An open-source background agents coding system
This report presents the forensic synthetic code analysis of ColeMurray/background-agents, a TypeScript project with 2,693 GitHub stars. SynthScan v2.0 examined 371,939 lines of code across 1775 source files, recording 1731 pattern matches distributed across 16 syntactic categories. The overall adjusted score of 6.4 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1731 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …kages/modal-infra/tests/test_agent_slack_notify_env.py | 36 | async def test_env_set_when_enabled(self, monkeypatch): | CODE |
| LOW | …kages/modal-infra/tests/test_agent_slack_notify_env.py | 54 | async def test_env_omitted_when_disabled(self, monkeypatch): | CODE |
| LOW | …kages/modal-infra/tests/test_agent_slack_notify_env.py | 76 | async def test_env_set_when_enabled(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_launch.py | 32 | async def test_launch_matrix_preserves_common_and_source_specific_behavior( | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_launch.py | 189 | async def test_repository_image_create_validates_repo_before_image_lookup(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 13 | def test_returns_nonempty_password(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 17 | def test_generates_unique_passwords(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 28 | async def test_returns_tunnel_url_on_success(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 39 | async def test_returns_empty_on_exception_after_retries(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 51 | async def test_returns_empty_when_port_missing_after_retries(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 62 | async def test_retries_then_succeeds(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 84 | async def test_handle_contains_code_server_fields(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 127 | async def test_code_server_skipped_when_disabled(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 169 | async def test_handle_contains_code_server_fields(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 219 | async def test_code_server_skipped_when_disabled(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_resources.py | 22 | def test_allows_fractional_cpu(self): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_resources.py | 47 | async def test_create_sandbox_passes_cpu_and_memory(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_resources.py | 69 | async def test_restore_from_snapshot_passes_resources(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 26 | def test_has_repository_accepts_complete_or_absent_metadata(repo_owner, repo_name, expected): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 37 | def test_has_repository_rejects_partial_repo_metadata(repo_owner, repo_name): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 50 | async def test_create_sandbox_rejects_partial_repo_metadata(repo_owner, repo_name): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 65 | async def test_restore_rejects_partial_repo_metadata(session_config): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 76 | async def test_user_env_vars_override_order(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 116 | async def test_restore_user_env_vars_override_order(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 178 | async def test_create_preserves_managed_provider_env_isolation( | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 204 | async def test_restore_preserves_managed_provider_env_isolation( | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 219 | def test_generated_vnc_password_respects_protocol_limit(): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 224 | async def test_restore_uses_default_timeout(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 263 | async def test_restore_uses_custom_timeout(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 305 | async def test_create_and_restore_timeout_consistency(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 378 | async def test_restore_includes_branch_in_session_config(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 400 | async def test_restore_omits_branch_when_none(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 421 | async def test_restore_serializes_typed_session_config(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 466 | async def test_vcs_env_vars_default_github(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 508 | async def test_vcs_env_vars_bitbucket(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 528 | async def test_repo_image_boot_omits_fallback_tokens(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 557 | async def test_repo_image_boot_preserves_user_github_cli_token(monkeypatch, token_key): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 