"DeepCode: Open Agentic Coding (Agent Harness & Loop Engineering & Multi-Agent Orchestration)"
This report summarizes scanner evidence for HKUDS/DeepCode, a Python project with 16,697 GitHub stars. SynthScan examined 266,501 lines of code across 919 source files, recording 4136 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 19.0 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 2478 finding(s).
Are imports declared and package/API names verified? 916 finding(s).
Are wrappers, guards, and repeated structures necessary? 2844 finding(s).
Which changes need focused human review? 4136 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 4136 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/code_implementation_server.py | 1013 | def _extract_file_section_from_summary( | CODE |
| LOW | tools/code_implementation_server.py | 1133 | def _extract_file_section_alternative( | CODE |
| LOW | tools/command_executor.py | 416 | def generate_execution_summary( | CODE |
| LOW | tools/command_executor.py | 444 | def format_single_command_result( | CODE |
| LOW⚡ | tools/pdf_downloader.py | 745 | def process_markdown_with_images( | CODE |
| LOW | tools/pdf_downloader.py | 130 | async def _request_with_safe_redirects( | CODE |
| LOW | tools/pdf_downloader.py | 170 | async def perform_document_conversion( | CODE |
| LOW | tools/pdf_downloader.py | 256 | async def convert_document_to_markdown( | CODE |
| LOW | tools/pdf_downloader.py | 289 | def format_file_operation_result( | CODE |
| LOW⚡ | tools/document_segmentation_server.py | 1110 | def _identify_research_paper_sections(self, content: str) -> List[Dict]: | CODE |
| LOW⚡ | tools/document_segmentation_server.py | 1115 | def _enhance_section_with_context(self, section: Dict, content: str) -> Dict: | CODE |
| LOW⚡ | tools/document_segmentation_server.py | 1119 | def _identify_concept_implementation_pairs(self, content: str) -> List[Dict]: | CODE |
| LOW⚡ | tools/document_segmentation_server.py | 1123 | def _merge_concept_with_implementation(self, pair: Dict, content: str) -> Dict: | CODE |
| LOW⚡ | tools/document_segmentation_server.py | 1127 | def _detect_semantic_boundaries(self, content: str) -> List[Dict]: | CODE |
| LOW | tools/document_segmentation_server.py | 204 | def _calculate_weighted_score( | CODE |
| LOW | tools/document_segmentation_server.py | 226 | def detect_segmentation_strategy(self, content: str, doc_type: str) -> str: | CODE |
| LOW | tools/document_segmentation_server.py | 249 | def _calculate_algorithm_density(self, content: str) -> float: | CODE |
| LOW | tools/document_segmentation_server.py | 273 | def _calculate_concept_complexity(self, content: str) -> float: | CODE |
| LOW | tools/document_segmentation_server.py | 286 | def _calculate_implementation_detail_level(self, content: str) -> float: | CODE |
| LOW | tools/document_segmentation_server.py | 397 | def _segment_preserve_algorithm_integrity( | CODE |
| LOW | tools/document_segmentation_server.py | 431 | def _segment_research_paper_semantically( | CODE |
| LOW | tools/document_segmentation_server.py | 456 | def _segment_concept_implementation_hybrid( | CODE |
| LOW | tools/document_segmentation_server.py | 481 | def _segment_by_enhanced_semantic_chunks( | CODE |
| LOW | tools/document_segmentation_server.py | 585 | def _detect_academic_sections(self, content: str) -> List[Dict]: | CODE |
| LOW | tools/document_segmentation_server.py | 644 | def _segment_by_semantic_chunks(self, content: str) -> List[DocumentSegment]: | CODE |
| LOW | tools/document_segmentation_server.py | 743 | def _identify_algorithm_blocks(self, content: str) -> List[Dict]: | CODE |
| LOW | tools/document_segmentation_server.py | 883 | def _merge_related_content_blocks( | CODE |
| LOW | tools/document_segmentation_server.py | 1008 | def _extract_enhanced_keywords(self, content: str, content_type: str) -> List[str]: | CODE |
| LOW | tools/document_segmentation_server.py | 1063 | def _calculate_enhanced_relevance_scores( | CODE |
| LOW | tools/document_segmentation_server.py | 1173 | def _calculate_paragraph_importance( | CODE |
| LOW | tools/document_segmentation_server.py | 1198 | def _calculate_optimal_chunk_size(self, content: str) -> int: | CODE |
| LOW | tools/document_segmentation_server.py | 1209 | def _create_content_aware_chunks(self, content: str, chunk_size: int) -> List[Dict]: | CODE |
| LOW | tools/document_segmentation_server.py | 1354 | def _calculate_relevance_scores( | CODE |
| LOW | tools/document_segmentation_server.py | 1431 | def ensure_segments_dir_exists(segments_dir: str): | CODE |
| LOW | tools/document_segmentation_server.py | 1467 | async def analyze_and_segment_document( | CODE |
| LOW | tools/document_segmentation_server.py | 1813 | def _calculate_adaptive_char_limit( | CODE |
| LOW | tools/document_segmentation_server.py | 1838 | def _calculate_enhanced_keyword_score( | CODE |
| LOW | tools/document_segmentation_server.py | 1869 | def _calculate_completeness_bonus( | CODE |
| LOW | tools/document_segmentation_server.py | 1892 | def _select_segments_with_integrity( | CODE |
| LOW | tools/code_reference_indexer.py | 69 | def load_index_files_from_directory(indexes_directory: str) -> Dict[str, Dict]: | CODE |
| LOW | tools/code_reference_indexer.py | 136 | def calculate_relevance_score( | CODE |
| LOW | tools/code_reference_indexer.py | 179 | def find_relevant_references_in_cache( | CODE |
| LOW | tools/code_reference_indexer.py | 202 | def find_direct_relationships_in_cache( | CODE |
| LOW | tools/code_indexer.py | 955 | async def _process_files_sequentially(self, files_to_analyze: list) -> tuple: | CODE |
| LOW | tools/code_indexer.py | 975 | async def _process_files_concurrently(self, files_to_analyze: list) -> tuple: | CODE |
| LOW | tools/code_indexer.py | 1177 | def _extract_repository_statistics(self, repo_index: RepoIndex) -> Dict[str, Any]: | CODE |
| LOW | tools/code_indexer.py | 1229 | def generate_statistics_report(self, statistics_data: List[Dict[str, Any]]) -> str: | CODE |
| LOW | tools/code_indexer.py | 856 | async def _analyze_single_file_with_relationships( | STRING |
| LOW | core/verification.py | 42 | def discover_verification_commands(root: Path) -> tuple[VerificationCommand, ...]: | CODE |
| LOW | core/config.py | 1017 | def load_config_for_workspace(workspace: str | Path) -> DeepCodeConfig: | CODE |
| LOW | core/agent_setup.py | 169 | def _legacy_execution_profile( | CODE |
| LOW | core/private_storage.py | 246 | def open_existing_private_file( | CODE |
| LOW | core/private_storage.py | 354 | def atomic_write_private_json(path: Path, value: object) -> None: | CODE |
| LOW | core/schedule/monitor.py | 293 | def default_monitor_store_path() -> Path: | CODE |
| LOW | core/compat/runtime.py | 189 | def resolve_execution_profile( | CODE |
