Repository Analysis

NVIDIA/OpenShell

OpenShell is the safe, private runtime for autonomous AI agents.

4.5 Likely human-written View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of NVIDIA/OpenShell, a Rust project with 8,406 GitHub stars. SynthScan v2.0 examined 576,684 lines of code across 1329 source files, recording 1611 pattern matches distributed across 17 syntactic categories. The overall adjusted score of 4.5 places this repository in the Likely human-written band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

4.5
Adjusted Score
4.5
Raw Score
100%
Time Factor
2026-08-29
Last Push
8.4K
Stars
Rust
Language
576.7K
Lines of Code
1.3K
Files
1.6K
Pattern Hits
2026-08-29
Scan Date
0.00
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 3MEDIUM 393LOW 1215

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 1611 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Decorative Section Separators379 hits · 1275 pts
SeverityFileLineSnippetContext
MEDIUMtasks/vm.toml15# ═══════════════════════════════════════════════════════════════════════════COMMENT
MEDIUMtasks/vm.toml17# ═══════════════════════════════════════════════════════════════════════════COMMENT
MEDIUMtasks/scripts/keycloak-k8s-setup.sh51# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/keycloak-k8s-setup.sh53# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/keycloak-k8s-setup.sh63# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/keycloak-k8s-setup.sh65# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/keycloak-k8s-setup.sh139# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/keycloak-k8s-setup.sh141# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/keycloak-k8s-setup.sh146# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/keycloak-k8s-setup.sh148# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/sandbox.sh18# -------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/sandbox.sh20# -------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/sandbox.sh28# -------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/sandbox.sh30# -------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/sandbox.sh37# -------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/sandbox.sh39# -------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/sandbox.sh59# -------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/sandbox.sh61# -------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/docker-publish-multiarch.sh28# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/docker-publish-multiarch.sh30# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/docker-publish-multiarch.sh73# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/docker-publish-multiarch.sh75# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/docker-publish-multiarch.sh136# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/docker-publish-multiarch.sh138# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh320# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh325# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh334# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh336# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh341# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh349# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh445# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh450# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh459# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh466# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh36# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh38# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh231# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh233# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh248# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh260# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh387# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh394# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh406# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh411# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh427# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh433# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh511# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/container-engine.sh516# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/package-deb.sh66# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/package-deb.sh68# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/package-deb.sh106# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/package-deb.sh108# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/package-deb.sh119# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/package-deb.sh121# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/package-deb.sh137# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/package-deb.sh139# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/package-deb.sh162# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/package-deb.sh164# ---------------------------------------------------------------------------COMMENT
MEDIUMtasks/scripts/vm/download-kernel-runtime.sh33# ── Auto-detect platform (detect_platform from _lib.sh) ─────────────────COMMENT
MEDIUMtasks/scripts/vm/download-kernel-runtime.sh72# ── Check for gh CLI ────────────────────────────────────────────────────COMMENT
319 more matches not shown…
Over-Commented Block635 hits · 621 pts
SeverityFileLineSnippetContext
LOWbuf.yaml1# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOW.packit.yaml21 # precomputed identity. Local Packit runs fall back to the latest SemVerCOMMENT
LOWtasks/typescript.toml61depends = [COMMENT
LOWtasks/vm.toml1# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtasks/scripts/verify-static-binary.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/verify-static-binary.sh21# dependencies". The checks below therefore require, for each binary:COMMENT
LOWtasks/scripts/verify-telemetry-compiled-out.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/keycloak-k8s-setup.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/sandbox.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/container-engine.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/container-engine.sh21#COMMENT
LOWtasks/scripts/container-engine.sh241 [[ "${CONTAINER_ENGINE}" == "podman" ]]COMMENT
LOWtasks/scripts/container-engine.sh461#COMMENT
LOWtasks/scripts/package-deb.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/package-deb-install.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/gateway.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/gateway-docker.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/gateway-podman.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/gateway-vm.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/gateway-vm.sh21# OPENSHELL_SERVER_PORT=18091 mise run gateway:vmCOMMENT
LOWtasks/scripts/helm-k3s-local.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/build-env.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/vm/download-kernel-runtime.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/vm/compress-vm-runtime.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/vm/build-libkrun-macos.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/vm/_lib.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/vm/package-vm-runtime.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/vm/vm-setup.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/vm/smoke-orphan-cleanup.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/vm/build-libkrun.sh1#!/usr/bin/env bashCOMMENT
