{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-14T00:13:26.949392Z","repo":{"ref":{"host":"github.com","owner":"rohitg00","name":"pro-workflow"},"default_branch":"main","clone_url":"https://github.com/rohitg00/pro-workflow.git","html_url":"https://github.com/rohitg00/pro-workflow","description":"Claude Code learns from your corrections: self-correcting memory that compounds over 50+ sessions. Context engineering, parallel worktrees, agent teams, and 17 battle-tested skills.","stars":2955,"forks":301,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":586,"primary_language":"JavaScript","license_spdx":null,"created_at":"2026-02-01T19:47:29Z","pushed_at":"2026-09-29T10:12:13Z","security_policy_url":null,"distribution":{"owner_created_at":"2019-03-13T15:02:59Z","owner_type":"User","release_assets":[]}},"commit_sha":"86d5f2770bd8e1695e40888e4242841eb7cbad4f","profile":{"lines_by_language":{"JavaScript":6061,"TypeScript":2413,"SQL":253,"Shell":100},"files_by_category":{"docs":110,"source":71,"config":19,"other":19,"test":11,"generated":1},"source_lines":7373,"test_lines":1454},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.59,"coverage":1.0,"label":"possible","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":3.0,"flagged_work_units":0.0,"flagged_releases":0.0},"summary":"Weak signals consistent with AI-assisted development."},"quality":{"score":61.9,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":44.5,"duplication":60.4,"lint":50.0,"testing":84.9,"docs":40.0,"type_safety":100.0,"process":null},"summary":"Code quality is weak: test-to-source ratio 0.20, CI runs tests; 27% of function code in complex or long functions; 8% duplicated lines. Weakest area: docs."},"security":{"score":52.1,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":17.7,"dependencies":51.3,"ci_actions":13.6,"posture":60.0,"scorecard":null},"summary":"Security posture is weak: 20 known vulnerabilities in 9 dependencies; 10 high-severity workflow issues. Weakest area: ci actions."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":6.0,"checked":6.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":78.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":9492.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2026-02":{"loc":1745,"attributed_loc":0},"2026-03":{"loc":550,"attributed_loc":0},"2026-04":{"loc":429,"attributed_loc":0},"2026-05":{"loc":2915,"attributed_loc":0},"2026-06":{"loc":1705,"attributed_loc":0},"2026-07":{"loc":0,"attributed_loc":0},"2026-09":{"loc":2148,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":3.0,"workflow_agents":0.0,"tools_configured":2.0,"earliest_adoption":1769975294.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":"templates/split-claude-md/CLAUDE.md (claude-code configuration)","ref":"templates/split-claude-md/CLAUDE.md","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/templates/split-claude-md/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"templates/AGENTS.md (generic-agent configuration)","ref":"templates/AGENTS.md","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/templates/AGENTS.md","weight":0.5},{"kind":"ai-artifact","description":"templates/split-claude-md/AGENTS.md (generic-agent configuration)","ref":"templates/split-claude-md/AGENTS.md","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/templates/split-claude-md/AGENTS.md","weight":0.5}],"data":{"artifacts":[{"tool":"claude-code","path":"templates/split-claude-md/CLAUDE.md","added_at":1769975294},{"tool":"generic-agent","path":"templates/AGENTS.md","added_at":1774696570},{"tool":"generic-agent","path":"templates/split-claude-md/AGENTS.md","added_at":1769975294}],"workflows":[],"tools":["claude-code","generic-agent"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":21.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":9492.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":325.29668956901935,"median_loc_per_hour":69.2029079740361,"pr_timed_units":16.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":9.0,"flagged_releases":0.0,"max_loc_per_day":175.5},"findings":[],"evidence":[],"data":{"releases":[{"from":"v0.1.0","to":"v1.1.0","loc":0,"days":2.82,"loc_per_day":0.0,"flagged":false},{"from":"v1.1.0","to":"v1.2.0","loc":164,"days":0.93,"loc_per_day":175.5,"flagged":false},{"from":"v1.2.0","to":"v1.3.0","loc":233,"days":13.99,"loc_per_day":16.6,"flagged":false},{"from":"v1.3.0","to":"v2.0.0","loc":0,"days":12.69,"loc_per_day":0.0,"flagged":false},{"from":"v2.0.0","to":"v3.0.0","loc":312,"days":24.05,"loc_per_day":13.0,"flagged":false},{"from":"v3.0.0","to":"v3.1.0","loc":8,"days":0.45,"loc_per_day":17.8,"flagged":false},{"from":"v3.1.0","to":"v3.2.0","loc":230,"days":1.65,"loc_per_day":139.4,"flagged":false},{"from":"v3.2.0","to":"v3.3.0","loc":2749,"days":38.93,"loc_per_day":70.6,"flagged":false},{"from":"v3.3.0","to":"v3.4.0","loc":3302,"days":139.82,"loc_per_day":23.6,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":7373.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":141.0,"findings_high":0.0,"findings_medium":141.0,"findings_low":0.0,"weighted_findings":35.25,"scanned_lines":7120.0,"parse_errors":1.0},"findings":[{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"scripts/commit-validate.js","line":142,"fingerprint":"javascript.lang.security.html-in-template-string:scripts/commit-validate.js:142"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/config-watcher.js","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/config-watcher.