| LOW⚡ | core/compat/agent.py | 95 | def _mcp_supervisor_close_timeout_s() -> float: | CODE |
| LOW | core/plugins/host.py | 296 | def _registry_and_component_token(self) -> object: | CODE |
| LOW | core/providers/registry.py | 169 | def _matches_declared_endpoint(self, api_base: str | None) -> bool: | CODE |
| LOW | core/providers/timeouts.py | 27 | def resolve_request_timeout_s(explicit: float | None = None) -> float | None: | CODE |
| LOW | core/providers/timeouts.py | 44 | def resolve_stream_max_runtime_s(explicit: float | None = None) -> float | None: | CODE |
| 2018 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/document_conversion.py | 13 | CODE | |
| LOW | tools/pdf_downloader_server.py | 9 | CODE | |
| LOW | tools/pdf_converter.py | 13 | CODE | |
| LOW | core/verification.py | 3 | CODE | |
| LOW | core/config.py | 29 | CODE | |
| LOW | core/agent_setup.py | 17 | CODE | |
| LOW | core/platform_file_lock.py | 8 | CODE | |
| LOW | core/platform_compat.py | 9 | CODE | |
| LOW | core/file_lock.py | 3 | CODE | |
| LOW | core/reasoning.py | 9 | CODE | |
| LOW | core/private_storage.py | 14 | CODE | |
| LOW | core/llm_runtime.py | 9 | CODE | |
| LOW | core/llm_runtime.py | 21 | CODE | |
| LOW | core/llm_runtime.py | 21 | CODE | |
| LOW | core/schedule/monitor.py | 46 | CODE | |
| LOW | core/schedule/keepalive.py | 11 | CODE | |
| LOW | core/schedule/__init__.py | 15 | CODE | |
| LOW | core/schedule/__init__.py | 15 | CODE | |
| LOW | core/schedule/__init__.py | 16 | CODE | |
| LOW | core/schedule/scheduler.py | 10 | CODE | |
| LOW | core/compat/mcp_app.py | 16 | CODE | |
| LOW | core/compat/request_params.py | 16 | CODE | |
| LOW | core/compat/__init__.py | 26 | CODE | |
| LOW | core/compat/__init__.py | 26 | CODE | |
| LOW | core/compat/__init__.py | 26 | CODE | |
| LOW | core/compat/__init__.py | 26 | CODE | |
| LOW | core/compat/__init__.py | 26 | CODE | |
| LOW | core/compat/__init__.py | 33 | CODE | |
| LOW | core/compat/__init__.py | 34 | CODE | |
| LOW | core/compat/__init__.py | 35 | CODE | |
| LOW | core/compat/__init__.py | 36 | CODE | |
| LOW | core/compat/__init__.py | 36 | CODE | |
| LOW | core/compat/__init__.py | 36 | CODE | |
| LOW | core/compat/__init__.py | 36 | CODE | |
| LOW | core/compat/runtime.py | 18 | CODE | |
| LOW | core/compat/agent.py | 20 | CODE | |
| LOW | core/compat/parallel.py | 8 | CODE | |
| LOW | core/agent_presets/__init__.py | 36 | CODE | |
| LOW | core/plugins/domain.py | 3 | CODE | |
| LOW | core/plugins/registry.py | 3 | CODE | |
| LOW | core/plugins/host.py | 3 | CODE | |
| LOW | core/plugins/__init__.py | 3 | CODE | |
| LOW | core/plugins/__init__.py | 3 | CODE | |
| LOW | core/plugins/__init__.py | 3 | CODE | |
| LOW | core/plugins/__init__.py | 3 | CODE | |
| LOW | core/plugins/__init__.py | 3 | CODE | |
| LOW | core/plugins/__init__.py | 3 | CODE | |
| LOW | core/plugins/__init__.py | 3 | CODE | |
| LOW | core/plugins/__init__.py | 3 | CODE | |
| LOW | core/plugins/__init__.py | 3 | CODE | |
| LOW | core/plugins/__init__.py | 14 | CODE | |
| LOW | core/plugins/__init__.py | 15 | CODE | |
| LOW | core/plugins/__init__.py | 16 | CODE | |
| LOW | core/plugins/mcp.py | 3 | CODE | |
| LOW | core/plugins/resolver.py | 3 | CODE | |
| LOW | core/plugins/skill_provider.py | 3 | CODE | |
| LOW | core/plugins/formats/agent_plugins_v1.py | 3 | CODE | |
| LOW | core/plugins/formats/__init__.py | 3 | CODE | |
| LOW | core/plugins/formats/__init__.py | 3 | CODE | |
| LOW | core/providers/catalog.py | 31 | CODE | |
| 827 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/config.py | 70 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 72 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 86 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 88 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 146 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 148 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 337 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 339 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 361 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 363 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 377 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 379 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 550 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 552 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 751 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 753 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 1031 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/config.py | 1033 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/schedule/monitor.py | 65 | # ── Constants ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/schedule/monitor.py | 80 | # ── Outcome dataclass ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/schedule/monitor.py | 100 | # ── Pure functions ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/schedule/monitor.py | 125 | # ── Source readers ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/schedule/monitor.py | 194 | # ── Core comparison ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/schedule/monitor.py | 290 | # ── Persistence ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/schedule/monitor.py | 387 | # ── Combined entry point ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/schedule/monitor.py | 434 | # ── CLI ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/providers/catalog.py | 68 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/providers/catalog.py | 76 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/providers/catalog.py | 138 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/providers/catalog.py | 145 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/providers/openai_compat.py | 443 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/openai_compat.py | 445 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/openai_compat.py | 675 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/openai_compat.py | 677 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/openai_compat.py | 1218 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/openai_compat.py | 1220 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 206 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 208 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 385 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 387 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 431 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 433 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 474 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 476 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 571 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 573 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 