2.3

Adjusted Signal

2.3

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

7.6K

Stars

TypeScript

Language

7.7M

Lines of Code

29.4K

Files

18.1K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 10.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 16845 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.9/100 · LOW

Are imports declared and package/API names verified? 1167 finding(s).

Agent Over-Engineering Ratio 9.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 16622 finding(s).

PR Review Velocity Impact 11.6/100 · LOW

Which changes need focused human review? 18103 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 30HIGH 10MEDIUM 208LOW 17855

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 18103 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers16531 hits · 15645 pts

Severity	File	Line	Snippet	Context
LOW	…/plans/2026-09-04-booking-host-working-hours-status.md	111	async function resolvePeerScheduleAndTimezone(email: string): Promise<{	CODE
LOW	scripts/signup-report-continuity.ts	58	export function finalizeSignupAgentReport(input: {	CODE
LOW	scripts/signup-report-continuity.ts	83	export function initialSignupAgentReportState(): SignupAgentReportState {	CODE
LOW	scripts/signup-report-continuity.ts	95	export function legacySignupReportFallbackAllowed(	CODE
LOW	scripts/signup-report-continuity.ts	180	export function parseSignupAgentReportState(	CODE
LOW	scripts/signup-report-continuity.ts	343	export function renderSignupAgentRecovery(input: {	CODE
LOW	scripts/verify-release-package-files.ts	20	export function assertReleaseOnlyPullRequestFiles(	CODE
LOW	scripts/verify-release-package-files.ts	67	export function extractPullRequestFileNames(pages: unknown): string[] {	CODE
LOW	scripts/verify-release-package-files.ts	100	function verifyReleasePullRequestFiles(	CODE
LOW	scripts/qa-deploy-paths.ts	901	async function exerciseDisposableChatReliability(	CODE
LOW	scripts/qa-deploy-paths.ts	1096	async function exerciseScheduledAgentHarnessRecovery(	CODE
LOW	scripts/qa-deploy-paths.ts	1231	async function exerciseScheduledStaleChatContinuation(	CODE
LOW	scripts/keep-warm-report.ts	59	export function hasSuccessfulStatePersistenceStep(value: unknown): boolean {	CODE
LOW	scripts/keep-warm-report.ts	119	export function recordUnknownHealthSample(	CODE
LOW	scripts/keep-warm-report.ts	163	export function hasUndeliveredUnknownStateWarning(	CODE
LOW	scripts/keep-warm-report.ts	173	export function acknowledgeUnknownStateWarning(	CODE
LOW	scripts/keep-warm-report.ts	505	export function acknowledgeHealthNotification(	CODE
LOW	scripts/keep-warm-report.ts	584	export function renderDegradedHealthNotification(input: {	CODE
LOW	scripts/keep-warm-report.ts	826	function runAcknowledgeUnknownWarning(args: CliArgs): void {	CODE
LOW	scripts/compact-changelogs.ts	85	function releaseSectionIsUnreleased(section: string): boolean {	CODE
LOW	scripts/validate-content-product-impact.ts	226	export function parseContentImpactDeclaration(body: string): DeclarationResult {	CODE
LOW	scripts/validate-content-product-impact.ts	395	export function analyzeContentProductImpact(	CODE
LOW	scripts/validate-content-product-impact.ts	598	function materializeContentProductSnapshot(	CODE
LOW	scripts/validate-content-product-impact.ts	696	export function runContentProductImpactCheck(): void {	CODE
LOW	scripts/qa-deploy-paths-lib.ts	171	export function routeFailureEvidenceSummary(value: unknown): string \| null {	CODE
LOW	scripts/qa-deploy-paths-lib.ts	237	export function observeDeployMarkerResponse(	CODE