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/config-watcher.js","line":12,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/config-watcher.js:12"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/cwd-changed.js","line":13,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/cwd-changed.js:13"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/cwd-changed.js","line":13,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/cwd-changed.js:13"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/cwd-changed.js","line":14,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/cwd-changed.js:14"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/cwd-changed.js","line":14,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/cwd-changed.js:14"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/cwd-changed.js","line":15,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/cwd-changed.js:15"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/cwd-changed.js","line":15,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/cwd-changed.js:15"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/cwd-changed.js","line":15,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/cwd-changed.js:15"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/cwd-changed.js","line":15,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/cwd-changed.js:15"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/cwd-changed.js","line":24,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/cwd-changed.js:24"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/cwd-changed.js","line":24,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/cwd-changed.js:24"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/cwd-changed.js","line":25,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/cwd-changed.js:25"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/cwd-changed.js","line":25,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/cwd-changed.js:25"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/cwd-changed.js","line":26,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/cwd-changed.js:26"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/cwd-changed.js","line":26,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/cwd-changed.js:26"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/drift-detector.js","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/drift-detector.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/drift-detector.js","line":12,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/drift-detector.js:12"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/drift-detector.js","line":36,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/drift-detector.js:36"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/drift-detector.js","line":37,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/drift-detector.js:37"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/drift-detector.js","line":39,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/drift-detector.js:39"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/drift-detector.js","line":42,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/drift-detector.js:42"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/drift-detector.js","line":52,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/drift-detector.js:52"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/drift-detector.js","line":77,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/drift-detector.js:77"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `pattern` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-control [confidence low]","path":"scripts/git-blast-radius.js","line":5,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:scripts/git-blast-radius.js:5"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `file` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/lib/system-one.js","line":19,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/lib/system-one.js:19"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/optimize-skill.js","line":67,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/optimize-skill.js:67"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/optimize-skill.js","line":68,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/optimize-skill.js:68"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `slug` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/optimize-skill.js","line":70,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/optimize-skill.js:70"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/post-edit-check.js","line":27,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/post-edit-check.js:27"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/post-edit-check.js","line":31,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/post-edit-check.js:31"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":12,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:12"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/pre-compact.js","line":44,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/pre-compact.js:44"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/pre-compact.js","line":53,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/pre-compact.js:53"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":54,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:54"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":55,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:55"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/pre-compact.js","line":58,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/pre-compact.js:58"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":59,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:59"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":60,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:60"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":63,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:63"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":68,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:68"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":69,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:69"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":71,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:71"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/pre-compact.js","line":72,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/pre-compact.js:72"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/prompt-submit.js","line":12,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/prompt-submit.js:12"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/prompt-submit.js","line":13,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/prompt-submit.js:13"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/prompt-submit.js","line":137,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/prompt-submit.js:137"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/prompt-submit.js","line":140,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/prompt-submit.js:140"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/prompt-submit.js","line":141,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/prompt-submit.js:141"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/prompt-submit.js","line":143,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/prompt-submit.js:143"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/quality-gate.js","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/quality-gate.