587 | async def test_no_repo_sandbox_gets_provider_host_scoping(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 607 | async def test_restore_no_repo_gets_host_scoping_without_tokens(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 638 | async def test_restore_preserves_vcs_clone_token_for_legacy_snapshots(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 678 | async def test_restore_github_includes_gh_cli_aliases(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 716 | async def test_no_repo_restore_omits_clone_token(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_runtime_manifest.py | 5 | def test_runtime_manifest_generation_matches_version() -> None: | CODE |
| LOW⚡ | packages/modal-infra/tests/test_clone_token.py | 20 | def test_resolve_clone_token_uses_gitlab_access_token(monkeypatch): | CODE |
| LOW⚡ | packages/modal-infra/tests/test_clone_token.py | 27 | def test_resolve_clone_token_returns_none_for_missing_gitlab_token(monkeypatch): | CODE |
| LOW⚡ | packages/modal-infra/tests/test_clone_token.py | 33 | def test_resolve_clone_token_generates_github_installation_token(monkeypatch): | CODE |
| LOW⚡ | packages/modal-infra/tests/test_clone_token.py | 39 | def fake_generate_installation_token(**kwargs): | CODE |
| LOW | packages/modal-infra/tests/test_clone_token.py | 55 | def test_resolve_clone_token_returns_none_when_github_credentials_incomplete(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_clone_token.py | 67 | def test_resolve_clone_token_returns_none_when_github_generation_fails(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_vnc.py | 35 | async def test_returns_url_and_password_and_exposes_only_novnc(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_vnc.py | 62 | async def test_disabled_vnc_has_no_credentials_or_port(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_vnc.py | 84 | async def test_generates_credentials_and_returns_them_with_url(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_vnc.py | 108 | async def test_resolves_custom_novnc_tunnel(): | CODE |
| LOW | packages/modal-infra/tests/test_vnc.py | 132 | def test_raw_vnc_port_is_never_exposed_as_an_extra_tunnel(): | CODE |
| LOW | packages/modal-infra/tests/test_ttyd.py | 19 | def test_terminal_enabled_includes_proxy_port(self): | CODE |
| LOW | packages/modal-infra/tests/test_ttyd.py | 33 | def test_terminal_disabled_excludes_proxy_port(self): | CODE |
| LOW | packages/modal-infra/tests/test_ttyd.py | 45 | def test_terminal_and_code_server_both_enabled(self): | CODE |
| LOW | packages/modal-infra/tests/test_ttyd.py | 58 | def test_terminal_port_deduped_from_tunnel_ports(self): | CODE |
| LOW | packages/modal-infra/tests/test_ttyd.py | 81 | async def test_returns_ttyd_url_when_terminal_enabled(self): | CODE |
| LOW | packages/modal-infra/tests/test_ttyd.py | 105 | async def test_returns_none_when_terminal_disabled(self): | CODE |
| 1216 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .openinspect/setup.sh | 7 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .openinspect/setup.sh | 9 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .openinspect/setup.sh | 21 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .openinspect/setup.sh | 23 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 36 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 38 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 42 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 44 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 48 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 50 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 58 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 60 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 115 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 117 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 125 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 127 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/environments/production/web-cloudflare.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/web-cloudflare.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/outputs.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/outputs.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/outputs.tf | 119 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/outputs.tf | 121 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-github.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-github.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/r2.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/r2.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/main.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/main.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/opencomputer.