{
  "rule_ids": [
    "schemeless_to_sink"
  ],
  "severity": "MEDIUM",
  "command_redacted": "curl -sS -X POST \"https://oauth2.googleapis.com/token\" \\\n  --data-urlencode \"cli...",
  "findings": [
    {
      "rule_id": "schemeless_to_sink",
      "severity": "MEDIUM",
      "title": "Schemeless URL in sink context",
      "description": "URL without explicit scheme passed to a command that downloads/executes content",
      "evidence": [
        {
          "type": "url",
          "raw": "client_id=890850960489-5hejo1gd3apvpn1nu1183ohk4u9rlnev.apps.googleusercontent.com"
        }
      ]
    }
  ],
  "timestamp": "2026-06-30T19:01:28.346121513+00:00"
}