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/quality-gate.js","line":12,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/quality-gate.js:12"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/read-before-write.js","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/read-before-write.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/read-before-write.js","line":12,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/read-before-write.js:12"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/reread-tracker.js","line":21,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/reread-tracker.js:21"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/reread-tracker.js","line":21,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/reread-tracker.js:21"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `file` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/reread-tracker.js","line":26,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/reread-tracker.js:26"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `file` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/reread-tracker.js","line":34,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/reread-tracker.js:34"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `file` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/reread-tracker.js","line":36,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/reread-tracker.js:36"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `file` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/reread-tracker.js","line":37,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/reread-tracker.js:37"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `file` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/reread-tracker.js","line":37,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/reread-tracker.js:37"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/reread-tracker.js","line":42,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/reread-tracker.js:42"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/research-tick.js","line":19,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/research-tick.js:19"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `rootPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/research-tick.js","line":20,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/research-tick.js:20"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `rootPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/research-tick.js","line":21,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/research-tick.js:21"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/safe-mode-guard.js","line":24,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/safe-mode-guard.js:24"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/safe-mode-guard.js","line":29,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/safe-mode-guard.js:29"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `root` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/safe-mode-guard.js","line":34,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/safe-mode-guard.js:34"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `root` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/safe-mode-guard.js","line":42,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/safe-mode-guard.js:42"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `root` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/safe-mode-guard.js","line":43,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/safe-mode-guard.js:43"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/safe-mode-guard.js","line":51,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/safe-mode-guard.js:51"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/safe-mode-guard.js","line":51,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/safe-mode-guard.js:51"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/safe-mode-guard.js","line":72,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/safe-mode-guard.js:72"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/session-check.js","line":19,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/session-check.js:19"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/session-check.js","line":20,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/session-check.js:20"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/session-check.js","line":67,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/session-check.js:67"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/session-check.js","line":71,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/session-check.js:71"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/session-check.js","line":72,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/session-check.js:72"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `chunk` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/session-check.js","line":75,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/session-check.js:75"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/session-end.js","line":7,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/session-end.