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/opencomputer.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/modal.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/modal.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-slack.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-slack.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/moved.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/moved.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/e2b.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/e2b.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-linear.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-linear.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/kv.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/kv.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/web-vercel.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/web-vercel.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 112 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 114 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 134 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 136 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 161 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 163 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 181 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 183 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 209 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 211 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 238 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 240 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 284 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 286 | # ============================================================================= | COMMENT |
| 168 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL⚡ | packages/sandbox-runtime/tests/test_opencode_health.py | 20 | client_type.return_value.__aenter__.return_value.get.assert_not_awaited() | CODE |
| CRITICAL | …es/sandbox-runtime/tests/test_entrypoint_build_mode.py | 1017 | supervisor.repository_boot.synchronizer.log.info.assert_any_call( | CODE |
| CRITICAL | …es/sandbox-runtime/tests/test_entrypoint_build_mode.py | 1264 | supervisor.repository_boot.synchronizer.log.warn.assert_called_once() | CODE |
| CRITICAL | …es/sandbox-runtime/tests/test_entrypoint_build_mode.py | 1526 | supervisor.repository_boot.synchronizer.log.warn.assert_any_call( | CODE |
| CRITICAL | packages/slack-bot/src/index.test.ts | 2134 | const sessionCall = env.CONTROL_PLANE.fetch.mock.calls.find(([input]) => { | CODE |
| CRITICAL | packages/slack-bot/src/index.test.ts | 2242 | const sessionCall = env.CONTROL_PLANE.fetch.mock.calls.find(([input]) => { | CODE |
| CRITICAL | packages/slack-bot/src/index.test.ts | 2344 | const sessionCall = env.CONTROL_PLANE.fetch.mock.calls.find(([input]) => { | CODE |
| CRITICAL | …ckages/control-plane/src/session/message-queue.test.ts | 1010 | const enqueueLog = h.log.info.mock.calls.find(([event]) => event === "prompt.enqueue")?.[1]; | CODE |
| CRITICAL | …ckages/control-plane/src/session/message-queue.test.ts | 1094 | expect(h.wsManager.send.mock.calls.map(([, command]) => command)).toEqual([ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/modal-infra/src/web_api.py | 206 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/clone_token.py | 33 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/app.py | 123 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/sandbox/manager.py | 206 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/sandbox/manager.py | 348 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/sandbox/manager.py | 608 | except Exception as e: | CODE |
| LOW | …/sandbox-runtime/src/sandbox_runtime/diff_collector.py | 927 | except Exception as error: | CODE |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/boot_warnings.py | 33 | except Exception as error: | CODE |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/prompt_stream.py | 1003 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 97 | except Exception as error: | CODE |
| LOW⚡ | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 109 | except Exception as error: | CODE |
| LOW⚡ | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 118 | except Exception as error: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 225 | except Exception as error: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 254 | except Exception as error: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 410 | except Exception as error: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 424 | except Exception as error: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 429 | except Exception as error: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 454 | except Exception as error: | CODE |