LOW	scripts/qa-deploy-paths-lib.ts	246	export async function captureDeployReadyBaseline(	CODE
LOW	scripts/qa-deploy-paths-lib.ts	349	export function containerReachableDatabaseUrl(databaseUrl: string): string {	CODE
LOW	scripts/guard-public-packages.ts	87	function unpublishedAssetImportFailures(	CODE
LOW	scripts/guard-public-packages.ts	128	function readWorkspacePackageNames(): Set<string> {	CODE
LOW	scripts/guard-public-packages.ts	157	function dependencyProtocolFailures(	CODE
LOW	scripts/guard-public-packages.ts	177	function localWorkspaceDependencyFailures(	CODE
LOW	scripts/guard-mcp-unredacted-call-boundary.test.ts	321	"export async function runMcpActionCallUnredacted() {}\n";	CODE
LOW	scripts/release-coordinator.ts	77	export function selectActiveReleaseCoordinator(	CODE
LOW	scripts/release-coordinator.ts	127	export function assertReleaseCoordinatorPrepareStepActive(	CODE
LOW	scripts/release-coordinator.ts	200	export function verifyActiveReleaseCoordinator(	CODE
LOW	scripts/guard-agent-chat-context.ts	83	export function analyzeAgentChatContextPolicy(	CODE
LOW	scripts/guard-agent-chat-context.ts	197	function actionDirectoriesForPlugin(	CODE
LOW	scripts/guard-agent-chat-context.ts	252	export function discoverAgentInstructionFiles(repoRoot: string): string[] {	CODE
LOW	scripts/guard-agent-chat-context.ts	275	export function checkAgentInstructionSizes(repoRoot: string): {	CODE
LOW	scripts/guard-agent-chat-context.ts	315	export function checkAgentChatContextPolicies(repoRoot: string): {	CODE
LOW	scripts/neon-transfer-alert.ts	330	function projectsMissingMedianBaseline(	CODE
LOW	scripts/neon-transfer-alert.ts	369	export async function publishDailyTransferAlerts(	CODE
LOW	scripts/trusted-acceptance.ts	142	export function validateTrustedAcceptanceConfig(	CODE
LOW	scripts/trusted-acceptance.ts	501	export function createTrustedAcceptancePlan(	CODE
LOW	scripts/trusted-acceptance.ts	581	export function validatePullRequestProvenance(	CODE
LOW	scripts/trusted-acceptance.ts	698	function containsSensitiveReceiptData(	CODE
LOW	scripts/trusted-acceptance.ts	723	export function validateTrustedAcceptanceReceipt(	CODE
LOW	scripts/list-release-pr-package-files.ts	13	export function parseReleasePullRequestPackageFiles(	CODE
LOW	scripts/list-release-pr-package-files.ts	47	function listReleasePullRequestPackageFiles(	CODE
LOW	scripts/validate-content-product-docs.ts	78	export function validateContentProductDocs(	CODE
LOW	scripts/validate-content-product-docs.ts	109	export function writeContentProductProjections(root = defaultProductRoot) {	CODE
LOW	scripts/validate-content-product-docs.ts	666	function validateCapabilityMiniSpec(	CODE
LOW	scripts/validate-content-product-docs.ts	887	function validateForbiddenFrontmatter(record: ProductRecord, errors: string[]) {	CODE
LOW	scripts/ci-test-lanes.ts	212	export function requiresFullCoreFastTests(paths: readonly string[]): boolean {	CODE
LOW	scripts/ci-test-lanes.ts	433	export function partitionTargetedWeighted(	CODE
LOW⚡	scripts/qa-standalone-chat-dev-smoke-readiness.ts	4	export function isTransientStartupPollResponse(	CODE
LOW⚡	scripts/qa-standalone-chat-dev-smoke-readiness.ts	12	export function isTransientCommittedNavigationResponse(	CODE
LOW⚡	scripts/qa-standalone-chat-dev-smoke-readiness.ts	19	export function isRetryableSessionReadErrorMessage(message: string): boolean {	CODE
LOW	scripts/guard-automated-findings.ts	47	function retainsFullReportArtifact(path: string, source: string): boolean {	CODE
16471 more matches not shown…