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/session-end.js","line":8,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/session-end.js:8"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/tool-call-budget.js","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/tool-call-budget.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"scripts/tool-call-budget.js","line":12,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:scripts/tool-call-budget.js:12"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/llm-council/scripts/council.js","line":144,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/llm-council/scripts/council.js:144"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/llm-council/scripts/council.js","line":144,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/llm-council/scripts/council.js:144"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `sessionId` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/llm-council/scripts/council.js","line":145,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/llm-council/scripts/council.js:145"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `slug` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/llm-council/scripts/council.js","line":145,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/llm-council/scripts/council.js:145"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `sessionId` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/llm-council/scripts/council.js","line":146,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/llm-council/scripts/council.js:146"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `slug` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/llm-council/scripts/council.js","line":146,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/llm-council/scripts/council.js:146"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/llm-council/scripts/council.js","line":262,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/llm-council/scripts/council.js:262"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/llm-council/scripts/council.js","line":263,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/llm-council/scripts/council.js:263"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/llm-council/scripts/council.js","line":264,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/llm-council/scripts/council.js:264"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/llm-council/scripts/council.js","line":265,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/llm-council/scripts/council.js:265"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":96,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/survey-generator/scripts/build-survey.js:96"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wikiRoot` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":98,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/survey-generator/scripts/build-survey.js:98"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wikiRoot` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":98,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/survey-generator/scripts/build-survey.js:98"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wikiRoot` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":115,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/survey-generator/scripts/build-survey.js:115"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wikiRoot` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":117,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/survey-generator/scripts/build-survey.js:117"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":123,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/survey-generator/scripts/build-survey.js:123"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `baseSlug` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-contro [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":124,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:skills/survey-generator/scripts/build-survey.js:124"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":126,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/survey-generator/scripts/build-survey.js:126"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":170,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/survey-generator/scripts/build-survey.js:170"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":172,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/survey-generator/scripts/build-survey.js:172"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":208,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/survey-generator/scripts/build-survey.js:208"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":209,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/survey-generator/scripts/build-survey.js:209"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":213,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/survey-generator/scripts/build-survey.js:213"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":213,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/survey-generator/scripts/build-survey.js:213"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/survey-generator/scripts/build-survey.js","line":214,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/survey-generator/scripts/build-survey.js:214"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":113,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-builder/scripts/wiki-cli.js:113"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":114,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-builder/scripts/wiki-cli.js:114"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":114,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-builder/scripts/wiki-cli.js:114"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":120,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-builder/scripts/wiki-cli.js:120"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":121,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-builder/scripts/wiki-cli.js:121"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":122,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-builder/scripts/wiki-cli