[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-microsoft-scan-site":3,"mdc--8b98dh-key":39,"related-repo-microsoft-scan-site":2094,"related-org-microsoft-scan-site":2193},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":22,"repoUrl":23,"updatedAt":24,"license":25,"forks":26,"topics":27,"repo":34,"sourceUrl":37,"mdContent":38},"scan-site","run security scans on Power Pages sites","Runs a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summary. Scans the live site's public surface for vulnerabilities and surfaces issues by severity. Use when the user wants to scan, check, test, audit, or assess a published site, find vulnerabilities on production, view the latest scan report, see previous scan results, run a security audit, or asks \"how safe is my live site?\", \"is my site vulnerable?\", \"audit my production site\" — even if they say \"find issues\" or \"check for problems\" without mentioning \"scan\" or \"security\".",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"microsoft","Microsoft","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fmicrosoft.png",[12,16,19],{"name":13,"slug":14,"type":15},"Security","security","tag",{"name":17,"slug":18,"type":15},"Audit","audit",{"name":20,"slug":21,"type":15},"Power Pages","power-pages",564,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fpower-platform-skills","2026-07-07T06:53:23.364832",null,114,[28,29,30,31,32,21,33],"claude-code-plugin","claude-code-skills","code-apps","github-copilot-plugin","power-apps","power-platform",{"repoUrl":23,"stars":22,"forks":26,"topics":35,"description":36},[28,29,30,31,32,21,33],"A plugin marketplace for Claude Code\u002FGitHub Copilot that provides Power Platform development plugins, including reusable skills, agents, and commands for building and deploying solutions.","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fpower-platform-skills\u002Ftree\u002FHEAD\u002Fplugins\u002Fpower-pages\u002Fskills\u002Fscan-site","---\nname: scan-site\ndescription: >-\n  Runs a security scan on a deployed Power Pages site, fetches the latest\n  scan report, and produces a plain-language summary. Scans the live site's\n  public surface for vulnerabilities and surfaces issues by severity. Use\n  when the user wants to scan, check, test, audit, or assess a published\n  site, find vulnerabilities on production, view the latest scan report,\n  see previous scan results, run a security audit, or asks \"how safe is\n  my live site?\", \"is my site vulnerable?\", \"audit my production site\" —\n  even if they say \"find issues\" or \"check for problems\" without mentioning\n  \"scan\" or \"security\".\nuser-invocable: true\nargument-hint: \"[optional: --review \u003Cout-dir>]\"\nallowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion, TaskCreate, TaskUpdate, TaskList\nmodel: opus\n---\n\n> **Plugin check**: Run `node \"${PLUGIN_ROOT}\u002Fscripts\u002Fcheck-version.js\"` — if it outputs a message, show it to the user before proceeding.\n\n# Scan Site\n\nRun a security scan on a deployed Power Pages site, fetch the latest scan report, and surface findings in a plain-language summary. The scan runs server-side; duration depends on site size — small sites finish in minutes, large sites can take hours.\n\nThis skill scans the live deployed site, not local source code.\n\n**Initial request:** $ARGUMENTS\n\n## Gotchas\n\n- **Website record id vs portal id.** `.powerpages-site\u002Fwebsite.yml` stores the website record id, not the portal id. Every script takes `--portalId`. Resolve once via `website.js --websiteId` during prerequisites.\n- **Never resolve by name.** Site names can duplicate inside an environment; only the website record id is safe.\n- **`null` from the resolver** means the site is not deployed, or the authenticated profile points at a different environment.\n- **Scans are long-running.** Duration depends on site size — small sites finish in minutes, large sites can take hours. Poll in the background and increase `--timeoutMinutes` for large sites.\n- **Only one scan per site at a time.** A start while a scan is running returns `Z003` — `start-deep-scan.js` reports it as `{ \"status\": \"already-running\" }` (exit 0).\n- **Rate limits may apply.** The service may throttle repeated scans on the same site. When throttled, wait and retry later.\n- **No completed scan yet.** A fresh site or a site mid-scan has no completed report — `get-latest-report.js` returns `{ \"status\": \"empty\" }`.\n\n## Workflow\n\n1. **Prerequisites** — Locate project, confirm sign-in, identify site\n2. **Check scan state** — Detect whether a scan is currently running\n3. **Choose an action** — Context-aware recommendation (run new scan \u002F show latest)\n4. **Run the scan** — Start and poll for completion\n5. **Fetch and summarize** — Get the report, present findings\n6. **Walk through follow-ups** — Route issues to the right downstream skill (only if the report contains issues)\n\n## Task Tracking\n\nCreate tasks in four groups. Mark each `in_progress` when starting, `completed` when done.\n\n| Group | When to create | Tasks |\n|-------|----------------|-------|\n| 1 | At start | Check prerequisites |\n| 2 | After prerequisites pass | Check scan state · Choose an action (skip in review mode) |\n| 3 | After user confirms an action (or in review mode) | Run the scan (skip only if the user chose to view latest results in interactive mode) · Fetch and summarize (always) |\n| 4 | After fetch and summarize | Walk through follow-ups (only if the report contains issues AND not in review mode) |\n\n---\n\n## 1. Prerequisites\n\n### 1.1 Locate the project, detect review mode\n\nUse `Glob` to find `**\u002Fpowerpages.config.json`. If `$ARGUMENTS` contains `--review \u003Cout-dir>`, remember the output directory — Step 3 (choose an action) is skipped, Step 4 (run scan) executes automatically (start a fresh scan or attach to a running one), Step 5 writes JSON only, and Step 6 (follow-ups) is skipped.\n\n### 1.2 Resolve site identifiers\n\nRead `.powerpages-site\u002Fwebsite.yml` → extract `id` field → that is `\u003CWEBSITE_ID>`.\n\nIf missing, the site has not been deployed. Tell the user and recommend `\u002Fdeploy-site`. Stop. Do **not** resolve by name or URL.\n\nResolve to portalId:\n\n```bash\nnode \"${PLUGIN_ROOT}\u002Fscripts\u002Fwebsite.js\" --websiteId \"\u003CWEBSITE_ID>\"\n```\n\nCapture `Id` (portalId), `Type`, `Name`, `WebsiteUrl`. If exit code `2` → sign-in required (`pac auth create` or `az login`). If `null` → site not found in this environment. Stop in either case.\n\n---\n\n## 2. Check scan state\n\n```bash\nnode \"${PLUGIN_ROOT}\u002Fskills\u002Fscan-site\u002Fscripts\u002Fpoll-deep-scan.js\" --portalId \"\u003CPORTAL_ID>\" --once\n```\n\n`--once` does a single status check, exits 0, and prints:\n\n- `{ \"status\": \"ongoing\" }` → a scan is currently running.\n- `{ \"status\": \"idle\" }` → no scan running.\n\nThen call `get-latest-report.js` to know whether a completed report exists:\n\n```bash\nnode \"${PLUGIN_ROOT}\u002Fskills\u002Fscan-site\u002Fscripts\u002Fget-latest-report.js\" --portalId \"\u003CPORTAL_ID>\"\n```\n\n`{ \"status\": \"ok\" }` means a report is available. `{ \"status\": \"empty\" }` means no completed scan exists.\n\n---\n\n## 3. Choose an action\n\nSkip in **review mode** — go straight to Step 4 (which always runs in review mode).\n\nMUST use plain language only. Never use words like CSP, CORS, OWASP, hardening, or scan profile.\n\n### Default approach\n\n\u003C!-- gate: scan-site:3.action-choice | category=plan | cancel-leaves=nothing -->\n\n> 🚦 **Gate (plan · scan-site:3.action-choice):** Recommend an action based on the site's scan state (running, idle, has report, no report), then ask the user to accept or choose differently. Starting a new scan triggers a multi-minute backend run; using an existing report is free.\n>\n> **Trigger:** Phase 3 entry (interactive mode only — review mode bypasses to step 4).\n> **Why we ask:** Auto-starting a new scan wastes minutes if a recent report already answers the question; auto-using a stale report misses recent findings.\n> **Cancel leaves:** Nothing — no scan triggered, no report consumed.\n\nAnalyze the site's current state and **recommend the single most relevant action** via `AskUserQuestion`:\n\n- Scan running, no completed report → recommend waiting for the running scan to finish.\n- Scan running, report exists → recommend showing the latest results while the new scan continues.\n- Idle, no completed report → recommend running a new scan.\n- Idle, recent report exists → ask whether to use the existing report or run a fresh scan.\n\nIf the site's state does not warrant a specific recommendation, do not force one — ask what the user wants to do.\n\n### Option rules\n\n\u003C!-- not-a-gate: meta-documentation describing how to structure `AskUserQuestion` options in this skill — not a literal call site. The actual prompt (\"use existing report \u002F run a fresh scan\") fires dynamically in §3 Default approach. See approval-gates.md §6.24a + §6.27. -->\n\nWhen presenting options via `AskUserQuestion`:\n- Keep `label` to 1–5 words. Include `description` on every option.\n- For options that trigger a new scan, surface the relevant caveats inside that option's `description` so the user has them at decision time. Do not ask a separate confirmation question after the user picks the option.\n- Include `preview` only when the option represents a concrete change (starting a new scan). Do not add `preview` to \"show latest\" or informational choices.\n- Only show options that are actionable given the current state. If a scan is already running, do not offer \"Start a new scan\".\n- Mark \"(Recommended)\" only when the site's state justifies it.\n\n---\n\n## 4. Run the scan\n\nIn **review mode**, always execute this step: if a scan is already running, attach to it and poll; otherwise start a fresh scan and poll. Do not ask — review mode runs end-to-end without user interaction.\n\nIn interactive mode, skip if the user chose to view the latest results.\n\nStart the scan:\n\n```bash\nnode \"${PLUGIN_ROOT}\u002Fskills\u002Fscan-site\u002Fscripts\u002Fstart-deep-scan.js\" --portalId \"\u003CPORTAL_ID>\"\n```\n\nIf stdout is `{ \"status\": \"already-running\" }`, skip ahead to polling — there is already a scan in progress.