LOWtasks/scripts/vm/build-libkrun.sh161# base config and runs olddefconfig, then builds the kernel image in oneCOMMENT
LOW…s/openshell-driver-mxc/tests/policy_mapper_examples.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-driver-mxc/tests/wxc_exec_real.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-driver-mxc/tests/wxc_exec_real.rs21//!COMMENT
LOW…tes/openshell-driver-mxc/tests/policy_mapper_matrix.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOW…tes/openshell-driver-mxc/tests/policy_mapper_matrix.rs1041COMMENT
LOW…tes/openshell-driver-mxc/tests/policy_mapper_matrix.rs1061 "network_policies",COMMENT
LOWcrates/openshell-driver-mxc/examples/demo.yaml1# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-driver-mxc/examples/demo.yaml21COMMENT
LOWcrates/openshell-driver-mxc/examples/mxc-gateway.toml1# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOW…enshell-driver-mxc/examples/e2e-policies/fs-empty.yaml1# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOW…l-driver-mxc/examples/e2e-policies/network-reject.yaml1# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-driver-mxc/src/policy.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-driver-mxc/src/policy.rs21COMMENT
LOWcrates/openshell-driver-mxc/src/lib.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-driver-mxc/src/lib.rs21mod grpc;COMMENT
LOWcrates/openshell-driver-mxc/src/mxc.rs41}COMMENT
LOWcrates/openshell-driver-mxc/src/driver.rs41/// write to any ungranted path is denied by the OS. No persistent session.COMMENT
LOWcrates/openshell-driver-mxc/src/policy_map/mod.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-driver-mxc/src/policy_map/mod.rs21//! - [`split_policy`] — the *lossless* split for the Windows MXC computeCOMMENT
LOWcrates/openshell-driver-mxc/src/policy_map/map.rs61 }COMMENT
LOWcrates/openshell-ocsf/src/lib.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-ocsf/src/builders/mod.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-ocsf/src/enums/activity.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-ocsf/src/enums/activity.rs21COMMENT
LOWcrates/openshell-ocsf/src/enums/action.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-ocsf/src/enums/security.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-ocsf/src/enums/severity.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-ocsf/src/enums/auth.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWcrates/openshell-ocsf/src/enums/http_method.rs1// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
575 more matches not shown…
Structural Annotation Overuse148 hits · 227 pts
SeverityFileLineSnippetContext
LOW.packit.yaml27 # Step 1: Create source tarball from git working tree.COMMENT
LOW.packit.yaml31 # Step 2: Create vendored Cargo dependencies tarball for offline RPM build.COMMENT
LOW.packit.yaml33 # Step 3: Return the primary archive name. Packit expects create-archiveCOMMENT
LOWcrates/openshell-cli/src/oidc_auth.rs329 // Step 1: Request device and user codesCOMMENT
LOWcrates/openshell-cli/src/oidc_auth.rs366 // Step 2: Display instructions to the userCOMMENT
LOWcrates/openshell-cli/src/oidc_auth.rs380 // Step 3: Poll the token endpointCOMMENT
LOWcrates/openshell-tui/src/lib.rs921 // Step 3: Resolve gateway address (handle loopback override).COMMENT
LOWcrates/openshell-tui/src/lib.rs928 // Step 4: Build the ProxyCommand using our own binary.COMMENT
LOWcrates/openshell-tui/src/lib.rs966 // Step 6: Cancel log stream and pause event handler before suspending.COMMENT
LOWcrates/openshell-tui/src/lib.rs972 // Step 7: Suspend TUI — leave alternate screen, disable raw mode.COMMENT
LOWcrates/openshell-tui/src/lib.rs981 // Step 8: Spawn SSH as child process and wait.COMMENT
