# Resource-scan receipt: people A resource-scan receipt is the record of one static check run over one public AI resource — a repository, a gist, a skill file, a script, an MCP server package or a config — at the public URL named on the receipt. The receipt binds to the exact bytes scanned, named by their SHA-256 hash, and is sealed into the public ledger like every other record here. Each receipt carries the published check list with the outcome of every check and the findings in plain language. The analysis is static only: the bytes are read as text and are never executed, installed or run, and nothing is fetched from behind a login. A receipt publishes evidence, never a judgment: the summary line counts how many of the checks flagged, and the reader draws their own conclusion from the findings. Re-scanning the same URL creates a new receipt; the artifact page shows the latest receipt and the history, and when the bytes at a URL change the new receipt is a new version — no receipt is ever edited or overwritten. The rightshold on https://firecrawl.dev/alexandria/categories/people — scanned 2026-11-03 · 3 of 8 checks flagged · receipt rsc_77a5a8e532ff6828912f253f, verify at rightshold.com/verify. Artifact: people Canonical URL: https://firecrawl.dev/alexandria/categories/people Fetched from: https://www.firecrawl.dev/alexandria/categories/people SHA-256 of the exact bytes scanned: 0812c923b9360bc84015e7a249108d7e4043df744e08971bb036192a29ba644b Bytes scanned: 472261 · Scanned: 2026-11-03T16:20:57.024Z · Scanner: resource-scan-v1 Summary: 3 of 8 checks flagged (evidence only — the findings below are the record) Analysis: static only — the bytes were read as text and were never executed, installed or run. Ledger entry: 7155 ## Checks (latest receipt) ### Outbound network references — flag The scanned bytes reference outbound network activity to these domains: discord.gg, docs.firecrawl.dev, github.com, schema.org, status.firecrawl.dev, www.firecrawl.dev, www.googletagmanager.com, www.instagram.com, www.linkedin.com, www.w3.org, www.youtube.com, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose. Evidence: domain: discord.gg; domain: docs.firecrawl.dev; domain: github.com; domain: schema.org; domain: status.firecrawl.dev; domain: www.firecrawl.dev; domain: www.googletagmanager.com; domain: www.instagram.com; domain: www.linkedin.com; domain: www.w3.org; domain: www.youtube.com; domain: x.com ### Credential and environment access — pass No credential or environment access patterns were found in the scanned bytes. ### Install and postinstall hooks — pass No install or postinstall hooks were found in the scanned bytes. ### Obfuscation and encoded payloads — pass No obfuscation or encoded-payload signs were found in the scanned bytes. ### Shell-outs and download-and-execute — pass No shell-out or download-and-execute patterns were found in the scanned bytes. ### Permission declarations vs behavior — flag The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against. Evidence: behavior: network ### Known-bad indicators — pass None of the scanner's published known-bad indicator patterns matched the scanned bytes. ### Provenance facts (weak signals) — flag Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: firecrawl.dev; bytes scanned: 472261; fetched from: https://www.firecrawl.dev/alexandria/categories/people. Evidence: source host: firecrawl.dev; bytes scanned: 472261; fetched from: https://www.firecrawl.dev/alexandria/categories/people ## History (25 receipts, 25 versions) The bytes at this URL have changed across receipts: each distinct SHA-256 in the history is a distinct version of the artifact, recorded as its own receipt and never merged or overwritten. - 2026-11-03 — 3 of 8 checks flagged · SHA-256 0812c923b9360bc8… · 472261 bytes · scanner resource-scan-v1 · ledger entry 7155 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 9b9ce2630c2aa93a… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7146 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 ded13118eafd7dca… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7137 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 8b533fd5ba6943f0… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7129 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 aa3d79c889d50a29… · 472270 bytes · scanner resource-scan-v1 · ledger entry 7120 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 85535211d7d513f8… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7111 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 bd8dcb2527777106… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7103 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 0ded3278f1ffd145… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7091 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 cb71e24fbf1a0bc0… · 472270 bytes · scanner resource-scan-v1 · ledger entry 7082 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 8569bfbafdd39f5b… · 472270 bytes · scanner resource-scan-v1 · ledger entry 7074 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 ed8d00779d89093e… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7065 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 6b66d496f2e89a4e… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7057 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 7ab4ff36ee62545f… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7048 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 b31a47f5a0123803… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7040 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 d842296e08a50b7c… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7028 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 cf4c5be814bfb53b… · 472270 bytes · scanner resource-scan-v1 · ledger entry 7019 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 890dd0d4fa5c0b0c… · 472270 bytes · scanner resource-scan-v1 · ledger entry 7011 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 11a2b8a7bbbc7ba7… · 472267 bytes · scanner resource-scan-v1 · ledger entry 7003 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 7a14af1fb52e524f… · 472267 bytes · scanner resource-scan-v1 · ledger entry 6993 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 a0ceb6897124f061… · 472267 bytes · scanner resource-scan-v1 · ledger entry 6985 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 52c39d888ba2d498… · 472391 bytes · scanner resource-scan-v1 · ledger entry 6977 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 03d493a44f2de4bc… · 472391 bytes · scanner resource-scan-v1 · ledger entry 6969 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 96fa94bad1a55273… · 472391 bytes · scanner resource-scan-v1 · ledger entry 6959 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 bf4862581588aa4e… · 472394 bytes · scanner resource-scan-v1 · ledger entry 6951 - 2026-11-03 — 3 of 8 checks flagged · SHA-256 8624901f40922798… · 472391 bytes · scanner resource-scan-v1 · ledger entry 6947 Machine form: https://www.rightshold.com/v1/resource-scans/firecrawl-dev-alexandria-categories-people-03498464f6