline-patterns.md:3)
[ATR_2026_00012] (HIGH) Pattern detected: $project | Select/resh (references/pipeline-patterns.md:12)
[ATR_2026_00012] (HIGH) Pattern detected: $validate | Schema enforcement (route invalid (references/pipeline-patterns.md:18)
[ATR_2026_00040] (CRITICAL) Pattern detected: terminal (references/pipeline-patterns.md:21)
[ATR_2026_00010] (CRITICAL) Pattern detected: `$func (references/pipeline-patterns.md:25)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/pipeline-patterns.md:34)
[ATR_2026_00010] (CRITICAL) Pattern detected: `$func (references/pipeline-patterns.md:37)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/pipeline-patterns.md:38)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/pipeline-patterns.md:43)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/pipeline-patterns.md:46)
[ATR_2026_00040] (CRITICAL) Pattern detected: terminal (references/pipeline-patterns.md:47)
[ATR_2026_00111] (CRITICAL) Pattern detected: shardIdleTimeout (references/pipeline-patterns.md:88)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$new (references/pipeline-patterns.md:118)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pipeline-patterns.md:180)
[ATR_2026_00063] (CRITICAL) Pattern detected: webhook (references/pipeline-patterns.md:182)
[ATR_2026_00063] (CRITICAL) Pattern detected: webhook (references/pipeline-patterns.md:185)
[ATR_2026_00010] (CRITICAL) Pattern detected: sends processed documents to an external HTTP endpoint (references/pipeline-patterns.md:192)
[ATR_2026_00063] (CRITICAL) Pattern detected: webhook (references/pipeline-patterns.md:193)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/pipeline-patterns.md:202)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/pipeline-patterns.md:207)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "sync" (references/pipeline-patterns.md:213)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/pipeline-patterns.md:288)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution (references/pipeline-patterns.md:298)
[ATR_2026_00010] (CRITICAL) Pattern detected: as: Field name to store Lambda response (required for sync, ignored for `async (references/pipeline-patterns.md:299)
[ATR_2026_00084] (HIGH) Pattern detected: , ignored for async) (references/pipeline-patterns.md:299)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/pipeline-patterns.md:303)
[ATR_2026_00012] (HIGH) Pattern detected: "dlq" (recommended), "discard", "error" (crash (references/pipeline-patterns.md:319)
[ATR_2026_00010] (CRITICAL) Pattern detected: body: JavaScript function as string. args: array of field referenc (references/pipeline-patterns.md:332)
[ATR_2026_00012] (HIGH) Pattern detected: {"$type": (references/pipeline-patterns.md:389)
[ATR_2026_00040] (CRITICAL) Pattern detected: terminal (references/pipeline-patterns.md:428)
[ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/pipeline-patterns.md:434)
[ATR_2026_00010] (CRITICAL) Pattern detected: parallelism: 1. This base level is inc (references/sizing-and-parallelism.md:17)
[ATR_2026_00010] (CRITICAL) Pattern detected: $merge — conc (references/sizing-and-parallelism.md:22)
[ATR_2026_00010] (CRITICAL) Pattern detected: $lookup — conc (references/sizing-and-parallelism.md:23)
[ATR_2026_00010] (CRITICAL) Pattern detected: $https — conc (references/sizing-and-parallelism.md:24)
[ATR_2026_00010] (CRITICAL) Pattern detected: `$func (references/sizing-and-parallelism.md:92)
[ATR_2026_00010] (CRITICAL) Pattern detected: `$func (references/sizing-and-parallelism.md:102)
[ATR_2026_00065] (HIGH) Pattern detected: Data transfer (references/sizing-and-parallelism.md:135)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/sizing-and-parallelism.md:143)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/sizing-and-parallelism.md:152)
[ATR_2026_00012] (HIGH) Pattern detected: | Maintenanc (references/sizing-and-parallelism.md:176)

❌ mongodb-schema-design

Status: Failed
Findings: 395
Blocking: 118

Blocking issues:

