node_modules/
dist/
*.tsbuildinfo
.DS_Store
.env
.env.*
.env.local
*.pem
*.key
/coverage/
__pycache__/
audit-*.json
critical-*.json
llm-batch-*.json
dynamic-audit*.json
reanalyze-*.json
rt-batch-*.json
mcp-registry*.json
attack-payloads.json
audit-v*.json
triage-report-*.json
quality-review-*.md
scan-state.json
test-audit.json
llm-extra-*.json
exports/
marketing/
.gstack/

# ClawHub scan intermediates (keep scan-full.json + final reports only in git)
data/clawhub-scan/scan-checkpoint-*.json
data/clawhub-scan/scan-progress.json
data/clawhub-scan/scan-1000.json
data/clawhub-scan/scan-10000.json

# Marketing / operational content (not part of the open standard)
posts/
templates/
skillssec-scanner/
data/posts/
reports/
scripts/generate-skillssec-posts.ts
scripts/publish-posts.ts
scripts/post-via-browser.py
scripts/setup-x-auth.py
scripts/monitor-security-events.py
scripts/notify-author.ts
.claude/CLAUDE.md
.claude/commands/review-posts.md
.claude/commands/publish.md
.claude/commands/weekly-report.md
benchmark/

# LaTeX build artifacts
docs/paper/ATR-Paper.aux
docs/paper/ATR-Paper.log
docs/paper/ATR-Paper.out

# Ecosystem crawl state
crawl-state.json

# Scan reports (generated, not source)
data/skill-scan-report-full.json
data/skill-scan-report-full.csv
data/openclaw-scan/
data/scan-log-*.md
scripts/scan-openclaw*.mjs
data/hackaprompt/hackaprompt-corpus.json
data/test-corpora/vendor-misses.json
