3.5

Adjusted Signal

3.5

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

8.3K

Stars

Language

321.0K

Lines of Code

1.2K

Files

1.3K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 11.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1058 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.0/100 · LOW

Are imports declared and package/API names verified? 174 finding(s).

Agent Over-Engineering Ratio 13.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 1081 finding(s).

PR Review Velocity Impact 20.1/100 · LOW

Which changes need focused human review? 1295 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 9MEDIUM 50LOW 1236

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1295 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers1018 hits · 752 pts

Severity	File	Line	Snippet	Context
LOW	tools/http-framework-test.yaml	403	def quote_form_component_preserving_pct(value: str) -> str:	CODE
LOW	tools/http-framework-test.yaml	492	def extract_charset_from_content_type(content_type: str) -> str:	CODE
LOW	tools/http-framework-test.yaml	503	def extract_declared_charset_from_body(data: bytes) -> str:	CODE
LOW	tools/http-framework-test.yaml	883	def format_response_body_output(	CODE
LOW	tools/http-framework-test.yaml	933	def print_response_body_summary(meta: Dict[str, object]):	CODE
LOW	tools/virustotal_search.yaml	5	- "import sys\nimport json\nimport requests\nimport os\nimport time\n\n# ==================== VirusTotal 配置 ==========	CODE
LOW	web/static/js/chat-scroll.js	305	function streamBelongsToVisibleConversation(stream) {	CODE
LOW	web/static/js/chat-scroll.js	331	function isVisibleConversationTaskActive() {	CODE
LOW	web/static/js/chat-scroll.js	359	function isChatMessagesPinnedToBottom() {	CODE
LOW	web/static/js/chat-scroll.js	364	function resumeFollowingIfAtBottom(thresholdPx, userInitiated) {	CODE
LOW	web/static/js/chat-scroll.js	408	function scrollChatToBottomInstant() {	CODE
LOW	web/static/js/chat-scroll.js	456	function isolateReturnLatestPointerEvent(event) {	CODE
LOW	web/static/js/chat-scroll.js	483	function scheduleChatScrollToBottomIfFollowing(wasPinnedBeforeDomUpdate) {	CODE
LOW	web/static/js/chat-scroll.js	497	function settleChatToBottomIfFollowing(frameCount) {	CODE
LOW	web/static/js/chat-scroll.js	524	function settleConversationRestoreToBottom(frameCount) {	CODE
LOW	web/static/js/chat-scroll.js	566	function scrollChatMessagesToBottomIfPinned(wasPinned) {	CODE
LOW	web/static/js/chat-scroll.js	602	function markProcessDetailsStreaming(active, assistantDomId) {	CODE
LOW	web/static/js/chat-scroll.js	658	function scrollElementIntoViewIfFollowing(el, options) {	CODE
LOW	web/static/js/agents.js	9	function bindAgentsMdListDelegation() {	CODE
LOW	web/static/js/agents.js	88	function showAddMarkdownAgentModal() {	CODE
LOW	web/static/js/wechat-robot.js	92	function clearWechatBindSuccessNotice() {	CODE
LOW	web/static/js/wechat-robot.js	105	function showWechatBindSuccessNotice(message) {	CODE
LOW	web/static/js/wechat-robot.js	403	function refreshWechatRobotBoundUI(wechat) {	CODE
LOW	web/static/js/rbac-guards.js	247	function wrapHandlerWithPermission(fn, permission) {	CODE
LOW	web/static/js/rbac-guards.js	261	function installWriteHandlerGuards() {	CODE
LOW⚡	web/static/js/rbac.js	310	function closeRbacPermissionsPopover() {	CODE
LOW⚡	web/static/js/rbac.js	314	function toggleRbacEffectivePermissions(ev) {	CODE
LOW⚡	web/static/js/rbac.js	324	function onRbacPermissionsPopoverPointerDown(ev) {	CODE
LOW⚡	web/static/js/rbac.js	333	function bindRbacPermissionsPopoverDismiss() {	CODE
LOW	web/static/js/rbac.js	79	function rbacPermissionModuleLabel(module) {	CODE
LOW	web/static/js/rbac.js	132	function rbacPendingSelectionCount() {	CODE
LOW	web/static/js/rbac.js	137	function rbacRememberSelectedResource(resource) {	CODE
LOW	web/static/js/rbac.js	161	function clearRbacResourceSelection() {	CODE
LOW	web/static/js/rbac.js	188	function renderRbacPendingSelection() {	CODE
LOW	web/static/js/rbac.js	254	function resolveUserEffectiveAccess(user) {	CODE
LOW	web/static/js/rbac.js	278	function positionRbacPermissionsPopover() {	CODE
LOW	web/static/js/rbac.js	295	function onRbacPermissionsPopoverReposition() {	CODE
LOW	web/static/js/rbac.js	299	function setRbacPermissionsPopoverOpen(open) {	CODE
LOW	web/static/js/rbac.js	344	function renderRbacEffectivePermissionsContent(user) {	CODE
LOW	web/static/js/rbac.js	371	function renderRbacEffectivePermissions(user) {	CODE
LOW	web/static/js/rbac.js	762	function selectedUserRolesAreDirty() {	CODE
LOW	web/static/js/rbac.js	911	function renderRbacAssignmentPagination(total, totalPages) {	CODE
LOW	web/static/js/rbac.js	939	function changeRbacAssignmentFilter(value) {	CODE
LOW	web/static/js/rbac.js	1036	function syncRbacResourcePagination(loading) {	CODE
LOW	web/static/js/rbac.js	1062	function toggleRbacResourceSelection(resourceId, checked) {	CODE
LOW	web/static/js/rbac.js	1123	function renderRbacAuditPagination() {	CODE
LOW	web/static/js/rbac.js	1252	function renderRbacUserRolesReadonly(user) {	CODE
LOW	web/static/js/rbac.js	1266	function openRbacRolesFromUserModal() {	CODE
LOW	web/static/js/rbac.js	1271	function openRbacUserModalForSelected() {	CODE
LOW	web/static/js/rbac.js	1283	function renderRbacUserRoleCheckboxes(selected) {	CODE
LOW	web/static/js/rbac.js	1385	function renderRbacPermissionCheckboxes() {	CODE
LOW	web/static/js/rbac.js	1418	function setRbacPermissionSelected(key, checked) {	CODE
LOW	web/static/js/rbac.js	1428	function selectVisibleRbacPermissions(checked) {	CODE
LOW	web/static/js/auth.js	109	function toggleLoginPasswordVisibility() {	CODE
LOW	web/static/js/auth.js	504	function permissionAllowedForElement(el) {	CODE
LOW	web/static/js/auth.js	540	function installPermissionClickGuard() {	CODE
LOW⚡	web/static/js/auth.js	846	function resetRobotBindingGenerateButton() {	CODE
LOW⚡	web/static/js/auth.js	854	function startRobotBindingCountdown() {	CODE
LOW⚡	web/static/js/auth.js	860	function updateRobotBindingCountdown() {	CODE
LOW	web/static/js/auth.js	960	async function deleteRobotAccountBinding(id) {	CODE
958 more matches not shown…

