{
  "skill_name": "azure-security-keyvault-keys-java",
  "skill_path": "/workspace/skills/microsoft-agent-skills/.github/skills/azure-security-keyvault-keys-java",
  "skill_directory": "/workspace/skills/microsoft-agent-skills/.github/skills/azure-security-keyvault-keys-java",
  "is_safe": true,
  "max_severity": "LOW",
  "findings_count": 1,
  "findings": [
    {
      "id": "MANIFEST_MISSING_LICENSE_c5ae9be793",
      "rule_id": "MANIFEST_MISSING_LICENSE",
      "category": "policy_violation",
      "severity": "LOW",
      "title": "Skill does not specify a license",
      "description": "Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.",
      "file_path": "SKILL.md",
      "line_number": null,
      "snippet": null,
      "remediation": "Add 'license' field to SKILL.md frontmatter (e.g., MIT, Apache-2.0)",
      "analyzer": "static",
      "metadata": {
        "meta_validated": true,
        "meta_confidence": "HIGH",
        "meta_confidence_reason": "Missing license field is objectively verifiable in the manifest. This is a documentation quality issue, not a security threat.",
        "meta_exploitability": "N/A - Documentation issue",
        "meta_impact": "Minimal - Users may be unclear about usage terms"
      }
    }
  ],
  "scan_duration_seconds": 21.041810989379883,
  "duration_ms": 21041,
  "analyzers_used": [
    "static_analyzer",
    "behavioral_analyzer",
    "llm_analyzer",
    "trigger_analyzer",
    "meta_analyzer"
  ],
  "timestamp": "2026-02-05T16:17:16.337453"
}