LOWcrates/openshell-tui/src/lib.rs793 // Step 1: Fetch sandbox metadata (providers, sandbox ID).COMMENT
LOWcrates/openshell-tui/src/lib.rs817 // Step 2: Fetch the current live policy (includes updates since creation).COMMENT
LOWcrates/openshell-tui/src/lib.rs872 // Step 1: Get sandbox ID.COMMENT
LOWcrates/openshell-tui/src/lib.rs898 // Step 2: Create SSH session.COMMENT
LOWcrates/openshell-tui/src/lib.rs943 // Step 5: Build the SSH command.COMMENT
LOWcrates/openshell-tui/src/lib.rs998 // Step 9: Resume and draw the TUI before accepting new terminal input.COMMENT
LOWcrates/openshell-tui/src/lib.rs1029 // Step 1: Resolve sandbox → SSH session (same as handle_shell_connect).COMMENT
LOWcrates/openshell-tui/src/lib.rs1077 // Step 2: Resolve gateway and build ProxyCommand (same as handle_shell_connect).COMMENT
LOWcrates/openshell-tui/src/lib.rs1099 // Step 3: Build SSH command — same flags as handle_shell_connect but withCOMMENT
LOWcrates/openshell-tui/src/lib.rs1129 // Step 4: Suspend TUI.COMMENT
LOWcrates/openshell-tui/src/lib.rs1142 // Step 5: Run command — blocks until user Ctrl-C's or command exits.COMMENT
LOWcrates/openshell-tui/src/lib.rs1159 // Step 6: Resume TUI.COMMENT
LOWcrates/openshell-server/src/supervisor_session.rs729 // Step 1: Wait for SupervisorHello.COMMENT
LOWcrates/openshell-server/src/supervisor_session.rs755 // Step 2: Create and register the outbound channel.COMMENT
LOWcrates/openshell-server/src/supervisor_session.rs772 // Step 3: Send SessionAccepted.COMMENT
LOWcrates/openshell-server/src/supervisor_session.rs810 // Step 4: Spawn the session loop that reads inbound messages.COMMENT
LOWcrates/openshell-server/src/grpc/policy.rs12604 // Step 1: mechanistic submits a broad L4 grant; the prover flags itCOMMENT
LOWcrates/openshell-server/src/grpc/policy.rs12667 // Step 2: the agent refines into a narrow L7 proposal for the SAMECOMMENT
LOWdeploy/helm/openshell/values.yaml319 # WARNING: The RBAC Role grants read/write access to ALL Secrets in theCOMMENT
LOW.agents/skills/create-spike/SKILL.md35## Step 1: Gather the Problem StatementCOMMENT
LOW.agents/skills/create-spike/SKILL.md63## Step 2: Deep Codebase InvestigationCOMMENT
LOW.agents/skills/create-spike/SKILL.md112## Step 3: Determine LabelsCOMMENT
LOW.agents/skills/create-spike/SKILL.md129## Step 4: Create the GitHub IssueCOMMENT
LOW.agents/skills/create-spike/SKILL.md227## Step 5: Report to UserCOMMENT
LOW.agents/skills/update-docs/SKILL.md22## Step 1: Identify Relevant CommitsCOMMENT
LOW.agents/skills/update-docs/SKILL.md45## Step 2: Map Commits to Doc PagesCOMMENT
LOW.agents/skills/update-docs/SKILL.md68## Step 3: Read the Commit DetailsCOMMENT
LOW.agents/skills/update-docs/SKILL.md83## Step 4: Read the Current Doc PageCOMMENT
LOW.agents/skills/update-docs/SKILL.md93## Step 5: Draft the UpdateCOMMENT
LOW.agents/skills/update-docs/SKILL.md128## Step 6: Present the ResultsCOMMENT
LOW.agents/skills/update-docs/SKILL.md147## Step 7: Build and VerifyCOMMENT
LOW.agents/skills/debug-openshell-cluster/SKILL.md43### Step 1: Check CLI ReachabilityCOMMENT
LOW.agents/skills/debug-openshell-cluster/SKILL.md65### Step 2: Identify the Compute PlatformCOMMENT
LOW.agents/skills/debug-openshell-cluster/SKILL.md77### Step 3: Check Gateway Startup DependenciesCOMMENT
LOW.agents/skills/debug-openshell-cluster/SKILL.md140### Step 4: Check Docker-Backed GatewaysCOMMENT
LOW.agents/skills/debug-openshell-cluster/SKILL.md214### Step 5: Check Podman-Backed GatewaysCOMMENT
LOW.agents/skills/debug-openshell-cluster/SKILL.md266### Step 6: Check Kubernetes Helm GatewaysCOMMENT
LOW.agents/skills/debug-openshell-cluster/SKILL.md582### Step 7: Check VM-Backed GatewaysCOMMENT
LOW.agents/skills/triage-issue/SKILL.md85## Step 1: Fetch the IssueCOMMENT
LOW.agents/skills/triage-issue/SKILL.md95## Step 2: Check for Prior TriageCOMMENT