\n\nThen poll for completion:\n\n```bash\nnode \"${PLUGIN_ROOT}\u002Fskills\u002Fscan-site\u002Fscripts\u002Fpoll-deep-scan.js\" --portalId \"\u003CPORTAL_ID>\"\n```\n\nRun polling with `run_in_background: true` so the user can keep working. The script exits when the scan finishes or the timeout passes (default 20 minutes). If it times out, fetch whatever report is available and note the timeout in the summary.\n\n---\n\n## 5. Fetch and summarize\n\n### 5.1 Fetch and transform the report\n\n```bash\nnode \"${PLUGIN_ROOT}\u002Fskills\u002Fscan-site\u002Fscripts\u002Ftransform-report.js\" --portalId \"\u003CPORTAL_ID>\"\n```\n\nParse the stdout JSON. The status field can be:\n\n- `ok` — a normal report with `findings` and `details`.\n- `empty` — no completed scan exists for this site (e.g., fresh site or scan still running). Record a single `info` finding explaining this and continue.\n- `malformed` — the API returned a response missing the `Rules` array. The transform emits a single `warning` finding describing this; surface it to the user and recommend re-running the scan.\n\nSee `references\u002Fscan-reference.md` for the `Risk` → severity mapping the script applies.\n\n### 5.2 Review mode\n\nIn **review mode**, skip the HTML report and write the transform stdout to `\u003CREVIEW_DIR>\u002Fscan-site.json`. Then stop. The transform emits `{ status, findings, details }`; the orchestrating skill handles presentation.\n\n### 5.3 Render HTML report\n\nSkip in **review mode**.\n\nRender uses the same shared template as the consolidated security review. Build a single-section review-data payload, then render:\n\n```bash\nnode \"${PLUGIN_ROOT}\u002Fscripts\u002Fbuild-review-data.js\" \\\n  --reportName \"Site Scan\" \\\n  --inputDir \"\u003CTEMP_DIR>\" \\\n  --siteName \"\u003CSITE_NAME>\" \\\n  --goalLabel \"Live Site Scan\" \\\n  --scopeLabel \"\u003CSCOPE_LABEL>\" \\\n  --summary \"\u003CSUMMARY_TEXT>\" \\\n  --output \"\u003CTEMP_DIR>\u002Fdata.json\"\n\nnode \"${PLUGIN_ROOT}\u002Fscripts\u002Frender-review.js\" \\\n  --data \"\u003CTEMP_DIR>\u002Fdata.json\" \\\n  --output \"\u003CPROJECT_ROOT>\u002Fdocs\u002Fsite-scan-\u003CYYYY-MM-DD-HHMMSS>.html\"\n```\n\n`\u003CTEMP_DIR>` should contain only `scan-site.json` (the transform output from Step 5.1) — `build-review-data.js` ignores intermediate files. The filename **must** include the local timestamp (e.g., `site-scan-2026-05-14-053805.html`). Delete `\u003CTEMP_DIR>` after the render succeeds. Open the rendered HTML in the browser.\n\n### 5.4 Present summary\n\nPlain-language summary in the chat: total findings, count by severity, and what changed since the last scan if available. Do not lead with technical names.\n\n### 5.5 Record skill usage\n\n> Reference: `${PLUGIN_ROOT}\u002Freferences\u002Fskill-tracking-reference.md`\n>\n> Use `--skillName \"ScanSite\"`.\n\n---\n\n## 6. Walk through follow-ups\n\nSkip in **review mode**. Skip if the report has no issues.\n\nGroup findings by which downstream skill can help:\n\n- Header \u002F cookie issues → `\u002Fmanage-headers`\n- WAF \u002F firewall issues (block bots, rate-limit pages, restrict IPs\u002Fcountries) → `\u002Fmanage-firewall`\n- Permission issues → `\u002Faudit-permissions` to review existing table permissions, and\u002For `\u002Fcreate-webroles` to set up role-based access\n- Login or external identity issues → `\u002Fsetup-auth`\n- Code-level issues (exposed debug pages, information leakage, source visible publicly) → suggest a manual code fix; there is no routed skill for these findings\n\nSuggest only the skills that match findings actually present in the report. If a finding does not map to any skill, surface it as a manual follow-up the user can act on. If no meaningful follow-up exists, end the skill — do not ask just to ask.\n\n---\n\n## Constraints\n\n- **Plain language** — MUST NOT use technical jargon with the user. Use everyday language; explain the technical name only when asked.\n- **Read-only** — this skill only runs scans and reads results. It never enables WAF, deletes scans, or changes site configuration.\n- **Background long-running calls** — start the scan, then poll via `run_in_background: true` so the user can continue working.\n- **Context-aware interactions** — every recommendation MUST reflect the site's current state:\n  - Never offer \"Start a new scan\" while one is already running.\n  - Never offer \"Show latest results\" when no completed report exists.\n  - Mark \"(Recommended)\" only when the state justifies it.\n- **Preview is for change review only** — include `preview` only on options that start a new scan. Do not add to navigation or informational choices.\n\n## References\n\n- `references\u002Fcommands.md` — script flags, response shapes, error catalogue, operating notes. Read § \"Common error catalogue\" when a script returns a non-zero exit code.\n- `references\u002Fscan-reference.md` — field-level schema for the deep-scan report, alert risk values, rule statuses, and severity mapping. Read when normalizing findings.\n",{"data":40,"body":45},{"name":4,"description":6,"user-invocable":41,"argument-hint":42,"allowed-tools":43,"model":44},true,"[optional: --review \u003Cout-dir>]","Read, Write, Bash, Glob, Grep, AskUserQuestion, TaskCreate, TaskUpdate, TaskList","opus",{"type":46,"children":47},"root",[48,75,81,86,91,101,108,261,267,331,337,358,463,467,473,480,517,523,550,570,575,645,711,714,720,778,789,814,826,877,895,898,904,916,921,927,966,986,1009,1014,1020,1031,1097,1100,1106,1117,1122,1127,1178,1190,1195,1245,1258,1261,1267,1273,1324,1329,1404,1425,1431,1457,1463,1472,1477,1783,1831,1837,1842,1848,1873,1876,1882,1892,1897,1959,1964,1967,1973,2058,2064,2088],{"type":49,"tag":50,"props":51,"children":52},"element","blockquote",{},[53],{"type":49,"tag":54,"props":55,"children":56},"p",{},[57,64,66,73],{"type":49,"tag":58,"props":59,"children":60},"strong",{},[61],{"type":62,"value":63},"text","Plugin check",{"type":62,"value":65},": Run ",{"type":49,"tag":67,"props":68,"children":70},"code",{"className":69},[],[71],{"type":62,"value":72},"node \"${PLUGIN_ROOT}\u002Fscripts\u002Fcheck-version.js\"",{"type":62,"value":74}," — if it outputs a message, show it to the user before proceeding.",{"type":49,"tag":76,"props":77,"children":78},"h1",{"id":4},[79],{"type":62,"value":80},"Scan Site",{"type":49,"tag":54,"props":82,"children":83},{},[84],{"type":62,"value":85},"Run a security scan on a deployed Power Pages site, fetch the latest scan report, and surface findings in a plain-language summary. The scan runs server-side; duration depends on site size — small sites finish in minutes, large sites can take hours.",{"type":49,"tag":54,"props":87,"children":88},{},[89],{"type":62,"value":90},"This skill scans the live deployed site, not local source code.",{"type":49,"tag":54,"props":92,"children":93},{},[94,99],{"type":49,"tag":58,"props":95,"children":96},{},[97],{"type":62,"value":98},"Initial request:",{"type":62,"value":100}," $ARGUMENTS",{"type":49,"tag":102,"props":103,"children":105},"h2",{"id":104},"gotchas",[106],{"type":62,"value":107},"Gotchas",{"type":49,"tag":109,"props":110,"children":111},"ul",{},[112,147,157,173,191,225,235],{"type":49,"tag":113,"props":114,"children":115},"li",{},[116,121,123,129,131,137,139,145],{"type":49,"tag":58,"props":117,"children":118},{},[119],{"type":62,"value":120},"Website record id vs portal id.",{"type":62,"value":122}," ",{"type":49,"tag":67,"props":124,"children":126},{"className":125},[],[127],{"type":62,"value":128},".powerpages-site\u002Fwebsite.yml",{"type":62,"value":130}," stores the website record id, not the portal id. Every script takes ",{"type":49,"tag":67,"props":132,"children":134},{"className":133},[],[135],{"type":62,"value":136},"--portalId",{"type":62,"value":138},". Resolve once via ",{"type":49,"tag":67,"props":140,"children":142},{"className":141},[],[143],{"type":62,"value":144},"website.js --websiteId",{"type":62,"value":146}," during prerequisites.",{"type":49,"tag":113,"props":148,"children":149},{},[150,155],{"type":49,"tag":58,"props":151,"children":152},{},[153],{"type":62,"value":154},"Never resolve by name.",{"type":62,"value":156}," Site names can duplicate inside an environment; only the website record id is safe.",{"type":49,"tag":113,"props":158,"children":159},{},[160,171],{"type":49,"tag":58,"props":161,"children":162},{},[163,169],{"type":49,"tag":67,"props":164,"children":166},{"className":165},[],[167],{"type":62,"value":168},"null",{"type":62,"value":170}," from the resolver",{"type":62,"value":172}," means the site is not deployed, or the authenticated profile points at a different environment.",{"type":49,"tag":113,"props":174,"children":175},{},[176,181,183,189],{"type":49,"tag":58,"props":177,"children":178},{},[179],{"type":62,"value":180},"Scans are long-running.",{"type":62,"value":182}," Duration depends on site size — small sites finish in minutes, large sites can take hours. Poll in the background and increase ",{"type":49,"tag":67,"props":184,"children":186},{"className":185},[],[187],{"type":62,"value":188},"--timeoutMinutes",{"type":62,"value":190}," for large sites.",{"type":49,"tag":113,"props":192,"children":193},{},[194,199,201,207,209,215,217,223],{"type":49,"tag":58,"props":195,"children":196},{},[197],{"type":62,"value":198},"Only one scan per site at a time.",{"type":62,"value":200}," A start while a scan is running returns ",{"type":49,"tag":67,"props":202,"children":204},{"className":203},[],[205],{"type":62,"value":206},"Z003",{"type":62,"value":208}," — ",{"type":49,"tag":67,"props":210,"children":212},{"className":211},[],[213],{"type":62,"value":214},"start-deep-scan.js",{"type":62,"value":216}," reports it as ",{"type":49,"tag":67,"props":218,"children":220},{"className":219},[],[221],{"type":62,"value":222},"{ \"status\": \"already-running\" }",{"type":62,"value":224}," (exit 0).",{"type":49,"tag":113,"props":226,"children":227},{},[228,233],{"type":49,"tag":58,"props":229,"children":230},{},[231],{"type":62,"value":232},"Rate limits may apply.",{"type":62,"value":234}," The service may throttle repeated scans on the same site. When throttled, wait and retry