[ATR_2026_00012] (HIGH) Pattern detected: insert into (references/fundamental-document-size.md:98)
[ATR_2026_00012] (HIGH) Pattern detected: | Embed recent N, referenc (references/fundamental-document-size.md:157)
[ATR_2026_00012] (HIGH) Pattern detected: | Updates slow as array grows | Switch to referenc (references/fundamental-document-size.md:158)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-document-size.md:175)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-document-size.md:183)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-document-size.md:192)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-document-size.md:203)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-document-size.md:206)
[ATR_2026_00012] (HIGH) Pattern detected: | Relationsh (references/fundamental-embed-vs-reference.md:26)
[ATR_2026_00012] (HIGH) Pattern detected: | Publish (references/fundamental-embed-vs-reference.md:31)
[ATR_2026_00012] (HIGH) Pattern detected: | 1:many (unbounded) | Separate adds | No | **Referenc (references/fundamental-embed-vs-reference.md:32)
[ATR_2026_00012] (HIGH) Pattern detected: | Both directions | Moderate | **Referenc (references/fundamental-embed-vs-reference.md:33)
[ATR_2026_00111] (CRITICAL) Pattern detected: settings (references/fundamental-embed-vs-reference.md:65)
[ATR_2026_00012] (HIGH) Pattern detected: ; index on { publish (references/fundamental-embed-vs-reference.md:163)
[ATR_2026_00012] (HIGH) Pattern detected: _id, title, isbn) in the publish (references/fundamental-embed-vs-reference.md:182)
[PG_PII_SSN_HARVESTING] (CRITICAL) Pattern detected: require choosin (references/fundamental-embed-vs-reference.md:199)
[ATR_2026_00140] (HIGH) Pattern detected: the reverse (references/fundamental-embed-vs-reference.md:211)
[ATR_2026_00012] (HIGH) Pattern detected: | Many students per class | Referenc (references/fundamental-embed-vs-reference.md:253)
[ATR_2026_00012] (HIGH) Pattern detected: | Large/growing both sides | Referenc (references/fundamental-embed-vs-reference.md:255)
[ATR_2026_00012] (HIGH) Pattern detected: | Pattern | Parent | Children | Descendants | Anc (references/fundamental-embed-vs-reference.md:337)
[ATR_2026_00012] (HIGH) Pattern detected: | Child Refs | Membersh (references/fundamental-embed-vs-reference.md:340)
[ATR_2026_00012] (HIGH) Pattern detected: | Array of Anc (references/fundamental-embed-vs-reference.md:341)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-embed-vs-reference.md:362)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$cid (references/fundamental-embed-vs-reference.md:394)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$sid (references/fundamental-embed-vs-reference.md:395)
[ATR_2026_00012] (HIGH) Pattern detected: email can be omitted entirely. These invalid (references/fundamental-schema-validation.md:14)
[ATR_2026_00012] (HIGH) Pattern detected: error | Reject invalid (references/fundamental-schema-validation.md:82)
[ATR_2026_00060] (HIGH) Pattern detected: runCommand (references/fundamental-schema-validation.md:89)
[ATR_2026_00060] (HIGH) Pattern detected: runCommand (references/fundamental-schema-validation.md:102)
[ATR_2026_00085] (HIGH) Pattern detected: Skip validation (references/fundamental-schema-validation.md:111)
[ATR_2026_00217] (CRITICAL) Pattern detected: sync timestamp. The application tracks counts in local memory (e.g. a Map key (references/pattern-approximation.md:31)
[ATR_2026_00010] (CRITICAL) Pattern detected: lastSyncedAt. When the local counter reaches the threshold, the application issues a single $inc by the threshold amount and updates lastSyncedAt. Unsynced local inc (references/pattern-approximation.md:33)
[ATR_2026_00012] (HIGH) Pattern detected: | Conc (references/pattern-approximation.md:37)
[ATR_2026_00012] (HIGH) Pattern detected: | Write reduction | ~100x fewer DB writes (at thresh (references/pattern-approximation.md:39)
[ATR_2026_00012] (HIGH) Pattern detected: | Staleness | Up to `thresh (references/pattern-approximation.md:40)
[ATR_2026_00012] (HIGH) Pattern detected: | Crash safety | Unsynced local inc (references/pattern-approximation.md:42)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/pattern-approximation.md:74)
[ATR_2026_00012] (HIGH) Pattern detected: ; query via Federated Database Instanc (references/pattern-archive.md:48)
[PG_PII_SSN_HARVESTING] (CRITICAL) Pattern detected: Store age in a sin (references/pattern-archive.md:78)
[ATR_2026_00012] (HIGH) Pattern detected: `_id (references/pattern-archive.md:107)
[ATR_2026_00012] (HIGH) Pattern detected: $merge-based archival sh (references/pattern-archive.md:110)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/pattern-attribute.md:74)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-bucket.md:12)
[ATR_2026_00010] (CRITICAL) Pattern detected: _id enc (references/pattern-bucket.md:20)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-bucket.md:75)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/pattern-bucket.md:97)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$new (references/pattern-computed.md:79)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$new (references/pattern-computed.md:80)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$new (references/pattern-computed.md:81)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/pattern-computed.md:82)
[ATR_2026_00012] (HIGH) Pattern detected: | Transaction history | Account balanc (references/pattern-computed.md:96)
[ATR_2026_00010] (CRITICAL) Pattern detected: $merge or $out—the same mechanism shown in Strategy 2 above. The difference is conc (references/pattern-computed.md:133)
[ATR_2026_00010] (CRITICAL) Pattern detected: updatePolicy func (references/pattern-document-versioning.md:92)
[ATR_2026_00012] (HIGH) Pattern detected: | Reproduce complete historical state | Full snapsh (references/pattern-document-versioning.md:118)
[ATR_2026_00051] (HIGH) Pattern detected: Count: -1 (references/pattern-document-versioning.md:137)
[ATR_2026_00010] (CRITICAL) Pattern detected: $lookup on hot paths by caching selected referenc (references/pattern-extended-reference.md:4)
[ATR_2026_00010] (CRITICAL) Pattern detected: customer subdocument with _id (kept as a referenc (references/pattern-extended-reference.md:39)
[ATR_2026_00010] (CRITICAL) Pattern detected: updateMany on the embedded reference _id. This can be done synchronously or async (references/pattern-extended-reference.md:43)
[ATR_2026_00012] (HIGH) Pattern detected: | Slowly-changing data | Real-time values (balanc (references/pattern-extended-reference.md:51)
[ATR_2026_00012] (HIGH) Pattern detected: | Event attendees | Outlier frequenc (references/pattern-outlier.md:120)
[ATR_2026_00051] (HIGH) Pattern detected: Count: -1 (references/pattern-outlier.md:138)
[ATR_2026_00010] (CRITICAL) Pattern detected: $unionWith, shared indexes must be duplicated, adding new types requires new collections, and application code must branc (references/pattern-polymorphic.md:14)
[ATR_2026_00012] (HIGH) Pattern detected: products collection. All documents sh (references/pattern-polymorphic.md:18)
[ATR_2026_00060] (HIGH) Pattern detected: runCommand (references/pattern-polymorphic.md:106)
[ATR_2026_00010] (CRITICAL) Pattern detected: type value and any type-specific fields. Add partial indexes for type-specific queries as needed, and update schema validation to inc (references/pattern-polymorphic.md:139)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/pattern-polymorphic.md:157)
[ATR_2026_00051] (HIGH) Pattern detected: count: -1 (references/pattern-polymorphic.md:160)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/pattern-schema-versioning.md:37)
[ATR_2026_00051] (HIGH) Pattern detected: for each (references/pattern-schema-versioning.md:167)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${doc.profile.firstName} ${doc.profile.lastName} (references/pattern-schema-versioning.md:183)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${current.schemaVersion} (references/pattern-schema-versioning.md:192)
[ATR_2026_00111] (CRITICAL) Pattern detected: shippingAddress (references/pattern-schema-versioning.md:207)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/pattern-schema-versioning.md:217)
[ATR_2026_00012] (HIGH) Pattern detected: $keys (references/pattern-schema-versioning.md:219)
[ATR_2026_00051] (HIGH) Pattern detected: count: -1 (references/pattern-schema-versioning.md:220)
[ATR_2026_00085] (HIGH) Pattern detected: Skip validation (references/pattern-schema-versioning.md:242)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:4)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:5)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:10)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:28)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:58)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:85)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:140)
[ATR_2026_00012] (HIGH) Pattern detected: `system (references/pattern-time-series-collections.md:181)
[ATR_2026_00010] (CRITICAL) Pattern detected: find, aggregate, and `distinc (references/source-query-stats.md:5)
[ATR_2026_00062] (CRITICAL) Pattern detected: mongodb (references/source-query-stats.md:15)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/source-query-stats.md:18)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:27)
[ATR_2026_00012] (HIGH) Pattern detected: $key (references/source-query-stats.md:32)
[ATR_2026_00012] (HIGH) Pattern detected: $key (references/source-query-stats.md:39)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:46)
[ATR_2026_00012] (HIGH) Pattern detected: $stageKeyValue (references/source-query-stats.md:47)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:49)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/source-query-stats.md:52)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:53)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:72)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:74)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:80)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:81)
[ATR_2026_00012] (HIGH) Pattern detected: $key (references/source-query-stats.md:82)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:83)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/source-query-stats.md:86)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:87)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:92)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/source-query-stats.md:99)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:101)
[ATR_2026_00012] (HIGH) Pattern detected: $key (references/source-query-stats.md:105)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:106)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:107)
[ATR_2026_00012] (HIGH) Pattern detected: $key (references/source-query-stats.md:108)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:109)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/source-query-stats.md:112)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:113)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:120)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-slow-query-logs.md:5)
[ATR_2026_00040] (CRITICAL) Pattern detected: Shell (references/source-slow-query-logs.md:38)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/source-slow-query-logs.md:49)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-slow-query-logs.md:59)