Fake / Example Data1132 hits · 1090 pts

Severity	File	Line	Snippet	Context
LOW	…/agent-native-visual-plans/skills/visual-plan/SKILL.md	458	`targetNodePath` (e.g. `card > list > listItem "Acme Inc"`) identifying the	CODE
LOW	.agents/skills/tracking/SKILL.md	48	{ userId: "user@example.com" },	CODE
LOW	.agents/skills/tracking/SKILL.md	69	identify("user@example.com", { plan: "pro", company: "ExampleCo" });	CODE
LOW	.agents/skills/automations/SKILL.md	207	}, { owner: "user@example.com" });	CODE
LOW	mcp-registry/server.schema.json	91	"placeholder": {	CODE
LOW	scripts/guard-netlify-prebuilt-workflow.test.ts	1843	NETLIFY_AUTH_TOKEN: "fake-token",	CODE
LOW	scripts/qa-deploy-paths-cloud.test.ts	35	RESEND_API_KEY: "fake-email-key-for-tests",	CODE
LOW	scripts/guard-i18n-catalogs.ts	926	"placeholder",	CODE
LOW	scripts/guard-i18n-catalogs.ts	946	"placeholder",	CODE
LOW	packages/core/src/demo/redact.spec.ts	299	session_id: "Acme Corp",	CODE
LOW	packages/core/src/demo/redact.spec.ts	313	expect(out.session_id).toBe("Acme Corp");	CODE
LOW	packages/core/src/demo/redact.spec.ts	345	ids: ["John Smith", "Jane Doe"],	CODE
LOW⚡	packages/core/src/chat-threads/store.spec.ts	4743	await setThreadPinned("thread-1", true, { ownerEmail: "user@example.com" });	CODE
LOW⚡	packages/core/src/chat-threads/store.spec.ts	4748	ownerEmail: "user@example.com",	CODE
LOW⚡	packages/core/src/chat-threads/store.spec.ts	4754	ownerEmail: "user@example.com",	CODE
LOW⚡	packages/core/src/chat-threads/store.spec.ts	4990	const defaultList = await listThreads("user@example.com", { limit: 10 });	CODE
LOW⚡	packages/core/src/chat-threads/store.spec.ts	4993	const listWithArchived = await listThreads("user@example.com", {	CODE
LOW⚡	packages/core/src/chat-threads/store.spec.ts	5002	const defaultSearch = await searchThreads("user@example.com", "Thread");	CODE
LOW⚡	packages/core/src/chat-threads/store.spec.ts	5006	"user@example.com",	CODE
LOW⚡	packages/core/src/chat-threads/store.spec.ts	5077	await freshStore.listThreads("user@example.com");	CODE
LOW⚡	packages/core/src/chat-threads/store.spec.ts	5086	{ count: 2, id: "legacy-1", ownerEmail: "user@example.com" },	CODE
LOW⚡	packages/core/src/chat-threads/store.spec.ts	5093	ownerEmail: "user@example.com",	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	146	owner_email: "user@example.com",	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	586	const thread = await createThread("user@example.com", {	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	604	"user@example.com",	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	633	created_by: "user@example.com",	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	642	await expect(deleteThread("thread-1", "user@example.com")).resolves.toBe(	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	1061	await forkThread("thread-1", "user@example.com", { id: "thread-fork" });	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	1398	ownerEmail: "user@example.com",	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	2705	message: { id: "placeholder", role: "assistant", content: [] },	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	2709	headId: "placeholder",	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	2865	email: "user@example.com",	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	2975	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3128	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3197	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3242	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3264	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3332	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3400	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3474	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3544	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3586	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3625	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3656	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3687	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3839	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3903	{ actor: { email: "user@example.com", anonymous: false } },	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3950	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	3999	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4148	{ actor: { email: "user@example.com", anonymous: false } },	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4292	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4452	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4520	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4552	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4626	const actor = { email: "user@example.com", anonymous: false };	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4776	ownerEmail: "user@example.com",	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4789	ownerEmail: "user@example.com",	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4809	await searchThreads("user@example.com", "100%_done");	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4832	owner_email: "user@example.com",	CODE
LOW	packages/core/src/chat-threads/store.spec.ts	4861	const result = await listThreads("user@example.com", { limit: 10 });	CODE
1072 more matches not shown…

