{
  "generatedAt": "2026-08-14T15:49:04.598Z",
  "toolVersion": "1.0.0",
  "rulesetVersion": "1.0.0",
  "scanTarget": "/synthetic-example/demo-mcp-server",
  "filesScanned": 42,
  "filesExcluded": 15,
  "scanDuration": "1.8s",
  "score": {
    "numericScore": 85,
    "grade": "B",
    "label": "Good",
    "isLocked": false,
    "breakdown": {
      "criticalCount": 0,
      "warningCount": 1,
      "possibleCount": 1,
      "infoCount": 0
    }
  },
  "lockStatus": {
    "isLocked": false,
    "canGenerateBadge": true,
    "canGenerateCleanBadge": true,
    "badgeType": "good",
    "message": "Grade B (85/100) — Good badge available."
  },
  "findings": {
    "secrets": [
      {
        "file": "src/config/example-client.ts",
        "line": 18,
        "column": 21,
        "type": "generic_api_key",
        "severity": "warning",
        "layers": {
          "regex": true,
          "entropy": 4.4,
          "context": false
        },
        "matched": "EXAM****",
        "description": "Generic API key pattern in a config file (synthetic example value)"
      }
    ],
    "pii": [
      {
        "file": "tests/fixtures/example-users.json",
        "line": 7,
        "column": 14,
        "type": "email",
        "severity": "possible",
        "layers": {
          "regex": true,
          "checksum": null
        },
        "matched": "exa****",
        "description": "Email address pattern in test fixture (synthetic example value)",
        "locale": "global"
      }
    ],
    "mcp": [
      {
        "file": "mcp.json",
        "items": {
          "auth": {
            "status": "pass",
            "detail": "Authentication field present"
          },
          "secrets": {
            "status": "pass",
            "detail": "No hardcoded secret in MCP config"
          },
          "toolMeta": {
            "status": "pass",
            "detail": "No hidden instruction in tool metadata"
          },
          "permissions": {
            "status": "pass",
            "detail": "No wildcard permission pattern"
          },
          "logging": {
            "status": "pass",
            "detail": "No sensitive field logged"
          }
        },
        "overallSeverity": "pass",
        "failedCount": 0
      }
    ],
    "injection": []
  },
  "fixitSummary": {
    "totalIssues": 3,
    "criticalIssues": 0,
    "fixitGuidesAvailable": 2
  },
  "integrity": {
    "rulesetHash": "f408a4fd6101780424087ef8e3de8f4759fc857144e1d88bd273ab6305cfb8bd",
    "resultHash": "fca2760d2bbec7bec58d90b394dbeebbdab49374d6889f5ba3ad6310ac15ae2c",
    "badgeUUID": "08ce74f9-1164-4de1-8151-31cda42a6125",
    "verifyURL": "https://shield.verify/08ce74f9-1164-4de1-8151-31cda42a6125"
  },
  "disclaimer": "This scan covers: secret exposure, config checks, PII patterns, prompt injection patterns. This is NOT a penetration test. Results do not guarantee complete security. Generated by Project Shield v1.0.0."
}