✅ semgrep-rule-creator

Status: Passed
Findings: 4
Allowed (not blocking): 1
- MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

❌ sharp-edges

Status: Failed
Findings: 527
Blocking: 350

Blocking issues:

[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/config-patterns.md:261)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/config-patterns.md:274)
[ATR_2026_00161] (CRITICAL) Pattern detected: /etc/passwd (references/config-patterns.md:284)
[ATR_2026_00111] (CRITICAL) Pattern detected: ; rm (references/config-patterns.md:285)
[ATR_2026_00091] (CRITICAL) Pattern detected: constructor (references/config-patterns.md:289)
[ATR_2026_00012] (HIGH) Pattern detected: host, `hostname (references/config-patterns.md:289)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/config-patterns.md:293)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/config-patterns.md:305)
[ATR_2026_00004] (CRITICAL) Pattern detected: ## Configuration (references/config-patterns.md:317)
[ATR_2026_00091] (CRITICAL) Pattern detected: Constructor (references/config-patterns.md:333)
[ATR_2026_00085] (HIGH) Pattern detected: skip signature verification (references/crypto-apis.md:15)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/crypto-apis.md:28)
[ATR_2026_00063] (CRITICAL) Pattern detected: encrypt (references/crypto-apis.md:30)
[ATR_2026_00063] (CRITICAL) Pattern detected: encrypt (references/crypto-apis.md:37)
[ATR_2026_00012] (HIGH) Pattern detected: mode, cipher, algorithm, `hash (references/crypto-apis.md:41)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/crypto-apis.md:45)
[ATR_2026_00012] (HIGH) Pattern detected: ; // Valid (references/crypto-apis.md:47)
[ATR_2026_00012] (HIGH) Pattern detected: ; // Valid (references/crypto-apis.md:48)
[ATR_2026_00012] (HIGH) Pattern detected: ; // Valid (references/crypto-apis.md:49)
[ATR_2026_00012] (HIGH) Pattern detected: $password (references/crypto-apis.md:52)
[ATR_2026_00063] (CRITICAL) Pattern detected: Encrypt (references/crypto-apis.md:63)
[ATR_2026_00063] (CRITICAL) Pattern detected: Encrypt (references/crypto-apis.md:66)
[ATR_2026_00063] (CRITICAL) Pattern detected: Encrypt (references/crypto-apis.md:67)
[ATR_2026_00063] (CRITICAL) Pattern detected: Encrypt (references/crypto-apis.md:73)
[ATR_2026_00063] (CRITICAL) Pattern detected: Encrypt (references/crypto-apis.md:76)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/crypto-apis.md:82)
[ATR_2026_00063] (CRITICAL) Pattern detected: encrypt (references/crypto-apis.md:84)
[ATR_2026_00111] (CRITICAL) Pattern detected: \x00 (references/crypto-apis.md:88)
[ATR_2026_00063] (CRITICAL) Pattern detected: encrypt (references/crypto-apis.md:89)
[ATR_2026_00063] (CRITICAL) Pattern detected: encrypt (references/crypto-apis.md:90)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/crypto-apis.md:99)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/crypto-apis.md:111)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/crypto-apis.md:128)
[ATR_2026_00063] (CRITICAL) Pattern detected: encrypt (references/crypto-apis.md:141)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/crypto-apis.md:156)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/crypto-apis.md:169)
[ATR_2026_00063] (CRITICAL) Pattern detected: encrypt (references/crypto-apis.md:170)
[ATR_2026_00063] (CRITICAL) Pattern detected: encrypt (references/crypto-apis.md:171)
[ATR_2026_00021] (CRITICAL) Pattern detected: password = argon2.hash(password) (references/crypto-apis.md:175)
[ATR_2026_00063] (CRITICAL) Pattern detected: encrypt (references/crypto-apis.md:187)
[ATR_2026_00066] (CRITICAL) Pattern detected: \0 (references/lang-c.md:34)
[ATR_2026_00040] (CRITICAL) Pattern detected: truncate (references/lang-c.md:39)
[ATR_2026_00010] (CRITICAL) Pattern detected: *printf family func (references/lang-c.md:62)
[ATR_2026_00012] (HIGH) Pattern detected: ; // Stack pointer invalid (references/lang-c.md:130)
[ATR_2026_00091] (CRITICAL) Pattern detected: \n (references/lang-c.md:144)
[ATR_2026_00012] (HIGH) Pattern detected: ; // NOT async (references/lang-c.md:144)
[ATR_2026_00012] (HIGH) Pattern detected: ; // NOT async (references/lang-c.md:145)
[ATR_2026_00012] (HIGH) Pattern detected: ; // NOT async (references/lang-c.md:146)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-c.md:173)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-c.md:174)
[ATR_2026_00012] (HIGH) Pattern detected: ; // Expands to ((a++) * (a++)) - inc (references/lang-c.md:183)
[ATR_2026_00010] (CRITICAL) Pattern detected: `strnc (references/lang-c.md:205)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:5)
[ATR_2026_00012] (HIGH) Pattern detected: ; // NullReferenc (references/lang-csharp.md:11)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:28)
[ATR_2026_00091] (CRITICAL) Pattern detected: constructor (references/lang-csharp.md:43)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:47)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:61)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:73)
[ATR_2026_00012] (HIGH) Pattern detected: ; // Crash (references/lang-csharp.md:76)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:96)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/lang-csharp.md:102)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:104)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-csharp.md:107)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-csharp.md:111)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/lang-csharp.md:116)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/lang-csharp.md:117)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:124)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:137)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:144)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:161)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:177)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:183)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:199)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:206)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:221)
[ATR_2026_00066] (CRITICAL) Pattern detected: /* managed cleanup */ (references/lang-csharp.md:232)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:241)
[ATR_2026_00012] (HIGH) Pattern detected: ; // Subscriber now rooted by Publish (references/lang-csharp.md:249)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/lang-csharp.md:259)
[ATR_2026_00012] (HIGH) Pattern detected: new Connection[n] for structs | Invalid (references/lang-csharp.md:276)
[ATR_2026_00010] (CRITICAL) Pattern detected: `async (references/lang-csharp.md:278)
[ATR_2026_00010] (CRITICAL) Pattern detected: await before async (references/lang-csharp.md:280)
[ATR_2026_00203] (HIGH) Pattern detected: vulnerability pattern: (references/lang-go.md:10)
[ATR_2026_00010] (CRITICAL) Pattern detected: math/bits overflow-checking func (references/lang-go.md:24)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/lang-go.md:87)