| LOW | …box-runtime/src/sandbox_runtime/repo_image_callback.py | 151 | except Exception as exc: | CODE |
| LOW | …dbox-runtime/src/sandbox_runtime/tunnel_environment.py | 49 | except Exception as error: | CODE |
| LOW | …dbox-runtime/src/sandbox_runtime/tunnel_environment.py | 54 | except Exception as error: | CODE |
| LOW | …dbox-runtime/src/sandbox_runtime/tunnel_environment.py | 87 | except Exception as error: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 350 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 507 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 574 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 749 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 869 | except Exception as e: | CODE |
| LOW⚡ | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1075 | except Exception: | CODE |
| LOW⚡ | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1078 | except Exception as e: | CODE |
| LOW⚡ | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1086 | except Exception as e: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/event_forwarder.py | 133 | except Exception as e: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/event_forwarder.py | 192 | except Exception as e: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/event_forwarder.py | 239 | except Exception as e: | CODE |
| LOW | …andbox-runtime/src/sandbox_runtime/repository_hooks.py | 108 | except Exception as error: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_client.py | 156 | except Exception as e: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/repository_boot.py | 88 | except Exception as error: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/repository_boot.py | 140 | except Exception as error: | CODE |
| MEDIUM | …sandbox-runtime/src/sandbox_runtime/repository_boot.py | 85 | def _write_repo_manifest(self) -> None: | CODE |
| LOW | …/sandbox-runtime/src/sandbox_runtime/process_output.py | 59 | except Exception as error: | CODE |
| LOW | …es/sandbox-runtime/src/sandbox_runtime/diff_capture.py | 226 | except Exception as error: | CODE |
| LOW | …es/sandbox-runtime/src/sandbox_runtime/diff_capture.py | 240 | except Exception as error: | CODE |
| LOW | …es/sandbox-runtime/src/sandbox_runtime/diff_capture.py | 283 | except Exception as report_error: | CODE |
| MEDIUM | …es/sandbox-runtime/src/sandbox_runtime/diff_capture.py | 195 | def _run(self) -> None: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_server.py | 256 | except Exception as e: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_server.py | 382 | except Exception as e: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_server.py | 454 | except Exception as e: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_server.py | 528 | except Exception as error: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_server.py | 595 | except Exception as e: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/repository_sync.py | 129 | except Exception as error: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/repository_sync.py | 300 | except Exception as error: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/repository_sync.py | 330 | except Exception as error: | CODE |
| LOW | …/sandbox-runtime/src/sandbox_runtime/managed_skills.py | 583 | except Exception: | CODE |
| LOW | …/sandbox-runtime/src/sandbox_runtime/managed_skills.py | 642 | except Exception: | CODE |
| LOW | …/sandbox-runtime/src/sandbox_runtime/managed_skills.py | 647 | except Exception as error: | CODE |
| LOW | …c/sandbox_runtime/credentials/git_credential_helper.py | 307 | except Exception as e: | CODE |
| LOW | …c/sandbox_runtime/credentials/git_credential_helper.py | 345 | except Exception as e: | CODE |
| MEDIUM | packages/e2b-infra/build-template.py | 41 | print("Error: E2B_TEMPLATE_CPU must be a positive integer", file=sys.stderr) | CODE |
| MEDIUM | packages/e2b-infra/build-template.py | 44 | print("Error: E2B_TEMPLATE_MEMORY_MB must be a positive even number", file=sys.stderr) | CODE |
| MEDIUM⚡ | packages/e2b-infra/build-template.py | 63 | print("Error: E2B_TEMPLATE_ID is not set", file=sys.stderr) | CODE |
| MEDIUM | packages/e2b-infra/build-template.py | 76 | print(f"Error: sandbox-runtime not found at {RUNTIME_SRC}", file=sys.stderr) | CODE |
| 2 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/modal-infra/src/log_config.py | 3 | CODE | |
| LOW | packages/modal-infra/src/log_config.py | 3 | CODE | |
| LOW | packages/modal-infra/src/log_config.py | 3 | CODE | |
| LOW | packages/modal-infra/src/__init__.py | 5 | CODE | |
| LOW | packages/modal-infra/src/__init__.py | 6 | CODE | |
| LOW | packages/modal-infra/src/images/__init__.py | 3 | CODE | |
| LOW | packages/modal-infra/src/images/__init__.py | 3 | CODE | |