657 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/providers/anthropic.py | 659 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | core/observability/bus.py | 94 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/observability/bus.py | 96 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/observability/bus.py | 120 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/observability/bus.py | 122 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/observability/bus.py | 236 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/observability/bus.py | 238 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/observability/bus.py | 266 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/observability/bus.py | 268 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/observability/bus.py | 358 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/observability/bus.py | 360 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/observability/bus.py | 474 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/observability/bus.py | 476 | # --------------------------------------------------------------------------- | COMMENT |
| 97 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/code_implementation_server.py | 1357 | except PermissionError: | CODE |
| HIGH | tools/document_conversion.py | 450 | except FileNotFoundError: | CODE |
| HIGH | tools/pdf_downloader.py | 964 | except FileNotFoundError: | CODE |
| HIGH | tools/document_segmentation_server.py | 1547 | except Exception as e: | CODE |
| HIGH | tools/pdf_converter.py | 664 | except Exception: | CODE |
| HIGH | tools/pdf_converter.py | 167 | except ( | CODE |
| HIGH | tools/pdf_converter.py | 435 | except Exception: | CODE |
| HIGH | tools/pdf_converter.py | 658 | except ( | CODE |
| HIGH | tools/code_indexer.py | 1509 | except NameError: | CODE |
| HIGH | tools/code_indexer.py | 1071 | except Exception: | CODE |
| HIGH | tools/code_indexer.py | 1047 | except Exception: | CODE |
| HIGH | tools/code_indexer.py | 510 | except (OSError, PermissionError): | CODE |
| HIGH | core/verification.py | 177 | except subprocess.TimeoutExpired: | CODE |
| HIGH | core/file_lock.py | 86 | except OSError: | CODE |
| HIGH | core/file_lock.py | 42 | except OSError: | CODE |
| HIGH | core/file_lock.py | 56 | except OSError: | CODE |
| HIGH | core/private_storage.py | 336 | except (NotImplementedError, OSError): | CODE |
| HIGH | core/compat/agent.py | 86 | except Exception: # noqa: BLE001 | CODE |
| HIGH | core/compat/agent.py | 468 | except BaseException: # noqa: BLE001 | CODE |
| HIGH | core/compat/agent.py | 81 | except Exception: # noqa: BLE001 | CODE |
| HIGH | core/compat/agent.py | 438 | except Exception: # noqa: BLE001 | CODE |
| HIGH | core/compat/agent.py | 433 | except Exception: # noqa: BLE001 | CODE |
| HIGH | core/plugins/registry.py | 166 | except OSError: | CODE |
| HIGH | core/plugins/registry.py | 172 | except FileNotFoundError: | CODE |
| HIGH | core/providers/catalog_service.py | 398 | except OSError: | CODE |
| HIGH | core/providers/catalog_service.py | 403 | except FileNotFoundError: | CODE |
| HIGH | core/providers/openai_compat.py | 1497 | except Exception: # pragma: no cover - logging must not raise | CODE |
| HIGH | core/providers/anthropic.py | 847 | except Exception: # pragma: no cover - logging must not raise | CODE |
| HIGH | core/providers/base.py | 804 | except (TypeError, ValueError): | CODE |
| HIGH | core/network/safe_http.py | 321 | except ValueError: | CODE |
| HIGH | core/mcp/oauth.py | 680 | except FileNotFoundError: | CODE |
| HIGH | core/observability/bus.py | 232 | except ValueError: | CODE |
| HIGH | core/observability/bus.py | 158 | except ValueError: | CODE |
| HIGH | core/harness/memory.py | 116 | except ValueError: | CODE |
| HIGH | core/harness/sandbox.py | 287 | except OSError: | CODE |
| HIGH | core/harness/tools/replace.py | 186 | except re.error: | CODE |
| HIGH | core/harness/agents/control.py | 528 | except OSError: | CODE |
| HIGH | core/harness/hooks/execution.py | 94 | except Exception: # noqa: BLE001 - best-effort reap after kill | CODE |
| HIGH | core/sessions/store.py | 181 | except OSError: | CODE |
| HIGH | core/sessions/store.py | 807 | except OSError: | CODE |
| HIGH | core/sessions/store.py | 933 | except OSError: | CODE |
| HIGH | core/sessions/index.py | 113 | except sqlite3.Error: | CODE |
| HIGH | core/sessions/index.py | 127 | except sqlite3.Error: | CODE |
| HIGH | core/sessions/index.py | 142 | except sqlite3.Error: | CODE |
| HIGH | core/sessions/index.py | 179 | except sqlite3.Error: | CODE |
| HIGH | core/sessions/deletion.py | 167 | except OSError: | CODE |
| HIGH | core/agent_runtime/runner.py | 1293 | except Exception: | CODE |
| HIGH | core/agent_runtime/processes.py | 39 | except asyncio.TimeoutError: | CODE |
| HIGH | core/agent_runtime/helpers.py | 352 | except Exception: | CODE |
| HIGH | core/agent_runtime/tools/mcp.py | 160 | except Exception: # pragma: no cover | CODE |
| HIGH | core/agent_runtime/tools/mcp.py | 596 | except Exception: | CODE |
| HIGH | …/security-ownership-map/scripts/build_ownership_map.py | 970 | except ImportError: | CODE |
| HIGH | core/application/terminal_service.py | 445 | except subprocess.TimeoutExpired: | CODE |
| HIGH | core/application/terminal_service.py | 453 | except subprocess.TimeoutExpired: | CODE |
| HIGH | core/application/terminal_service.py | 195 | except OSError: | CODE |
| HIGH | core/application/application_lease.py | 122 | except OSError: | CODE |
| HIGH | core/application/application_lease.py | 54 | except OSError: | CODE |
| HIGH | core/application/workflow_service.py | 242 | except TurnWriteConflictError: | CODE |
| HIGH | core/application/workflow_service.py | 450 | except RuntimeError: | CODE |
| HIGH | core/application/git_service.py | 370 | except OSError: | CODE |
| 34 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deepcode.py | 83 | except Exception as e: # noqa: BLE001 - top-level CLI error boundary | CODE |
| LOW | deepcode.py | 116 | except Exception: | CODE |
| LOW | tools/code_implementation_server.py | 166 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 335 | except Exception as file_error: | CODE |
| LOW | tools/code_implementation_server.py | 387 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 461 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 619 | except Exception as file_error: | CODE |
| LOW | tools/code_implementation_server.py | 668 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 765 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 869 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 998 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 1262 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 1294 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 1407 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 1473 | except Exception as e: | CODE |