.js:122"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":123,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-builder/scripts/wiki-cli.js:123"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":124,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-builder/scripts/wiki-cli.js:124"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":155,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-builder/scripts/wiki-cli.js:155"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `args` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":156,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-builder/scripts/wiki-cli.js:156"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `abs` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":162,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-builder/scripts/wiki-cli.js:162"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":182,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-builder/scripts/wiki-cli.js:182"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":183,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-builder/scripts/wiki-cli.js:183"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-builder/scripts/wiki-cli.js","line":183,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-builder/scripts/wiki-cli.js:183"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":61,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-research-loop/scripts/research-loop.js:61"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `rootPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":62,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-research-loop/scripts/research-loop.js:62"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `rootPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":63,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-research-loop/scripts/research-loop.js:63"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":192,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-research-loop/scripts/research-loop.js:192"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `slug` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":194,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-research-loop/scripts/research-loop.js:194"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":236,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-research-loop/scripts/research-loop.js:236"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":237,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-research-loop/scripts/research-loop.js:237"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":237,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-research-loop/scripts/research-loop.js:237"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `slug` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":238,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-research-loop/scripts/research-loop.js:238"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `slug` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":239,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-research-loop/scripts/research-loop.js:239"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `slug` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":272,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-research-loop/scripts/research-loop.js:272"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":273,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-research-loop/scripts/research-loop.js:273"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `slug` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":274,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-research-loop/scripts/research-loop.js:274"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `slug` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":275,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:skills/wiki-research-loop/scripts/research-loop.js:275"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"skills/wiki-research-loop/scripts/research-loop.js","line":275,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:skills/wiki-research-loop/scripts/research-loop.js:275"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `tag` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled  [confidence low]","path":"skills/wiki-research-loop/scripts/source-fetchers/arxiv.js","line":21,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:skills/wiki-research-loop/scripts/source-fetchers/arxiv.js:21"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `p` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"src/db/index.ts","line":36,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:src/db/index.ts:36"}],"evidence":[],"data":{"rulesets":["javascript","typescript","bash"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":9.0,"vulnerabilities":20.0,"vulns_critical":0.0,"vulns_high":4.0,"vulns_medium":12.0,"vulns_low":4.0,"vulns_unknown":0.0,"penalty":40.0},"findings":[{"rule_id":"osv/GHSA-22jm-h49p-29qw","severity":"high","message":"@modelcontextprotocol/sdk@1.31.0 (npm) is affected by GHSA-22jm-h49p-29qw","path":"package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.31.0 (npm):GHSA-22jm-h49p-29qw"},{"rule_id":"osv/GHSA-46jr-4wx8-v453","severity":"high","message":"@modelcontextprotocol/sdk@1.31.0 (npm) is affected by GHSA-46jr-4wx8-v453","path":"package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.31.0 (npm):GHSA-46jr-4wx8-v453"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@2.3.0 (npm) is affected by GHSA-27r3-jxmh-p828","path":"package-lock.json","line":null,"fingerprint":"body-parser@2.3.0 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-mrhx-c7xc-m3w5","severity":"high","message":"zod@4.6.5 (npm) is affected by GHSA-mrhx-c7xc-m3w5","path":"package-lock.json","line":null,"fingerprint":"zod@4.6.5 (npm):GHSA-mrhx-c7xc-m3w5"},{"rule_id":"osv/GHSA-jpvv-r467-5p4w","severity":"medium","message":"@hono/node-server@2.1.3 (npm) is affected by GHSA-jpvv-r467-5p4w","path":"package-lock.json","line":null,"fingerprint":"@hono/node-server@2.1.3 (npm):GHSA-jpvv-r467-5p4w"},{"rule_id":"osv/GHSA-qv5m-9pm6-hqp3","severity":"medium","message":"@hono/node-server@2.1.3 (npm) is affected by GHSA-qv5m-9pm6-hqp3","path":"package-lock.json","line":null,"fingerprint":"@hono/node-server@2.1.3 (npm):GHSA-qv5m-9pm6-hqp3"},{"rule_id":"osv/GHSA-6prh-2h8m-c8cw","severity":"medium","message":"@modelcontextprotocol/sdk@1.31.0 (npm) is affected by GHSA-6prh-2h8m-c8cw","path":"package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.31.0 (npm):GHSA-6prh-2h8m-c8cw"},{"rule_id":"osv/GHSA-rvq5-wwqv-78pq","severity":"medium","message":"@modelcontextprotocol/sdk@1.31.0 (npm) is affected by GHSA-rvq5-wwqv-78pq","path":"package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.31.0 (npm):GHSA-rvq5-wwqv-78pq"},{"rule_id":"osv/GHSA-w74x-v6f9-j3xg","severity":"medium","message":"fast-uri@3.1.8 (npm) is affected by GHSA-w74x-v6f9-j3xg","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.1.8 (npm):GHSA-w74x-v6f9-j3xg"},{"rule_id":"osv/GHSA-wjr9-j795-jxcr","severity":"medium","message":"fast-uri@3.1.8 (npm) is affected by GHSA-wjr9-j795-jxcr","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.1.8 (npm):GHSA-wjr9-j795-jxcr"},{"rule_id":"osv/GHSA-46wx-v44x-9hh2","severity":"medium","message":"hono@4.13.11 (npm) is affected by GHSA-46wx-v44x-9hh2","path":"package-lock.json","line":null,"fingerprint":"hono@4.13.11 (npm):GHSA-46wx-v44x-9hh2"},{"rule_id":"osv/GHSA-4h7h-rv7c-7m2v","severity":"medium","message":"hono@4.13.11 (npm) is affected by GHSA-4h7h-rv7c-7m2v","path":"package-lock.json","line":null,"fingerprint":"hono@4.13.11 (npm):GHSA-4h7h-rv7c-7m2v"},{"rule_id":"osv/GHSA-4m76-xfj5-7975","severity":"medium","message":"hono@4.13.11 (npm) is affected by GHSA-4m76-xfj5-7975","path":"package-lock.json","line":null,"fingerprint":"hono@4.13.11 (npm):GHSA-4m76-xfj5-7975"},{"rule_id":"osv/GHSA-h7mg-cq63-vhpq","severity":"medium","message":"hono@4.13.11 (npm) is affected by GHSA-h7mg-cq63-vhpq","path":"package-lock.json","line":null,"fingerprint":"hono@4.13.11 (npm):GHSA-h7mg-cq63-vhpq"},{"rule_id":"osv/GHSA-rxp7-6hxx-x8q5","severity":"medium","message":"ip-address@10.7.2 (npm) is affected by GHSA-rxp7-6hxx-x8q5","path":"package-lock.json","line":null,"fingerprint":"ip-address@10.7.2 (npm):GHSA-rxp7-6hxx-x8q5"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.16.0 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"package-lock.json","line":null,"fingerprint":"qs@6.16.0 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-g7r4-m6w7-qqqr","severity":"low","message":"esbuild@0.28.0 (npm) is affected by GHSA-g7r4-m6w7-qqqr","path":"package-lock.json","line":null,"fingerprint":"esbuild@0.28.0 (npm):GHSA-g7r4-m6w7-qqqr"},{"rule_id":"osv/GHSA-333x-w4r6-6crp","severity":"low","message":"fast-uri@3.1.8 (npm) is affected by GHSA-333x-w4r6-6crp","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.1.8 (npm):GHSA-333x-w4r6-6crp"},{"rule_id":"osv/GHSA-xhq7-xmqj-769h","severity":"low","message":"fast-uri@3.1.8 (npm) is affected by GHSA-xhq7-xmqj-769h","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.1.8 (npm):GHSA-xhq7-xmqj-769h"},{"rule_id":"osv/GHSA-3gg2-335m-rxc6","severity":"low","message":"hono@4.13.11 (npm) is affected by GHSA-3gg2-335m-rxc6","path":"package-lock.json","line":null,"fingerprint":"hono@4.13.11 (npm):GHSA-3gg2-335m-rxc6"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":3.0,"findings":21.0,"findings_high":10.0,"findings_medium":5.0,"findings_low":6.0,"penalty":119.6},"findings":[{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":19,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:19"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":22,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:22"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":51,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:51"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/npm-publish.yml","line":22,"fingerprint":"unpinned-uses:.github/workflows/npm-publish.yml:22"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/npm-publish.yml","line":27,"fingerprint":"unpinned-uses:.github/workflows/npm-publish.yml:27"},{"rule_id":"zizmor/cache-poisoning","severity":"high","message":"runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low]","path":".github/workflows/npm-publish.yml","line":27,"fingerprint":"cache-poisoning:.github/workflows/npm-publish.yml:27"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":17,"fingerprint":"unpinned-uses:.github/workflows/release.yml:17"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":22,"fingerprint":"unpinned-uses:.github/workflows/release.yml:22"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":76,"fingerprint":"unpinned-uses:.github/workflows/release.yml:76"},{"rule_id":"zizmor/cache-poisoning","severity":"high","message":"runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low]","path":".github/workflows/release.yml","line":22,"fingerprint":"cache-poisoning:.github/workflows/release.yml:22"},{"rule_id":"zizmor/dependabot-cooldown","severity":"medium","message":"insufficient cooldown in Dependabot updates [confidence high]","path":".github/dependabot.yml","line":3,"fingerprint":"dependabot-cooldown:.github/dependabot.yml:3"},{"rule_id":"zizmor/dependabot-cooldown","severity":"medium","message":"insufficient cooldown in Dependabot updates [confidence high]","path":".github/dependabot.yml","line":13,"fingerprint":"dependabot-cooldown:.github/dependabot.yml:13"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":1,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:1"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":10,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:10"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":46,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:46"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":18,"fingerprint":"artipacked:.github/workflows/ci.yml:18"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":50,"fingerprint":"artipacked:.github/workflows/ci.yml:50"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/npm-publish.yml","line":21,"fingerprint":"artipacked:.github/workflows/npm-publish.yml:21"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/release.yml","line":16,"fingerprint":"artipacked:.github/workflows/release.yml:16"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/release.yml","line":41,"fingerprint":"template-injection:.github/workflows/release.yml:41"},{"rule_id":"zizmor/superfluous-actions","severity":"info","message":"action