Modern AI Meta-Vocabulary113 hits · 314 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ent-native-turn-into-app/skills/turn-into-app/SKILL.md	177	### 3. Create the real scaffold	COMMENT
MEDIUM	…kills/turn-into-app/references/local-run-and-deploy.md	44	// keep the keys the scaffold already sets here	COMMENT
MEDIUM	…to-app/skills/turn-into-app/references/ui-direction.md	103	heading to `## Chat route direction` and change its "Preserve the scaffold's	CODE
MEDIUM	…/skills/build-an-app/references/edit-points-default.md	1	# Default scaffold edit points	COMMENT
MEDIUM	.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	.agents/skills/create-skill/SKILL.md	114	### Generator (scaffolding)	COMMENT
MEDIUM	scripts/qa-deploy-paths.ts	509	// A local-source scaffold points at tarballs in the OS temp directory. Copy	COMMENT
MEDIUM	packages/core/docs/design/organization-team-tenancy.md	11	The revised proposal uses the framework-wide [event-driven viewer access revocation contract](durable-agent-runs.md#even	CODE
MEDIUM	packages/core/docs/design/organization-team-tenancy.md	158	The amendment applies that policy during an open viewer subscription through the shared [revocation contract](durable-ag	CODE
MEDIUM	…es/core/src/server/agent-chat-plugin-resources.spec.ts	216	content: "# Organization Guardrails\n\nNarrow workspace guardrails.",	CODE
MEDIUM⚡	packages/core/src/cli/create.ts	3774	// observability provider API), so a scaffold takes its current npm release.	COMMENT
MEDIUM	packages/core/src/cli/create.ts	129	// the files that import them. A scaffold cannot install these (a standalone app	COMMENT
MEDIUM	packages/core/src/cli/template-sync.spec.ts	432	// The OTel startup plugin ships with the scaffold and installs the	COMMENT
MEDIUM	…ges/core/src/cli/skills-content/turn-into-app-skill.ts	177	### 3. Create the real scaffold	COMMENT
MEDIUM	…ges/core/src/cli/skills-content/turn-into-app-skill.ts	684	// keep the keys the scaffold already sets here	COMMENT
MEDIUM	…ges/core/src/cli/skills-content/turn-into-app-skill.ts	1801	heading to \`## Chat route direction\` and change its "Preserve the scaffold's	CODE
MEDIUM	…/skills/build-an-app/references/edit-points-default.md	1	# Default scaffold edit points	COMMENT
MEDIUM	…/skills/build-an-app/references/edit-points-default.md	1	# Default scaffold edit points	COMMENT
MEDIUM	…/skills/build-an-app/references/edit-points-default.md	1	# Default scaffold edit points	COMMENT
MEDIUM	…workspace-core/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	…s/workspace-core/.agents/skills/turn-into-app/SKILL.md	177	### 3. Create the real scaffold	COMMENT
MEDIUM	…kills/turn-into-app/references/local-run-and-deploy.md	44	// keep the keys the scaffold already sets here	COMMENT
MEDIUM	…agents/skills/turn-into-app/references/ui-direction.md	103	heading to `## Chat route direction` and change its "Preserve the scaffold's	CODE
MEDIUM	…de-starter/.agents/skills/multi-app-workspace/SKILL.md	40	# 1. Staging scaffold. The name becomes the shared package scope	COMMENT
MEDIUM	…de-starter/.agents/skills/multi-app-workspace/SKILL.md	49	# 3. Hoist the scaffold's root files, then drop the staging dir.	COMMENT
MEDIUM	packages/core/src/client/chat/runtime.ts	3044	// however long the agentic tail after them grows.	COMMENT
MEDIUM	packages/core/src/client/chat/runtime.ts	3244	// The newest-first scan stops long before the first turns of a long agentic	COMMENT
MEDIUM	…patch/src/server/lib/workspace-resources-store.spec.ts	1480	content: "# Workspace guardrails",	CODE
MEDIUM	…patch/src/server/lib/workspace-resources-store.spec.ts	1626	content: "# Updated guardrails",	CODE
MEDIUM	…patch/src/server/lib/workspace-resources-store.spec.ts	1646	content: "# Updated guardrails",	CODE
MEDIUM	packages/dispatch/src/routes/pages/workspace.tsx	458	: "# Instructions\n\nAlways-on guardrails for agents across apps..."	CODE
MEDIUM	…ages/docs/content/use-cases/ai-bug-reporting-tool.yaml	108	a: "No. Clips makes [a bug report an engineer can act on](https://www.agent-native.com/articles/how-to-write-a-bug	CODE
MEDIUM	packages/docs/content/use-cases/ai-meeting-notes.yaml	99	a: 'A call app''s AI note taker is tied to that app''s calls. Clips keeps every meeting, from any call app, in one	CODE
MEDIUM	…ocs/content/use-cases/zh-TW/ai-bug-reporting-tool.yaml	108	a: 不是。Clips 製作的是[工程師能直接處理的錯誤回報](https://www.agent-native.com/articles/how-to-write-a-bug-report/)，由你的追蹤工具負責存放：把連結貼	CODE
MEDIUM	…ges/docs/content/use-cases/zh-TW/ai-meeting-notes.yaml	99	a: 通話應用程式的 AI 記錄功能只限於該應用程式的通話。Clips 則把所有會議，不論來自哪個通話應用程式，都放在同一個資料庫。問 [Clips agent](https://www.agent-native.com/doc	CODE
MEDIUM	packages/desktop-app/MULTI_FRONTIER_PROOF.md	141	## Phases 3-5 live orchestration proof	COMMENT
MEDIUM	packages/toolkit/src/composer/TiptapComposer.tsx	5117	// the local agent (dispatch, mail, etc.) cannot scaffold workspace	COMMENT
MEDIUM	.github/workflows/deploy-paths.yml	4	# (the Node.js and Docker guides) end to end: scaffold, install, migrate a real	COMMENT
MEDIUM	…mplates/design/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	templates/tasks/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	…lates/calendar/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	templates/forms/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	templates/clips/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	templates/chat/DEVELOPING.md	102	### Package and scaffold path	COMMENT
MEDIUM	…/skills/build-an-app/references/edit-points-default.md	1	# Default scaffold edit points	COMMENT
MEDIUM	templates/mail/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	templates/plan/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	…/skills/build-an-app/references/edit-points-default.md	1	# Default scaffold edit points	COMMENT
MEDIUM	…lates/dispatch/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	…mplates/dispatch/.agents/skills/turn-into-app/SKILL.md	177	### 3. Create the real scaffold	COMMENT
MEDIUM	…kills/turn-into-app/references/local-run-and-deploy.md	44	// keep the keys the scaffold already sets here	COMMENT
MEDIUM	…agents/skills/turn-into-app/references/ui-direction.md	103	heading to `## Chat route direction` and change its "Preserve the scaffold's	CODE
MEDIUM	templates/crm/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	…plates/content/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	…mplates/slides/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	templates/brain/evals/slack-pilot-corpus.ts	113	captureTitle: "#brain-pilot Slack history guardrails",	CODE
MEDIUM	templates/brain/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	…lates/slides-2/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	…mplates/assets/.agents/skills/external-agents/SKILL.md	214	### 1a. Generic cross-app verbs + scaffolding	COMMENT
MEDIUM	templates/factory/README.md	112	## Agents and agentic apps	COMMENT
53 more matches not shown…