Decorative Section Separators43 hits · 141 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	config.example.yaml	1	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	3	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	6	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	8	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	10	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	396	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	398	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	401	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	403	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	565	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	567	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	572	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	574	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	579	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	581	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	586	# ============================================	COMMENT
MEDIUM⚡	config.example.yaml	588	# ============================================	COMMENT
MEDIUM	config.example.yaml	87	# ============================================	COMMENT
MEDIUM	config.example.yaml	89	# ============================================	COMMENT
MEDIUM	config.example.yaml	140	# ============================================	COMMENT
MEDIUM	config.example.yaml	142	# ============================================	COMMENT
MEDIUM	config.example.yaml	423	# ============================================	COMMENT
MEDIUM	config.example.yaml	425	# ============================================	COMMENT
MEDIUM	config.example.yaml	442	# ============================================	COMMENT
MEDIUM	config.example.yaml	444	# ============================================	COMMENT
MEDIUM	config.example.yaml	470	# ============================================	COMMENT
MEDIUM	config.example.yaml	472	# ============================================	COMMENT
MEDIUM	config.example.yaml	496	# ============================================	COMMENT
MEDIUM	config.example.yaml	498	# ============================================	COMMENT
MEDIUM	config.example.yaml	601	# ============================================	COMMENT
MEDIUM	config.example.yaml	603	# ============================================	COMMENT
MEDIUM	tools/zoomeye_search.yaml	17	# ==================================================	COMMENT
MEDIUM	tools/shodan_search.yaml	17	# ==================================================	COMMENT
MEDIUM	tools/quake_search.yaml	16	# ==================================================	COMMENT
MEDIUM	tools/fofa_search.yaml	17	# ==================================================	COMMENT
MEDIUM	mcp-servers/pent_claude_agent/mcp_pent_claude_agent.py	31	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	mcp-servers/pent_claude_agent/mcp_pent_claude_agent.py	33	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	mcp-servers/pent_claude_agent/mcp_pent_claude_agent.py	157	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	mcp-servers/pent_claude_agent/mcp_pent_claude_agent.py	159	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	mcp-servers/reverse_shell/mcp_reverse_shell.py	22	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	mcp-servers/reverse_shell/mcp_reverse_shell.py	24	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	mcp-servers/reverse_shell/mcp_reverse_shell.py	266	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	mcp-servers/reverse_shell/mcp_reverse_shell.py	268	# ---------------------------------------------------------------------------	COMMENT