functionality is already included by the runner [confidence high]","path":".github/workflows/release.yml","line":76,"fingerprint":"superfluous-actions:.github/workflows/release.yml:76"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":1.0,"check:signed_commits":1.0,"check:lockfiles":1.0,"signed_commit_share":0.5385,"unpinned_manifests":0.0},"findings":[],"evidence":[{"kind":"posture","description":"Dependency updates: .github/dependabot.yml","ref":".github/dependabot.yml","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":587.0,"function_nloc":5645.0,"mean_ccn":3.16,"p90_ccn":7.0,"complex_functions":15.0,"long_functions":4.0,"many_param_functions":1.0,"risky_nloc_share":0.2696},"findings":[],"evidence":[{"kind":"complex-function","description":"runOne in skills/wiki-research-loop/scripts/research-loop.js: complexity 39, 105 lines","ref":"skills/wiki-research-loop/scripts/research-loop.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/skills/wiki-research-loop/scripts/research-loop.js#L163","weight":0.65},{"kind":"complex-function","description":"tokenize in scripts/commit-validate.js: complexity 32, 62 lines","ref":"scripts/commit-validate.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/commit-validate.js#L34","weight":0.5333333333333333},{"kind":"complex-function","description":"train in src/optimizer/trainer.ts: complexity 29, 226 lines","ref":"src/optimizer/trainer.ts","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/src/optimizer/trainer.ts#L36","weight":0.48333333333333334},{"kind":"complex-function","description":"main in scripts/session-start.js: complexity 26, 93 lines","ref":"scripts/session-start.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/session-start.js#L30","weight":0.43333333333333335},{"kind":"complex-function","description":"runProviderTask in scripts/lib/provider-runner.js: complexity 23, 33 lines","ref":"scripts/lib/provider-runner.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/lib/provider-runner.js#L36","weight":0.38333333333333336},{"kind":"complex-function","description":"(anonymous) in scripts/prompt-submit.js: complexity 22, 78 lines","ref":"scripts/prompt-submit.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/prompt-submit.js#L57","weight":0.36666666666666664},{"kind":"complex-function","description":"main in scripts/read-before-write.js: complexity 21, 52 lines","ref":"scripts/read-before-write.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/read-before-write.js#L16","weight":0.35},{"kind":"complex-function","description":"cmdRun in skills/survey-generator/scripts/build-survey.js: complexity 21, 54 lines","ref":"skills/survey-generator/scripts/build-survey.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/skills/survey-generator/scripts/build-survey.js#L166","weight":0.35},{"kind":"complex-function","description":"(anonymous) in scripts/file-changed.js: complexity 20, 71 lines","ref":"scripts/file-changed.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/file-changed.js#L5","weight":0.3333333333333333},{"kind":"complex-function","description":"renderMarkdown in skills/wiki-viewer/scripts/render.js: complexity 18, 67 lines","ref":"skills/wiki-viewer/scripts/render.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/skills/wiki-viewer/scripts/render.js#L41","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":5470.0,"duplicated_lines":460.0,"duplicated_share":0.0841,"files":71.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/commit-validate.js:6 and scripts/git-blast-radius.js:29","ref":"scripts/commit-validate.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/commit-validate.js#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/config-watcher.js:1 and scripts/drift-detector.js:1","ref":"scripts/config-watcher.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/config-watcher.js#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/cwd-changed.js:5 and scripts/file-changed.js:2","ref":"scripts/cwd-changed.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/cwd-changed.js#L5","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/file-changed.js:1 and scripts/pre-commit-check.js:1","ref":"scripts/file-changed.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/file-changed.js#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/permission-denied.js:1 and scripts/setup-hook.js:1","ref":"scripts/permission-denied.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/permission-denied.js#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/permission-denied.js:7 and scripts/post-compact.js:7","ref":"scripts/permission-denied.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/permission-denied.js#L7","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/pre-compact.js:10 and scripts/session-end.js:6","ref":"scripts/pre-compact.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/pre-compact.js#L10","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/prompt-submit.js:11 and scripts/quality-gate.js:10","ref":"scripts/prompt-submit.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/prompt-submit.js#L11","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/prompt-submit.js:102 and scripts/session-end.js:52","ref":"scripts/prompt-submit.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/prompt-submit.js#L102","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/read-before-write.js:6 and scripts/tool-call-budget.js:6","ref":"scripts/read-before-write.js","url":"https://github.com/rohitg00/pro-workflow/blob/86d5f2770bd8e1695e40888e4242841eb7cbad4f/scripts/read-before-write.js#L6","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":28.0,"weighted_findings":19.75,"scanned_lines":7120.0,"category:best-practice":17.0,"category:correctness":11.