later.",{"type":49,"tag":113,"props":236,"children":237},{},[238,243,245,251,253,259],{"type":49,"tag":58,"props":239,"children":240},{},[241],{"type":62,"value":242},"No completed scan yet.",{"type":62,"value":244}," A fresh site or a site mid-scan has no completed report — ",{"type":49,"tag":67,"props":246,"children":248},{"className":247},[],[249],{"type":62,"value":250},"get-latest-report.js",{"type":62,"value":252}," returns ",{"type":49,"tag":67,"props":254,"children":256},{"className":255},[],[257],{"type":62,"value":258},"{ \"status\": \"empty\" }",{"type":62,"value":260},".",{"type":49,"tag":102,"props":262,"children":264},{"id":263},"workflow",[265],{"type":62,"value":266},"Workflow",{"type":49,"tag":268,"props":269,"children":270},"ol",{},[271,281,291,301,311,321],{"type":49,"tag":113,"props":272,"children":273},{},[274,279],{"type":49,"tag":58,"props":275,"children":276},{},[277],{"type":62,"value":278},"Prerequisites",{"type":62,"value":280}," — Locate project, confirm sign-in, identify site",{"type":49,"tag":113,"props":282,"children":283},{},[284,289],{"type":49,"tag":58,"props":285,"children":286},{},[287],{"type":62,"value":288},"Check scan state",{"type":62,"value":290}," — Detect whether a scan is currently running",{"type":49,"tag":113,"props":292,"children":293},{},[294,299],{"type":49,"tag":58,"props":295,"children":296},{},[297],{"type":62,"value":298},"Choose an action",{"type":62,"value":300}," — Context-aware recommendation (run new scan \u002F show latest)",{"type":49,"tag":113,"props":302,"children":303},{},[304,309],{"type":49,"tag":58,"props":305,"children":306},{},[307],{"type":62,"value":308},"Run the scan",{"type":62,"value":310}," — Start and poll for completion",{"type":49,"tag":113,"props":312,"children":313},{},[314,319],{"type":49,"tag":58,"props":315,"children":316},{},[317],{"type":62,"value":318},"Fetch and summarize",{"type":62,"value":320}," — Get the report, present findings",{"type":49,"tag":113,"props":322,"children":323},{},[324,329],{"type":49,"tag":58,"props":325,"children":326},{},[327],{"type":62,"value":328},"Walk through follow-ups",{"type":62,"value":330}," — Route issues to the right downstream skill (only if the report contains issues)",{"type":49,"tag":102,"props":332,"children":334},{"id":333},"task-tracking",[335],{"type":62,"value":336},"Task Tracking",{"type":49,"tag":54,"props":338,"children":339},{},[340,342,348,350,356],{"type":62,"value":341},"Create tasks in four groups. Mark each ",{"type":49,"tag":67,"props":343,"children":345},{"className":344},[],[346],{"type":62,"value":347},"in_progress",{"type":62,"value":349}," when starting, ",{"type":49,"tag":67,"props":351,"children":353},{"className":352},[],[354],{"type":62,"value":355},"completed",{"type":62,"value":357}," when done.",{"type":49,"tag":359,"props":360,"children":361},"table",{},[362,386],{"type":49,"tag":363,"props":364,"children":365},"thead",{},[366],{"type":49,"tag":367,"props":368,"children":369},"tr",{},[370,376,381],{"type":49,"tag":371,"props":372,"children":373},"th",{},[374],{"type":62,"value":375},"Group",{"type":49,"tag":371,"props":377,"children":378},{},[379],{"type":62,"value":380},"When to create",{"type":49,"tag":371,"props":382,"children":383},{},[384],{"type":62,"value":385},"Tasks",{"type":49,"tag":387,"props":388,"children":389},"tbody",{},[390,409,427,445],{"type":49,"tag":367,"props":391,"children":392},{},[393,399,404],{"type":49,"tag":394,"props":395,"children":396},"td",{},[397],{"type":62,"value":398},"1",{"type":49,"tag":394,"props":400,"children":401},{},[402],{"type":62,"value":403},"At start",{"type":49,"tag":394,"props":405,"children":406},{},[407],{"type":62,"value":408},"Check prerequisites",{"type":49,"tag":367,"props":410,"children":411},{},[412,417,422],{"type":49,"tag":394,"props":413,"children":414},{},[415],{"type":62,"value":416},"2",{"type":49,"tag":394,"props":418,"children":419},{},[420],{"type":62,"value":421},"After prerequisites pass",{"type":49,"tag":394,"props":423,"children":424},{},[425],{"type":62,"value":426},"Check scan state · Choose an action (skip in review mode)",{"type":49,"tag":367,"props":428,"children":429},{},[430,435,440],{"type":49,"tag":394,"props":431,"children":432},{},[433],{"type":62,"value":434},"3",{"type":49,"tag":394,"props":436,"children":437},{},[438],{"type":62,"value":439},"After user confirms an action (or in review mode)",{"type":49,"tag":394,"props":441,"children":442},{},[443],{"type":62,"value":444},"Run the scan (skip only if the user chose to view latest results in interactive mode) · Fetch and summarize (always)",{"type":49,"tag":367,"props":446,"children":447},{},[448,453,458],{"type":49,"tag":394,"props":449,"children":450},{},[451],{"type":62,"value":452},"4",{"type":49,"tag":394,"props":454,"children":455},{},[456],{"type":62,"value":457},"After fetch and summarize",{"type":49,"tag":394,"props":459,"children":460},{},[461],{"type":62,"value":462},"Walk through follow-ups (only if the report contains issues AND not in review mode)",{"type":49,"tag":464,"props":465,"children":466},"hr",{},[],{"type":49,"tag":102,"props":468,"children":470},{"id":469},"_1-prerequisites",[471],{"type":62,"value":472},"1. Prerequisites",{"type":49,"tag":474,"props":475,"children":477},"h3",{"id":476},"_11-locate-the-project-detect-review-mode",[478],{"type":62,"value":479},"1.1 Locate the project, detect review mode",{"type":49,"tag":54,"props":481,"children":482},{},[483,485,491,493,499,501,507,509,515],{"type":62,"value":484},"Use ",{"type":49,"tag":67,"props":486,"children":488},{"className":487},[],[489],{"type":62,"value":490},"Glob",{"type":62,"value":492}," to find ",{"type":49,"tag":67,"props":494,"children":496},{"className":495},[],[497],{"type":62,"value":498},"**\u002Fpowerpages.config.json",{"type":62,"value":500},". If ",{"type":49,"tag":67,"props":502,"children":504},{"className":503},[],[505],{"type":62,"value":506},"$ARGUMENTS",{"type":62,"value":508}," contains ",{"type":49,"tag":67,"props":510,"children":512},{"className":511},[],[513],{"type":62,"value":514},"--review \u003Cout-dir>",{"type":62,"value":516},", remember the output directory — Step 3 (choose an action) is skipped, Step 4 (run scan) executes automatically (start a fresh scan or attach to a running one), Step 5 writes JSON only, and Step 6 (follow-ups) is skipped.",{"type":49,"tag":474,"props":518,"children":520},{"id":519},"_12-resolve-site-identifiers",[521],{"type":62,"value":522},"1.2 Resolve site identifiers",{"type":49,"tag":54,"props":524,"children":525},{},[526,528,533,535,541,543,549],{"type":62,"value":527},"Read ",{"type":49,"tag":67,"props":529,"children":531},{"className":530},[],[532],{"type":62,"value":128},{"type":62,"value":534}," → extract ",{"type":49,"tag":67,"props":536,"children":538},{"className":537},[],[539],{"type":62,"value":540},"id",{"type":62,"value":542}," field → that is ",{"type":49,"tag":67,"props":544,"children":546},{"className":545},[],[547],{"type":62,"value":548},"\u003CWEBSITE_ID>",{"type":62,"value":260},{"type":49,"tag":54,"props":551,"children":552},{},[553,555,561,563,568],{"type":62,"value":554},"If missing, the site has not been deployed. Tell the user and recommend ",{"type":49,"tag":67,"props":556,"children":558},{"className":557},[],[559],{"type":62,"value":560},"\u002Fdeploy-site",{"type":62,"value":562},". Stop. Do ",{"type":49,"tag":58,"props":564,"children":565},{},[566],{"type":62,"value":567},"not",{"type":62,"value":569}," resolve by name or URL.",{"type":49,"tag":54,"props":571,"children":572},{},[573],{"type":62,"value":574},"Resolve to portalId:",{"type":49,"tag":576,"props":577,"children":582},"pre",{"className":578,"code":579,"language":580,"meta":581,"style":581},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","node \"${PLUGIN_ROOT}\u002Fscripts\u002Fwebsite.js\" --websiteId \"\u003CWEBSITE_ID>\"\n","bash","",[583],{"type":49,"tag":67,"props":584,"children":585},{"__ignoreMap":581},[586],{"type":49,"tag":587,"props":588,"children":591},"span",{"class":589,"line":590},"line",1,[592,598,604,610,615,621,626,631,636,640],{"type":49,"tag":587,"props":593,"children":595},{"style":594},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[596],{"type":62,"value":597},"node",{"type":49,"tag":587,"props":599,"children":601},{"style":600},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[602],{"type":62,"value":603}," \"${",{"type":49,"tag":587,"props":605,"children":607},{"style":606},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[608],{"type":62,"value":609},"PLUGIN_ROOT",{"type":49,"tag":587,"props":611,"children":612},{"style":600},[613],{"type":62,"value":614},"}",{"type":49,"tag":587,"props":616,"children":618},{"style":617},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[619],{"type":62,"value":620},"\u002Fscripts\u002Fwebsite.js",{"type":49,"tag":587,"props":622,"children":623},{"style":600},[624],{"type":62,"value":625},"\"",{"type":49,"tag":587,"props":627,"children":628},{"style":617},[629],{"type":62,"value":630}," --websiteId",{"type":49,"tag":587,"props":632,"children":633},{"style":600},[634],{"type":62,"value":635}," \"",{"type":49,"tag":587,"props":637,"children":638},{"style":617},[639],{"type":62,"value":548},{"type":49,"tag":587,"props":641,"children":642},{"style":600},[643],{"type":62,"value":644},"\"\n",{"type":49,"tag":54,"props":646,"children":647},{},[648,650,656,658,664,666,672,673,679,681,686,688,694,696,702,704,709],{"type":62,"value":649},"Capture ",{"type":49,"tag":67,"props":651,"children":653},{"className":652},[],[654],{"type":62,"value":655},"Id",{"type":62,"value":657}," (portalId), ",{"type":49,"tag":67,"props":659,"children":661},{"className":660},[],[662],{"type":62,"value":663},"Type",{"type":62,"value":665},", ",{"type":49,"tag":67,"props":667,"children":669},{"className":668},[],[670],{"type":62,"value":671},"Name",{"type":62,"value":665},{"type":49,"tag":67,"props":674,"children":676},{"className":675},[],[677],{"type":62,"value":678},"WebsiteUrl",{"type":62,"value":680},". If exit code ",{"type":49,"tag":67,"props":682,"children":684},{"className":683},[],[685],{"type":62,"value":416},{"type":62,"value":687}," → sign-in required (",{"type":49,"tag":67,"props":689,"children":691},{"className":690},[],[692],{"type":62,"value":693},"pac auth create",{"type":62,"value":695}," or ",{"type":49,"tag":67,"props":697,"children":699},{"className":698},[],[700],{"type":62,"value":701},"az login",{"type":62,"value":703},"). If ",{"type":49,"tag":67,"props":705,"children":707},{"className":706},[],[708],{"type":62,"value":168},{"type":62,"value":710}," → site not found in this environment. Stop in either case.",{"type":49,"tag":464,"props":712,"children":713},{},[],{"type":49,"tag":102,"props":715,"children":717},{"id":716},"_2-check-scan-state",[718],{"type":62,"value":719},"2. Check scan state",{"type":49,"tag":576,"props":721,"children":723},{"className":578,"code":722,"language":580,"meta":581,"style":581},"node \"${PLUGIN_ROOT}\u002Fskills\u002Fscan-site\u002Fscripts\u002Fpoll-deep-scan.js\" --portalId \"\u003CPORTAL_ID>\" --once\n",[724],{"type":49,"tag":67,"props":725,"children":726},{"__ignoreMap":581},[727],{"type":49,"tag":587,"props":728,"children":729},{"class":589,"line":590},[730,734,738,742,746,751,755,760,764,769,773],{"type":49,"tag":587,"props":731,"children":732},{"style":594},[733],{"type":62,"value":597},{"type":49,"tag":587,"props":735,"children":736},{"style":600},[737],{"type":62,"value":603},{"type":49,"tag":587,"props":739,"children":740},{"style":606},[741],{"type":62,"value":609},{"type":49,"tag":587,"props":743,"children":744},{"style":600},[745],{"type":62,"value":614},{"type":49,"tag":587,"props":747,"children":748},{"style":617},[749],{"type":62,"value":750},"\u002Fskills\u002Fscan-site\u002Fscripts\u002Fpoll-deep-scan.js",{"type":49,"tag":587,"props":752,"children":753},{"style":600},[754],{"type":62,"value":625},{"type":49,"tag":587,"props":756,"children":757},{"style":617},[758],{"type":62,"value":759}," --portalId",{"type":49,"tag":587,"props":761,"children":762},{"style":600},[763],{"type":62,"value":635},{"type":49,"tag":587,"props":765,"children":766},{"style":617},[767],{"type":62,"value":768},"\u003CPORTAL_ID>",{"type":49,"tag":587,"props":770,"children":771},{"style":600},[772],{"type":62,"value":625},{"type":49,"tag":587,"props":774,"children":775},{"style":617},[776],{"type":62,"value":777}," --once\n",{"type":49,"tag":54,"props":779,"children":780},{},[781,787],{"type":49,"tag":67,"props":782,"children":784},{"className":783},[],[785],{"type":62,"value":786},"--once",{"type":62,"value":788}," does a single status check, exits 0, and prints:",{"type":49,"tag":109,"props":790,"children":791},{},[792,803],{"type":49,"tag":113,"props":793,"children":794},{},[795,801],{"type":49,"tag":67,"props":796,"children":798},{"className":797},[],[799],{"type":62,"value":800},"{ \"status\": \"ongoing\" }",{"type":62,"value":802}," → a scan is currently running.",{"type":49,"tag":113,"props":804,"children":805},{},[806,812],{"type":49,"tag":67,"props":807,"children":809},{"className":808},[],[810],{"type":62,"value":811},"{ \"status\": \"idle\" }",{"type":62,"value":813}," → no scan running.",{"type":49,"tag":54,"props":815,"children":816},{},[817,819,824],{"type":62,"value":818},"Then call ",{"type":49,"tag":67,"props":820,"children":822},{"className":821},[],[823],{"type":62,"value":250},{"type":62,"value":825}," to know whether a completed report exists:",{"type":49,"tag":576,"props":827,"children":829},{"className":578,"code":828,"language":580,"meta":581,"style":581},"node \"${PLUGIN_ROOT}\u002Fskills\u002Fscan-site\u002Fscripts\u002Fget-latest-report.js\" --portalId \"\u003CPORTAL_ID>\"\n",[830],{"type":49,"tag":67,"props":831,"children":832},{"__ignoreMap":581},[833],{"type":49,"tag":587,"props":834,"children":835},{"class":589,"line":590},[836,840,844,848,852,857,861,865,869,873],{"type":49,"tag":587,"props":837,"children":838},{"style":594},[839],{"type":62,"value":597},{"type":49,"tag":587,"props":841,"children":842},{"style":600},[843],{"type":62,"value":603},{"type":49,"tag":587,"props":845,"children":846},{"style":606},[847],{"type":62,"value":609},{"type":49,"tag":587,"props":849,"children":850},{"style":600},[851],{"type":62,"value":614},{"type":49,"tag":587,"props":853,"children":854},{"style":617},[855],{"type":62,"value":856},"\u002Fskills\u002Fscan-site\u002Fscripts\u002Fget-latest-report.js",{"type":49,"tag":587,"props":858,"children":859},{"style":600},[860],{"type":62,"value":625},{"type":49,"tag":587,"props":862,"children":863},{"style":617},[864],{"type":62,"value":759},{"type":49,"tag":587,"props":866,"children":867},{"style":600},[868],{"type":62,"value":635},{"type":49,"tag":587,"props":870,"children":871},{"style":617},[872],{"type":62,"value":768},{"type":49,"tag":587,"props":874,"children":875},{"style":600},[876],{"type":62,"value":644},{"type":49,"tag":54,"props":878,"children":879},{},[880,886,888,893],{"type":49,"tag":67,"props":881,"children":883},{"className":882},[],[884],{"type":62,"value":885},"{ \"status\": \"ok\" }",{"type":62,"value":887}," means a report is available. ",{"type":49,"tag":67,"props":889,"children":891},{"className":890},[],[892],{"type":62,"value":258},{"type":62,"value":894}," means no completed scan exists.",{"type":49,"tag":464,"props":896,"children":897},{},[],{"type":49,"tag":102,"props":899,"children":901},{"id":900},"_3-choose-an-action",[902],{"type":62,"value":903},"3. Choose an action",{"type":49,"tag":54,"props":905,"children":906},{},[907,909,914],{"type":62,"value":908},"Skip in ",{"type":49,"tag":58,"props":910,"children":911},{},[912],{"type":62,"value":913},"review mode",{"type":62,"value":915}," — go straight to Step 4 (which always runs in review mode).",{"type":49,"tag":54,"props":917,"children":918},{},[919],{"type":62,"value":920},"MUST use plain language only. Never use words like CSP, CORS, OWASP, hardening, or scan profile.",{"type":49,"tag":474,"props":922,"children":924},{"id":923},"default-approach",[925],{"type":62,"value":926},"Default approach",{"type":49,"tag":50,"props":928,"children":929},{},[930,942],{"type":49,"tag":54,"props":931,"children":932},{},[933,935,940],{"type":62,"value":934},"🚦 ",{"type":49,"tag":58,"props":936,"children":937},{},[938],{"type":62,"value":939},"Gate (plan · scan-site:3.action-choice):",{"type":62,"value":941}," Recommend an action based on the site's scan state (running, idle, has report, no report), then ask the user to accept or choose differently. Starting a new scan triggers a multi-minute backend run; using an existing report is free.",{"type":49,"tag":54,"props":943,"children":944},{},[945,950,952,957,959,964],{"type":49,"tag":58,"props":946,"children":947},{},[948],{"type":62,"value":949},"Trigger:",{"type":62,"value":951}," Phase 3 entry (interactive mode only — review mode bypasses to step 4).\n",{"type":49,"tag":58,"props":953,"children":954},{},[955],{"type":62,"value":956},"Why we ask:",{"type":62,"value":958}," Auto-starting a new scan wastes minutes if a recent report already answers the question; auto-using a stale report misses recent findings.\n",{"type":49,"tag":58,"props":960,"children":961},{},[962],{"type":62,"value":963},"Cancel leaves:",{"type":62,"value":965}," Nothing — no scan triggered, no report consumed.",{"type":49,"tag":54,"props":967,"children":968},{},[969,971,976,978,984],{"type":62,"value":970},"Analyze the site's current state and ",{"type":49,"tag":58,"props":972,"children":973},{},[974],{"type":62,"value":975},"recommend the single most relevant action",{"type":62,"value":977}," via ",{"type":49,"tag":67,"props":979,"children":981},{"className":980},[],[982],{"type":62,"value":983},"AskUserQuestion",{"type":62,"value":985},":",{"type":49,"tag":109,"props":987,"children":988},{},[989,994,999,1004],{"type":49,"tag":113,"props":990,"children":991},{},[992],{"type":62,"value":993},"Scan running, no completed report → recommend waiting for the running scan to finish.",{"type":49,"tag":113,"props":995,"children":996},{},[997],{"type":62,"value":998},"Scan running, report exists → recommend showing the latest results while the new scan continues.",{"type":49,"tag":113,"props":1000,"children":1001},{},[1002],{"type":62,"value":1003},"Idle, no completed report → recommend running a new scan.",{"type":49,"tag":113,"props":1005,"children":1006},{},[1007],{"type":62,"value":1008},"Idle, recent report exists → ask whether to use the existing report or run a fresh scan.",{"type":49,"tag":54,"props":1010,"children":1011},{},[1012],{"type":62,"value":1013},"If the site's state does not warrant a specific recommendation, do not force one — ask what the user wants to do.",{"type":49,"tag":474,"props":1015,"children":1017},{"id":1016},"option-rules",[1018],{"type":62,"value":1019},"Option rules",{"type":49,"tag":54,"props":1021,"children":1022},{},[1023,1025,1030],{"type":62,"value":1024},"When presenting options via ",{"type":49,"tag":67,"props":1026,"children":1028},{"className":1027},[],[1029],{"type":62,"value":983},{"type":62,"value":985},{"type":49,"tag":109,"props":1032,"children":1033},{},[1034,1055,1067,1087,1092],{"type":49,"tag":113,"props":1035,"children":1036},{},[1037,1039,1045,1047,1053],{"type":62,"value":1038},"Keep ",{"type":49,"tag":67,"props":1040,"children":1042},{"className":1041},[],[1043],{"type":62,"value":1044},"label",{"type":62,"value":1046}," to 1–5 words. Include ",{"type":49,"tag":67,"props":1048,"children":1050},{"className":1049},[],[1051],{"type":62,"value":1052},"description",{"type":62,"value":1054}," on every option.",{"type":49,"tag":113,"props":1056,"children":1057},{},[1058,1060,1065],{"type":62,"value":1059},"For options that trigger a new scan, surface the relevant caveats inside that option's ",{"type":49,"tag":67,"props":1061,"children":1063},{"className":1062},[],[1064],{"type":62,"value":1052},{"type":62,"value":1066}," so the user has them at decision time. Do not ask a separate confirmation question after the user picks the option.",{"type":49,"tag":113,"props":1068,"children":1069},{},[1070,1072,1078,1080,1085],{"type":62,"value":1071},"Include ",{"type":49,"tag":67,"props":1073,"children":1075},{"className":1074},[],[1076],{"type":62,"value":1077},"preview",{"type":62,"value":1079}," only when the option represents a concrete change (starting a new scan). Do not add ",{"type":49,"tag":67,"props":1081,"children":1083},{"className":1082},[],[1084],{"type":62,"value":1077},{"type":62,"value":1086}," to \"show latest\" or informational