Fake / Example Data169 hits · 122 pts

Severity	File	Line	Snippet	Context
LOW	web/static/js/chat.js	2167	const placeholderText = chatInput ? (chatInput.getAttribute('placeholder') \|\| '').trim() : '';	CODE
LOW	web/static/js/chat.js	2190	const placeholderText = (chatInput.getAttribute('placeholder') \|\| '').trim();	CODE
LOW	web/static/js/chat.js	6099	searchInput.setAttribute('data-i18n-attr', 'placeholder');	CODE
LOW	web/static/js/chat.js	9173	searchInput.setAttribute('data-i18n-attr', 'placeholder');	CODE
LOW	web/static/js/chat.js	10489	<input type="text" id="conversation-rename-input" class="form-input" maxlength="200" autocomplete="o	CODE
LOW	web/static/js/webshell.js	5192	connSearchEl.setAttribute('placeholder', ph);	CODE
LOW	web/static/js/workflows.js	489	searchInput.setAttribute('data-i18n-attr', 'placeholder');	CODE
LOW	web/static/js/i18n.js	101	const ph = (chatInput.getAttribute('placeholder') \|\| '').trim();	CODE
LOW	web/static/js/mobile-ui.js	481	setAttrI18n(input, 'placeholder', 'mobile.searchMenu', '搜索菜单…');	CODE
LOW	web/static/i18n/zh-CN.json	3678	"placeholder": "{\n \"my-server\": {\n \"command\": \"python3\",\n \"args\": [\"${HOME}/mcp/server.py\"],\n	CODE
LOW	web/static/i18n/ru-RU.json	3703	"placeholder": "{\n \"my-server\": {\n \"command\": \"python3\",\n \"args\": [\"${HOME}/mcp/server.py\"],\n	CODE
LOW	web/static/i18n/en-US.json	3690	"placeholder": "{\n \"my-server\": {\n \"command\": \"python3\",\n \"args\": [\"${HOME}/mcp/server.py\"],\n	CODE
LOW⚡	web/templates/index.html	2164	<label class="asset-editor-field"><span data-i18n="assets.country">国家/地区</span><	CODE
LOW⚡	web/templates/index.html	2165	<label class="asset-editor-field"><span data-i18n="assets.province">省份/州</span><	CODE
LOW⚡	web/templates/index.html	2166	<label class="asset-editor-field"><span data-i18n="assets.city">城市</span><input	CODE
LOW⚡	web/templates/index.html	2790	data-i18n="vulnerabilityPage.filterExactId" data-i18n-attr="	CODE
LOW⚡	web/templates/index.html	2795	data-i18n="vulnerabilityPage.filterConversation" data-i18n-a	CODE
LOW⚡	web/templates/index.html	2800	data-i18n="vulnerabilityPage.filterTaskOrQueue" data-i18n-at	CODE
LOW⚡	web/templates/index.html	2805	data-i18n="vulnerabilityPage.filterConversationTag" data-i18	CODE
LOW⚡	web/templates/index.html	2810	data-i18n="vulnerabilityPage.filterTaskTag" data-i18n-attr="	CODE
LOW⚡	web/templates/index.html	2905	<input type="text" id="chat-files-filter-conv" class="form-control" data-i18n="chatFiles	CODE
LOW⚡	web/templates/index.html	2909	<input type="text" id="chat-files-filter-project" class="form-control" data-i18n="chatFi	CODE
LOW⚡	web/templates/index.html	2913	<input type="text" id="chat-files-filter-name" class="form-control" data-i18n="chatFiles	CODE
LOW⚡	web/templates/index.html	3728	<input type="text" id="openai-base-url" data-i18n="setti	CODE
LOW⚡	web/templates/index.html	3732	<input type="password" id="openai-api-key" data-i18n="se	CODE
LOW⚡	web/templates/index.html	3737	<input type="text" id="openai-model" class="model-pi	CODE
LOW⚡	web/templates/index.html	3843	<input type="text" id="vision-base-url" data-i18n="settingsBasic.visionB	CODE
LOW⚡	web/templates/index.html	3847	<input type="password" id="vision-api-key" data-i18n="settingsBasic.visi	CODE
LOW⚡	web/templates/index.html	3852	<input type="text" id="vision-model" class="model-pick-input" data-i	CODE
LOW⚡	web/templates/index.html	4058	<input type="text" id="hitl-audit-model-base-url" data-i18n="settings.hitl.a	CODE