| LOW | tools/code_implementation_server.py | 1511 | except Exception as e: | CODE |
| LOW | tools/pdf_utils.py | 45 | except Exception as e: | CODE |
| LOW | tools/command_executor.py | 138 | except Exception as e: | CODE |
| LOW | tools/command_executor.py | 231 | except Exception as e: | CODE |
| LOW | tools/command_executor.py | 330 | except Exception as e: | CODE |
| LOW | tools/command_executor.py | 340 | except Exception as e: | CODE |
| LOW | tools/command_executor.py | 408 | except Exception as e: | CODE |
| LOW | tools/document_conversion.py | 310 | except Exception as exc: | CODE |
| LOW⚡ | tools/pdf_downloader.py | 733 | except Exception as img_error: | CODE |
| LOW⚡ | tools/pdf_downloader.py | 740 | except Exception as e: | CODE |
| LOW | tools/pdf_downloader.py | 211 | except Exception as exc: | CODE |
| LOW | tools/pdf_downloader.py | 234 | except Exception as exc: | CODE |
| LOW | tools/pdf_downloader.py | 640 | except Exception as e: | CODE |
| LOW | tools/pdf_downloader.py | 671 | except Exception: | CODE |
| LOW | tools/pdf_downloader.py | 689 | except Exception: | CODE |
| LOW | tools/pdf_downloader.py | 879 | except Exception as e: | CODE |
| LOW | tools/pdf_downloader.py | 988 | except Exception as e: | CODE |
| LOW | tools/pdf_downloader.py | 1034 | except Exception as e: | CODE |
| LOW | tools/pdf_downloader.py | 1129 | except Exception as e: | CODE |
| LOW | tools/pdf_downloader.py | 1182 | except Exception as e: | CODE |
| LOW | tools/git_command.py | 135 | except Exception: | CODE |
| LOW | tools/git_command.py | 160 | except Exception as e: | CODE |
| LOW | tools/git_command.py | 250 | except Exception as e: | CODE |
| LOW | tools/git_command.py | 351 | except Exception as e: | CODE |
| LOW | tools/document_segmentation_server.py | 1451 | except Exception as exc: | CODE |
| LOW | tools/document_segmentation_server.py | 1541 | except Exception as e: | CODE |
| LOW | tools/document_segmentation_server.py | 1547 | except Exception as e: | CODE |
| LOW | tools/document_segmentation_server.py | 1617 | except Exception as e: | CODE |
| LOW | tools/document_segmentation_server.py | 1739 | except Exception as e: | CODE |
| LOW | tools/document_segmentation_server.py | 1798 | except Exception as e: | CODE |
| LOW | tools/code_reference_indexer.py | 85 | except Exception as e: | CODE |
| LOW | tools/code_reference_indexer.py | 404 | except Exception as e: | CODE |
| LOW | tools/code_reference_indexer.py | 474 | except Exception as e: | CODE |
| LOW | tools/pdf_converter.py | 273 | except Exception as e: | CODE |
| LOW | tools/pdf_converter.py | 314 | except Exception as e: | CODE |
| LOW | tools/pdf_converter.py | 420 | except Exception: | CODE |
| LOW | tools/pdf_converter.py | 433 | except Exception: | CODE |
| LOW | tools/pdf_converter.py | 435 | except Exception: | CODE |
| LOW | tools/pdf_converter.py | 517 | except Exception as e: | CODE |
| LOW | tools/pdf_converter.py | 534 | except Exception as e: | CODE |
| LOW | tools/pdf_converter.py | 664 | except Exception: | CODE |
| LOW | tools/pdf_converter.py | 742 | except Exception as e: | CODE |
| LOW | tools/code_indexer.py | 288 | except Exception as e: | CODE |
| LOW | tools/code_indexer.py | 362 | except Exception as e: | CODE |
| LOW | tools/code_indexer.py | 447 | except Exception as e: | CODE |
| 256 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deepcode.py | 124 | CODE | |
| LOW | tools/code_implementation_server.py | 177 | CODE | |
| LOW | tools/code_implementation_server.py | 472 | CODE | |
| LOW | tools/code_implementation_server.py | 1133 | CODE | |
| LOW | tools/code_implementation_server.py | 1183 | CODE | |
| LOW | tools/code_implementation_server.py | 1308 | CODE | |
| LOW | tools/code_implementation_server.py | 1334 | CODE | |
| LOW | tools/pdf_utils.py | 9 | CODE | |
| LOW | tools/command_executor.py | 32 | CODE | |
| LOW | tools/command_executor.py | 240 | CODE | |
| LOW | tools/document_conversion.py | 315 | CODE | |
| LOW | tools/document_conversion.py | 406 | CODE | |
| LOW | tools/document_conversion.py | 201 | CODE | |
| LOW | tools/document_conversion.py | 240 | CODE | |
| LOW | tools/pdf_downloader.py | 170 | CODE | |
| LOW | tools/pdf_downloader.py | 1043 | CODE | |
| LOW | tools/pdf_downloader.py | 419 | CODE | |
| LOW | tools/pdf_downloader.py | 459 | CODE | |
| LOW | tools/pdf_downloader.py | 564 | CODE | |
| LOW | tools/pdf_downloader.py | 692 | CODE | |
| LOW | tools/git_command.py | 165 | CODE | |
| LOW | tools/git_command.py | 27 | CODE | |
| LOW | tools/document_segmentation_server.py | 1467 | CODE | |
| LOW | tools/document_segmentation_server.py | 1627 | CODE | |
| LOW | tools/document_segmentation_server.py | 158 | CODE | |
| LOW | tools/document_segmentation_server.py | 226 | CODE | |
| LOW | tools/document_segmentation_server.py | 309 | CODE | |
| LOW | tools/document_segmentation_server.py | 327 | CODE | |
| LOW | tools/document_segmentation_server.py | 585 | CODE | |
| LOW | tools/document_segmentation_server.py | 1063 | CODE | |
| LOW | tools/document_segmentation_server.py | 1156 | CODE | |
| LOW | tools/document_segmentation_server.py | 1173 | CODE | |
| LOW | tools/document_segmentation_server.py | 1328 | CODE | |
| LOW | tools/code_reference_indexer.py | 202 | CODE | |
| LOW | tools/pdf_converter.py | 86 | CODE | |
| LOW | tools/pdf_converter.py | 319 | CODE | |
| LOW | tools/pdf_converter.py | 616 | CODE | |
| LOW | tools/code_indexer.py | 450 | CODE | |
| LOW | tools/code_indexer.py | 473 | CODE | |
| LOW | tools/code_indexer.py | 658 | CODE | |
| LOW | tools/code_indexer.py | 770 | CODE | |
| LOW | tools/code_indexer.py | 975 | CODE | |
| LOW | tools/code_indexer.py | 1096 | CODE | |
| LOW | tools/code_indexer.py | 477 | CODE | |
| LOW | core/platform_compat.py | 26 | CODE | |
| LOW | core/compat/agent.py | 36 | CODE | |
| LOW | core/compat/agent.py | 104 | CODE | |
| LOW | core/compat/agent.py | 390 | CODE | |
| LOW | core/plugins/host.py | 219 | CODE | |
| LOW | core/providers/openai_compat.py | 371 | CODE | |
| LOW | core/providers/openai_compat.py | 691 | CODE | |
| LOW | core/providers/openai_compat.py | 842 | CODE | |
| LOW | core/providers/openai_compat.py | 988 | CODE | |
| LOW | core/providers/openai_compat.py | 1116 | CODE | |
| LOW | core/providers/openai_compat.py | 1222 | CODE | |
| LOW | core/providers/openai_compat.py | 1296 | CODE | |
| LOW | core/providers/anthropic.py | 126 | CODE | |
| LOW | core/providers/anthropic.py | 210 | CODE | |
| LOW | core/providers/anthropic.py | 576 | CODE | |
| LOW | core/providers/protocol_config.py | 58 | CODE | |