choices.",{"type":49,"tag":113,"props":1088,"children":1089},{},[1090],{"type":62,"value":1091},"Only show options that are actionable given the current state. If a scan is already running, do not offer \"Start a new scan\".",{"type":49,"tag":113,"props":1093,"children":1094},{},[1095],{"type":62,"value":1096},"Mark \"(Recommended)\" only when the site's state justifies it.",{"type":49,"tag":464,"props":1098,"children":1099},{},[],{"type":49,"tag":102,"props":1101,"children":1103},{"id":1102},"_4-run-the-scan",[1104],{"type":62,"value":1105},"4. Run the scan",{"type":49,"tag":54,"props":1107,"children":1108},{},[1109,1111,1115],{"type":62,"value":1110},"In ",{"type":49,"tag":58,"props":1112,"children":1113},{},[1114],{"type":62,"value":913},{"type":62,"value":1116},", always execute this step: if a scan is already running, attach to it and poll; otherwise start a fresh scan and poll. Do not ask — review mode runs end-to-end without user interaction.",{"type":49,"tag":54,"props":1118,"children":1119},{},[1120],{"type":62,"value":1121},"In interactive mode, skip if the user chose to view the latest results.",{"type":49,"tag":54,"props":1123,"children":1124},{},[1125],{"type":62,"value":1126},"Start the scan:",{"type":49,"tag":576,"props":1128,"children":1130},{"className":578,"code":1129,"language":580,"meta":581,"style":581},"node \"${PLUGIN_ROOT}\u002Fskills\u002Fscan-site\u002Fscripts\u002Fstart-deep-scan.js\" --portalId \"\u003CPORTAL_ID>\"\n",[1131],{"type":49,"tag":67,"props":1132,"children":1133},{"__ignoreMap":581},[1134],{"type":49,"tag":587,"props":1135,"children":1136},{"class":589,"line":590},[1137,1141,1145,1149,1153,1158,1162,1166,1170,1174],{"type":49,"tag":587,"props":1138,"children":1139},{"style":594},[1140],{"type":62,"value":597},{"type":49,"tag":587,"props":1142,"children":1143},{"style":600},[1144],{"type":62,"value":603},{"type":49,"tag":587,"props":1146,"children":1147},{"style":606},[1148],{"type":62,"value":609},{"type":49,"tag":587,"props":1150,"children":1151},{"style":600},[1152],{"type":62,"value":614},{"type":49,"tag":587,"props":1154,"children":1155},{"style":617},[1156],{"type":62,"value":1157},"\u002Fskills\u002Fscan-site\u002Fscripts\u002Fstart-deep-scan.js",{"type":49,"tag":587,"props":1159,"children":1160},{"style":600},[1161],{"type":62,"value":625},{"type":49,"tag":587,"props":1163,"children":1164},{"style":617},[1165],{"type":62,"value":759},{"type":49,"tag":587,"props":1167,"children":1168},{"style":600},[1169],{"type":62,"value":635},{"type":49,"tag":587,"props":1171,"children":1172},{"style":617},[1173],{"type":62,"value":768},{"type":49,"tag":587,"props":1175,"children":1176},{"style":600},[1177],{"type":62,"value":644},{"type":49,"tag":54,"props":1179,"children":1180},{},[1181,1183,1188],{"type":62,"value":1182},"If stdout is ",{"type":49,"tag":67,"props":1184,"children":1186},{"className":1185},[],[1187],{"type":62,"value":222},{"type":62,"value":1189},", skip ahead to polling — there is already a scan in progress.",{"type":49,"tag":54,"props":1191,"children":1192},{},[1193],{"type":62,"value":1194},"Then poll for completion:",{"type":49,"tag":576,"props":1196,"children":1198},{"className":578,"code":1197,"language":580,"meta":581,"style":581},"node \"${PLUGIN_ROOT}\u002Fskills\u002Fscan-site\u002Fscripts\u002Fpoll-deep-scan.js\" --portalId \"\u003CPORTAL_ID>\"\n",[1199],{"type":49,"tag":67,"props":1200,"children":1201},{"__ignoreMap":581},[1202],{"type":49,"tag":587,"props":1203,"children":1204},{"class":589,"line":590},[1205,1209,1213,1217,1221,1225,1229,1233,1237,1241],{"type":49,"tag":587,"props":1206,"children":1207},{"style":594},[1208],{"type":62,"value":597},{"type":49,"tag":587,"props":1210,"children":1211},{"style":600},[1212],{"type":62,"value":603},{"type":49,"tag":587,"props":1214,"children":1215},{"style":606},[1216],{"type":62,"value":609},{"type":49,"tag":587,"props":1218,"children":1219},{"style":600},[1220],{"type":62,"value":614},{"type":49,"tag":587,"props":1222,"children":1223},{"style":617},[1224],{"type":62,"value":750},{"type":49,"tag":587,"props":1226,"children":1227},{"style":600},[1228],{"type":62,"value":625},{"type":49,"tag":587,"props":1230,"children":1231},{"style":617},[1232],{"type":62,"value":759},{"type":49,"tag":587,"props":1234,"children":1235},{"style":600},[1236],{"type":62,"value":635},{"type":49,"tag":587,"props":1238,"children":1239},{"style":617},[1240],{"type":62,"value":768},{"type":49,"tag":587,"props":1242,"children":1243},{"style":600},[1244],{"type":62,"value":644},{"type":49,"tag":54,"props":1246,"children":1247},{},[1248,1250,1256],{"type":62,"value":1249},"Run polling with ",{"type":49,"tag":67,"props":1251,"children":1253},{"className":1252},[],[1254],{"type":62,"value":1255},"run_in_background: true",{"type":62,"value":1257}," so the user can keep working. The script exits when the scan finishes or the timeout passes (default 20 minutes). If it times out, fetch whatever report is available and note the timeout in the summary.",{"type":49,"tag":464,"props":1259,"children":1260},{},[],{"type":49,"tag":102,"props":1262,"children":1264},{"id":1263},"_5-fetch-and-summarize",[1265],{"type":62,"value":1266},"5. Fetch and summarize",{"type":49,"tag":474,"props":1268,"children":1270},{"id":1269},"_51-fetch-and-transform-the-report",[1271],{"type":62,"value":1272},"5.1 Fetch and transform the report",{"type":49,"tag":576,"props":1274,"children":1276},{"className":578,"code":1275,"language":580,"meta":581,"style":581},"node \"${PLUGIN_ROOT}\u002Fskills\u002Fscan-site\u002Fscripts\u002Ftransform-report.js\" --portalId \"\u003CPORTAL_ID>\"\n",[1277],{"type":49,"tag":67,"props":1278,"children":1279},{"__ignoreMap":581},[1280],{"type":49,"tag":587,"props":1281,"children":1282},{"class":589,"line":590},[1283,1287,1291,1295,1299,1304,1308,1312,1316,1320],{"type":49,"tag":587,"props":1284,"children":1285},{"style":594},[1286],{"type":62,"value":597},{"type":49,"tag":587,"props":1288,"children":1289},{"style":600},[1290],{"type":62,"value":603},{"type":49,"tag":587,"props":1292,"children":1293},{"style":606},[1294],{"type":62,"value":609},{"type":49,"tag":587,"props":1296,"children":1297},{"style":600},[1298],{"type":62,"value":614},{"type":49,"tag":587,"props":1300,"children":1301},{"style":617},[1302],{"type":62,"value":1303},"\u002Fskills\u002Fscan-site\u002Fscripts\u002Ftransform-report.js",{"type":49,"tag":587,"props":1305,"children":1306},{"style":600},[1307],{"type":62,"value":625},{"type":49,"tag":587,"props":1309,"children":1310},{"style":617},[1311],{"type":62,"value":759},{"type":49,"tag":587,"props":1313,"children":1314},{"style":600},[1315],{"type":62,"value":635},{"type":49,"tag":587,"props":1317,"children":1318},{"style":617},[1319],{"type":62,"value":768},{"type":49,"tag":587,"props":1321,"children":1322},{"style":600},[1323],{"type":62,"value":644},{"type":49,"tag":54,"props":1325,"children":1326},{},[1327],{"type":62,"value":1328},"Parse the stdout JSON. The status field can be:",{"type":49,"tag":109,"props":1330,"children":1331},{},[1332,1358,1377],{"type":49,"tag":113,"props":1333,"children":1334},{},[1335,1341,1343,1349,1351,1357],{"type":49,"tag":67,"props":1336,"children":1338},{"className":1337},[],[1339],{"type":62,"value":1340},"ok",{"type":62,"value":1342}," — a normal report with ",{"type":49,"tag":67,"props":1344,"children":1346},{"className":1345},[],[1347],{"type":62,"value":1348},"findings",{"type":62,"value":1350}," and ",{"type":49,"tag":67,"props":1352,"children":1354},{"className":1353},[],[1355],{"type":62,"value":1356},"details",{"type":62,"value":260},{"type":49,"tag":113,"props":1359,"children":1360},{},[1361,1367,1369,1375],{"type":49,"tag":67,"props":1362,"children":1364},{"className":1363},[],[1365],{"type":62,"value":1366},"empty",{"type":62,"value":1368}," — no completed scan exists for this site (e.g., fresh site or scan still running). Record a single ",{"type":49,"tag":67,"props":1370,"children":1372},{"className":1371},[],[1373],{"type":62,"value":1374},"info",{"type":62,"value":1376}," finding explaining this and continue.",{"type":49,"tag":113,"props":1378,"children":1379},{},[1380,1386,1388,1394,1396,1402],{"type":49,"tag":67,"props":1381,"children":1383},{"className":1382},[],[1384],{"type":62,"value":1385},"malformed",{"type":62,"value":1387}," — the API returned a response missing the ",{"type":49,"tag":67,"props":1389,"children":1391},{"className":1390},[],[1392],{"type":62,"value":1393},"Rules",{"type":62,"value":1395}," array. The transform emits a single ",{"type":49,"tag":67,"props":1397,"children":1399},{"className":1398},[],[1400],{"type":62,"value":1401},"warning",{"type":62,"value":1403}," finding describing this; surface it to the user and recommend re-running the scan.",{"type":49,"tag":54,"props":1405,"children":1406},{},[1407,1409,1415,1417,1423],{"type":62,"value":1408},"See ",{"type":49,"tag":67,"props":1410,"children":1412},{"className":1411},[],[1413],{"type":62,"value":1414},"references\u002Fscan-reference.md",{"type":62,"value":1416}," for the ",{"type":49,"tag":67,"props":1418,"children":1420},{"className":1419},[],[1421],{"type":62,"value":1422},"Risk",{"type":62,"value":1424}," → severity mapping the script applies.",{"type":49,"tag":474,"props":1426,"children":1428},{"id":1427},"_52-review-mode",[1429],{"type":62,"value":1430},"5.2 Review mode",{"type":49,"tag":54,"props":1432,"children":1433},{},[1434,1435,1439,1441,1447,1449,1455],{"type":62,"value":1110},{"type":49,"tag":58,"props":1436,"children":1437},{},[1438],{"type":62,"value":913},{"type":62,"value":1440},", skip the HTML report and write the transform stdout to ",{"type":49,"tag":67,"props":1442,"children":1444},{"className":1443},[],[1445],{"type":62,"value":1446},"\u003CREVIEW_DIR>\u002Fscan-site.json",{"type":62,"value":1448},". Then stop. The transform emits ",{"type":49,"tag":67,"props":1450,"children":1452},{"className":1451},[],[1453],{"type":62,"value":1454},"{ status, findings, details }",{"type":62,"value":1456},"; the orchestrating skill handles presentation.",{"type":49,"tag":474,"props":1458,"children":1460},{"id":1459},"_53-render-html-report",[1461],{"type":62,"value":1462},"5.3 Render HTML