[ATR_2026_00040] (CRITICAL) Pattern detected: "ADMIN" (references/lang-go.md:90)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/lang-go.md:91)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/lang-go.md:94)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-go.md:115)
[ATR_2026_00010] (CRITICAL) Pattern detected: `return &Conc (references/lang-go.md:264)
[ATR_2026_00012] (HIGH) Pattern detected: `json.Unmarsh (references/lang-go.md:265)
[ATR_2026_00010] (CRITICAL) Pattern detected: `go func (references/lang-go.md:267)
[ATR_2026_00012] (HIGH) Pattern detected: _, err := instead of _, err = | Error sh (references/lang-go.md:270)
[ATR_2026_00012] (HIGH) Pattern detected: ObjectInputStream (references/lang-java.md:56)
[ATR_2026_00010] (CRITICAL) Pattern detected: `Conc (references/lang-java.md:170)
[ATR_2026_00091] (CRITICAL) Pattern detected: constructor (references/lang-java.md:209)
[ATR_2026_00161] (CRITICAL) Pattern detected: /etc/passwd (references/lang-java.md:232)
[ATR_2026_00002] (HIGH) Pattern detected: [] (references/lang-java.md:232)
[ATR_2026_00010] (CRITICAL) Pattern detected: == with objects | Referenc (references/lang-java.md:252)
[ATR_2026_00012] (HIGH) Pattern detected: ObjectInputStream (references/lang-java.md:254)
[ATR_2026_00111] (CRITICAL) Pattern detected: catch (references/lang-java.md:255)
[ATR_2026_00111] (CRITICAL) Pattern detected: catch (Exception e) (references/lang-java.md:256)
[ATR_2026_00010] (CRITICAL) Pattern detected: String += in loop | Performanc (references/lang-java.md:257)
[ATR_2026_00066] (CRITICAL) Pattern detected: ` sh (references/lang-java.md:260)
[ATR_2026_00010] (CRITICAL) Pattern detected: `DocumentBuilderFactory.newInstanc (references/lang-java.md:263)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/lang-javascript.md:15)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/lang-javascript.md:18)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/lang-javascript.md:30)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/lang-javascript.md:34)
[ATR_2026_00091] (CRITICAL) Pattern detected: {"proto (references/lang-javascript.md:34)
[ATR_2026_00091] (CRITICAL) Pattern detected: constructor (references/lang-javascript.md:42)
[ATR_2026_00091] (CRITICAL) Pattern detected: constructor (references/lang-javascript.md:43)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/lang-javascript.md:49)
[ATR_2026_00091] (CRITICAL) Pattern detected: ['proto (references/lang-javascript.md:49)
[ATR_2026_00012] (HIGH) Pattern detected: ; // NaN - radix 1 invalid (references/lang-javascript.md:86)
[ATR_2026_00140] (HIGH) Pattern detected: reverse (references/lang-javascript.md:127)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-javascript.md:158)
[ATR_2026_00110] (CRITICAL) Pattern detected: eval( (references/lang-javascript.md:159)
[ATR_2026_00091] (CRITICAL) Pattern detected: constructor (references/lang-javascript.md:161)
[ATR_2026_00110] (CRITICAL) Pattern detected: new Function( (references/lang-javascript.md:162)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/lang-javascript.md:165)
[ATR_2026_00066] (CRITICAL) Pattern detected: ${process.exit()} (references/lang-javascript.md:168)
[ATR_2026_00110] (CRITICAL) Pattern detected: eval( (references/lang-javascript.md:169)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/lang-javascript.md:177)
[ATR_2026_00091] (CRITICAL) Pattern detected: constructor (references/lang-javascript.md:177)
[ATR_2026_00012] (HIGH) Pattern detected: ; // Unhandled rejection - may crash (references/lang-javascript.md:195)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/lang-javascript.md:220)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/lang-javascript.md:221)
[ATR_2026_00091] (CRITICAL) Pattern detected: {"proto (references/lang-javascript.md:221)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/lang-javascript.md:222)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/lang-javascript.md:226)
[ATR_2026_00012] (HIGH) Pattern detected: ; // Crash (references/lang-javascript.md:247)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/lang-javascript.md:262)
[ATR_2026_00091] (CRITICAL) Pattern detected: constructor (references/lang-javascript.md:262)
[ATR_2026_00010] (CRITICAL) Pattern detected: ` without radix | Parsing inconsistenc (references/lang-javascript.md:264)
[ATR_2026_00111] (CRITICAL) Pattern detected: eval( (references/lang-javascript.md:265)
[ATR_2026_00012] (HIGH) Pattern detected: ! non-null assertion | Null pointer crash (references/lang-javascript.md:268)
[ATR_2026_00010] (CRITICAL) Pattern detected: await before async (references/lang-javascript.md:269)
[ATR_2026_00085] (HIGH) Pattern detected: bypass null safety (references/lang-kotlin.md:11)
[ATR_2026_00040] (CRITICAL) Pattern detected: admin = (references/lang-kotlin.md:80)
[ATR_2026_00091] (CRITICAL) Pattern detected: constructor (references/lang-kotlin.md:83)
[ATR_2026_00112] (HIGH) Pattern detected: require(name.isNotBlank() (references/lang-kotlin.md:86)
[ATR_2026_00050] (HIGH) Pattern detected: while (true) (references/lang-kotlin.md:114)
[ATR_2026_00050] (HIGH) Pattern detected: while (true) (references/lang-kotlin.md:136)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-kotlin.md:235)
[ATR_2026_00111] (CRITICAL) Pattern detected: suspend fun (references/lang-kotlin.md:260)
[ATR_2026_00111] (CRITICAL) Pattern detected: catch (e: Exception) (references/lang-kotlin.md:261)
[ATR_2026_00040] (CRITICAL) Pattern detected: terminal (references/lang-kotlin.md:264)
[ATR_2026_00012] (HIGH) Pattern detected: | Extension func (references/lang-kotlin.md:265)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:5)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:23)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:30)
[ATR_2026_00012] (HIGH) Pattern detected: $stored_password (references/lang-php.md:32)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:44)
[ATR_2026_00012] (HIGH) Pattern detected: $stored_password (references/lang-php.md:46)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:53)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$name (references/lang-php.md:56)
[ATR_2026_00012] (HIGH) Pattern detected: Admin=true (references/lang-php.md:61)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:72)
[ATR_2026_00012] (HIGH) Pattern detected: unserialize( (references/lang-php.md:74)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-php.md:79)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:88)
[ATR_2026_00012] (HIGH) Pattern detected: unserialize( (references/lang-php.md:89)
[ATR_2026_00012] (HIGH) Pattern detected: unserialize( (references/lang-php.md:90)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:95)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-php.md:96)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/lang-php.md:99)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:110)
[ATR_2026_00161] (CRITICAL) Pattern detected: /etc/passwd (references/lang-php.md:114)
[ATR_2026_00066] (CRITICAL) Pattern detected: null byte (references/lang-php.md:115)
