{
  "kind": "json",
  "payload": {
    "meta": {
      "target": "<TARGET>",
      "timestamp": "<TIMESTAMP>",
      "version": "2.2.0",
      "tool": "config-audit"
    },
    "scanners": [
      {
        "scanner": "CML",
        "status": "ok",
        "files_scanned": 1,
        "duration_ms": 0,
        "findings": [],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 0,
          "info": 0
        }
      },
      {
        "scanner": "SET",
        "status": "ok",
        "files_scanned": 1,
        "duration_ms": 0,
        "findings": [],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 0,
          "info": 0
        }
      },
      {
        "scanner": "HKV",
        "status": "ok",
        "files_scanned": 1,
        "duration_ms": 0,
        "findings": [],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 0,
          "info": 0
        }
      },
      {
        "scanner": "RUL",
        "status": "skipped",
        "files_scanned": 0,
        "duration_ms": 0,
        "findings": [],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 0,
          "info": 0
        }
      },
      {
        "scanner": "MCP",
        "status": "ok",
        "files_scanned": 1,
        "duration_ms": 0,
        "findings": [],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 0,
          "info": 0
        }
      },
      {
        "scanner": "IMP",
        "status": "ok",
        "files_scanned": 1,
        "duration_ms": 0,
        "findings": [],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 0,
          "info": 0
        }
      },
      {
        "scanner": "CNF",
        "status": "ok",
        "files_scanned": 2,
        "duration_ms": 0,
        "findings": [],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 0,
          "info": 0
        }
      },
      {
        "scanner": "GAP",
        "status": "ok",
        "files_scanned": 4,
        "duration_ms": 0,
        "findings": [
          {
            "id": "CA-GAP-001",
            "scanner": "GAP",
            "severity": "medium",
            "title": "You haven't added any custom shortcuts yet",
            "description": "Custom skills give you `/your-shortcut` invocations for tasks you do often.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t1",
            "recommendation": "Create a skill in `.claude/skills/` for a workflow you find yourself repeating.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "Fix when convenient",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-002",
            "scanner": "GAP",
            "severity": "low",
            "title": "You only have settings at one level",
            "description": "Settings can live at user, project, or local-only scope. Using more than one lets you keep personal preferences separate from team-shared ones.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t2",
            "recommendation": "Consider moving team-wide settings to project scope and keeping personal ones at user or local scope.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "Optional cleanup",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-003",
            "scanner": "GAP",
            "severity": "low",
            "title": "Your rules all load on every conversation",
            "description": "Path-scoped rules only load when you're working with files that match — keeps each conversation focused.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t2",
            "recommendation": "Add scoping to your rules so they only load for the files they apply to.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "Optional cleanup",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-004",
            "scanner": "GAP",
            "severity": "low",
            "title": "Your automations all listen to similar events",
            "description": "Listening to a wider range of events (before-tool, after-tool, session-start, etc.) lets you catch more workflow opportunities.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t2",
            "recommendation": "Look at the events your current automations skip and consider adding one or two.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "Optional cleanup",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-005",
            "scanner": "GAP",
            "severity": "low",
            "title": "You haven't set up any specialized helper agents yet",
            "description": "Subagents handle parallel work in separate contexts (research, code review, testing) without crowding your main conversation.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t2",
            "recommendation": "Create a subagent in `.claude/agents/` for a task you delegate often.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "Optional cleanup",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-006",
            "scanner": "GAP",
            "severity": "low",
            "title": "You haven't pinned a model preference",
            "description": "Setting a default model lets you choose between speed and depth of reasoning for your work.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t2",
            "recommendation": "Add a `model` setting in your settings file.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "Optional cleanup",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-007",
            "scanner": "GAP",
            "severity": "info",
            "title": "You haven't set up a status line yet",
            "description": "A status line shows live context (token usage, current branch, time) at the bottom of your terminal.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t3",
            "recommendation": "Add a `statusLine` setting if you want this information at a glance.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-008",
            "scanner": "GAP",
            "severity": "info",
            "title": "You haven't set up any custom keybindings",
            "description": "Custom keybindings let you trigger your most-used skills with a keystroke.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t3",
            "recommendation": "Add bindings in your settings for skills you run often.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-009",
            "scanner": "GAP",
            "severity": "info",
            "title": "You're using the default output style",
            "description": "Output styles let you change how Claude formats responses (concise, verbose, bullet-heavy, etc.).",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t3",
            "recommendation": "Try a different `outputStyle` setting if you have a strong preference.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-010",
            "scanner": "GAP",
            "severity": "info",
            "title": "You haven't set up parallel worktree support",