LOW.agents/skills/triage-issue/SKILL.md104## Step 3: Check Report CompletenessCOMMENT
LOW.agents/skills/triage-issue/SKILL.md116## Step 4: Check Reported Version and Known FixesCOMMENT
LOW.agents/skills/triage-issue/SKILL.md132## Step 5: Diagnose and ValidateCOMMENT
LOW.agents/skills/triage-issue/SKILL.md162## Step 6: ClassifyCOMMENT
LOW.agents/skills/triage-issue/SKILL.md182## Step 7: Post Triage CommentCOMMENT
LOW.agents/skills/debug-inference/SKILL.md74### Step 0: Check the Active GatewayCOMMENT
LOW.agents/skills/debug-inference/SKILL.md93### Step 1: Check Whether the Relevant Route Is ConfiguredCOMMENT
LOW.agents/skills/debug-inference/SKILL.md119### Step 2: Inspect the Provider RecordCOMMENT
LOW.agents/skills/debug-inference/SKILL.md149### Step 3: Check Local Host ReachabilityCOMMENT
88 more matches not shown…
Hyper-Verbose Identifiers251 hits · 201 pts
SeverityFileLineSnippetContext
LOWTESTING.md56def test_exec_python_serializes_callable_payload() -> None:CODE
LOWtasks/scripts/release.py406def generate_homebrew_formula(STRING
LOWtasks/scripts/sync_docs_website_test.py28def test_resolve_slug_channels() -> None:CODE
LOWtasks/scripts/sync_docs_website_test.py34def test_resolve_slug_version_requires_slug() -> None:CODE
LOWtasks/scripts/sync_docs_website_test.py39def test_resolve_slug_rejects_unsafe_characters() -> None:CODE
LOWtasks/scripts/sync_docs_website_test.py47def test_resolve_display_name() -> None:CODE
LOWtasks/scripts/sync_docs_website_test.py58def test_ordered_entries_pins_latest_then_dev() -> None:CODE
LOWtasks/scripts/sync_docs_website_test.py68def test_prefix_navigation_paths() -> None:CODE
LOWtasks/scripts/sync_docs_website_test.py116def test_sync_docs_creates_snapshot(tmp_path: Path) -> None:CODE
LOWtasks/scripts/sync_docs_website_test.py148def test_remove_docs_drops_snapshot(tmp_path: Path) -> None:CODE
LOWpython/release_tooling_test.py25def test_exact_tag_versions_are_stable_release_versions() -> None:CODE
LOWpython/release_tooling_test.py36def test_dev_versions_share_one_build_identity() -> None:CODE
LOWpython/release_tooling_test.py47def test_semver_tag_parser_excludes_vm_tags() -> None:CODE
LOWpython/wheel_verifier_test.py68def test_accepts_pure_python_sdk_wheel(tmp_path: Path) -> None:CODE
LOWpython/wheel_verifier_test.py74def test_requires_exactly_one_wheel_in_directory(tmp_path: Path) -> None:CODE
LOWpython/wheel_verifier_test.py82def test_rejects_missing_generated_proto(tmp_path: Path) -> None:CODE
LOWpython/wheel_verifier_test.py98def test_rejects_bundled_windows_cli(tmp_path: Path) -> None:CODE
LOWpython/wheel_verifier_test.py106def test_rejects_openshell_console_script(tmp_path: Path) -> None:CODE
LOWpython/wheel_verifier_test.py116def test_rejects_native_extension(tmp_path: Path) -> None:CODE
LOWpython/wheel_verifier_test.py132def test_rejects_platform_wheel(tmp_path: Path) -> None:CODE
LOWpython/wheel_verifier_test.py139def test_rejects_unexpected_version(tmp_path: Path) -> None:CODE
LOWpython/openshell/sandbox_test.py45def _client_credentials_fixture() -> dict[str, Any]:CODE
LOWpython/openshell/sandbox_test.py53def test_oauth_client_credentials_conformance_fixture() -> None:CODE
LOWpython/openshell/sandbox_test.py63def test_client_credentials_auth_exact_form_cache_and_redaction() -> None:CODE
LOWpython/openshell/sandbox_test.py644def test_load_cluster_bearer_token_returns_none_when_missing(CODE
LOWpython/openshell/sandbox_test.py650def test_load_cluster_bearer_token_tolerates_unreadable_file(CODE
LOWpython/openshell/sandbox_test.py659def test_load_cluster_bearer_token_rejects_missing_access_token(CODE
LOWpython/openshell/sandbox_test.py800def test_tls_config_rejects_partial_client_identity() -> None:CODE
LOWpython/openshell/sandbox_test.py808def test_tls_config_allows_empty_for_system_roots() -> None:CODE