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/embed-wiki.js","line":11,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/embed-wiki.js:11"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/embed-wiki.js","line":17,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/embed-wiki.js:17"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/learn-capture.js","line":8,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/learn-capture.js:8"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/prompt-submit.js","line":24,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/prompt-submit.js:24"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/quality-gate.js","line":23,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/quality-gate.js:23"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/research-tick.js","line":15,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/research-tick.js:15"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/session-end.js","line":39,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/session-end.js:39"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/session-end.js","line":113,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/session-end.js:113"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/session-start.js","line":24,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/session-start.js:24"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/session-start.js","line":48,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/session-start.js:48"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/session-start.js","line":112,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/session-start.js:112"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"skills/llm-council/scripts/council.js","line":138,"fingerprint":"javascript.lang.best-practice.lazy-load-module:skills/llm-council/scripts/council.js:138"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"skills/survey-generator/scripts/build-survey.js","line":30,"fingerprint":"javascript.lang.best-practice.lazy-load-module:skills/survey-generator/scripts/build-survey.js:30"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"skills/wiki-builder/scripts/wiki-cli.js","line":15,"fingerprint":"javascript.lang.best-practice.lazy-load-module:skills/wiki-builder/scripts/wiki-cli.js:15"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"skills/wiki-query/scripts/query.js","line":13,"fingerprint":"javascript.lang.best-practice.lazy-load-module:skills/wiki-query/scripts/query.js:13"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"skills/wiki-research-loop/scripts/research-loop.js","line":16,"fingerprint":"javascript.lang.best-practice.lazy-load-module:skills/wiki-research-loop/scripts/research-loop.js:16"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"skills/wiki-research-loop/scripts/research-loop.js","line":51,"fingerprint":"javascript.lang.best-practice.lazy-load-module:skills/wiki-research-loop/scripts/research-loop.js:51"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"scripts/provider-tools.js","line":2,"fingerprint":"javascript.lang.correctness.useless-assignment:scripts/provider-tools.js:2"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"scripts/provider-tools.js","line":3,"fingerprint":"javascript.lang.correctness.useless-assignment:scripts/provider-tools.js:3"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"scripts/provider-tools.js","line":4,"fingerprint":"javascript.lang.correctness.useless-assignment:scripts/provider-tools.js:4"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"scripts/provider-tools.js","line":5,"fingerprint":"javascript.lang.correctness.useless-assignment:scripts/provider-tools.js:5"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"skills/survey-generator/scripts/build-survey.js","line":5,"fingerprint":"javascript.lang.correctness.useless-assignment:skills/survey-generator/scripts/build-survey.js:5"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/optimizer/reflect.ts","line":26,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/optimizer/reflect.ts:26"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/optimizer/reflect.ts","line":26,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/optimizer/reflect.ts:26"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/optimizer/slow.ts","line":27,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/optimizer/slow.ts:27"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/optimizer/slow.ts","line":27,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/optimizer/slow.ts:27"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/optimizer/validate.ts","line":41,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/optimizer/validate.ts:41"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/optimizer/validate.ts","line":41,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/optimizer/validate.ts:41"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.3944,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":1.0,"check:tests_cochange":1.0,"test_lines":1454.0,"source_lines":7373.0,"test_ratio":0.1972,"ci_files":3.0,"cochange_share":0.2609,"cochange_commits":23.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/ci.yml","ref":".github/workflows/ci.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/npm-publish.yml","ref":".github/workflows/npm-publish.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/release.yml","ref":".github/workflows/release.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (npm test)","ref":null,"url":null,"weight":0.0},{"kind":"ci","description":"CI runs linters (tsc --noEmit)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["npm test"],"lint_commands":["tsc --noEmit"]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":0.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":387.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":1.0,"escapes":0.0,"escapes_per_kloc":0.0},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: tsconfig.json","ref":"tsconfig.json","url":null,"weight":0.0}],"data":{},"error":null}],"flags":[]}