            "description": "Worktrees let Claude work on a branch in an isolated copy of the repo without disturbing your main checkout.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t3",
            "recommendation": "Enable worktrees if you regularly work on multiple branches at once.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-011",
            "scanner": "GAP",
            "severity": "info",
            "title": "Your skills don't use the richer settings block",
            "description": "Adding richer settings at the top of a skill lets you control when it loads, what tools it uses, and more.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t3",
            "recommendation": "Add fields like `model`, `tools`, or `description` to your skill files where useful.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-012",
            "scanner": "GAP",
            "severity": "info",
            "title": "Your subagents share Claude's main work folder",
            "description": "Isolated subagents run in their own copy of the repo so they can't accidentally disturb your main work.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t3",
            "recommendation": "Add `isolation: worktree` to subagents that do destructive or experimental work.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-013",
            "scanner": "GAP",
            "severity": "info",
            "title": "Your skills don't include live context",
            "description": "Dynamic context lets a skill see fresh information (file contents, command output) at the moment it runs, not at the time it was written.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t3",
            "recommendation": "Use the dynamic-context block in skills that need up-to-date information.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-014",
            "scanner": "GAP",
            "severity": "info",
            "title": "You haven't set up auto-mode classification",
            "description": "Auto-mode classification helps Claude decide when to act on its own vs. ask you, based on the kind of task.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t3",
            "recommendation": "Add an auto-mode classifier in your settings if you want this nuance.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-015",
            "scanner": "GAP",
            "severity": "info",
            "title": "You haven't built a custom plugin yet",
            "description": "Plugins let you bundle skills, automations, and connected services that you want available across many projects.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t4",
            "recommendation": "If you have workflows you repeat across projects, consider packaging them as a plugin.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-016",
            "scanner": "GAP",
            "severity": "info",
            "title": "Your project has no settings managed by your organization",
            "description": "Managed settings let your organization apply rules everyone has to follow.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t4",
            "recommendation": "If you work in a team setting, consider whether managed settings would help.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          },
          {
            "id": "CA-GAP-017",
            "scanner": "GAP",
            "severity": "info",
            "title": "You haven't connected Claude to your editor's language servers",
            "description": "Language-server connections let Claude see types, error messages, and definitions the same way your editor does.",
            "file": null,
            "line": null,
            "evidence": null,
            "category": "t4",
            "recommendation": "Set up LSP integration if you work in a typed language.",
            "autoFixable": false,
            "userImpactCategory": "Missed opportunity",
            "userActionLanguage": "FYI",
            "relevanceContext": "affects-everyone"
          }
        ],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 1,
          "low": 5,
          "info": 11
        }
      },
      {
        "scanner": "TOK",
        "status": "ok",
        "files_scanned": 2,
        "duration_ms": 0,
        "findings": [
          {
            "id": "CA-TOK-001",
            "scanner": "TOK",
            "severity": "low",
            "title": "A connected service exposes many tools, all loading on every turn",
            "description": "Each tool a connected service exposes adds its description to every turn. Services with many tools eat space fast.",
            "file": ".mcp.json",
            "line": null,
            "evidence": "tool_count=unknown; server=\"memory\"; source=\".mcp.json\" — severity reflects estimated tokens/turn based on structural heuristic; not measured against runtime telemetry",
            "category": "token-efficiency",
            "recommendation": "Limit which tools the service exposes (often via a `tools` allow-list), or disconnect services you rarely use.",
            "autoFixable": false,
            "userImpactCategory": "Wasted tokens",
            "userActionLanguage": "Optional cleanup",
            "relevanceContext": "affects-everyone"
          }
        ],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 1,
          "info": 0
        },
        "hotspots": [
          {
            "source": "mcp:memory (.mcp.json)",
            "estimated_tokens": 500,
            "rank": 1,
            "recommendations": [
              "Review whether this source needs to load on every turn."
            ]
          },
          {
            "source": "mcp:sadhguru-wisdom (plugin:sadhguru-wisdom)",
            "estimated_tokens": 500,
            "rank": 2,
            "recommendations": [
              "Review whether this source needs to load on every turn."
            ]
          },
          {
            "source": "mcp:vegnorm-rag (plugin:vegnormalene)",
            "estimated_tokens": 500,
            "rank": 3,
            "recommendations": [
              "Review whether this source needs to load on every turn."
            ]
          },
          {
            "source": "CLAUDE.md",
            "estimated_tokens": 116,
            "rank": 4,
            "recommendations": [
              "Move volatile top-of-file content to the bottom or extract to an @import-ed file.",
              "Split overlong CLAUDE.md into focused @imports (≤200 lines each)."
            ],
            "path": "/Users/ktg/.claude/plugins/marketplaces/ktg-plugin-marketplace/plugins/config-audit/tests/fixtures/marketplace-medium/CLAUDE.md"
          },
          {
            "source": "hooks/hooks.json",
            "estimated_tokens": 81,
            "rank": 5,
            "recommendations": [
              "Deduplicate overlapping entries — each duplicate inflates the per-turn schema payload.",
              "Move rarely-used permissions to a project-local override."
            ],
            "path": "/Users/ktg/.claude/plugins/marketplaces/ktg-plugin-marketplace/plugins/config-audit/tests/fixtures/marketplace-medium/hooks/hooks.json"
          },
          {
            "source": ".claude/settings.json",
            "estimated_tokens": 59,
            "rank": 6,
            "recommendations": [
              "Deduplicate overlapping entries — each duplicate inflates the per-turn schema payload.",
              "Move rarely-used permissions to a project-local override."
            ],
            "path": "/Users/ktg/.claude/plugins/marketplaces/ktg-plugin-marketplace/plugins/config-audit/tests/fixtures/marketplace-medium/.claude/settings.json"
          },
          {
            "source": ".mcp.json",
            "estimated_tokens": 53,
            "rank": 7,
            "recommendations": [
              "Deduplicate overlapping entries — each duplicate inflates the per-turn schema payload.",
              "Move rarely-used permissions to a project-local override."
            ],
            "path": "/Users/ktg/.claude/plugins/marketplaces/ktg-plugin-marketplace/plugins/config-audit/tests/fixtures/marketplace-medium/.mcp.json"
          }
        ],
        "total_estimated_tokens": 1809,
        "activeConfig": {
          "claudeMdEstimatedTokens": "<ANCESTOR_DERIVED>",
          "mcpServerCount": 3,
          "pluginCount": 41,
          "skillCount": 65
        }
      },
      {
        "scanner": "CPS",
        "status": "ok",
        "files_scanned": 1,
        "duration_ms": 0,
        "findings": [],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 0,
          "info": 0
        }
      },
      {
        "scanner": "DIS",
        "status": "ok",
        "files_scanned": 1,
        "duration_ms": 0,
        "findings": [
          {
            "id": "CA-DIS-001",
            "scanner": "DIS",
            "severity": "low",
            "title": "A tool is in both the let-in list and the shut-out list",
            "description": "When a tool is in both lists, the shut-out always wins, so the let-in entry does nothing. It looks like the tool is approved, but it isn't.",
            "file": "/Users/ktg/.claude/plugins/marketplaces/ktg-plugin-marketplace/plugins/config-audit/tests/fixtures/marketplace-medium/.claude/settings.json",
            "line": null,
            "evidence": "Read: allow=\"Read(src/**)\" + deny=\"Read(./.env)\"",
            "category": "permissions-hygiene",
            "recommendation": "Decide whether the tool should be allowed or denied, and remove it from the other list.",
            "autoFixable": false,
            "userImpactCategory": "Dead config",
            "userActionLanguage": "Optional cleanup",
            "relevanceContext": "test-fixture-no-impact"
          }
        ],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 1,
          "info": 0
        }
      },
      {
        "scanner": "COL",
        "status": "ok",
        "files_scanned": 65,
        "duration_ms": 0,
        "findings": [
          {
            "id": "CA-COL-001",
            "scanner": "COL",
            "severity": "low",
            "title": "Two plugins both define a skill with the same name",
            "description": "When two plugins offer the same skill name, only one wins, and which one is hard to predict.",
            "file": "/Users/ktg/.claude/plugins/marketplaces/ktg-plugin-marketplace/plugins/okr/skills/okr-offentlig-sektor/SKILL.md",
            "line": null,
            "evidence": "name=\"okr-offentlig-sektor\"; plugins=okr,okr",
            "category": "plugin-hygiene",
            "recommendation": "Rename the skill in one of the plugins, or disable the one you don't use.",
            "autoFixable": false,
            "userImpactCategory": "Conflict",
            "userActionLanguage": "Optional cleanup",
            "relevanceContext": "affects-everyone",
            "details": {
              "namespaces": [
                {
                  "source": "plugin:okr",
                  "name": "okr-offentlig-sektor",
                  "path": "/Users/ktg/.claude/plugins/marketplaces/ktg-plugin-marketplace/plugins/okr/skills/okr-offentlig-sektor/SKILL.md"
                },
                {
                  "source": "plugin:okr",
                  "name": "okr-offentlig-sektor",
                  "path": "/Users/ktg/.claude/plugins/marketplaces/ktg-privat/plugins/okr/skills/okr-offentlig-sektor/SKILL.md"
                }
              ]
            }
          }
        ],
        "counts": {
          "critical": 0,
          "high": 0,
          "medium": 0,
          "low": 1,
          "info": 0
        }
      }
    ],
    "aggregate": {
      "total_findings": 20,
      "counts": {
        "critical": 0,
        "high": 0,
        "medium": 1,
        "low": 8,
        "info": 11
      },
      "risk_score": 12,
      "risk_band": "Medium",
      "verdict": "PASS",
      "scanners_ok": 11,
      "scanners_error": 0,
      "scanners_skipped": 1
    }
  }
}