report",{"type":49,"tag":54,"props":1464,"children":1465},{},[1466,1467,1471],{"type":62,"value":908},{"type":49,"tag":58,"props":1468,"children":1469},{},[1470],{"type":62,"value":913},{"type":62,"value":260},{"type":49,"tag":54,"props":1473,"children":1474},{},[1475],{"type":62,"value":1476},"Render uses the same shared template as the consolidated security review. Build a single-section review-data payload, then render:",{"type":49,"tag":576,"props":1478,"children":1480},{"className":578,"code":1479,"language":580,"meta":581,"style":581},"node \"${PLUGIN_ROOT}\u002Fscripts\u002Fbuild-review-data.js\" \\\n  --reportName \"Site Scan\" \\\n  --inputDir \"\u003CTEMP_DIR>\" \\\n  --siteName \"\u003CSITE_NAME>\" \\\n  --goalLabel \"Live Site Scan\" \\\n  --scopeLabel \"\u003CSCOPE_LABEL>\" \\\n  --summary \"\u003CSUMMARY_TEXT>\" \\\n  --output \"\u003CTEMP_DIR>\u002Fdata.json\"\n\nnode \"${PLUGIN_ROOT}\u002Fscripts\u002Frender-review.js\" \\\n  --data \"\u003CTEMP_DIR>\u002Fdata.json\" \\\n  --output \"\u003CPROJECT_ROOT>\u002Fdocs\u002Fsite-scan-\u003CYYYY-MM-DD-HHMMSS>.html\"\n",[1481],{"type":49,"tag":67,"props":1482,"children":1483},{"__ignoreMap":581},[1484,1517,1543,1569,1595,1621,1647,1673,1695,1704,1737,1762],{"type":49,"tag":587,"props":1485,"children":1486},{"class":589,"line":590},[1487,1491,1495,1499,1503,1508,1512],{"type":49,"tag":587,"props":1488,"children":1489},{"style":594},[1490],{"type":62,"value":597},{"type":49,"tag":587,"props":1492,"children":1493},{"style":600},[1494],{"type":62,"value":603},{"type":49,"tag":587,"props":1496,"children":1497},{"style":606},[1498],{"type":62,"value":609},{"type":49,"tag":587,"props":1500,"children":1501},{"style":600},[1502],{"type":62,"value":614},{"type":49,"tag":587,"props":1504,"children":1505},{"style":617},[1506],{"type":62,"value":1507},"\u002Fscripts\u002Fbuild-review-data.js",{"type":49,"tag":587,"props":1509,"children":1510},{"style":600},[1511],{"type":62,"value":625},{"type":49,"tag":587,"props":1513,"children":1514},{"style":606},[1515],{"type":62,"value":1516}," \\\n",{"type":49,"tag":587,"props":1518,"children":1520},{"class":589,"line":1519},2,[1521,1526,1530,1535,1539],{"type":49,"tag":587,"props":1522,"children":1523},{"style":617},[1524],{"type":62,"value":1525},"  --reportName",{"type":49,"tag":587,"props":1527,"children":1528},{"style":600},[1529],{"type":62,"value":635},{"type":49,"tag":587,"props":1531,"children":1532},{"style":617},[1533],{"type":62,"value":1534},"Site Scan",{"type":49,"tag":587,"props":1536,"children":1537},{"style":600},[1538],{"type":62,"value":625},{"type":49,"tag":587,"props":1540,"children":1541},{"style":606},[1542],{"type":62,"value":1516},{"type":49,"tag":587,"props":1544,"children":1546},{"class":589,"line":1545},3,[1547,1552,1556,1561,1565],{"type":49,"tag":587,"props":1548,"children":1549},{"style":617},[1550],{"type":62,"value":1551},"  --inputDir",{"type":49,"tag":587,"props":1553,"children":1554},{"style":600},[1555],{"type":62,"value":635},{"type":49,"tag":587,"props":1557,"children":1558},{"style":617},[1559],{"type":62,"value":1560},"\u003CTEMP_DIR>",{"type":49,"tag":587,"props":1562,"children":1563},{"style":600},[1564],{"type":62,"value":625},{"type":49,"tag":587,"props":1566,"children":1567},{"style":606},[1568],{"type":62,"value":1516},{"type":49,"tag":587,"props":1570,"children":1572},{"class":589,"line":1571},4,[1573,1578,1582,1587,1591],{"type":49,"tag":587,"props":1574,"children":1575},{"style":617},[1576],{"type":62,"value":1577},"  --siteName",{"type":49,"tag":587,"props":1579,"children":1580},{"style":600},[1581],{"type":62,"value":635},{"type":49,"tag":587,"props":1583,"children":1584},{"style":617},[1585],{"type":62,"value":1586},"\u003CSITE_NAME>",{"type":49,"tag":587,"props":1588,"children":1589},{"style":600},[1590],{"type":62,"value":625},{"type":49,"tag":587,"props":1592,"children":1593},{"style":606},[1594],{"type":62,"value":1516},{"type":49,"tag":587,"props":1596,"children":1598},{"class":589,"line":1597},5,[1599,1604,1608,1613,1617],{"type":49,"tag":587,"props":1600,"children":1601},{"style":617},[1602],{"type":62,"value":1603},"  --goalLabel",{"type":49,"tag":587,"props":1605,"children":1606},{"style":600},[1607],{"type":62,"value":635},{"type":49,"tag":587,"props":1609,"children":1610},{"style":617},[1611],{"type":62,"value":1612},"Live Site Scan",{"type":49,"tag":587,"props":1614,"children":1615},{"style":600},[1616],{"type":62,"value":625},{"type":49,"tag":587,"props":1618,"children":1619},{"style":606},[1620],{"type":62,"value":1516},{"type":49,"tag":587,"props":1622,"children":1624},{"class":589,"line":1623},6,[1625,1630,1634,1639,1643],{"type":49,"tag":587,"props":1626,"children":1627},{"style":617},[1628],{"type":62,"value":1629},"  --scopeLabel",{"type":49,"tag":587,"props":1631,"children":1632},{"style":600},[1633],{"type":62,"value":635},{"type":49,"tag":587,"props":1635,"children":1636},{"style":617},[1637],{"type":62,"value":1638},"\u003CSCOPE_LABEL>",{"type":49,"tag":587,"props":1640,"children":1641},{"style":600},[1642],{"type":62,"value":625},{"type":49,"tag":587,"props":1644,"children":1645},{"style":606},[1646],{"type":62,"value":1516},{"type":49,"tag":587,"props":1648,"children":1650},{"class":589,"line":1649},7,[1651,1656,1660,1665,1669],{"type":49,"tag":587,"props":1652,"children":1653},{"style":617},[1654],{"type":62,"value":1655},"  --summary",{"type":49,"tag":587,"props":1657,"children":1658},{"style":600},[1659],{"type":62,"value":635},{"type":49,"tag":587,"props":1661,"children":1662},{"style":617},[1663],{"type":62,"value":1664},"\u003CSUMMARY_TEXT>",{"type":49,"tag":587,"props":1666,"children":1667},{"style":600},[1668],{"type":62,"value":625},{"type":49,"tag":587,"props":1670,"children":1671},{"style":606},[1672],{"type":62,"value":1516},{"type":49,"tag":587,"props":1674,"children":1676},{"class":589,"line":1675},8,[1677,1682,1686,1691],{"type":49,"tag":587,"props":1678,"children":1679},{"style":617},[1680],{"type":62,"value":1681},"  --output",{"type":49,"tag":587,"props":1683,"children":1684},{"style":600},[1685],{"type":62,"value":635},{"type":49,"tag":587,"props":1687,"children":1688},{"style":617},[1689],{"type":62,"value":1690},"\u003CTEMP_DIR>\u002Fdata.json",{"type":49,"tag":587,"props":1692,"children":1693},{"style":600},[1694],{"type":62,"value":644},{"type":49,"tag":587,"props":1696,"children":1698},{"class":589,"line":1697},9,[1699],{"type":49,"tag":587,"props":1700,"children":1701},{"emptyLinePlaceholder":41},[1702],{"type":62,"value":1703},"\n",{"type":49,"tag":587,"props":1705,"children":1707},{"class":589,"line":1706},10,[1708,1712,1716,1720,1724,1729,1733],{"type":49,"tag":587,"props":1709,"children":1710},{"style":594},[1711],{"type":62,"value":597},{"type":49,"tag":587,"props":1713,"children":1714},{"style":600},[1715],{"type":62,"value":603},{"type":49,"tag":587,"props":1717,"children":1718},{"style":606},[1719],{"type":62,"value":609},{"type":49,"tag":587,"props":1721,"children":1722},{"style":600},[1723],{"type":62,"value":614},{"type":49,"tag":587,"props":1725,"children":1726},{"style":617},[1727],{"type":62,"value":1728},"\u002Fscripts\u002Frender-review.js",{"type":49,"tag":587,"props":1730,"children":1731},{"style":600},[1732],{"type":62,"value":625},{"type":49,"tag":587,"props":1734,"children":1735},{"style":606},[1736],{"type":62,"value":1516},{"type":49,"tag":587,"props":1738,"children":1740},{"class":589,"line":1739},11,[1741,1746,1750,1754,1758],{"type":49,"tag":587,"props":1742,"children":1743},{"style":617},[1744],{"type":62,"value":1745},"  --data",{"type":49,"tag":587,"props":1747,"children":1748},{"style":600},[1749],{"type":62,"value":635},{"type":49,"tag":587,"props":1751,"children":1752},{"style":617},[1753],{"type":62,"value":1690},{"type":49,"tag":587,"props":1755,"children":1756},{"style":600},[1757],{"type":62,"value":625},{"type":49,"tag":587,"props":1759,"children":1760},{"style":606},[1761],{"type":62,"value":1516},{"type":49,"tag":587,"props":1763,"children":1765},{"class":589,"line":1764},12,[1766,1770,1774,1779],{"type":49,"tag":587,"props":1767,"children":1768},{"style":617},[1769],{"type":62,"value":1681},{"type":49,"tag":587,"props":1771,"children":1772},{"style":600},[1773],{"type":62,"value":635},{"type":49,"tag":587,"props":1775,"children":1776},{"style":617},[1777],{"type":62,"value":1778},"\u003CPROJECT_ROOT>\u002Fdocs\u002Fsite-scan-\u003CYYYY-MM-DD-HHMMSS>.html",{"type":49,"tag":587,"props":1780,"children":1781},{"style":600},[1782],{"type":62,"value":644},{"type":49,"tag":54,"props":1784,"children":1785},{},[1786,1791,1793,1799,1801,1807,1809,1814,1816,1822,1824,1829],{"type":49,"tag":67,"props":1787,"children":1789},{"className":1788},[],[1790],{"type":62,"value":1560},{"type":62,"value":1792}," should contain only ",{"type":49,"tag":67,"props":1794,"children":1796},{"className":1795},[],[1797],{"type":62,"value":1798},"scan-site.json",{"type":62,"value":1800}," (the transform output from Step 5.1) — ",{"type":49,"tag":67,"props":1802,"children":1804},{"className":1803},[],[1805],{"type":62,"value":1806},"build-review-data.js",{"type":62,"value":1808}," ignores intermediate files. The filename ",{"type":49,"tag":58,"props":1810,"children":1811},{},[1812],{"type":62,"value":1813},"must",{"type":62,"value":1815}," include the local timestamp (e.g., ",{"type":49,"tag":67,"props":1817,"children":1819},{"className":1818},[],[1820],{"type":62,"value":1821},"site-scan-2026-05-14-053805.html",{"type":62,"value":1823},"). Delete ",{"type":49,"tag":67,"props":1825,"children":1827},{"className":1826},[],[1828],{"type":62,"value":1560},{"type":62,"value":1830}," after the render succeeds. Open the rendered HTML in the browser.",{"type":49,"tag":474,"props":1832,"children":1834},{"id":1833},"_54-present-summary",[1835],{"type":62,"value":1836},"5.4 Present summary",{"type":49,"tag":54,"props":1838,"children":1839},{},[1840],{"type":62,"value":1841},"Plain-language summary in the chat: total findings, count by severity, and what changed since the last scan if available. Do not lead with technical names.",{"type":49,"tag":474,"props":1843,"children":1845},{"id":1844},"_55-record-skill-usage",[1846],{"type":62,"value":1847},"5.5 Record skill usage",{"type":49,"tag":50,"props":1849,"children":1850},{},[1851,1862],{"type":49,"tag":54,"props":1852,"children":1853},{},[1854,1856],{"type":62,"value":1855},"Reference: ",{"type":49,"tag":67,"props":1857,"children":1859},{"className":1858},[],[1860],{"type":62,"value":1861},"${PLUGIN_ROOT}\u002Freferences\u002Fskill-tracking-reference.md",{"type":49,"tag":54,"props":1863,"children":1864},{},[1865,1866,1872],{"type":62,"value":484},{"type":49,"tag":67,"props":1867,"children":1869},{"className":1868},[],[1870],{"type":62,"value":1871},"--skillName \"ScanSite\"",{"type":62,"value":260},{"type":49,"tag":464,"props":1874,"children":1875},{},[],{"type":49,"tag":102,"props":1877,"children":1879},{"id":1878},"_6-walk-through-follow-ups",[1880],{"type":62,"value":1881},"6. Walk through follow-ups",{"type":49,"tag":54,"props":1883,"children":1884},{},[1885,1886,1890],{"type":62,"value":908},{"type":49,"tag":58,"props":1887,"children":1888},{},[1889],{"type":62,"value":913},{"type":62,"value":1891},". Skip if the report has no issues.",{"type":49,"tag":54,"props":1893,"children":1894},{},[1895],{"type":62,"value":1896},"Group findings by which downstream skill can help:",{"type":49,"tag":109,"props":1898,"children":1899},{},[1900,1911,1922,1943,1954],{"type":49,"tag":113,"props":1901,"children":1902},{},[1903,1905],{"type":62,"value":1904},"Header \u002F cookie issues → ",{"type":49,"tag":67,"props":1906,"children":1908},{"className":1907},[],[1909],{"type":62,"value":1910},"\u002Fmanage-headers",{"type":49,"tag":113,"props":1912,"children":1913},{},[1914,1916],{"type":62,"value":1915},"WAF \u002F firewall issues (block bots, rate-limit pages, restrict IPs\u002Fcountries) → ",{"type":49,"tag":67,"props":1917,"children":1919},{"className":1918},[],[1920],{"type":62,"value":1921},"\u002Fmanage-firewall",{"type":49,"tag":113,"props":1923,"children":1924},{},[1925,1927,1933,1935,1941],{"type":62,"value":1926},"Permission issues → ",{"type":49,"tag":67,"props":1928,"children":1930},{"className":1929},[],[1931],{"type":62,"value":1932},"\u002Faudit-permissions",{"type":62,"value":1934}," to review existing table permissions, and\u002For ",{"type":49,"tag":67,"props":1936,"children":1938},{"className":1937},[],[1939],{"type":62,"value":1940},"\u002Fcreate-webroles",{"type":62,"value":1942}," to set up role-based access",{"type":49,"tag":113,"props":1944,"children":1945},{},[1946,1948],{"type":62,"value":1947},"Login or external identity issues → ",{"type":49,"tag":67,"props":1949,"children":1951},{"className":1950},[],[1952],{"type":62,"value":1953},"\u002Fsetup-auth",{"type":49,"tag":113,"props":1955,"children":1956},{},[1957],{"type":62,"value":1958},"Code-level issues (exposed debug pages, information leakage, source visible publicly) → suggest a manual code fix; there is no routed skill for these findings",{"type":49,"tag":54,"props":1960,"children":1961},{},[1962],{"type":62,"value":1963},"Suggest only the skills that match findings actually present in the report. If a finding does not map to any skill, surface it as a manual follow-up the user can act on. If no meaningful follow-up exists, end the skill — do not ask just to ask.",{"type":49,"tag":464,"props":1965,"children":1966},{},[],{"type":49,"tag":102,"props":1968,"children":1970},{"id":1969},"constraints",[1971],{"type":62,"value":1972},"Constraints",{"type":49,"tag":109,"props":1974,"children":1975},{},[1976,1986,1996,2013,2041],{"type":49,"tag":113,"props":1977,"children":1978},{},[1979,1984],{"type":49,"tag":58,"props":1980,"children":1981},{},[1982],{"type":62,"value":1983},"Plain language",{"type":62,"value":1985}," — MUST NOT use technical jargon with the user. Use everyday language; explain the technical name only when asked.",{"type":49,"tag":113,"props":1987,"children":1988},{},[1989,1994],{"type":49,"tag":58,"props":1990,"children":1991},{},[1992],{"type":62,"value":1993},"Read-only",{"type":62,"value":1995}," — this skill only runs scans and reads results. It never enables WAF, deletes scans, or changes site configuration.",{"type":49,"tag":113,"props":1997,"children":1998},{},[1999,2004,2006,2011],{"type":49,"tag":58,"props":2000,"children":2001},{},[2002],{"type":62,"value":2003},"Background long-running calls",{"type":62,"value":2005}," — start the scan, then poll via ",{"type":49,"tag":67,"props":2007,"children":2009},{"className":2008},[],[2010],{"type":62,"value":1255},{"type":62,"value":2012}," so the user can continue working.",{"type":49,"tag":113,"props":2014,"children":2015},{},[2016,2021,2023],{"type":49,"tag":58,"props":2017,"children":2018},{},[2019],{"type":62,"value":2020},"Context-aware interactions",{"type":62,"value":2022}," — every recommendation MUST reflect the site's current state:\n",{"type":49,"tag":109,"props":2024,"children":2025},{},[2026,2031,2036],{"type":49,"tag":113,"props":2027,"children":2028},{},[2029],{"type":62,"value":2030},"Never offer \"Start a new scan\" while one is already running.",{"type":49,"tag":113,"props":2032,"children":2033},{},[2034],{"type":62,"value":2035},"Never offer \"Show latest results\" when no completed report exists.",{"type":49,"tag":113,"props":2037,"children":2038},{},[2039],{"type":62,"value":2040},"Mark \"(Recommended)\" only when the state justifies it.",{"type":49,"tag":113,"props":2042,"children":2043},{},[2044,2049,2051,2056],{"type":49,"tag":58,"props":2045,"children":2046},{},[2047],{"type":62,"value":2048},"Preview is for change review only",{"type":62,"value":2050}," — include ",{"type":49,"tag":67,"props":2052,"children":2054},{"className":2053},[],[2055],{"type":62,"value":1077},{"type":62,"value":2057}," only on options that start a new scan. Do not add to navigation or informational choices.",{"type":49,"tag":102,"props":2059,"children":2061},{"id":2060},"references",[2062],{"type":62,"value":2063},"References",{"type":49,"tag":109,"props":2065,"children":2066},{},[2067,2078],{"type":49,"tag":113,"props":2068,"children":2069},{},[2070,2076],{"type":49,"tag":67,"props":2071,"children":2073},{"className":2072},[],[2074],{"type":62,"value":2075},"references\u002Fcommands.md",{"type":62,"value":2077}," — script flags, response shapes, error catalogue, operating notes. Read § \"Common error catalogue\" when a script returns a non-zero exit code.",{"type":49,"tag":113,"props":2079,"children":2080},{},[2081,2086],{"type":49,"tag":67,"props":2082,"children":2084},{"className":2083},[],[2085],{"type":62,"value":1414},{"type":62,"value":2087}," — field-level schema for the deep-scan report, alert risk values, rule statuses, and severity mapping. Read when normalizing findings.",{"type":49,"tag":2089,"props":2090,"children":2091},"style",{},[2092],{"type":62,"value":2093},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":2095,"total":2192},[2096,2108,2122,2132,2147,2160,2176],{"slug":2097,"name":2097,"fn":2098,"description":2099,"org":2100,"tags":2101,"stars":22,"repoUrl":23,"updatedAt":2107},"activate-site","provision and activate Power Pages sites","Activates and provisions a Power Pages website in a Power Platform environment via the Power Platform REST API. Use when the user wants to activate, provision, turn on, or enable a Power Pages website or portal.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2102,2105,2106],{"name":2103,"slug":2104,"type":15},"Deployment","deployment",{"name":9,"slug":8,"type":15},{"name":20,"slug":21,"type":15},"2026-04-06T18:34:34.732549",{"slug":2109,"name":2109,"fn":2110,"description":2111,"org":2112,"tags":2113,"stars":22,"repoUrl":23,"updatedAt":2121},"add-connector","add Power Platform connectors to apps","Adds any Power Platform connector to a Power Apps code app. Generic fallback for connectors not covered by a specific skill.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2114,2117,2119],{"name":2115,"slug":2116,"type":15},"Integrations","integrations",{"name":2118,"slug":32,"type":15},"Power Apps",{"name":2120,"slug":33,"type":15},"Power Platform","2026-07-31T05:54:47.042251",{"slug":2123,"name":2123,"fn":2124,"description":2125,"org":2126,"tags":2127,"stars":22,"repoUrl":23,"updatedAt":2131},"add-datasource","add data sources to Power Apps","Adds a data source or connector to a Power Apps code app. Asks what the user wants to accomplish and routes to the appropriate specialized skill.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2128,2129,2130],{"name":2115,"slug":2116,"type":15},{"name":9,"slug":8,"type":15},{"name":2118,"slug":32,"type":15},"2026-07-03T16:31:47.822186",{"slug":2133,"name":2133,"fn":2134,"description":2135,"org":2136,"tags":2137,"stars":22,"repoUrl":23,"updatedAt":2146},"add-dataverse","add Dataverse tables to Power Apps","Use when the user wants to add Dataverse tables (existing or new) to a Power Apps mobile app, extend an existing Dataverse table with new columns, or apply an approved data model plan.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2138,2141,2144,2145],{"name":2139,"slug":2140,"type":15},"Data Modeling","data-modeling",{"name":2142,"slug":2143,"type":15},"Dataverse","dataverse",{"name":9,"slug":8,"type":15},{"name":2118,"slug":32,"type":15},"2026-07-31T05:54:46.078014",{"slug":2148,"name":2148,"fn":2149,"description":2150,"org":2151,"tags":2152,"stars":22,"repoUrl":23,"updatedAt":2159},"add-excel","integrate Excel Online into Power Apps","Adds Excel Online (Business) connector to a Power Apps code app. Use when reading or writing Excel workbook data from OneDrive or SharePoint.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2153,2156,2157,2158],{"name":2154,"slug":2155,"type":15},"Excel","excel",{"name":2115,"slug":2116,"type":15},{"name":9,"slug":8,"type":15},{"name":2118,"slug":32,"type":15},"2026-07-31T05:54:44.030943",{"slug":2161,"name":2161,"fn":2162,"description":2163,"org":2164,"tags":2165,"stars":22,"repoUrl":23,"updatedAt":2175},"add-mcscopilot","add Copilot Studio connectors to Power Apps","Adds Microsoft Copilot Studio connector to a Power Apps code app. Use when invoking Copilot Studio agents, sending prompts to agents, or integrating agent responses.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2166,2169,2172,2173,2174],{"name":2167,"slug":2168,"type":15},"Agents","agents",{"name":2170,"slug":2171,"type":15},"Copilot Studio","copilot-studio",{"name":2115,"slug":2116,"type":15},{"name":9,"slug":8,"type":15},{"name":2118,"slug":32,"type":15},"2026-07-31T05:54:39.025597",{"slug":2177,"name":2177,"fn":2178,"description":2179,"org":2180,"tags":2181,"stars":22,"repoUrl":23,"updatedAt":2191},"add-sample-data","populate Power Pages tables with sample data","Populates Dataverse tables with sample records for testing and demoing a Power Pages site. Use when the user wants to add sample data, seed data, generate test records, or insert demo data into their tables.