Hallucination Indicators30 hits · 300 pts

Severity	File	Line	Snippet	Context
CRITICAL	scripts/guard-netlify-prebuilt-workflow.test.ts	889	"pullRequest.user.login?.toLowerCase() !==\n context.payload.comment.user.login.toLowerCase()",	CODE
CRITICAL	packages/desktop-app/src/main/desktop-identity.spec.ts	3188	const navigationHandler = record.webContents.on.mock.calls.find(	CODE
CRITICAL	packages/desktop-app/src/main/desktop-identity.spec.ts	3460	const navigationHandler = record.webContents.on.mock.calls.find(	CODE
CRITICAL	…es/toolkit/src/app/chat/AgentKitAssistantChat.spec.tsx	4543	chatMocks.fileStoragePopoverProps.anchorRef.current.classList.contains(	CODE
CRITICAL	…es/toolkit/src/app/chat/AgentKitAssistantChat.spec.tsx	6808	const metadata = chatMocks.control.sendMessage.mock.calls.map(	CODE
CRITICAL	…ages/toolkit/src/composer/useRealtimeVoiceMode.spec.ts	623	const names = update.session.delegation.responses.tools.map(	CODE
CRITICAL	…ages/toolkit/src/composer/useRealtimeVoiceMode.spec.ts	631	update.session.delegation.responses.tools.map(	CODE
CRITICAL	packages/toolkit/src/composer/TiptapComposer.tsx	5251	? ed.state.doc.content.content.map((node) => node.toJSON())	CODE
CRITICAL	.github/workflows/deploy-netlify-pr-previews.yml	121	context.payload.comment.user.login.toLowerCase())	CODE
CRITICAL	templates/design/shared/motion-html-source.spec.ts	2947	"<script>parent.parent.document.body.classList.add('active')</script>";	CODE
CRITICAL	templates/design/actions/generate-design.spec.ts	763	const fileTypeCall = mocks.fileUpdateChain.set.mock.calls.find(	CODE
CRITICAL	templates/design/actions/index-components.spec.ts	331	harness.tx.execute.mock.calls.map(([query]: [unknown]) =>	CODE
CRITICAL	templates/design/actions/index-components.spec.ts	482	const indexUpsert = harness.tx.execute.mock.calls.find(([query]) =>	CODE
CRITICAL	templates/plan/actions/view-screen.ts	99	screens: bundle.plan.content.prototype.screens.map(	CODE
CRITICAL	…nt/app/components/editor/VisualEditor.markdown.test.ts	650	editor.state.doc.content.content.some(	CODE
CRITICAL	…nt/app/components/editor/VisualEditor.markdown.test.ts	655	editor.state.doc.content.content.some(	CODE
CRITICAL	…nt/app/components/editor/VisualEditor.markdown.test.ts	759	editor.state.doc.content.content.some(	CODE
CRITICAL	…nt/app/components/editor/VisualEditor.markdown.test.ts	884	editor.state.doc.content.content.some(	CODE
CRITICAL	…nt/app/components/editor/VisualEditor.markdown.test.ts	1064	editor.state.doc.content.content.some(	CODE
CRITICAL	…nt/app/components/editor/VisualEditor.markdown.test.ts	1095	editor.state.doc.content.content.some(	CODE
CRITICAL	templates/slides/actions/patch-deck.test.ts	1428	const slidePatch = parameters.properties.operations.items.anyOf.find(	CODE
CRITICAL	templates/brain/server/lib/brain.test.ts	1007	const updatedTables = mocks.db.update.mock.calls.map(([tableRef]) =>	CODE
CRITICAL	templates/slides-2/actions/patch-deck.test.ts	1504	const deckFields = parameters.properties.operations.items.anyOf.find(	CODE
CRITICAL	templates/slides-2/actions/patch-deck.test.ts	1557	const slidePatch = parameters.properties.operations.items.anyOf.find(	CODE
CRITICAL	…er/workflow/stories/04-hot-lead-routing/proofs.spec.ts	118	const accepted = run.world.test.threads.requests.map(	CODE
CRITICAL	…er/workflow/stories/04-hot-lead-routing/proofs.spec.ts	147	const dismissed = run.world.test.statuses.written.find(	CODE
CRITICAL	…er/workflow/stories/09-activation-nudge/proofs.spec.ts	114	run.world.test.statuses.written.find(	CODE
CRITICAL	…tes/factory/server/workflow/engine/story-waits.spec.ts	598	const asked = run.world.test.ai.requests.filter((request) =>	CODE
CRITICAL	…tes/factory/server/workflow/engine/story-waits.spec.ts	852	run.world.test.statuses.written.find((entry) => entry.itemId === "s1")	CODE
CRITICAL	…tes/factory/server/workflow/engine/story-waits.spec.ts	1031	run.world.test.threads.requests.map((request) => request.thread),	CODE