LOWpython/openshell/sandbox_test.py819def test_cluster_bearer_provider_reloads_on_every_call(tmp_path: Path) -> None:CODE
LOWpython/openshell/sandbox_test.py1477def test_mtls_only_from_active_cluster_skips_bearer_interceptor(CODE
LOWpython/openshell/sandbox_test.py1516def test_sandbox_client_close_invokes_bearer_close() -> None:CODE
LOWpython/openshell/sandbox_test.py2254def test_sandbox_ref_retains_gateway_labels() -> None:CODE
LOWpython/openshell/sandbox_test.py2264def test_sandbox_ref_includes_main_process_result() -> None:CODE
LOWpython/openshell/sandbox_test.py2273def test_returned_labels_are_immutable() -> None:CODE
LOWpython/openshell/sandbox_test.py2281def test_direct_sandbox_ref_construction_defaults_labels() -> None:CODE
LOWpython/openshell/sandbox_test.py2393def test_create_passes_workspace_to_proto() -> None:CODE
LOWpython/openshell/sandbox_test.py114def test_client_credentials_auth_preserves_explicit_empty_scopes() -> None:CODE
LOWpython/openshell/sandbox_test.py150def test_client_credentials_auth_rejects_invalid_expiry(expires_in: object) -> None:CODE
LOWpython/openshell/sandbox_test.py181def test_client_credentials_auth_refuses_discovery_redirect(status: int) -> None:CODE
LOWpython/openshell/sandbox_test.py208def test_client_credentials_auth_refuses_token_redirect(status: int) -> None:CODE
LOWpython/openshell/sandbox_test.py242def test_client_credentials_auth_rejects_discovery_issuer_mismatch() -> None:CODE
LOWpython/openshell/sandbox_test.py264def test_client_credentials_auth_rejects_oversized_response() -> None:CODE
LOWpython/openshell/sandbox_test.py282def test_client_credentials_auth_single_flight_and_retry() -> None:CODE
LOWpython/openshell/sandbox_test.py323def test_client_credentials_auth_fails_closed_and_redacts_errors() -> None:CODE
LOWpython/openshell/sandbox_test.py354def test_client_credentials_auth_does_not_use_stale_token_after_renewal_failure() -> (CODE
LOWpython/openshell/sandbox_test.py440def test_exec_sends_stdin_payload() -> None:CODE
LOWpython/openshell/sandbox_test.py451def test_exec_python_serializes_callable_payload() -> None:CODE
LOWpython/openshell/sandbox_test.py471def test_from_active_cluster_reads_gateway_metadata_layout(CODE
LOWpython/openshell/sandbox_test.py497def test_from_active_cluster_prefers_openshell_gateway_env(CODE
LOWpython/openshell/sandbox_test.py557def test_normalize_bearer_accepts_str_or_callable() -> None:CODE
LOWpython/openshell/sandbox_test.py576def test_bearer_interceptor_attaches_authorization_header() -> None:CODE
LOWpython/openshell/sandbox_test.py596def test_bearer_interceptor_handles_empty_metadata() -> None:CODE
LOWpython/openshell/sandbox_test.py609def test_bearer_interceptor_calls_token_provider_per_request() -> None:CODE
LOWpython/openshell/sandbox_test.py627def test_load_cluster_bearer_token_reads_oidc_token_json(tmp_path: Path) -> None:CODE
LOWpython/openshell/sandbox_test.py704def test_from_active_cluster_loads_bearer_when_auth_mode_is_oidc(CODE
LOWpython/openshell/sandbox_test.py722def test_from_active_cluster_ignores_stale_token_when_auth_mode_not_oidc(CODE
LOWpython/openshell/sandbox_test.py742def test_from_active_cluster_https_oidc_without_mtls_uses_tls_with_system_roots(CODE
LOWpython/openshell/sandbox_test.py776def test_from_active_cluster_https_ca_only_layout(CODE
LOWpython/openshell/sandbox_test.py834def test_cluster_bearer_provider_raises_on_expired_token(tmp_path: Path) -> None:CODE
191 more matches not shown…
Verbosity Indicators37 hits · 56 pts
SeverityFileLineSnippetContext
LOW.packit.yaml27 # Step 1: Create source tarball from git working tree.COMMENT
LOW.packit.yaml31 # Step 2: Create vendored Cargo dependencies tarball for offline RPM build.COMMENT
LOW.packit.yaml33 # Step 3: Return the primary archive name. Packit expects create-archiveCOMMENT
