{"computed_at":"2026-10-25T14:16:54.437Z","scan":{"repos":104,"first_scan":"2026-10-17","last_scan":"2026-10-22","files_scanned":51475,"agent_facing_files":2783,"automated_verdicts":{"pass":83,"review":18,"reject":3},"final_verdicts_after_manual_review":{"pass":99,"review":5,"reject":0},"no_findings":46,"with_medium_or_higher":44,"with_high_or_critical":11,"pct_medium_or_higher":42.3,"pct_high_or_critical":10.6,"families":{"prompt_injection":{"label":"Prompt-injection text in agent-facing files (e.g. 'ignore previous instructions', hidden instructions, telling the agent to hide actions from its owner)","repos_medium_or_higher":9,"pct_medium_or_higher":8.7,"repos_high_or_critical":4,"pct_high_or_critical":3.8},"credential_exfiltration":{"label":"Credential or env read plus a network call in the same file (possible secret exfiltration)","repos_medium_or_higher":16,"pct_medium_or_higher":15.4,"repos_high_or_critical":1,"pct_high_or_critical":1},"secret_in_repo":{"label":"Committed secret-like strings (gitleaks)","repos_medium_or_higher":18,"pct_medium_or_higher":17.3,"repos_high_or_critical":0,"pct_high_or_critical":0},"risky_dependency":{"label":"Known-vulnerable dependencies (osv-scanner) or install hooks / typosquats","repos_medium_or_higher":32,"pct_medium_or_higher":30.8,"repos_high_or_critical":5,"pct_high_or_critical":4.8},"risky_code":{"label":"Risky code patterns: pipe-to-shell, remote code exec, obfuscation, eval of decoded data","repos_medium_or_higher":10,"pct_medium_or_higher":9.6,"repos_high_or_critical":5,"pct_high_or_critical":4.8}}},"library":{"built_at":"2026-10-25T14:16:53.913Z","items":3302,"by_kind":{"skill":1387,"mcp":868,"repo":1030,"prompt":17},"scanned":297,"pass":285,"review":12,"unscanned":3005,"pct_unscanned":91,"house_items":26,"third_party":3276,"no_license":324,"noassertion":259,"permissive":2569,"copyleft":124,"pct_no_license":9.9,"pct_noassertion":7.9,"pct_no_clear_license":17.8,"pct_permissive":78.4}}