| LOW | packages/modal-infra/src/sandbox/__init__.py | 8 | CODE | |
| LOW | packages/modal-infra/src/sandbox/__init__.py | 8 | CODE | |
| LOW | packages/modal-infra/src/sandbox/__init__.py | 8 | CODE | |
| LOW | packages/sandbox-runtime/tests/conftest.py | 11 | CODE | |
| LOW | packages/sandbox-runtime/tests/test_gh_wrapper.py | 15 | CODE | |
| LOW | …es/sandbox-runtime/tests/test_git_credential_helper.py | 3 | CODE | |
| LOW | …/sandbox-runtime/src/sandbox_runtime/diff_collector.py | 9 | CODE | |
| LOW | …/sandbox-runtime/src/sandbox_runtime/runtime_config.py | 3 | CODE | |
| LOW | …runtime/src/sandbox_runtime/modal_image_build_start.py | 3 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/boot_warnings.py | 1 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/prompt_stream.py | 3 | CODE | |
| LOW | …es/sandbox-runtime/src/sandbox_runtime/web_terminal.py | 1 | CODE | |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 3 | CODE | |
| LOW | …box-runtime/src/sandbox_runtime/repo_image_callback.py | 3 | CODE | |
| LOW | …dbox-runtime/src/sandbox_runtime/tunnel_environment.py | 1 | CODE | |
| LOW | …ges/sandbox-runtime/src/sandbox_runtime/code_server.py | 1 | CODE | |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 12 | CODE | |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 12 | CODE | |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 12 | CODE | |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 12 | CODE | |
| LOW | …box-runtime/src/sandbox_runtime/message_attribution.py | 3 | CODE | |
| LOW | …es/sandbox-runtime/src/sandbox_runtime/git_excludes.py | 3 | CODE | |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 4 | CODE | |
| LOW | …sandbox-runtime/src/sandbox_runtime/event_forwarder.py | 3 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/diff_baseline.py | 3 | CODE | |
| LOW | …andbox-runtime/src/sandbox_runtime/repository_hooks.py | 1 | CODE | |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_client.py | 3 | CODE | |
| LOW | …sandbox-runtime/src/sandbox_runtime/repository_boot.py | 1 | CODE | |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/git_signer.py | 3 | CODE | |
| LOW | …/sandbox-runtime/src/sandbox_runtime/process_output.py | 3 | CODE | |
| LOW | …ox-runtime/src/sandbox_runtime/agent_bridge_process.py | 1 | CODE | |
| LOW | …box-runtime/src/sandbox_runtime/opencode_identifier.py | 3 | CODE | |
| LOW | …es/sandbox-runtime/src/sandbox_runtime/diff_capture.py | 3 | CODE | |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_server.py | 1 | CODE | |
| LOW | …sandbox-runtime/src/sandbox_runtime/repository_sync.py | 1 | CODE | |
| LOW | …sandbox-runtime/src/sandbox_runtime/browser_desktop.py | 1 | CODE | |
| LOW | …/sandbox-runtime/src/sandbox_runtime/managed_skills.py | 3 | CODE | |
| LOW | …/sandbox-runtime/src/sandbox_runtime/child_activity.py | 3 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 3 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 4 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 4 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 4 | CODE | |
| LOW | …c/sandbox_runtime/credentials/git_credential_helper.py | 26 | CODE | |
| LOW | packages/daytona-infra/src/bootstrap.py | 3 | CODE | |
| LOW | packages/daytona-infra/src/config.py | 3 | CODE | |
| LOW | packages/daytona-infra/src/toolchain.py | 3 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/modal-infra/src/images/base.py | 106 | "apt-get update && apt-get install -y gh && rm -rf /var/lib/apt/lists/*", | CODE |
| HIGH | packages/modal-infra/src/images/base.py | 141 | "opencode --version || echo 'OpenCode installed'", | CODE |
| HIGH | packages/modal-infra/src/images/base.py | 165 | "cd /app/opencode-deps && npm install --ignore-scripts --no-audit --no-fund", | CODE |
| HIGH⚡ | packages/sandbox-runtime/tests/test_mcp.py | 235 | "pkg && cat /etc/passwd", | CODE |
| HIGH⚡ | packages/e2b-infra/build-template.py | 56 | "command -v python && command -v node && command -v bun && command -v opencode " | CODE |
| HIGH⚡ | packages/e2b-infra/build-template.py | 58 | '&& test "$(command -v gh)" = /usr/local/bin/gh && test -x /usr/bin/gh ' | CODE |
| HIGH | packages/daytona-infra/src/toolchain.py | 45 | "apt-get update && apt-get install -y gh && rm -rf /var/lib/apt/lists/*", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/OPENAI_MODELS.md | 30 | ### Step 1: Connect ChatGPT | COMMENT |
| LOW | docs/OPENAI_MODELS.md | 44 | ### Step 2: Configure Defaults | COMMENT |
| LOW | docs/OPENAI_MODELS.md | 57 | ### Step 3: Select Authentication | COMMENT |
| LOW | docs/GETTING_STARTED.md | 71 | ## Step 1: Fork the Repository | COMMENT |
| LOW | docs/GETTING_STARTED.md | 97 | ## Step 2: Create Cloud Provider Credentials | COMMENT |
| LOW | docs/GETTING_STARTED.md | 278 | ## Step 3: Create GitHub App | COMMENT |
| LOW | docs/GETTING_STARTED.md | 359 | ## Step 4: Create Slack App (Optional) | COMMENT |
| LOW | docs/GETTING_STARTED.md | 453 | ## Step 5: Generate Security Secrets | COMMENT |
| LOW | docs/GETTING_STARTED.md | 478 | ## Step 6: Configure Terraform | COMMENT |
| LOW | docs/GETTING_STARTED.md | 677 | ## Step 7: Deploy with Terraform | COMMENT |
| LOW | docs/GETTING_STARTED.md | 861 | ## Step 8: Deploy the Web App | COMMENT |
| LOW | docs/GETTING_STARTED.md | 921 | ## Step 9: Verify Deployment | COMMENT |
| LOW | docs/GETTING_STARTED.md | 956 | ## Step 10: Set Up CI/CD (Optional) | COMMENT |
| LOW | docs/GROK_MODELS.md | 28 | ### Step 1: Connect SuperGrok | COMMENT |
| LOW | docs/GROK_MODELS.md | 42 | ### Step 2: Configure Defaults | COMMENT |
| LOW | docs/GROK_MODELS.md | 53 | ### Step 3: Enable and Select Grok | COMMENT |
| LOW | docs/SETUP_GUIDE.md | 49 | ## Step 0: Bootstrap the Repo | COMMENT |
| LOW⚡ | packages/control-plane/src/db/user-store.ts | 317 | // Step 1: Look up by provider identity | COMMENT |
| LOW⚡ | packages/control-plane/src/db/user-store.ts | 321 | // Step 2: Existing identity → load linked user, update if needed | COMMENT |
| LOW | packages/control-plane/src/db/user-store.ts | 380 | // Step 3: No identity found — try email-based cross-provider linking | COMMENT |
| LOW | packages/control-plane/src/db/user-store.ts | 400 | // Step 4: Brand new user — batch user + identity creation so a UNIQUE | COMMENT |
| LOW | packages/control-plane/src/session/initialize.ts | 136 | // Step 1: D1 index (must succeed before DO init starts sandbox warming) | COMMENT |
| LOW | packages/control-plane/src/session/initialize.ts | 163 | // Step 2: DO init | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/modal-infra/src/web_api.py | 226 | CODE | |
| LOW | packages/modal-infra/src/sandbox/manager.py | 182 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/prompt_stream.py | 183 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/prompt_stream.py | 318 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/prompt_stream.py | 391 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/prompt_stream.py | 616 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/prompt_stream.py | 821 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/prompt_stream.py | 934 | CODE | |
| LOW | …es/sandbox-runtime/src/sandbox_runtime/web_terminal.py | 90 | CODE | |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 76 | CODE | |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/supervisor.py | 355 | CODE | |
| LOW | …dbox-runtime/src/sandbox_runtime/tunnel_environment.py | 57 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 320 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 458 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 598 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1057 | CODE | |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_client.py | 175 | CODE | |
| LOW | …sandbox-runtime/src/sandbox_runtime/repository_boot.py | 149 | CODE | |
| LOW | …ges/sandbox-runtime/src/sandbox_runtime/repo_config.py | 178 | CODE | |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_server.py | 322 | CODE | |
| LOW | …sandbox-runtime/src/sandbox_runtime/browser_desktop.py | 169 | CODE | |
| LOW | …/sandbox-runtime/src/sandbox_runtime/managed_skills.py | 426 | CODE | |
| LOW | …/sandbox-runtime/src/sandbox_runtime/managed_skills.py | 620 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …s/sandbox-runtime/src/sandbox_runtime/auth/internal.py | 51 | Verify an internal API token from the Authorization header. Token format: `Bearer timestamp.signature` where: | STRING |
| HIGH | …sandbox-runtime/src/sandbox_runtime/auth/github_app.py | 39 | Exchange a JWT for an installation access token. Args: jwt_token: The signed JWT installation_ | STRING |
| HIGH | …sandbox-runtime/src/sandbox_runtime/auth/github_app.py | 70 | Generate a fresh GitHub App installation token. This is the main entry point for token generation. It: 1. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | terraform/environments/production/main.tf | 1 | # ============================================================================= | COMMENT |
| LOW | terraform/environments/production/e2b.tf | 41 | template_id = var.e2b_template_id | COMMENT |
| LOW | terraform/environments/production/backend.tf | 1 | # Terraform State Backend Configuration | COMMENT |
| LOW | docs/GETTING_STARTED.md | 521 | modal_token_id = "your-modal-token-id" | COMMENT |
| LOW | docs/GETTING_STARTED.md | 601 | COMMENT | |
| LOW | packages/modal-infra/src/images/base.py | 21 | # Get the path to the sandbox runtime code (provider-agnostic) | COMMENT |
| LOW | packages/modal-infra/src/images/base.py | 141 | "opencode --version || echo 'OpenCode installed'", | COMMENT |
