We check the variable name for validity and try to parse JSON from the content, so I think it's OK that we don't verify the sscanf return.