[ATR_2026_00063] (CRITICAL) Pattern detected: base64 (references/lang-php.md:117)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/lang-php.md:122)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:129)
[ATR_2026_00065] (HIGH) Pattern detected: grantAccess (references/lang-php.md:142)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:148)
[ATR_2026_00040] (CRITICAL) Pattern detected: Shell (references/lang-php.md:162)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:164)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/lang-php.md:165)
[ATR_2026_00095] (CRITICAL) Pattern detected: exec( (references/lang-php.md:167)
[ATR_2026_00111] (CRITICAL) Pattern detected: ; rm (references/lang-php.md:170)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/lang-php.md:173)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:174)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/lang-php.md:175)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/lang-php.md:178)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:182)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:199)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:214)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/lang-php.md:226)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$var (references/lang-php.md:238)
[ATR_2026_00012] (HIGH) Pattern detected: unserialize( (references/lang-php.md:239)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-php.md:240)
[ATR_2026_00010] (CRITICAL) Pattern detected: `inc (references/lang-php.md:241)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-php.md:242)
[ATR_2026_00012] (HIGH) Pattern detected: "0e\d+" == "0e\d+" | Magic hash (references/lang-php.md:243)
[ATR_2026_00012] (HIGH) Pattern detected: `session_id (references/lang-php.md:244)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:5)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:24)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/lang-python.md:32)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:34)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-python.md:35)
[MDBLOCK_PYTHON_EVAL_EXEC] (HIGH) Code block in references/lang-python.md at line 35 contains potentially dangerous Python code. (references/lang-python.md:35)
[ATR_2026_00110] (CRITICAL) Pattern detected: eval( (references/lang-python.md:36)
[ATR_2026_00095] (CRITICAL) Pattern detected: exec( (references/lang-python.md:37)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-python.md:39)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-python.md:40)
[ATR_2026_00095] (CRITICAL) Pattern detected: exec( (references/lang-python.md:41)
[ATR_2026_00110] (CRITICAL) Pattern detected: eval( (references/lang-python.md:44)
[ATR_2026_00062] (CRITICAL) Pattern detected: import (references/lang-python.md:48)
[ATR_2026_00112] (HIGH) Pattern detected: importlib.import_module( (references/lang-python.md:49)
[ATR_2026_00398] (CRITICAL) Pattern detected: pickle.loads( (references/lang-python.md:53)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-python.md:54)
[ATR_2026_00111] (CRITICAL) Pattern detected: subprocess.Popen(shell=True) (references/lang-python.md:55)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:59)
[PG_PII_SSN_HARVESTING] (CRITICAL) Pattern detected: Capture by value usin (references/lang-python.md:72)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:73)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:83)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:111)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:127)
[ATR_2026_00085] (HIGH) Pattern detected: pass # Security check (references/lang-python.md:144)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:156)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:177)
[ATR_2026_00040] (CRITICAL) Pattern detected: 'admin' (references/lang-python.md:184)
[ATR_2026_00040] (CRITICAL) Pattern detected: 'admin' (references/lang-python.md:185)
[ATR_2026_00062] (CRITICAL) Pattern detected: init (references/lang-python.md:188)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:189)
[ATR_2026_00062] (CRITICAL) Pattern detected: init (references/lang-python.md:191)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:197)
[ATR_2026_00062] (CRITICAL) Pattern detected: class (references/lang-python.md:199)
[MDBLOCK_PYTHON_EVAL_EXEC] (HIGH) Code block in references/lang-python.md at line 202 contains potentially dangerous Python code. (references/lang-python.md:202)
[ATR_2026_00110] (CRITICAL) Pattern detected: eval( (references/lang-python.md:203)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:213)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:229)
[ATR_2026_00040] (CRITICAL) Pattern detected: Subprocess (references/lang-python.md:238)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:240)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/lang-python.md:241)
[ATR_2026_00040] (CRITICAL) Pattern detected: subprocess (references/lang-python.md:242)
[ATR_2026_00095] (CRITICAL) Pattern detected: subprocess.run (references/lang-python.md:243)
[ATR_2026_00111] (CRITICAL) Pattern detected: ; rm (references/lang-python.md:244)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/lang-python.md:246)
[ATR_2026_00095] (CRITICAL) Pattern detected: subprocess.run (references/lang-python.md:247)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/lang-python.md:252)
[ATR_2026_00111] (CRITICAL) Pattern detected: eval( (references/lang-python.md:266)
[ATR_2026_00398] (CRITICAL) Pattern detected: pickle.loads( (references/lang-python.md:267)
[ATR_2026_00012] (HIGH) Pattern detected: import x where x.py exists locally | Import sh (references/lang-python.md:270)
[ATR_2026_00111] (CRITICAL) Pattern detected: subprocess.*(..., shell=True) (references/lang-python.md:274)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/lang-ruby.md:3)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:5)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-ruby.md:6)
[ATR_2026_00110] (CRITICAL) Pattern detected: eval( (references/lang-ruby.md:7)
[ATR_2026_00066] (CRITICAL) Pattern detected: #{user_input} (references/lang-ruby.md:18)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-ruby.md:22)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:26)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:34)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:53)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:60)
[ATR_2026_00040] (CRITICAL) Pattern detected: "superuser" (references/lang-ruby.md:63)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:70)
[ATR_2026_00112] (HIGH) Pattern detected: require(:user) (references/lang-ruby.md:72)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:80)
[ATR_2026_00066] (CRITICAL) Pattern detected: #{params[:name]} (references/lang-ruby.md:82)
[ATR_2026_00066] (CRITICAL) Pattern detected: #{params[:name]} (references/lang-ruby.md:87)
[ATR_2026_00066] (CRITICAL) Pattern detected: ; DROP (references/lang-ruby.md:90)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:94)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:102)