LOW⚡	web/templates/index.html	4062	<input type="password" id="hitl-audit-model-api-key" data-i18n="settings.hit	CODE
LOW⚡	web/templates/index.html	4067	<input type="text" id="hitl-audit-model-name" class="model-pick-input" d	CODE
LOW⚡	web/templates/index.html	4230	<input type="text" id="knowledge-embedding-base-url" data-i18n="settingsBasi	CODE
LOW⚡	web/templates/index.html	4235	<input type="password" id="knowledge-embedding-api-key" data-i18n="settingsB	CODE
LOW⚡	web/templates/index.html	4241	<input type="text" id="knowledge-embedding-model" class="model-pick-inpu	CODE
LOW⚡	web/templates/index.html	4256	<input type="number" id="knowledge-retrieval-top-k" min="1" max="20" data-i1	CODE
LOW⚡	web/templates/index.html	4261	<input type="number" id="knowledge-retrieval-similarity-threshold" min="0" m	CODE
LOW⚡	web/templates/index.html	4266	<input type="text" id="knowledge-retrieval-sub-index-filter" data-i18n="sett	CODE
LOW⚡	web/templates/index.html	4276	<input type="number" id="knowledge-multi-query-max-queries" min="1" max="8"	CODE
LOW⚡	web/templates/index.html	4290	<input type="text" id="knowledge-rerank-model" data-i18n="settingsBasic.rera	CODE
LOW⚡	web/templates/index.html	4294	<input type="text" id="knowledge-rerank-base-url" data-i18n="settingsBasic.r	CODE
LOW⚡	web/templates/index.html	4298	<input type="password" id="knowledge-rerank-api-key" data-i18n="settingsBasi	CODE
LOW⚡	web/templates/index.html	4308	<input type="number" id="knowledge-post-retrieve-prefetch-top-k" min="0" max	CODE
LOW⚡	web/templates/index.html	4313	<input type="number" id="knowledge-post-retrieve-max-chars" min="0" max="100	CODE
LOW⚡	web/templates/index.html	4318	<input type="number" id="knowledge-post-retrieve-max-tokens" min="0" max="10	CODE
LOW⚡	web/templates/index.html	4352	<input type="text" id="knowledge-indexing-sub-indexes" data-i18n="settingsBa	CODE
LOW⚡	web/templates/index.html	4357	<input type="number" id="knowledge-indexing-chunk-size" min="128" max="4096"	CODE
LOW⚡	web/templates/index.html	4362	<input type="number" id="knowledge-indexing-chunk-overlap" min="0" max="512"	CODE
LOW⚡	web/templates/index.html	4367	<input type="number" id="knowledge-indexing-max-chunks-per-item" min="0" max	CODE
LOW⚡	web/templates/index.html	4372	<input type="number" id="knowledge-indexing-max-rpm" min="0" max="1000" data	CODE
LOW⚡	web/templates/index.html	4377	<input type="number" id="knowledge-indexing-rate-limit-delay-ms" min="0" max	CODE
LOW⚡	web/templates/index.html	4382	<input type="number" id="knowledge-indexing-max-retries" min="0" max="10" da	CODE
LOW⚡	web/templates/index.html	4387	<input type="number" id="knowledge-indexing-retry-delay-ms" min="0" max="100	CODE
LOW⚡	web/templates/index.html	4672	<input type="text" id="robot-wecom-token" data-i18n="settings.robots.wecom.t	CODE
LOW⚡	web/templates/index.html	4676	<input type="text" id="robot-wecom-encoding-aes-key" data-i18n="settings.rob	CODE
LOW⚡	web/templates/index.html	4680	<input type="text" id="robot-wecom-corp-id" data-i18n="settings.robots.wecom	CODE
LOW⚡	web/templates/index.html	4684	<input type="password" id="robot-wecom-secret" data-i18n="settings.robots.we	CODE
LOW⚡	web/templates/index.html	4688	<input type="number" id="robot-wecom-agent-id" data-i18n="settings.robots.we	CODE
LOW⚡	web/templates/index.html	4729	<input type="text" id="robot-lark-app-id" data-i18n="settings.robots.lark.ap	CODE
LOW⚡	web/templates/index.html	4733	<input type="password" id="robot-lark-app-secret" data-i18n="settings.robots	CODE
109 more matches not shown…