| 162 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/code_implementation_server.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/document_segmentation_server.py | 79 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/code_reference_indexer.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | core/config.py | 1200 | __all__ = [ | CODE |
| LOW | core/version.py | 5 | __all__ = ["__version__"] | CODE |
| LOW | core/platform_file_lock.py | 130 | __all__ = ["acquire_file_lock", "release_file_lock"] | CODE |
| LOW | core/file_lock.py | 97 | __all__ = ["FileLease", "exclusive_file_lock"] | CODE |
| LOW | core/reasoning.py | 131 | __all__ = [ | CODE |
| LOW | core/private_storage.py | 342 | __all__ = [ | CODE |
| LOW | core/schedule/__init__.py | 18 | __all__ = ["Continuation", "ContinuationDecision", "run_scheduled"] | CODE |
| LOW | core/compat/__init__.py | 43 | __all__ = [ | CODE |
| LOW | core/compat/runtime.py | 264 | def set_runtime(runtime: DeepCodeRuntime | None) -> None: | CODE |
| LOW | core/agent_presets/__init__.py | 365 | __all__ = [ | CODE |
| LOW | core/plugins/domain.py | 190 | __all__ = [ | CODE |
| LOW | core/plugins/registry.py | 83 | def set_enabled(self, selector: str, enabled: bool) -> None: | CODE |
| LOW | core/plugins/registry.py | 302 | __all__ = [ | CODE |
| LOW | core/plugins/host.py | 39 | logger = logging.getLogger(__name__) | CODE |
| LOW | core/plugins/host.py | 335 | __all__ = [ | CODE |
| LOW | core/plugins/__init__.py | 18 | __all__ = [ | CODE |
| LOW | core/plugins/mcp.py | 395 | __all__ = [ | CODE |
| LOW | core/plugins/resolver.py | 85 | __all__ = ["MAX_PLUGIN_MANIFEST_BYTES", "resolve_plugin"] | CODE |
| LOW | core/plugins/skill_provider.py | 277 | __all__ = ["PluginSkillProvider"] | CODE |
| LOW | core/plugins/formats/agent_plugins_v1.py | 272 | __all__ = [ | CODE |
| LOW | core/plugins/formats/__init__.py | 8 | __all__ = ["AGENT_PLUGIN_SCHEMA", "AgentPluginsV1Adapter"] | CODE |
| LOW | core/providers/egress.py | 339 | __all__ = [ | CODE |
| LOW | core/providers/credentials.py | 232 | __all__ = [ | CODE |
| LOW | core/providers/catalog_service.py | 552 | __all__ = ["CatalogModel", "ModelCatalog", "ModelCatalogService"] | CODE |
| LOW | core/providers/__init__.py | 25 | __all__ = [ | CODE |
| LOW | core/providers/timeouts.py | 157 | __all__ = [ | CODE |
| LOW | core/providers/openai_compat.py | 296 | def _set_runtime_credential(self, key: str | None) -> None: | CODE |
| LOW | core/providers/anthropic.py | 120 | def _set_runtime_credential(self, key: str | None) -> None: | CODE |
| LOW | core/providers/reasoning.py | 214 | __all__ = [ | CODE |
| LOW | core/providers/profiles.py | 636 | __all__ = [ | CODE |
| LOW | core/providers/base.py | 249 | def _set_runtime_credential(self, key: str | None) -> None: | CODE |
| LOW | core/providers/openai_responses/__init__.py | 18 | __all__ = [ | CODE |
| LOW | core/network/__init__.py | 17 | __all__ = [ | CODE |
| LOW | core/network/hostnames.py | 60 | __all__ = ["is_domain_allowed", "normalize_domain"] | CODE |
| LOW | core/network/safe_http.py | 481 | __all__ = [ | CODE |
| LOW | core/mcp/models.py | 561 | __all__ = [ | CODE |
| LOW | core/mcp/presets.py | 88 | __all__ = ["McpPreset", "McpPresetBundle", "McpPresetCatalog"] | CODE |
| LOW | core/mcp/naming.py | 43 | __all__ = ["MAX_TOOL_NAME_LENGTH", "visible_tool_name"] | CODE |
| LOW | core/mcp/tools.py | 169 | __all__ = ["McpToolAdapter"] | CODE |
| LOW | core/mcp/__init__.py | 34 | __all__ = [ | CODE |
| LOW | core/mcp/runtime.py | 455 | __all__ = ["McpServerRuntimeStatus", "McpSessionRuntime"] | CODE |
| LOW | core/mcp/connection.py | 411 | def _set_header(headers: dict[str, str], name: str, value: str) -> None: | CODE |
| LOW | core/mcp/connection.py | 509 | __all__ = [ | CODE |
| LOW | core/mcp/probe.py | 80 | __all__ = ["McpProbeResult", "probe_mcp_server"] | CODE |
| LOW | core/mcp/resolver.py | 290 | __all__ = ["McpConfigResolver", "resolve_plugin_servers"] | CODE |
| LOW | core/mcp/oauth.py | 97 | async def set_tokens(self, tokens: OAuthToken) -> None: | CODE |
| LOW | core/mcp/oauth.py | 110 | async def set_client_info(self, client_info: OAuthClientInformationFull) -> None: | CODE |
| LOW | core/mcp/oauth.py | 200 | def _set_field(self, name: str, value: Any) -> None: | CODE |
| LOW | core/mcp/oauth.py | 684 | __all__ = [ | CODE |
| LOW | core/mcp/schema.py | 57 | __all__ = ["normalize_schema_for_openai"] | CODE |
| LOW | core/observability/records.py | 308 | __all__ = [ | CODE |
| LOW | core/observability/__init__.py | 49 | __all__ = [ | CODE |
| LOW⚡ | core/observability/bus.py | 241 | def set_task_dir(task_id: str, task_dir: Path | str) -> None: | CODE |
| LOW | core/observability/bus.py | 639 | __all__ = [ | CODE |
| LOW | core/observability/context.py | 78 | __all__ = [ | CODE |
| LOW | core/observability/llmops.py | 35 | __all__ = ["LLMCallSummary", "load_llm_records", "main", "summarize_llm_calls"] | CODE |
| LOW | core/harness/env_sanitize.py | 40 | __all__ = [ | CODE |
| 115 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | core/providers/oauth.py | 249 | text=f'<!doctype html><meta charset="utf-8"><title>DeepCode</title><p>Authorization processed. Return to | CODE |
| HIGH | core/harness/command_guard.py | 137 | hidden in a pipeline or sequence is still caught, e.g. ``echo hi && rm -rf /`` | STRING |
| HIGH⚡ | core/persistence/migrations.py | 1247 | '{"accessPreset":null,"permissionMode":"plan","commandSandbox":true,"filesystemScope":"workspace","approvalPolic | CODE |
| HIGH⚡ | core/persistence/migrations.py | 1249 | '{"accessPreset":null,"permissionMode":"full_auto","commandSandbox":true,"filesystemScope":"workspace","approval | CODE |
| HIGH⚡ | core/persistence/migrations.py | 1251 | '{"accessPreset":null,"permissionMode":"default","commandSandbox":true,"filesystemScope":"workspace","approvalPo | CODE |
| HIGH | …e/skills/builtin/webapp-testing/scripts/with_server.py | 12 | --server "cd backend && python server.py" --port 3000 \ | STRING |
| HIGH | …e/skills/builtin/webapp-testing/scripts/with_server.py | 13 | --server "cd frontend && npm run dev" --port 5173 \ | STRING |
| HIGH | app_server/windows_task.py | 284 | $null=$folder.RegisterTaskDefinition($env:DEEPCODE_TASK_LABEL,$definition,6,$sid,$null,3) | CODE |
| HIGH | app_server/windows_task.py | 323 | + "$task=$scheduler.GetFolder('\\DeepCode').GetTask($env:DEEPCODE_TASK_LABEL); $task.Enabled=$true; $null=$t | STRING |
| HIGH | tests/test_command_guard.py | 45 | "echo hi && rm -rf /", # destructive stage inside a sequence | CODE |
| HIGH⚡ | tests/test_command_guard.py | 68 | "ls && echo done", # benign sequence | CODE |
| HIGH⚡ | tests/test_command_guard.py | 69 | "make && make install", # benign sequence | CODE |
| HIGH | tests/test_exec_sandbox_wiring.py | 123 | f"cat ~/.aws/credentials > {stolen} 2>/dev/null || echo done", timeout=30 | CODE |
| HIGH | tests/test_command_guard_egress.py | 157 | "make && make install", | CODE |
| HIGH | tests/test_verification.py | 12 | '{"scripts":{"test":"echo Error: no test specified && exit 1"}}', | CODE |
| HIGH | tests/contract/test_protocol_schema.py | 171 | assert "executionPermissionMode?: ExecutionPermissionMode | null;" in generated | CODE |
| HIGH⚡ | tests/contract/test_protocol_schema.py | 256 | assert "accessPresetOverride: ExecutionAccessPreset | null;" in generated | CODE |
| HIGH⚡ | tests/contract/test_protocol_schema.py | 257 | assert "executionSecurityProfile?: ExecutionSecurityProfile | null;" in generated | CODE |
| HIGH | tests/contract/test_protocol_schema.py | 380 | assert "goalId: string | null;" in generated | CODE |
| HIGH | tests/contract/test_protocol_schema.py | 384 | assert "nextOffset: number | null;" in generated | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/code_implementation_server.py | 429 | # Write file | COMMENT |
| LOW | tools/code_implementation_server.py | 578 | # Write file | COMMENT |
| LOW | tools/code_implementation_server.py | 1043 | # Check if paths match using multiple strategies | COMMENT |
| LOW | tools/code_implementation_server.py | 1154 | # Check if this matches our target | COMMENT |
| LOW | tools/document_segmentation_server.py | 338 | # Check if line is a header | COMMENT |
| LOW | tools/document_segmentation_server.py | 900 | # Check if can merge with the next block | COMMENT |
| LOW | tools/document_segmentation_server.py | 1497 | # Check if analysis already exists and is recent | COMMENT |
| LOW | tools/document_segmentation_server.py | 1859 | # Check if in important position (first 25% of content) | COMMENT |
| LOW | tools/pdf_converter.py | 125 | # Check if LibreOffice is available | COMMENT |
| LOW | tools/code_indexer.py | 617 | # Check if it's in the selected list | COMMENT |
| LOW | tools/code_indexer.py | 1467 | # Display results | STRING |
| LOW | core/skills/builtin/skill-creator/scripts/init_skill.py | 278 | # Check if directory already exists | COMMENT |
| LOW⚡ | workflows/agent_orchestration_engine.py | 1120 | # Check if file is actually a PDF by reading the first few bytes | COMMENT |
| LOW | workflows/agent_orchestration_engine.py | 1058 | # Check if reference analysis already exists | COMMENT |
| LOW | workflows/agent_orchestration_engine.py | 1327 | # Check if plan is empty or invalid | COMMENT |
| LOW | workflows/agent_orchestration_engine.py | 1394 | # Verify if any repositories were actually downloaded | COMMENT |
| LOW | workflows/agent_orchestration_engine.py | 1460 | # Check if code_base directory exists and has content | COMMENT |
| LOW | workflows/agent_orchestration_engine.py | 1469 | # Check if there are any repositories in the code_base directory | COMMENT |
| LOW | workflows/agent_orchestration_engine.py | 1605 | # Check if initial plan file exists | COMMENT |
| LOW⚡ | workflows/interactions/plan_review.py | 59 | # Check if disabled | COMMENT |
| LOW⚡ | workflows/interactions/plan_review.py | 63 | # Check if already reviewed | COMMENT |
| LOW⚡ | workflows/interactions/plan_review.py | 67 | # Check if we have a plan to review | COMMENT |
| LOW⚡ | workflows/interactions/requirement_analysis.py | 69 | # Check if disabled in context | COMMENT |
| LOW⚡ | workflows/interactions/requirement_analysis.py | 73 | # Check if already processed | COMMENT |
| LOW⚡ | workflows/interactions/requirement_analysis.py | 77 | # Check if we have user input to analyze | COMMENT |
| LOW⚡ | workflows/agents/code_implementation_agent.py | 459 | # Check if result is a CallToolResult object | COMMENT |
| LOW | workflows/agents/code_implementation_agent.py | 173 | # Check if read tools are disabled | COMMENT |
| LOW | workflows/agents/code_implementation_agent.py | 296 | # Check if a summary exists for this file using read_code_mem MCP tool | COMMENT |
| LOW | workflows/agents/code_implementation_agent.py | 311 | # Check if any summaries were found in the results | COMMENT |
| LOW | workflows/agents/code_implementation_agent.py | 632 | # Check if we should trigger summary / 检查是否应触发总结 | COMMENT |
| LOW | workflows/agents/code_implementation_agent.py | 869 | # Check if recent calls are all read_file or search_reference_code / 检查最近的调用是否都是read_file或search_reference_code | COMMENT |
| LOW | workflows/agents/memory_agent_concise.py | 320 | # Check if file has a code extension | COMMENT |
| LOW | workflows/agents/memory_agent_concise.py | 546 | # Check if it's a known file extension | COMMENT |
| LOW | workflows/agents/memory_agent_concise.py | 703 | # Check if it looks like a file (has extension) | COMMENT |
| LOW | workflows/agents/memory_agent_concise.py | 987 | # Check if we've already seen this file (exact match) | COMMENT |
| LOW | workflows/agents/memory_agent_concise.py | 1386 | # Check if file exists to determine if we need header | STRING |
| LOW | workflows/agents/memory_agent_concise.py | 1588 | "read_file", # Read file contents | STRING |
| LOW | workflows/agents/memory_agent_concise.py | 1589 | "write_file", # Write file contents (important for tracking implementations) | STRING |
| LOW | workflows/agents/document_segmentation_agent.py | 124 | # Check if markdown file exists | COMMENT |
| LOW | utils/file_processor.py | 30 | # Check if it's a file path (existing or not) | COMMENT |
| LOW | utils/file_processor.py | 114 | # Check if line is a header | COMMENT |
| LOW | utils/file_processor.py | 190 | # Check if file is actually a PDF by reading the first few bytes | COMMENT |
| LOW | utils/file_processor.py | 213 | # Read file content | COMMENT |
| LOW | utils/file_processor.py | 375 | # Check if it's a file path (existing or not) | COMMENT |
| LOW | utils/file_processor.py | 416 | # Read file content | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/code_reference_indexer.py | 356 | # Step 1: Load index files from specified directory | COMMENT |
| LOW⚡ | tools/code_reference_indexer.py | 369 | # Step 2: Parse keywords | COMMENT |
| LOW⚡ | tools/code_reference_indexer.py | 374 | # Step 3: Find relevant reference code | COMMENT |
| LOW⚡ | tools/code_reference_indexer.py | 379 | # Step 4: Find direct relationships | COMMENT |
| LOW⚡ | tools/code_reference_indexer.py | 382 | # Step 5: Format output | COMMENT |
| LOW⚡ | tools/code_indexer.py | 876 | # Step 1: Generate file tree | COMMENT |
| LOW⚡ | tools/code_indexer.py | 880 | # Step 2: Get all files | COMMENT |
| LOW⚡ | tools/code_indexer.py | 884 | # Step 3: LLM pre-filtering of relevant files | COMMENT |
| LOW⚡ | tools/code_indexer.py | 892 | # Step 4: Filter file list based on filtering results | COMMENT |
| LOW | tools/code_indexer.py | 904 | # Step 5: Analyze filtered files (concurrent or sequential) | COMMENT |