[ATR_2026_00066] (CRITICAL) Pattern detected: `ls (references/lang-ruby.md:104)
[ATR_2026_00066] (CRITICAL) Pattern detected: #{params[:dir]} (references/lang-ruby.md:105)
[ATR_2026_00095] (CRITICAL) Pattern detected: exec( (references/lang-ruby.md:106)
[ATR_2026_00066] (CRITICAL) Pattern detected: #{params[:dir]} (references/lang-ruby.md:107)
[ATR_2026_00111] (CRITICAL) Pattern detected: ; rm (references/lang-ruby.md:109)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:113)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:120)
[ATR_2026_00091] (CRITICAL) Pattern detected: \n (references/lang-ruby.md:129)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:133)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/lang-ruby.md:134)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:140)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:152)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:167)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:179)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:188)
[ATR_2026_00111] (CRITICAL) Pattern detected: whoami (references/lang-ruby.md:193)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/lang-ruby.md:194)
[ATR_2026_00110] (CRITICAL) Pattern detected: eval( (references/lang-ruby.md:198)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:203)
[ATR_2026_00066] (CRITICAL) Pattern detected: #{params[:filename]} (references/lang-ruby.md:205)
[ATR_2026_00161] (CRITICAL) Pattern detected: /etc/passwd (references/lang-ruby.md:206)
[ATR_2026_00066] (CRITICAL) Pattern detected: #{params[:cmd]} (references/lang-ruby.md:209)
[ATR_2026_00012] (HIGH) Pattern detected: |whoami") # Returns output of whoami (references/lang-ruby.md:212)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:216)
[ATR_2026_00063] (CRITICAL) Pattern detected: upload (references/lang-ruby.md:217)
[ATR_2026_00063] (CRITICAL) Pattern detected: upload (references/lang-ruby.md:218)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:223)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:240)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/lang-ruby.md:253)
[ATR_2026_00111] (CRITICAL) Pattern detected: eval( (references/lang-ruby.md:262)
[ATR_2026_00012] (HIGH) Pattern detected: `...#{`, `system (references/lang-ruby.md:268)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/lang-ruby.md:272)
[ATR_2026_00012] (HIGH) Pattern detected: unsafe block sh (references/lang-rust.md:56)
[ATR_2026_00012] (HIGH) Pattern detected: ; // Vec's memory leaked, but ptr still valid (references/lang-rust.md:79)
[ATR_2026_00001] (HIGH) Pattern detected: Drop Order (references/lang-rust.md:218)
[ATR_2026_00010] (CRITICAL) Pattern detected: `unsafe impl Send/Sync (references/lang-rust.md:269)
[ATR_2026_00276] (HIGH) Pattern detected: ‍ (references/lang-swift.md:96)
[ATR_2026_00012] (HIGH) Pattern detected: ! force unwrap | Crash (references/lang-swift.md:278)
[ATR_2026_00012] (HIGH) Pattern detected: as! force cast | Crash (references/lang-swift.md:279)
[ATR_2026_00012] (HIGH) Pattern detected: try! | Crash (references/lang-swift.md:280)
[ATR_2026_00012] (HIGH) Pattern detected: String! IUO types | Deferred crash (references/lang-swift.md:282)
[ATR_2026_00066] (CRITICAL) Pattern detected: \0 (references/language-specific.md:36)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/language-specific.md:117)
[ATR_2026_00040] (CRITICAL) Pattern detected: "ADMIN" (references/language-specific.md:120)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/language-specific.md:121)
[ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/language-specific.md:124)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/language-specific.md:132)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/language-specific.md:261)
[ATR_2026_00012] (HIGH) Pattern detected: ObjectInputStream (references/language-specific.md:262)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/language-specific.md:263)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/language-specific.md:266)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/language-specific.md:318)
[ATR_2026_00012] (HIGH) Pattern detected: ; // NullReferenc (references/language-specific.md:325)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/language-specific.md:330)
[ATR_2026_00012] (HIGH) Pattern detected: ```csh (references/language-specific.md:343)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/language-specific.md:361)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/language-specific.md:379)
[ATR_2026_00062] (CRITICAL) Pattern detected: $$name (references/language-specific.md:382)
[ATR_2026_00012] (HIGH) Pattern detected: Admin=true (references/language-specific.md:386)
[ATR_2026_00012] (HIGH) Pattern detected: ```php (references/language-specific.md:391)
[ATR_2026_00012] (HIGH) Pattern detected: unserialize( (references/language-specific.md:393)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/language-specific.md:422)
[ATR_2026_00062] (CRITICAL) Pattern detected: proto (references/language-specific.md:426)
[ATR_2026_00091] (CRITICAL) Pattern detected: {"proto (references/language-specific.md:426)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/language-specific.md:463)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/language-specific.md:482)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/language-specific.md:483)
[MDBLOCK_PYTHON_EVAL_EXEC] (HIGH) Code block in references/language-specific.md at line 483 contains potentially dangerous Python code. (references/language-specific.md:483)
[ATR_2026_00110] (CRITICAL) Pattern detected: eval( (references/language-specific.md:484)
[ATR_2026_00095] (CRITICAL) Pattern detected: exec( (references/language-specific.md:485)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/language-specific.md:486)
[ATR_2026_00110] (CRITICAL) Pattern detected: eval( (references/language-specific.md:489)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/language-specific.md:494)
[ATR_2026_00066] (CRITICAL) Pattern detected: `python (references/language-specific.md:512)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/language-specific.md:536)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/language-specific.md:538)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/language-specific.md:539)
[ATR_2026_00110] (CRITICAL) Pattern detected: eval( (references/language-specific.md:540)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/language-specific.md:551)
[ATR_2026_00010] (CRITICAL) Pattern detected: ```ruby (references/language-specific.md:564)
[ATR_2026_00112] (HIGH) Pattern detected: require(:user) (references/language-specific.md:569)
[ATR_2026_00012] (HIGH) Pattern detected: | Rust | Debug/release overflow differenc (references/language-specific.md:580)
[ATR_2026_00012] (HIGH) Pattern detected: unserialize( (references/language-specific.md:585)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/language-specific.md:587)
[ATR_2026_00012] (HIGH) Pattern detected: | Ruby | eval (references/language-specific.md:588)