Empty Error Handlers8 hits · 40 pts

Severity	File	Line	Snippet	Context
HIGH	mcp-servers/pent_claude_agent/mcp_pent_claude_agent.py	28	except ImportError:	CODE
HIGH	mcp-servers/reverse_shell/mcp_reverse_shell.py	54	except OSError:	CODE
HIGH	mcp-servers/reverse_shell/mcp_reverse_shell.py	61	except OSError:	CODE
HIGH	mcp-servers/reverse_shell/mcp_reverse_shell.py	179	except OSError:	CODE
HIGH	mcp-servers/reverse_shell/mcp_reverse_shell.py	184	except OSError:	CODE
HIGH	mcp-servers/reverse_shell/mcp_reverse_shell.py	202	except OSError:	CODE
HIGH	mcp-servers/reverse_shell/mcp_reverse_shell.py	107	except OSError:	CODE
HIGH	mcp-servers/reverse_shell/mcp_reverse_shell.py	122	except OSError:	CODE

Over-Commented Block23 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW	config.example.yaml	1	# ============================================	COMMENT
LOW	config.example.yaml	21	# - https://trusted-integration.example	COMMENT
LOW	config.example.yaml	81	workflow_checkpoints: # 工作流断点 data/workflow-checkpoints；默认 7 天	COMMENT
LOW	config.example.yaml	181	enabled: true	COMMENT
LOW	config.example.yaml	401	# ============================================	COMMENT
LOW	config.example.yaml	481	# 建议值：200 次/分钟≈300ms, 100 次/分钟≈600ms	COMMENT
LOW	config.example.yaml	561	mode: user_binding	COMMENT
LOW	config.example.yaml	601	# ============================================	COMMENT
LOW	upgrade.sh	1	#!/usr/bin/env bash	COMMENT
LOW	upgrade.sh	21	# environment variable, and only if neither is set from the built-in default - with a	COMMENT
LOW	web/static/css/mobile.css	1841	max-width: 100% !important;	COMMENT
LOW	web/static/css/mobile.css	2181	#page-projects #project-panel-facts th:nth-child(1) { width: 160px; }	COMMENT
LOW	web/static/js/dashboard.js	1	// 仪表盘页面：拉取运行中对话、漏洞统计、批量任务、工具与 Skills 统计并渲染。	COMMENT
LOW	internal/attackchain/builder.go	401		COMMENT
LOW	internal/handler/update.go	21	var updateRestartDelay = 2 * time.Second	COMMENT
LOW	internal/multiagent/orphan_tool_pruner_middleware.go	21	// 一旦孤儿 tool 消息进入 ChatModel，OpenAI 兼容 API（含 DashScope / 各类中转）会返回	COMMENT
LOW	internal/update/version.go	1	package update	COMMENT
LOW	internal/update/update.go	1	// Package update makes "bring this installation up to the newest commit of the	COMMENT
LOW	internal/update/update.go	41	const DefaultRepoURL = "https://github.com/AIPentest/CyberStrikeAI.git"	COMMENT
LOW	internal/update/adopt.go	61	}	COMMENT
LOW	internal/config/config.go	321	// CheckpointDir is retained for config compatibility. Chat agent runs do	COMMENT
LOW	internal/c2/types.go	1	// Package c2 实现 CyberStrikeAI 内置 C2（Command & Control）框架。	COMMENT
LOW	internal/openai/eino_sse_sanitizer.go	1	package openai	COMMENT