LOWcrates/openshell-cli/src/oidc_auth.rs329 // Step 1: Request device and user codesCOMMENT
LOWcrates/openshell-cli/src/oidc_auth.rs366 // Step 2: Display instructions to the userCOMMENT
LOWcrates/openshell-cli/src/oidc_auth.rs380 // Step 3: Poll the token endpointCOMMENT
LOWcrates/openshell-tui/src/lib.rs921 // Step 3: Resolve gateway address (handle loopback override).COMMENT
LOWcrates/openshell-tui/src/lib.rs928 // Step 4: Build the ProxyCommand using our own binary.COMMENT
LOWcrates/openshell-tui/src/lib.rs966 // Step 6: Cancel log stream and pause event handler before suspending.COMMENT
LOWcrates/openshell-tui/src/lib.rs972 // Step 7: Suspend TUI — leave alternate screen, disable raw mode.COMMENT
LOWcrates/openshell-tui/src/lib.rs981 // Step 8: Spawn SSH as child process and wait.COMMENT
LOWcrates/openshell-tui/src/lib.rs793 // Step 1: Fetch sandbox metadata (providers, sandbox ID).COMMENT
LOWcrates/openshell-tui/src/lib.rs817 // Step 2: Fetch the current live policy (includes updates since creation).COMMENT
LOWcrates/openshell-tui/src/lib.rs872 // Step 1: Get sandbox ID.COMMENT
LOWcrates/openshell-tui/src/lib.rs898 // Step 2: Create SSH session.COMMENT
LOWcrates/openshell-tui/src/lib.rs943 // Step 5: Build the SSH command.COMMENT
LOWcrates/openshell-tui/src/lib.rs998 // Step 9: Resume and draw the TUI before accepting new terminal input.COMMENT
LOWcrates/openshell-tui/src/lib.rs1029 // Step 1: Resolve sandbox → SSH session (same as handle_shell_connect).COMMENT
LOWcrates/openshell-tui/src/lib.rs1077 // Step 2: Resolve gateway and build ProxyCommand (same as handle_shell_connect).COMMENT
LOWcrates/openshell-tui/src/lib.rs1099 // Step 3: Build SSH command — same flags as handle_shell_connect but withCOMMENT
LOWcrates/openshell-tui/src/lib.rs1129 // Step 4: Suspend TUI.COMMENT
LOWcrates/openshell-tui/src/lib.rs1142 // Step 5: Run command — blocks until user Ctrl-C's or command exits.COMMENT
LOWcrates/openshell-tui/src/lib.rs1159 // Step 6: Resume TUI.COMMENT
LOWcrates/openshell-server/src/supervisor_session.rs729 // Step 1: Wait for SupervisorHello.COMMENT
LOWcrates/openshell-server/src/supervisor_session.rs755 // Step 2: Create and register the outbound channel.COMMENT
LOWcrates/openshell-server/src/supervisor_session.rs772 // Step 3: Send SessionAccepted.COMMENT
LOWcrates/openshell-server/src/supervisor_session.rs810 // Step 4: Spawn the session loop that reads inbound messages.COMMENT
LOWcrates/openshell-server/src/grpc/policy.rs12604 // Step 1: mechanistic submits a broad L4 grant; the prover flags itCOMMENT
LOWcrates/openshell-server/src/grpc/policy.rs12667 // Step 2: the agent refines into a narrow L7 proposal for the SAMECOMMENT
LOWscripts/docker-cleanup.sh155# Step 1: Remove dangling (untagged) imagesCOMMENT
LOWscripts/docker-cleanup.sh174# Step 2: Remove stale tagged imagesCOMMENT
LOWscripts/docker-cleanup.sh218# Step 3: Remove unused volumesCOMMENT
LOWscripts/docker-cleanup.sh255# Step 4: Prune build cacheCOMMENT
LOWscripts/docker-cleanup.sh271# Step 5: Clean up any newly-dangling images left after tagged image removalCOMMENT
LOWe2e/rust/tests/custom_image.rs70 // Step 1: Write a temporary Dockerfile.COMMENT
LOWe2e/rust/tests/custom_image.rs79 // Step 2: Create a sandbox from the Dockerfile.COMMENT
LOWe2e/rust/tests/custom_image.rs97 // Step 3: Verify the marker file content appears in the output.COMMENT
Fake / Example Data40 hits · 46 pts
SeverityFileLineSnippetContext
LOWcrates/openshell-server/src/inference.rs2952 "dummy-token",CODE
LOWcrates/openshell-server/src/grpc/provider.rs11221 "placeholder".to_string(),CODE
LOWcrates/openshell-server/src/grpc/provider.rs11293 "placeholder".to_string(),CODE
LOWcrates/openshell-server/src/grpc/provider.rs11791 "placeholder".to_string(),CODE