Allowlisted (not blocking):

MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

❌ skill-writer

Status: Failed
Findings: 113
Blocking: 48

Blocking issues:

[ATR_2026_00111] (CRITICAL) Pattern detected: evals/fixtures/ (references/skill-evals.md:52)
[ATR_2026_00088] (HIGH) Pattern detected: output with normal (references/skill-evals.md:60)
[ATR_2026_00012] (HIGH) Pattern detected: | deterministic assertion | files exist, referenc (references/skill-evals.md:72)
[ATR_2026_00012] (HIGH) Pattern detected: | script check | JSON sh (references/skill-evals.md:73)
[ATR_2026_00012] (HIGH) Pattern detected: | LLM judge | conc (references/skill-evals.md:74)
[ATR_2026_00012] (HIGH) Pattern detected: | human review | taste, audienc (references/skill-evals.md:75)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/skill-evals.md:83)
[ATR_2026_00012] (HIGH) Pattern detected: | runtime conc (references/skill-evals.md:111)
[ATR_2026_00012] (HIGH) Pattern detected: | important decisions have enough evidenc (references/skill-evals.md:112)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/skill-evals.md:125)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-adaptation.md:7)
[ATR_2026_00012] (HIGH) Pattern detected: | local target | what the generated skill sh (references/source-adaptation.md:16)
[ATR_2026_00012] (HIGH) Pattern detected: | local replacement | what sh (references/source-adaptation.md:18)
[ATR_2026_00012] (HIGH) Pattern detected: | provenanc (references/source-adaptation.md:20)
[ATR_2026_00010] (CRITICAL) Pattern detected: SOURCES.md, SPEC.md, or a focused referenc (references/source-adaptation.md:39)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/source-discovery.md:33)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/source-discovery.md:40)
[ATR_2026_00010] (CRITICAL) Pattern detected: SKILL.md. Summarize the behavior and keep provenance in SOURCES.md or an evidenc (references/source-discovery.md:49)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/spec-template.md:32)
[ATR_2026_00010] (CRITICAL) Pattern detected: SPEC.md | maintenanc (references/spec-template.md:33)
[ATR_2026_00010] (CRITICAL) Pattern detected: `referenc (references/spec-template.md:35)
[ATR_2026_00010] (CRITICAL) Pattern detected: `references/evidenc (references/spec-template.md:36)
[ATR_2026_00010] (CRITICAL) Pattern detected: `referenc (references/spec-template.md:88)
[ATR_2026_00010] (CRITICAL) Pattern detected: `references/evidenc (references/spec-template.md:89)
[ATR_2026_00010] (CRITICAL) Pattern detected: `references/evidenc (references/spec-template.md:108)
[ATR_2026_00010] (CRITICAL) Pattern detected: SPEC.md conc (references/spec-template.md:113)
[ATR_2026_00010] (CRITICAL) Pattern detected: `references/evidenc (references/spec-template.md:115)
[ATR_2026_00010] (CRITICAL) Pattern detected: SKILL.md exceeds 500 lines and becomes a second enc (references/structure-troubleshooting.md:7)
[ATR_2026_00010] (CRITICAL) Pattern detected: `referenc (references/structure-troubleshooting.md:9)
[ATR_2026_00010] (CRITICAL) Pattern detected: SKILL.md, SPEC.md, SOURCES.md, `referenc (references/structure-troubleshooting.md:51)
[ATR_2026_00010] (CRITICAL) Pattern detected: context: fork is used for conventions or reference material instead of a conc (references/structure-troubleshooting.md:97)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/structure-troubleshooting.md:99)
[ATR_2026_00040] (CRITICAL) Pattern detected: shell (references/structure-troubleshooting.md:103)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/synthesis-path.md:16)
[ATR_2026_00010] (CRITICAL) Pattern detected: SPEC.md, SOURCES.md, and `references/evidenc (references/synthesis-path.md:39)
[ATR_2026_00010] (CRITICAL) Pattern detected: references/source-adaptation.md when the primary input is an upstream prompt, workflow, rubric, benc (references/synthesis-path.md:45)
[ATR_2026_00012] (HIGH) Pattern detected: | negative behavior | false positives, reviewer conc (references/synthesis-path.md:76)
[ATR_2026_00012] (HIGH) Pattern detected: | version variance | platform or release differenc (references/synthesis-path.md:78)
[ATR_2026_00111] (CRITICAL) Pattern detected: | sh (references/synthesis-path.md:79)
[ATR_2026_00051] (HIGH) Pattern detected: For each (references/synthesis-path.md:90)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/workflow-parallel.md:8)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/workflow-plan-validate-execute.md:1)
[ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/workflow-plan-validate-execute.md:16)
[ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/workflow-plan-validate-execute.md:24)
[ATR_2026_00051] (HIGH) Pattern detected: for each (references/workflow-prompt-chaining.md:14)
[ATR_2026_00051] (HIGH) Pattern detected: for each (references/workflow-routing.md:16)
[ATR_2026_00010] (CRITICAL) Pattern detected: `referenc (references/workflow-routing.md:23)
[ATR_2026_00010] (CRITICAL) Pattern detected: `referenc (references/workflow-routing.md:25)

❌ yara-rule-authoring

Status: Failed
Findings: 101
Blocking: 53

Blocking issues:

[PG_PII_SSN_HARVESTING] (CRITICAL) Pattern detected: Store usin (references/testing.md:214)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/testing.md:218)
[ATR_2026_00004] (CRITICAL) Pattern detected: # System (references/testing.md:220)
[ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/testing.md:227)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/testing.md:231)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/testing.md:241)
[ATR_2026_00012] (HIGH) Pattern detected: | PE files | Chrome.exe, Firefox.exe, python (references/testing.md:255)
[ATR_2026_00012] (HIGH) Pattern detected: | npm packages | lodash (references/testing.md:256)
[ATR_2026_00012] (HIGH) Pattern detected: | macOS | /Applications/* from fresh (references/testing.md:258)
[ATR_2026_00012] (HIGH) Pattern detected: | Android (references/testing.md:259)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/testing.md:265)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/testing.md:290)
[ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/testing.md:299)
[ATR_2026_00010] (CRITICAL) Pattern detected: npm search --searchlimit=1000 | Avoid FPs on popular dependenc (references/testing.md:347)
[ATR_2026_00012] (HIGH) Pattern detected: | Known malicious packages | [npm-sh (references/testing.md:349)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/testing.md:356)
[ATR_2026_00012] (HIGH) Pattern detected: | Incident | Key Indicators | Referenc (references/testing.md:373)
[ATR_2026_00012] (HIGH) Pattern detected: | os-info-checker-es6 | Variation selectors, eval (references/testing.md:376)
[ATR_2026_00012] (HIGH) Pattern detected: | event-stream | Flatmap dependenc (references/testing.md:377)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (workflows/rule-development.md:3)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (workflows/rule-development.md:29)
[ATR_2026_00012] (HIGH) Pattern detected: | Sample Count | Confidenc (workflows/rule-development.md:39)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:58)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:78)
[ATR_2026_00066] (CRITICAL) Pattern detected: ` sh (workflows/rule-development.md:92)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:105)
[ATR_2026_00091] (CRITICAL) Pattern detected: \R (workflows/rule-development.md:124)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:131)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:150)
[ATR_2026_00091] (CRITICAL) Pattern detected: \n (workflows/rule-development.md:163)
[ATR_2026_00096] (CRITICAL) Pattern detected: beacon (workflows/rule-development.md:171)
[ATR_2026_00091] (CRITICAL) Pattern detected: \R (workflows/rule-development.md:197)
[ATR_2026_00096] (CRITICAL) Pattern detected: beacon (workflows/rule-development.md:203)
[ATR_2026_00010] (CRITICAL) Pattern detected: author inc (workflows/rule-development.md:228)
[ATR_2026_00010] (CRITICAL) Pattern detected: `referenc (workflows/rule-development.md:229)
[ATR_2026_00012] (HIGH) Pattern detected: `hash (workflows/rule-development.md:231)
[ATR_2026_00010] (CRITICAL) Pattern detected: score reflects confidenc (workflows/rule-development.md:232)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:268)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:282)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:292)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:301)
[ATR_2026_00012] (HIGH) Pattern detected: | JavaScript | lodash (workflows/rule-development.md:325)
[ATR_2026_00012] (HIGH) Pattern detected: | Android (workflows/rule-development.md:328)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:332)
[ATR_2026_00063] (CRITICAL) Pattern detected: Upload (workflows/rule-development.md:342)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (workflows/rule-development.md:351)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:358)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (workflows/rule-development.md:371)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:387)
[ATR_2026_00040] (CRITICAL) Pattern detected: deploy (workflows/rule-development.md:402)
[ATR_2026_00012] (HIGH) Pattern detected: | Performanc (workflows/rule-development.md:443)
[ATR_2026_00066] (CRITICAL) Pattern detected: `bash (workflows/rule-development.md:464)
[ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (workflows/rule-development.md:490)