Modern AI Meta-Vocabulary7 hits · 17 pts

Severity	File	Line	Snippet	Context
MEDIUM	README.md	110	### Agents and orchestration	COMMENT
MEDIUM	config.example.yaml	321	# 多代理与 Eino 单代理（CloudWeGo Eino ADK；单代理入口 /api/eino-agent，多代理 /api/multi-agent）	COMMENT
MEDIUM	config.example.yaml	323	# Deep / Plan-Execute / Supervisor 由对话页与 WebShell 所选模式在请求体 orchestration 中指定；机器人按 robot_default_agent_mode	COMMENT
MEDIUM	internal/multiagent/eino_model_resilience_test.go	338	t.Fatalf("gate = %#v, want ready with buildable agentic backend", gate)	CODE
MEDIUM	internal/reasoning/eino.go	125	// agenticopenai.ChatConfig. The agentic chat backend currently exposes provider	COMMENT
MEDIUM	docs/README.md	60	### Concepts and orchestration	COMMENT
MEDIUM	docs/en-US/README.md	12	## Concepts and orchestration	COMMENT

Excessive Try-Catch Wrapping12 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	tools/zoomeye_search.yaml	209	except Exception as e:	CODE
LOW	tools/http-framework-test.yaml	319	except Exception:	CODE
LOW	tools/http-framework-test.yaml	336	except Exception:	CODE
LOW	tools/http-framework-test.yaml	346	except Exception:	CODE
LOW	tools/http-framework-test.yaml	1304	except Exception:	CODE
LOW	tools/shodan_search.yaml	275	except Exception:	CODE
LOW	tools/shodan_search.yaml	288	except Exception as e:	CODE
LOW	tools/quake_search.yaml	217	except Exception as e:	CODE
LOW	tools/fofa_search.yaml	187	except Exception as e:	CODE
LOW	mcp-servers/pent_claude_agent/mcp_pent_claude_agent.py	79	except Exception:	CODE
LOW	mcp-servers/pent_claude_agent/mcp_pent_claude_agent.py	131	except Exception as e:	CODE
LOW⚡	mcp-servers/reverse_shell/mcp_reverse_shell.py	262	except Exception as e:	CODE

Structural Annotation Overuse6 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW⚡	…/pent_claude_agent/.claude/skills/find-skills/SKILL.md	36	### Step 1: Understand What They Need	COMMENT
LOW⚡	…/pent_claude_agent/.claude/skills/find-skills/SKILL.md	44	### Step 2: Check the Leaderboard First	COMMENT
LOW⚡	…/pent_claude_agent/.claude/skills/find-skills/SKILL.md	52	### Step 3: Search for Skills	COMMENT
LOW	…/pent_claude_agent/.claude/skills/find-skills/SKILL.md	66	### Step 4: Verify Quality Before Recommending	COMMENT
LOW	…/pent_claude_agent/.claude/skills/find-skills/SKILL.md	74	### Step 5: Present Options to the User	COMMENT
LOW	…/pent_claude_agent/.claude/skills/find-skills/SKILL.md	96	### Step 6: Offer to Install	COMMENT

Magic Placeholder Names1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	web/static/js/api-docs.js	788	curlCommand += ` \\\n -H "Authorization: Bearer YOUR_TOKEN_HERE"`;	CODE

Unused Imports4 hits · 4 pts

Severity	File	Line	Context
LOW	mcp-servers/pent_claude_agent/mcp_pent_claude_agent.py	12	CODE
LOW	mcp-servers/pent_claude_agent/mcp_pent_claude_agent.py	15	CODE
LOW	mcp-servers/reverse_shell/mcp_reverse_shell.py	12	CODE
LOW	mcp-servers/reverse_shell/mcp_reverse_shell.py	17	CODE

Redundant / Tautological Comments2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	run.sh	39	# Check if the process exists	COMMENT
LOW	run.sh	395	# Check if source changed since last build	COMMENT

Deep Nesting2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	mcp-servers/pent_claude_agent/mcp_pent_claude_agent.py	114		CODE
LOW	mcp-servers/reverse_shell/mcp_reverse_shell.py	229		CODE

AIPentest/CyberStrikeAI

Open-Source Code Quality, Security and Technical Debt Review