Decorative Section Separators90 hits · 285 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	4935	// ─── Agent Teams: per-run send reference ─────────────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	6050	// ─── Agent Teams: durable sub-agent run processor ─────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	7187	// ─── Generate thread title ──────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	7264	// ─── Run management endpoints (for hot-reload resilience) ─────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	7815	// ─── Checkpoint endpoints ──────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	7932	// ─── Public read-only shared thread endpoint ─────────────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	7944	// ─── Thread management endpoints ──────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	10045	// ─── Durable background agent-chat run processor ──────────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	10447	// ─── Recurring Jobs Scheduler ──────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	10831	// ─── Agent Teams orphan sweep ─────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	10882	// ─── Unclaimed background-run sweep ────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	11043	// ─── Legacy chat-thread message_count repair ──────────────────────	COMMENT
MEDIUM	packages/core/src/server/agent-chat-plugin.ts	11055	// ─── Trigger Dispatcher (event-based automations) ─────────────────	COMMENT
MEDIUM	packages/core/src/server/short-lived-token.ts	164	// ── Compact scoped tokens ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/short-lived-token.ts	251	// ── Realtime subscribe tokens ────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/short-lived-token.ts	517	// ── Gateway access-check tokens ──────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/core/src/server/core-routes-plugin.ts	6613	// ─── Voice transcription (Whisper) ───────────────────────────────	COMMENT
MEDIUM⚡	packages/core/src/server/core-routes-plugin.ts	6620	// ─── Speech synthesis ────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/core/src/server/core-routes-plugin.ts	6624	// ─── Google realtime transcription session bridge ───────────────	COMMENT
MEDIUM⚡	packages/core/src/server/core-routes-plugin.ts	6633	// ─── Voice provider status ───────────────────────────────────────	COMMENT
MEDIUM⚡	packages/core/src/server/core-routes-plugin.ts	6641	// ─── Ad-hoc secrets (user-created keys) ────────────────────────────	COMMENT
MEDIUM⚡	packages/core/src/server/core-routes-plugin.ts	6646	// ─── Secrets registry ────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/core/src/server/core-routes-plugin.ts	6758	// ─── Agent run progress ───────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/core/src/server/core-routes-plugin.ts	6764	// ─── Automations API ──────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/core/src/server/core-routes-plugin.ts	6770	// ─── Application State CRUD ──────────────────────────────────────	COMMENT
MEDIUM⚡	packages/core/src/server/core-routes-plugin.ts	6773	// ─── User-scoped settings store ────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/core-routes-plugin.ts	4164	// ─── Durable sandbox execution processor ─────────────────────────	COMMENT
MEDIUM	packages/core/src/server/core-routes-plugin.ts	4233	// ─── Durable sandbox execution sweep ──────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/core-routes-plugin.ts	6476	// ─── Usage & cost summary ────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/core-routes-plugin.ts	6512	// ─── File upload primitive ──────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/core-routes-plugin.ts	6683	// ─── Notifications inbox ──────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/core-routes-plugin.ts	6694	// ─── Extensions (sandboxed mini-app runtime + proxy) ────────────────	COMMENT
MEDIUM	packages/core/src/server/core-routes-plugin.ts	6722	// ─── Data programs (stored server-side JS scripts + run cache) ─────	COMMENT
MEDIUM	packages/core/src/server/core-routes-plugin.ts	6732	// ─── Page-level legacy redirect: /tools → /extensions ──────────────	COMMENT
MEDIUM	packages/core/src/server/core-routes-plugin.ts	6828	// ─── Avatar routes ──────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/server/google-oauth.ts	455	// ─── redirect_uri Allowlist ──────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/cli/design-connect.ts	3816	// ── Read-only preview routes (preview token required) ────────────────	COMMENT
MEDIUM	packages/core/src/integrations/plugin.ts	3591	// ─── POST /:platform/enable\|disable ────────────────────	COMMENT
MEDIUM	packages/core/src/client/sse-event-processor.ts	2203	// ─── Agent task events (sub-agent chips) ─────────────────────────	COMMENT
MEDIUM	packages/toolkit/src/app/chat/MultiTabAssistantChat.tsx	413	// ─── Skeleton Loader ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/toolkit/src/app/chat/MultiTabAssistantChat.tsx	460	// ─── Resource context ────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/toolkit/src/app/chat/MultiTabAssistantChat.tsx	492	// ─── History Popover ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/toolkit/src/app/chat/MultiTabAssistantChat.tsx	652	// ─── Help Popover ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/toolkit/src/app/chat/MultiTabAssistantChat.tsx	712	// ─── Types ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/toolkit/src/app/chat/MultiTabAssistantChat.tsx	944	// ─── Component ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/toolkit/src/app/chat/MultiTabAssistantChat.tsx	1366	// ─── Model state ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/toolkit/src/app/chat/MultiTabAssistantChat.tsx	3553	// ─── Slash command handler ──────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	34	// ─── Lazy markdown loader ────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	82	// ─── Lazy shiki highlighter ──────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	142	// ─── Streaming context ───────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	230	// ─── HighlightedCodeBlock wrapper ────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	253	// ─── CTA helpers ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	303	// ─── Code text extraction ─────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	315	// ─── Markdown components ──────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	437	// ─── Clipboard HTML rendering ─────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	473	// ─── Smooth streaming ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	483	// ─── Markdown readiness hook ──────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	539	// ─── StreamingText ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/toolkit/src/app/chat/chat/markdown-renderer.tsx	624	// ─── MarkdownText ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…onents/design/inspector/color-picker-contrast-model.ts	65	// ── Where the square meets the target ──────────────────────────────────────	COMMENT
30 more matches not shown…

Over-Commented Block163 hits · 140 pts

Severity	File	Line	Snippet	Context
LOW	scripts/feedback-fix-proof.ts	1	#!/usr/bin/env node	COMMENT
LOW	scripts/fix-proof.ts	1	#!/usr/bin/env node	COMMENT
LOW	scripts/persistent-compositing-baseline.txt	1	# guard:persistent-compositing baseline	COMMENT
LOW	scripts/ci-wait.ts	1	#!/usr/bin/env node	COMMENT
LOW	packages/pinpoint/src/freeze/react-freeze.spec.ts	1	// @agent-native/pinpoint — freezeReact tests	COMMENT
LOW	packages/pinpoint/src/storage/storage-interface.ts	1	// @agent-native/pinpoint — Storage interface re-export	COMMENT
LOW	…ckages/pinpoint/src/detection/selector-builder.spec.ts	1	// @agent-native/pinpoint — selector-builder tests	COMMENT
LOW	packages/core/src/chat-threads/store.ts	141	// `CREATE INDEX` still takes a lock that, in a fresh background-worker	COMMENT
LOW	packages/core/src/chat-threads/store.ts	201	"chat_threads_owner_updated_idx",	COMMENT
LOW	packages/core/src/a2a/server.ts	501	audienceOptions?.verificationSecret !== undefined;	COMMENT
LOW	packages/core/src/secrets/storage.ts	161	const encrypted = encryptLegacyValue(value);	COMMENT
LOW	packages/core/src/resources/store.ts	1341	}	COMMENT
LOW	packages/core/src/server/sentry-config.ts	81	//	COMMENT
LOW	…agent-chat-plugin.delegated-template-inventory.spec.ts	581	const allTemplateIds = templateIdsWithAgentChat();	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	1761	const stop = () => {	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	1801		COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	2021	if (Object.keys(discoveredActionsAll).length > 0 && process.env.DEBUG)	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	2061	// own agent must not see them — so the external surfaces below re-merge	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	2081	// `prepareRun` (recurring jobs, trigger dispatcher) still see the	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	2161	const webGroupEnabled = frameworkTools.isEnabled("web");	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	2481	// removed) warned this exact mismatch "caused prod runs to waste	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	2721	// tokeninfo (prod only). Without the JWT-verified-email path,	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	2741	const { getRequestUserEmail } =	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	2941	// The interactive path logs its model AND where the model came from;	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	4321	// not extend the durable chat persistence gate.	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	5741	// listed in the dev system prompt's "Available Actions" section.	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	6041	// mark dead runs failed) so the tray reflects precise status without	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	6141	engine.defaultModel ??	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	7761	: {}),	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	7781	// server-relative, immune to client clock skew.	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	10521	setResponseStatus(event, 503);	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	10881		COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	10901	// one that falls back to the loud reap once	COMMENT
LOW	packages/core/src/server/agent-chat-plugin.ts	10941	// dispatch_mode='background' — handoffs a worker never	COMMENT
LOW	packages/core/src/server/db-pressure.ts	1	// Database pressure — the three signals that precede an outage, measured from	COMMENT
LOW	packages/core/src/server/core-routes-plugin.ts	3621	}),	COMMENT
LOW	packages/core/src/server/core-routes-plugin.ts	3941	// `getH3App()` itself (framework-request-handler.ts), synchronously, on	COMMENT
LOW	packages/core/src/server/core-routes-plugin.ts	4121	if (!options.disableSSE) {	COMMENT
LOW	packages/core/src/server/core-routes-plugin.ts	4721	mountBuilderStatusRouteAliases(	COMMENT
LOW	packages/core/src/server/core-routes-plugin.ts	4741	// window.open from initiating a connect flow on the victim's behalf:	COMMENT
LOW	packages/core/src/server/core-routes-plugin.ts	6721		COMMENT
LOW	packages/core/src/server/core-routes-plugin.ts	6761	// DELETE /_agent-native/runs/:id	COMMENT
LOW	packages/core/src/server/action-routes.ts	1801	retryAfterSeconds > 0	COMMENT
LOW	packages/core/src/server/credential-provider.ts	401	// ---------------------------------------------------------------------------	COMMENT
LOW	packages/core/src/server/collab-plugin.ts	421	return async (nitroApp: any) => {	COMMENT
LOW	packages/core/src/server/realtime-registration.ts	221	//	COMMENT
LOW	packages/core/src/server/realtime-registration.ts	241	// those live in the app's own env file, so both travel to a laptop with a	COMMENT
LOW	packages/core/src/server/auth.ts	4161	// query). The two unauthenticated device endpoints below are the CLI's	COMMENT
LOW	packages/core/src/agent/run-manager.ts	3521	if (sqlRun.status === "running") {	COMMENT
LOW	packages/core/src/agent/run-manager.ts	3541	// converting the intended SILENT server-side recovery into a user-visible	COMMENT
LOW	packages/core/src/agent/production-agent.ts	13541	// falls back to the existing loud reap	COMMENT
LOW	…es/core/src/agent/run-store.stale-run-recovery.spec.ts	1441	expect(fireInternalDispatchMock).not.toHaveBeenCalled();	COMMENT
LOW	packages/core/src/agent/engine/registry.ts	1021	}	COMMENT
LOW	packages/core/src/mcp/direct-action-call.ts	361	// The action has run, so from here on a write reports its success even	COMMENT
LOW	packages/core/src/cli/connect.ts	2181		COMMENT
LOW	…ages/core/src/templates/default/react-router.config.ts	1	import type { Config } from "@react-router/dev/config";	COMMENT
LOW	…ages/core/src/templates/default/react-router.config.ts	21	// import { PRERENDERED_PUBLIC_PAGE_PATHS } from "./shared/prerendered-public-paths";	COMMENT
LOW	…s/core/src/templates/builder-code-starter/server/db.ts	1	// App data layer — the DB client lives here.	COMMENT
LOW	…s/core/src/templates/builder-code-starter/server/db.ts	21	// type: "note",	COMMENT
LOW	…e/src/templates/builder-code-starter/drizzle/schema.ts	1	// App tables live here, defined with Drizzle's PostgreSQL builders. Local dev	COMMENT
103 more matches not shown…