Summary: Scanned 19 skill(s), found 979 blocking issue(s).

⚠️ Action Required: Review the blocking findings. Add a justified entry to the skill's security.allowed_issues[] in its spec.yaml if the finding is a false positive.

The updated upstream digests introduced new reference file content that triggers additional scanner rule IDs. All verified as false positives against actual upstream content: - agentic-actions-auditor: ATR_2026_00012/00040/00066 - claude-api: ATR_2026_00032/00113 - codeql: ATR_2026_00010/00012/00066/00111 - firebase-firestore: ATR_2026_00010/00012 - gha-security-review: ATR_2026_00040/00066/00161 - mongodb-atlas-stream-processing: ATR_2026_00010/00013 - mongodb-schema-design: ATR_2026_00012/00062 - sharp-edges: ATR_2026_00012/00161 - skill-writer: ATR_2026_00012/00088/00111 - yara-rule-authoring: ATR_2026_00004/00012/00063/00066

Required by skillversionbump check — minor bumps for content changes, patch bump for cloudflare (allowlist-only change).

The scanner's LLM meta-analyzer produces non-deterministic results across runs — new upstream content triggers different rule IDs each time. Playing whack-a-mole with individual ATR_2026_* rule IDs is unsustainable. Switch to category-level POLICY_VIOLATION allowlisting for skills where ALL ATR pattern matches are inherently false positives: - Security audit/analysis skills (agentic-actions-auditor, gha-security-review, sharp-edges, yara-rule-authoring, codeql, semgrep-rule-creator, constant-time-analysis): reference files intentionally describe attack patterns for detection - API/SDK documentation skills (claude-api, firebase-firestore, firebase-data-connect-basics, mongodb-schema-design, mongodb-atlas-stream-processing): pattern matches are on documentation prose, code examples, and API references - Meta skills (skill-writer): pattern matches are on skill authoring and evaluation documentation - Datadog observability skills (agent-observability-*): pattern matches are on evaluation and tracing documentation

The scanner assigns categories in lowercase (policy_violation, prompt_injection, command_injection). Also adds: - prompt_injection category allowlisting alongside policy_violation - command_injection for semgrep-rule-creator - LLM_SKILL_DISCOVERY_ABUSE for firebase-firestore (official Firebase activation directive, not commercial hijack) - PG_PII_SSN_HARVESTING for agent-observability-eval-bootstrap

- agent-observability-trace-rca: PG_EXFIL_MARKDOWN_LINK (Datadog trace links to user's own tenant, same as eval-bootstrap) - sharp-edges: command_injection (Python eval/exec examples in security analysis docs)

rdimitrov previously approved these changes Jul 27, 2026

View reviewed changes

JAORMX dismissed rdimitrov’s stale review via 451d382 July 27, 2026 11:49

JAORMX added 4 commits July 27, 2026 14:58

chore: bump spec.version for all modified skills

0c5451e

Required by skillversionbump check — minor bumps for content changes, patch bump for cloudflare (allowlist-only change).

fix: add remaining allowlist entries for trace-rca and sharp-edges

05d1a5a

- agent-observability-trace-rca: PG_EXFIL_MARKDOWN_LINK (Datadog trace links to user's own tenant, same as eval-bootstrap) - sharp-edges: command_injection (Python eval/exec examples in security analysis docs)

rdimitrov approved these changes Jul 27, 2026

View reviewed changes

JAORMX merged commit a780dc7 into main Jul 27, 2026
64 checks passed

JAORMX deleted the fix/skill-spec-upstream-changes branch July 27, 2026 12:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: update skill specs for upstream restructures, removals, and scanner FPs - #808

fix: update skill specs for upstream restructures, removals, and scanner FPs#808
JAORMX merged 6 commits into
mainfrom
fix/skill-spec-upstream-changes

JAORMX commented Jul 27, 2026

Uh oh!

toolhive-release-app Bot commented Jul 27, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

JAORMX commented Jul 27, 2026

Summary

Changes

Upstream restructures (renamed/updated paths)

Upstream removals (deleted spec.yaml)

Security scanner false positive allowlists

Ref updates

NOT addressed (left as open renovate PRs)

Validation

Uh oh!

toolhive-release-app Bot commented Jul 27, 2026

🛡️ Skill Security Scan Results

✅ agent-observability-eval-bootstrap

✅ agent-observability-experiment-analyzer

✅ agent-observability-session-classify

✅ agent-observability-trace-rca

❌ agentic-actions-auditor

❌ claude-api

✅ cloudflare

❌ codeql

✅ constant-time-analysis

✅ firebase-data-connect-basics

❌ firebase-firestore

❌ gha-security-review

✅ grilling

❌ mongodb-atlas-stream-processing

❌ mongodb-schema-design

✅ semgrep-rule-creator

❌ sharp-edges

❌ skill-writer

❌ yara-rule-authoring

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants