Function formatScanReport

src/skills/security-scan.ts:172–181

(result: ScanResult, skillName: string)

/** Format a scan result for the CLI. Returns null when clean. */
export function formatScanReport(result: ScanResult, skillName: string): string | null {
  if (result.severity === 'clean') return null;
  const head = result.severity === 'dangerous'
    ? `\u26d4 Skill "${skillName}" failed the security scan (${result.findings.length} finding(s)):`
    : `\u26a0\ufe0f  Skill "${skillName}" has ${result.findings.length} suspicious finding(s):`;
  const lines = result.findings.map(f =>
    `  [${f.severity}] ${f.rule}: ${f.detail}\n      ↳ ${f.evidence}`,
  );
  return [head, ...lines].join('\n');
}