Structural Annotation Overuse21 hits · 34 pts

Severity	File	Line	Snippet	Context
LOW	.agents/skills/qa/SKILL.md	46	### Step 1: Parse Args	COMMENT
LOW	.agents/skills/qa/SKILL.md	53	### Step 2: Check Credential Readiness	COMMENT
LOW	.agents/skills/qa/SKILL.md	72	### Step 3: Start Dev Servers	COMMENT
LOW	.agents/skills/qa/SKILL.md	93	### Step 4: Generate Test Plans	COMMENT
LOW	.agents/skills/qa/SKILL.md	114	### Step 5: Create Team and Spawn Testers	COMMENT
LOW	.agents/skills/qa/SKILL.md	135	### Step 6: Monitor and Alert	COMMENT
LOW	.agents/skills/qa/SKILL.md	143	### Step 7: Compile Report and Shutdown	COMMENT
LOW⚡	packages/pinpoint/README.md	15	### Step 1: Install	COMMENT
LOW⚡	packages/pinpoint/README.md	21	### Step 2: Initialize agent actions and skill	COMMENT
LOW⚡	packages/pinpoint/README.md	29	### Step 3: Mount the client overlay	COMMENT
LOW	packages/pinpoint/README.md	47	### Step 4: Add server middleware	COMMENT
LOW	packages/pinpoint/README.md	60	### Step 5: Verify	COMMENT
LOW	packages/core/src/a2a/server.ts	480	// Step 1: Peek at JWT claims WITHOUT verification to get org_domain.	COMMENT
LOW	packages/core/src/a2a/server.ts	508	// Step 2: Build verification options once, then try the explicit/global	COMMENT
LOW	…lates/analytics/.agents/skills/adhoc-analysis/SKILL.md	37	### Step 1: Understand the Question (catalog-first, clarify-first)	COMMENT
LOW	…lates/analytics/.agents/skills/adhoc-analysis/SKILL.md	48	### Step 2: Gather Data from Multiple Sources	COMMENT
LOW	…lates/analytics/.agents/skills/adhoc-analysis/SKILL.md	88	### Step 3: Analyze and Synthesize	COMMENT
LOW	…lates/analytics/.agents/skills/adhoc-analysis/SKILL.md	114	### Step 4: Generate Charts (when useful)	COMMENT
LOW	…lates/analytics/.agents/skills/adhoc-analysis/SKILL.md	138	### Step 5: Format Results as Markdown	COMMENT
LOW	…lates/analytics/.agents/skills/adhoc-analysis/SKILL.md	174	### Step 6: Save the Dashboard Artifact (only when requested)	COMMENT
LOW	…lates/analytics/.agents/skills/adhoc-analysis/SKILL.md	195	### Step 7: Navigate to the Result	COMMENT

Cross-Language Confusion (JS/TS)5 hits · 25 pts

Severity	File	Line	Snippet	Context
HIGH	scripts/package-release-workflow.test.ts	2074	elif [ "$#" -eq 2 ] && [ "$1" = "api" ] && [ "$2" = "$GH_EXPECTED_PR_ENDPOINT" ]; then	CODE
HIGH	scripts/package-release-workflow.test.ts	2161	elif [ "$#" -eq 2 ] && [ "$1" = "api" ]; then	CODE
HIGH	scripts/community-prs.ts	1559	print(sweep(gh, now, json, sleep));	CODE
HIGH	scripts/community-prs.ts	1566	print(prReport(gh, Number(rest[0]), now, json, sleep));	CODE
HIGH	scripts/community-prs.ts	1581	print(audit(gh, now, days, by, json));	CODE

AI Response Leakage3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	.agents/skills/review-latest-feedback/SKILL.md	121	\| "Partially fixed - PR #7512 merged the project-instructions/context carryover fix", after she'd asked whether FullStor	CODE
HIGH	…factory/.agents/skills/review-latest-feedback/SKILL.md	121	\| "Partially fixed - PR #7512 merged the project-instructions/context carryover fix", after she'd asked whether FullStor	CODE
HIGH	…factory/.agents/skills/review-latest-feedback/SKILL.md	121	\| "Partially fixed - PR #7512 merged the project-instructions/context carryover fix", after she'd asked whether FullStor	CODE

Synthetic Comment Markers2 hits · 12 pts

Severity	File	Line	Snippet	Context
HIGH	…/pages/design-editor/commands/screen-element-select.ts	299	// repeater (common in AI-generated Alpine.js list/task UIs) have no	COMMENT
HIGH	…plates/analytics/server/lib/data-dictionary-context.ts	274	"## AI-generated suggestions",	CODE

AI Slop Vocabulary3 hits · 8 pts

Severity	File	Line	Snippet	Context
MEDIUM	.agents/skills/design-editor-repro/harness/start-dev.sh	3	# database (see harness-env.mjs). Exits happily if its server already runs.	COMMENT
MEDIUM	packages/toolkit/src/app/org/BulkInviteForm.tsx	67	// "email" per line. A robust full CSV parser would be overkill here.	COMMENT
LOW	.github/workflows/auto-publish.yml	568	# (actions/runner-images#13883), so we just use a Node version that	COMMENT

Verbosity Indicators4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	packages/core/src/a2a/server.ts	480	// Step 1: Peek at JWT claims WITHOUT verification to get org_domain.	COMMENT
LOW	packages/core/src/a2a/server.ts	508	// Step 2: Build verification options once, then try the explicit/global	COMMENT
LOW	…s/public/mediapipe/wasm/vision_wasm_nosimd_internal.js	23	// We need to check if Module already exists (e.g. case 3 above).	COMMENT
LOW	…es/clips/public/mediapipe/wasm/vision_wasm_internal.js	23	// We need to check if Module already exists (e.g. case 3 above).	COMMENT

Self-Referential Comments2 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	templates/slides/app/lib/create-deck-generation.test.ts	129	["## Create a 10-slide deck about dogs", 10],	CODE
MEDIUM	…plates/slides-2/app/lib/create-deck-generation.test.ts	240	["## Create a 10-slide deck about dogs", 10],	CODE

Slop Phrases1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ckages/core/src/cli/skills-content/document-quality.ts	16	drop the old idea", "as discussed above", "this revision", "unlike the prior	CODE

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	packages/docs/app/entry.server.tsx	21	export default async function handleRequest(	CODE
LOW	packages/migrate/src/adapters/agent-native-target.ts	356	export default async function handleRequest(	CODE

Excessive Try-Catch Wrapping1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	e2e/beta/read-saved-thread.ts	405	except Exception:	CODE

BuilderIO/agent-native

Open-Source Code Quality, Security and Technical Debt Review