GPT-5 finding
--json mode emits non-JSON headers and summary lines, breaking machine parsing
mediumapi-contracthigh
- skills/skill-security-scan/scan.sh:293-296
- skills/skill-security-scan/scan.sh:302-311
Even when JSON_OUTPUT is true, the script prints human-readable headers and summaries before the JSON. Tools expecting clean JSON from stdout will fail to parse.
Recommendation
When JSON_OUTPUT is true, suppress all non-JSON output and write only the JSON array to stdout. Optionally add a --quiet flag for text mode. Consider writing human-readable output to stderr if needed.