| LOW | tools/code_indexer.py | 918 | # Step 6: Create repository index | COMMENT |
| LOW | core/skills/builtin/skill-creator/SKILL.md | 236 | ### Step 1: Understanding the Skill with Concrete Examples | COMMENT |
| LOW | core/skills/builtin/skill-creator/SKILL.md | 253 | ### Step 2: Planning the Reusable Skill Contents | COMMENT |
| LOW | core/skills/builtin/skill-creator/SKILL.md | 277 | ### Step 3: Initializing the Skill | COMMENT |
| LOW | core/skills/builtin/skill-creator/SKILL.md | 317 | ### Step 4: Edit the Skill | COMMENT |
| LOW | core/skills/builtin/skill-creator/SKILL.md | 349 | ### Step 5: Validate the Skill | COMMENT |
| LOW | core/skills/builtin/skill-creator/SKILL.md | 359 | ### Step 6: Iterate | COMMENT |
| LOW⚡ | core/skills/builtin/mcp-builder/reference/evaluation.md | 176 | ### Step 1: Documentation Inspection | COMMENT |
| LOW⚡ | core/skills/builtin/mcp-builder/reference/evaluation.md | 184 | ### Step 2: Tool Inspection | COMMENT |
| LOW⚡ | core/skills/builtin/mcp-builder/reference/evaluation.md | 191 | ### Step 3: Developing Understanding | COMMENT |
| LOW⚡ | core/skills/builtin/mcp-builder/reference/evaluation.md | 200 | ### Step 4: Read-Only Content Inspection | COMMENT |
| LOW | core/skills/builtin/mcp-builder/reference/evaluation.md | 214 | ### Step 5: Task Generation | COMMENT |
| LOW⚡ | workflows/codebase_index_workflow.py | 424 | # Step 1: Determine initial plan file path | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 428 | # Step 2: Load target structure | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 443 | # Step 3: Check codebase path | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 453 | # Step 4: Create output directory | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 457 | # Step 5: Load configuration | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 463 | # Step 6: Create code indexer | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 580 | # Step 7: Build all indexes | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 583 | # Step 8: Generate summary report | STRING |
| LOW⚡ | workflows/agent_orchestration_engine.py | 1096 | # Step 1: Check if any markdown files exist | COMMENT |
| LOW⚡ | workflows/agent_orchestration_engine.py | 1117 | # Step 2: Read document content to determine size | COMMENT |
| LOW | workflows/agent_orchestration_engine.py | 1164 | # Step 3: Determine if segmentation should be used | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/code_reference_indexer.py | 356 | # Step 1: Load index files from specified directory | COMMENT |
| LOW⚡ | tools/code_reference_indexer.py | 369 | # Step 2: Parse keywords | COMMENT |
| LOW⚡ | tools/code_reference_indexer.py | 374 | # Step 3: Find relevant reference code | COMMENT |
| LOW⚡ | tools/code_reference_indexer.py | 379 | # Step 4: Find direct relationships | COMMENT |
| LOW⚡ | tools/code_reference_indexer.py | 382 | # Step 5: Format output | COMMENT |
| LOW⚡ | tools/code_indexer.py | 876 | # Step 1: Generate file tree | COMMENT |
| LOW⚡ | tools/code_indexer.py | 880 | # Step 2: Get all files | COMMENT |
| LOW⚡ | tools/code_indexer.py | 884 | # Step 3: LLM pre-filtering of relevant files | COMMENT |
| LOW⚡ | tools/code_indexer.py | 892 | # Step 4: Filter file list based on filtering results | COMMENT |
| LOW | tools/code_indexer.py | 904 | # Step 5: Analyze filtered files (concurrent or sequential) | COMMENT |
| LOW | tools/code_indexer.py | 918 | # Step 6: Create repository index | COMMENT |
| LOW⚡ | workflows/codebase_index_workflow.py | 424 | # Step 1: Determine initial plan file path | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 428 | # Step 2: Load target structure | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 443 | # Step 3: Check codebase path | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 453 | # Step 4: Create output directory | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 457 | # Step 5: Load configuration | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 463 | # Step 6: Create code indexer | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 580 | # Step 7: Build all indexes | STRING |
| LOW⚡ | workflows/codebase_index_workflow.py | 583 | # Step 8: Generate summary report | STRING |
| LOW⚡ | workflows/agent_orchestration_engine.py | 1096 | # Step 1: Check if any markdown files exist | COMMENT |
| LOW⚡ | workflows/agent_orchestration_engine.py | 1117 | # Step 2: Read document content to determine size | COMMENT |
| LOW | workflows/agent_orchestration_engine.py | 1164 | # Step 3: Determine if segmentation should be used | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/code_implementation_server.py | 789 | # workspace sandbox below is (see core.harness.sandbox). | COMMENT |
| MEDIUM | core/harness/sandbox.py | 322 | # ``python -m core.harness.windows_sandbox -- <inner argv...>`` creates | COMMENT |
| MEDIUM | core/harness/agents/external_backend.py | 41 | # harness's own provider keys must not leak into a spawned CLI implicitly. | COMMENT |
| MEDIUM | core/harness/agents/external_backend.py | 46 | # The implementation moved to :mod:`core.harness.env_sanitize` so the shell, | COMMENT |
| MEDIUM | core/dictation/local_runner.py | 23 | # the harness environment (provider keys in particular) is forwarded. | COMMENT |
| MEDIUM | core/application/execution_security_policy.py | 138 | # Direct legacy harness callers keep their established client defaults. | COMMENT |
| MEDIUM | core/loop/autodream.py | 44 | # model pass (see core.harness.memory.consolidate_pointer_index). | COMMENT |
| MEDIUM⚡ | workflows/agent_orchestration_engine.py | 1726 | # Set higher token output for comprehensive planning | COMMENT |
| MEDIUM | workflows/agent_orchestration_engine.py | 1737 | formatted_message = f"""Please analyze the following coding requirements and generate a comprehensive implem | CODE |
| MEDIUM | prompts/code_prompts.py | 463 | CODE_PLANNING_PROMPT = """You are creating a DETAILED, COMPLETE reproduction plan by integrating comprehensive analysis | CODE |
| MEDIUM | prompts/code_prompts.py | 1556 | CODE_PLANNING_PROMPT_TRADITIONAL = """You are creating a DETAILED, COMPLETE reproduction plan by integrating comprehensi | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/pdf_downloader.py | 1044 | Download files from URLs or move local files mentioned in natural language instructions. Args: instruc | STRING |
| HIGH | tools/git_command.py | 166 | Download GitHub repositories from natural language instructions. Args: instruction: Natural language t | STRING |
| HIGH | core/skills/builtin/skill-creator/scripts/init_skill.py | 263 | Initialize a new skill directory with template SKILL.md. Args: skill_name: Name of the skill p | STRING |
| HIGH | …lls/builtin/mcp-builder/reference/python_mcp_server.md | 282 | Search for users in the Example system by name, email, or team. This tool searches across all user profiles in | STRING |
| HIGH | utils/file_processor.py | 172 | Read the content of a file asynchronously. Args: file_path: Path to the file to read | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/code_implementation_server.py | 781 | timeout: Timeout in seconds | COMMENT |
| LOW | core/harness/memory.py | 261 | # Claude Code's memory layout keeps ``MEMORY.md`` permanently in | COMMENT |
| LOW | core/harness/memory.py | 481 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | core/harness/memory.py | 601 | COMMENT | |
| LOW | core/harness/command_guard.py | 161 | COMMENT | |
| LOW | core/harness/command_guard.py | 181 | # through an innocuous command, walks straight through. This is a filter, not | COMMENT |
| LOW | core/harness/agents/external_backend.py | 41 | # harness's own provider keys must not leak into a spawned CLI implicitly. | COMMENT |
| LOW | core/team/worktree.py | 21 | "-c", | COMMENT |
| LOW | core/agent_runtime/runner.py | 81 | "I reached the maximum number of tool call iterations ({max_iterations}) " | COMMENT |
| LOW | core/agent_runtime/runner.py | 161 | # reminder instead of a hard stop. ``None`` disables the guard. | COMMENT |
| LOW | core/agent_runtime/runner.py | 201 | # one of "allow"/"ask"/"deny" (str or enum with a ``.value``). Called | COMMENT |
| LOW | core/agent_runtime/runner.py | 221 | # no verdict falls through to ``approval_callback``. | COMMENT |
| LOW | core/agent_runtime/runner.py | 1301 | # Tool never ran (bad args) — surface pre-hook context, no PostToolUse. | COMMENT |
| LOW | core/application/thread_service.py | 221 | # Resolve once and persist BY VALUE: editing the preset file later | COMMENT |
| LOW | core/events/session.py | 421 | # no hooks are configured, so the whole feature is dormant at zero cost. | COMMENT |
| LOW | core/events/session.py | 441 | else None | COMMENT |
| LOW | workflows/agents/memory_agent_concise.py | 1301 | llm_summary: LLM-generated summary content | COMMENT |
| LOW | workflows/agents/memory_agent_concise.py | 1721 | knowledge_base_message["content"] += ( | COMMENT |
| LOW | workflows/agents/memory_agent_concise.py | 1741 | # # If no tool results yet, add guidance for next steps | COMMENT |
| LOW | cli/tui/theme.py | 21 | COMMENT | |
| LOW | cli/tui/theme.py | 101 | # -- pickers (prompt_toolkit dialect; it has no dim attribute, so the | COMMENT |
| LOW | cli/tui/renderer.py | 201 | # line reads the newest, each elbow pops its own. | COMMENT |
| LOW | prompts/code_prompts.py | 861 | # - **CONTINUOUS**: Implement files continuously until plan completion | COMMENT |
| LOW | prompts/code_prompts.py | 881 | # ``` | COMMENT |
| LOW | prompts/code_prompts.py | 901 | # - Apply: Found patterns while maintaining project requirements | COMMENT |
| LOW | prompts/code_prompts.py | 921 | # Next Target: [next_file_to_implement] | COMMENT |
| LOW | prompts/code_prompts.py | 1061 | COMMENT | |
| LOW | prompts/code_prompts.py | 1081 | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/agent_setup.py | 239 | CODE | |
| LOW | core/compat/request_params.py | 86 | CODE | |
| LOW | core/providers/openai_compat.py | 234 | CODE | |
| LOW | core/providers/openai_compat.py | 1296 | CODE | |
| LOW | core/providers/anthropic.py | 708 | CODE | |
| LOW | core/providers/base.py | 604 | CODE | |
| LOW | core/providers/base.py | 679 | CODE | |
| LOW | core/providers/base.py | 719 | CODE | |
| LOW | core/observability/records.py | 159 | CODE | |
| LOW | core/observability/bus.py | 271 | CODE | |
| LOW | core/harness/agents/control.py | 135 | CODE | |
| LOW | core/skills/runtime.py | 93 | CODE | |
| LOW | core/application/agent_adapter.py | 51 | CODE | |
| LOW | core/application/agent_adapter.py | 106 | CODE | |
| LOW | core/application/mcp_service.py | 294 | CODE | |
| LOW | core/application/application.py | 70 | CODE | |
| LOW | core/application/application.py | 263 | CODE | |
| LOW | core/application/turn_service.py | 324 | CODE | |
| LOW | core/application/turn_service.py | 370 | CODE | |
| LOW | core/application/turn_service.py | 474 | CODE | |
| LOW | core/application/goal_turn_port.py | 32 | CODE | |
| LOW | core/application/thread_service.py | 162 | CODE | |
| LOW | core/application/execution_coordinator.py | 96 | CODE | |
| LOW | core/events/session.py | 380 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/code_indexer.py | 430 | # Create a hash of the prompt for filename | COMMENT |
| MEDIUM | workflows/agent_orchestration_engine.py | 1698 | # Create the chat planning agent | COMMENT |
| MEDIUM | workflows/agent_orchestration_engine.py | 2007 | # Create a skipped indexing result | COMMENT |
| MEDIUM | workflows/agents/code_implementation_agent.py | 991 | # Create a simulated read_file tool call | COMMENT |
| MEDIUM | workflows/agents/memory_agent_concise.py | 1104 | # Create the formatted summary for file saving (without Next Steps) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/providers/catalog.py | 202 | # context window for this release. Pricing is deliberately absent because | COMMENT |
| MEDIUM | core/providers/base.py | 116 | # private chain of thought. | COMMENT |
| MEDIUM | core/harness/tools/goal.py | 78 | # The call records a constrained orchestration request; it cannot | COMMENT |
| MEDIUM | workflows/__init__.py | 25 | "execute_multi_agent_research_pipeline", # Main multi-agent pipeline function | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ltin/webapp-testing/examples/static_html_automation.py | 21 | page.fill("#name", "John Doe") | CODE |
| LOW | …lls/builtin/mcp-builder/reference/python_mcp_server.md | 306 | "name": str, # Full name (e.g., "John Doe") | STRING |
| LOW | …lls/builtin/mcp-builder/reference/python_mcp_server.md | 572 | return {"id": user_id, "name": "John Doe", "email": "john@example.com"} | CODE |
| LOW | …kills/builtin/mcp-builder/reference/node_mcp_server.md | 173 | "name": string, // Full name (e.g., "John Doe") | CODE |
| LOW | tests/test_session_compaction.py | 69 | big = "lorem ipsum dolor sit amet " * 250 # ~6.7K chars ≈ 1.7K tokens each | CODE |
| LOW | tests/test_session_compaction.py | 69 | big = "lorem ipsum dolor sit amet " * 250 # ~6.7K chars ≈ 1.7K tokens each | CODE |
| LOW | tests/test_session_compaction.py | 183 | big = "lorem ipsum dolor sit amet " * 250 | CODE |
| LOW | tests/test_session_compaction.py | 183 | big = "lorem ipsum dolor sit amet " * 250 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | core/skills/builtin/mcp-builder/reference/evaluation.md | 557 | export ANTHROPIC_API_KEY=your_api_key | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | utils/file_processor.py | 136 | # Don't forget to save the last section | COMMENT |