| LOW | packages/modal-infra/src/images/base.py | 201 | # Install the git credential helper shim. | COMMENT |
| LOW | …kages/sandbox-runtime/src/sandbox_runtime/constants.py | 41 | # for. The manager's write can land before the entrypoint starts (it only | COMMENT |
| LOW | …kages/sandbox-runtime/src/sandbox_runtime/constants.py | 61 | # Canonical repository manifest written by the supervisor before any child | COMMENT |
| LOW | packages/shared/src/types/sessions.test.ts | 61 | }); | COMMENT |
| LOW | packages/shared/src/triggers/github/normalizer.test.ts | 761 | expect(parsed.pullRequest).toEqual(event!.pullRequest); | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …runtime/src/sandbox_runtime/plugins/xai-auth-plugin.js | 10 | const OAUTH_DUMMY_KEY = "opencode-oauth-dummy-key"; | CODE |
| LOW | …ntime/src/sandbox_runtime/plugins/codex-auth-plugin.js | 16 | const OAUTH_DUMMY_KEY = "opencode-oauth-dummy-key"; | CODE |
| LOW | packages/shared/src/slack/resolve-users.test.ts | 65 | real_name: "John Doe", | CODE |
| LOW | packages/shared/src/slack/resolve-users.test.ts | 66 | profile: { display_name: "", real_name: "John Doe" }, | CODE |
| LOW | packages/slack-bot/src/index.test.ts | 2160 | real_name: "Jane Doe", | CODE |
| LOW | …ckages/slack-bot/src/sessions/session-launcher.test.ts | 105 | email: "user@example.com", | CODE |
| LOW | …ckages/slack-bot/src/sessions/session-launcher.test.ts | 168 | actorEmail: "user@example.com", | CODE |
| LOW | …ne/test/integration/provider-account-atomicity.test.ts | 24 | VALUES ('user-1', 'Test User', 'user@example.com', ?, ?)` | CODE |
| LOW | …e/test/integration/provider-account-foundation.test.ts | 123 | VALUES ('user-1', 'Test User', 'user@example.com', ?, ?)` | CODE |
| LOW | …e/test/integration/provider-account-foundation.test.ts | 163 | VALUES ('user-1', 'Test User', 'user@example.com', ?, ?)` | CODE |
| LOW | …e/test/integration/provider-account-foundation.test.ts | 199 | VALUES ('user-1', 'Test User', 'user@example.com', ?, ?)` | CODE |
| LOW | …e/src/source-control/providers/github-provider.test.ts | 49 | privateKey: "fake-key", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | packages/control-plane/src/db/user-store.ts | 317 | // Step 1: Look up by provider identity | COMMENT |
| LOW⚡ | packages/control-plane/src/db/user-store.ts | 321 | // Step 2: Existing identity → load linked user, update if needed | COMMENT |
| LOW | packages/control-plane/src/db/user-store.ts | 380 | // Step 3: No identity found — try email-based cross-provider linking | COMMENT |
| LOW | packages/control-plane/src/db/user-store.ts | 400 | // Step 4: Brand new user — batch user + identity creation so a UNIQUE | COMMENT |
| LOW | packages/control-plane/src/session/initialize.ts | 136 | // Step 1: D1 index (must succeed before DO init starts sandbox warming) | COMMENT |
| LOW | packages/control-plane/src/session/initialize.ts | 163 | // Step 2: DO init | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/modal-infra/deploy.py | 46 | __all__ = ["app"] | CODE |
| LOW | packages/modal-infra/src/log_config.py | 5 | __all__ = ["StructuredLogger", "configure_logging", "get_logger"] | CODE |
| LOW | packages/modal-infra/src/__init__.py | 8 | __all__ = ["app", "web_api"] | CODE |
| LOW | packages/modal-infra/src/images/__init__.py | 5 | __all__ = ["OPENCODE_VERSION", "base_image"] | CODE |
| LOW | packages/modal-infra/src/sandbox/__init__.py | 10 | __all__ = [ | CODE |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 19 | __all__ = [ | CODE |
| LOW | …ges/sandbox-runtime/src/sandbox_runtime/git_signing.py | 209 | async def _set_git_config(self, repository: Path, key: str, value: str) -> None: | CODE |
| LOW | …es/sandbox-runtime/src/sandbox_runtime/diff_capture.py | 211 | async def _settle(self, attempt: _RefreshAttempt) -> None: | CODE |
| LOW | …sandbox-runtime/src/sandbox_runtime/opencode_server.py | 322 | def _setup_managed_oauth(self) -> None: | CODE |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 10 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | terraform/environments/production/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| MEDIUM | …es/sandbox-runtime/tests/test_entrypoint_build_mode.py | 1289 | # Create the directory so _update_existing_repo proceeds after clone. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …l-plane/test/integration/browser-auth-callback.test.ts | 24 | function handleRequest( | CODE |
| LOW | …trol-plane/test/integration/auth-sign-in-claim.test.ts | 29 | function handleRequest( | CODE |
| LOW | …rol-plane/test/integration/browser-auth-router.test.ts | 12 | function handleRequest( | CODE |
| LOW | packages/control-plane/src/router.ts | 376 | export async function handleRequest( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/modal-infra/src/sandbox/manager.py | 612 | CODE |