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2182,2185,2186,2187,2188],{"name":2183,"slug":2184,"type":15},"Database","database",{"name":2142,"slug":2143,"type":15},{"name":9,"slug":8,"type":15},{"name":20,"slug":21,"type":15},{"name":2189,"slug":2190,"type":15},"Testing","testing","2026-04-06T18:34:41.141155",26,{"items":2194,"total":2383},[2195,2217,2236,2257,2270,2287,2298,2311,2326,2341,2358,2371],{"slug":2196,"name":2196,"fn":2197,"description":2198,"org":2199,"tags":2200,"stars":2214,"repoUrl":2215,"updatedAt":2216},"rushstack-best-practices","manage Rush monorepos with best practices","Provides best practices and guidance for working with Rush monorepos. Use when the user is working in a Rush-based repository, asks about Rush commands (install, update, build, rebuild), needs help with project selection, dependency management, build caching, subspace configuration, or troubleshooting Rush-specific issues.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2201,2204,2207,2208,2211],{"name":2202,"slug":2203,"type":15},"Engineering","engineering",{"name":2205,"slug":2206,"type":15},"Local Development","local-development",{"name":9,"slug":8,"type":15},{"name":2209,"slug":2210,"type":15},"Project Management","project-management",{"name":2212,"slug":2213,"type":15},"Rush","rush",6484,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Frushstack","2026-04-06T18:34:44.965032",{"slug":2218,"name":2218,"fn":2219,"description":2220,"org":2221,"tags":2222,"stars":2233,"repoUrl":2234,"updatedAt":2235},"azure-ai-agents-persistent-dotnet","build AI agents with Azure .NET SDK","Azure AI Agents Persistent SDK for .NET. Low-level SDK for creating and managing AI agents with threads, messages, runs, and tools. Use for agent CRUD, conversation threads, streaming responses, function calling, file search, and code interpreter. Triggers: \"PersistentAgentsClient\", \"persistent agents\", \"agent threads\", \"agent runs\", \"streaming agents\", \"function calling agents .NET\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2223,2226,2227,2230],{"name":2224,"slug":2225,"type":15},".NET","net",{"name":2167,"slug":2168,"type":15},{"name":2228,"slug":2229,"type":15},"Azure","azure",{"name":2231,"slug":2232,"type":15},"LLM","llm",2804,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills","2026-07-03T16:32:10.297433",{"slug":2237,"name":2237,"fn":2238,"description":2239,"org":2240,"tags":2241,"stars":2233,"repoUrl":2234,"updatedAt":2256},"azure-ai-anomalydetector-java","build anomaly detection applications with Java","Build anomaly detection applications with Azure AI Anomaly Detector SDK for Java. Use when implementing univariate\u002Fmultivariate anomaly detection, time-series analysis, or AI-powered monitoring.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2242,2245,2246,2249,2252,2253],{"name":2243,"slug":2244,"type":15},"Analytics","analytics",{"name":2228,"slug":2229,"type":15},{"name":2247,"slug":2248,"type":15},"Data Analysis","data-analysis",{"name":2250,"slug":2251,"type":15},"Java","java",{"name":9,"slug":8,"type":15},{"name":2254,"slug":2255,"type":15},"Monitoring","monitoring","2026-05-13T06:14:16.261754",{"slug":2258,"name":2258,"fn":2259,"description":2260,"org":2261,"tags":2262,"stars":2233,"repoUrl":2234,"updatedAt":2269},"azure-ai-contentsafety-java","build content moderation applications with Azure AI","Build content moderation applications with Azure AI Content Safety SDK for Java. Use when implementing text\u002Fimage analysis, blocklist management, or harm detection for hate, violence, sexual content, and self-harm.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2263,2266,2267,2268],{"name":2264,"slug":2265,"type":15},"AI Infrastructure","ai-infrastructure",{"name":2228,"slug":2229,"type":15},{"name":2250,"slug":2251,"type":15},{"name":13,"slug":14,"type":15},"2026-07-07T06:53:31.293235",{"slug":2271,"name":2271,"fn":2272,"description":2273,"org":2274,"tags":2275,"stars":2233,"repoUrl":2234,"updatedAt":2286},"azure-ai-contentsafety-py","detect harmful content with Azure AI Content Safety","Azure AI Content Safety SDK for Python. Use for detecting harmful content in text and images with multi-severity classification.\nTriggers: \"azure-ai-contentsafety\", \"ContentSafetyClient\", \"content moderation\", \"harmful content\", \"text analysis\", \"image analysis\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2276,2277,2280,2281,2282,2285],{"name":2228,"slug":2229,"type":15},{"name":2278,"slug":2279,"type":15},"Compliance","compliance",{"name":2231,"slug":2232,"type":15},{"name":9,"slug":8,"type":15},{"name":2283,"slug":2284,"type":15},"Python","python",{"name":13,"slug":14,"type":15},"2026-07-18T05:14:23.017504",{"slug":2288,"name":2288,"fn":2289,"description":2290,"org":2291,"tags":2292,"stars":2233,"repoUrl":2234,"updatedAt":2297},"azure-ai-language-conversations-py","implement conversational language understanding with Python","Implement Conversational Language Understanding (CLU) using the azure-ai-language-conversations Python SDK. Use when working with ConversationAnalysisClient to analyze conversation intent and entities, building NLP features, or integrating language understanding into applications.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2293,2294,2295,2296],{"name":2243,"slug":2244,"type":15},{"name":2228,"slug":2229,"type":15},{"name":2231,"slug":2232,"type":15},{"name":2283,"slug":2284,"type":15},"2026-07-31T05:54:29.068751",{"slug":2299,"name":2299,"fn":2300,"description":2301,"org":2302,"tags":2303,"stars":2233,"repoUrl":2234,"updatedAt":2310},"azure-ai-translation-text-py","translate text using Azure AI services","Azure AI Text Translation SDK for real-time text translation, transliteration, language detection, and dictionary lookup. Use for translating text content in applications.\nTriggers: \"text translation\", \"translator\", \"translate text\", \"transliterate\", \"TextTranslationClient\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2304,2307,2308,2309],{"name":2305,"slug":2306,"type":15},"API Development","api-development",{"name":2228,"slug":2229,"type":15},{"name":9,"slug":8,"type":15},{"name":2283,"slug":2284,"type":15},"2026-07-18T05:14:16.988376",{"slug":2312,"name":2312,"fn":2313,"description":2314,"org":2315,"tags":2316,"stars":2233,"repoUrl":2234,"updatedAt":2325},"azure-ai-vision-imageanalysis-py","analyze images with Azure AI Vision","Azure AI Vision Image Analysis SDK for captions, tags, objects, OCR, people detection, and smart cropping. Use for computer vision and image understanding tasks.\nTriggers: \"image analysis\", \"computer vision\", \"OCR\", \"object detection\", \"ImageAnalysisClient\", \"image caption\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2317,2318,2321,2324],{"name":2228,"slug":2229,"type":15},{"name":2319,"slug":2320,"type":15},"Computer Vision","computer-vision",{"name":2322,"slug":2323,"type":15},"Images","images",{"name":2283,"slug":2284,"type":15},"2026-07-18T05:14:18.007737",{"slug":2327,"name":2327,"fn":2328,"description":2329,"org":2330,"tags":2331,"stars":2233,"repoUrl":2234,"updatedAt":2340},"azure-appconfiguration-java","manage configuration with Azure App Configuration","Azure App Configuration SDK for Java. Centralized application configuration management with key-value settings, feature flags, and snapshots.\nTriggers: \"ConfigurationClient java\", \"app configuration java\", \"feature flag java\", \"configuration setting java\", \"azure config java\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2332,2333,2336,2339],{"name":2228,"slug":2229,"type":15},{"name":2334,"slug":2335,"type":15},"Configuration","configuration",{"name":2337,"slug":2338,"type":15},"Feature Flags","feature-flags",{"name":2250,"slug":2251,"type":15},"2026-07-03T16:32:01.278468",{"slug":2342,"name":2342,"fn":2343,"description":2344,"org":2345,"tags":2346,"stars":2233,"repoUrl":2234,"updatedAt":2357},"azure-cosmos-rust","build applications with Azure Cosmos DB","Azure Cosmos DB library for Rust (NoSQL API). Document CRUD, containers, and globally distributed data.\nTriggers: \"cosmos db rust\", \"CosmosClient rust\", \"document crud rust\", \"NoSQL rust\", \"partition key rust\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2347,2350,2351,2354],{"name":2348,"slug":2349,"type":15},"Cosmos DB","cosmos-db",{"name":2183,"slug":2184,"type":15},{"name":2352,"slug":2353,"type":15},"NoSQL","nosql",{"name":2355,"slug":2356,"type":15},"Rust","rust","2026-07-31T05:54:27.021432",{"slug":2359,"name":2359,"fn":2343,"description":2360,"org":2361,"tags":2362,"stars":2233,"repoUrl":2234,"updatedAt":2370},"azure-cosmos-ts","Azure Cosmos DB JavaScript\u002FTypeScript SDK (@azure\u002Fcosmos) for data plane operations. Use for CRUD operations on documents, queries, bulk operations, and container management. Triggers: \"Cosmos DB\", \"@azure\u002Fcosmos\", \"CosmosClient\", \"document CRUD\", \"NoSQL queries\", \"bulk operations\", \"partition key\", \"container.items\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2363,2364,2365,2366,2367],{"name":2348,"slug":2349,"type":15},{"name":2183,"slug":2184,"type":15},{"name":9,"slug":8,"type":15},{"name":2352,"slug":2353,"type":15},{"name":2368,"slug":2369,"type":15},"TypeScript","typescript","2026-07-03T16:31:19.368382",{"slug":2372,"name":2372,"fn":2373,"description":2374,"org":2375,"tags":2376,"stars":2233,"repoUrl":2234,"updatedAt":2382},"azure-data-tables-java","build table storage applications with Java","Build table storage applications with Azure Tables SDK for Java. Use when working with Azure Table Storage or Cosmos DB Table API for NoSQL key-value data, schemaless storage, or structured data at scale.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2377,2378,2379,2380,2381],{"name":2228,"slug":2229,"type":15},{"name":2348,"slug":2349,"type":15},{"name":2183,"slug":2184,"type":15},{"name":2250,"slug":2251,"type":15},{"name":2352,"slug":2353,"type":15},"2026-05-13T06:14:17.582229",267]