LOWcrates/openshell-server/src/grpc/provider.rs12140 "placeholder".to_string(),CODE
LOWcrates/openshell-supervisor-network/src/l7/relay.rs4692 .expect("placeholder")CODE
LOWcrates/openshell-supervisor-network/src/l7/relay.rs4796 .expect("placeholder")CODE
LOWcrates/openshell-supervisor-network/src/l7/relay.rs7905 .expect("placeholder")CODE
LOWsdk/go/openshell/v1/workspace_test.go302 PrincipalSubject: "user@example.com",CODE
LOWsdk/go/openshell/v1/workspace_test.go315 m, err := wc.AddMember(context.Background(), "test-ws", "user@example.com", WorkspaceRoleAdmin)CODE
LOWsdk/go/openshell/v1/workspace_test.go319 assert.Equal(t, "user@example.com", m.PrincipalSubject)CODE
LOWsdk/go/openshell/v1/workspace_test.go322 assert.Equal(t, "user@example.com", mock.lastAddMemberReq.GetPrincipalSubject())CODE
LOWsdk/go/openshell/v1/workspace_test.go331 _, err := wc.AddMember(context.Background(), "", "user@example.com", WorkspaceRoleAdmin)CODE
LOWsdk/go/openshell/v1/workspace_test.go355 _, err := wc.AddMember(context.Background(), "test-ws", "user@example.com", WorkspaceRole("invalid"))CODE
LOWsdk/go/openshell/v1/workspace_test.go369 _, err := wc.AddMember(context.Background(), "test-ws", "user@example.com", WorkspaceRoleUser)CODE
LOWsdk/go/openshell/v1/workspace_test.go383 err := wc.RemoveMember(context.Background(), "test-ws", "user@example.com")CODE
LOWsdk/go/openshell/v1/workspace_test.go394 err := wc.RemoveMember(context.Background(), "", "user@example.com")CODE
LOWsdk/go/openshell/v1/workspace_test.go440 assert.Equal(t, "user@example.com", members[0].PrincipalSubject)CODE
LOW…k/go/openshell/v1/internal/converter/workspace_test.go122 PrincipalSubject: "user@example.com",CODE
LOW…k/go/openshell/v1/internal/converter/workspace_test.go134 assert.Equal(t, "user@example.com", m.PrincipalSubject)CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go145 m, err := fc.Workspaces().AddMember(context.Background(), "ws", "user@example.com", types.WorkspaceRoleAdmin)CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go149 assert.Equal(t, "user@example.com", m.PrincipalSubject)CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go155 _, err := fc.Workspaces().AddMember(context.Background(), "", "user@example.com", types.WorkspaceRoleAdmin)CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go171 _, err := fc.Workspaces().AddMember(context.Background(), "ws", "user@example.com", types.WorkspaceRole("invalid"))CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go179 _, err := fc.Workspaces().AddMember(context.Background(), "ws", "user@example.com", types.WorkspaceRoleAdmin)CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go182 _, err = fc.Workspaces().AddMember(context.Background(), "ws", "user@example.com", types.WorkspaceRoleUser)CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go189 _, _ = fc.Workspaces().AddMember(context.Background(), "ws", "user@example.com", types.WorkspaceRoleAdmin)CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go191 err := fc.Workspaces().RemoveMember(context.Background(), "ws", "user@example.com")CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go201 err := fc.Workspaces().RemoveMember(context.Background(), "", "user@example.com")CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go243 _, _ = fc.Workspaces().AddMember(context.Background(), "ws-a", "user@example.com", types.WorkspaceRoleAdmin)CODE
LOWsdk/go/openshell/v1/fake/workspace_test.go249 assert.Equal(t, "user@example.com", membersA[0].PrincipalSubject)CODE
LOWsdk/go/openshell/v1/fake/health.go78 Subject: "fake-user",CODE
LOWsdk/go/openshell/v1/fake/health_test.go102 assert.Equal(t, "fake-user", user.Subject)CODE
LOWexamples/multi-agent-notepad/runner.sh86 "placeholder",CODE
LOW…amples/agent-driven-policy-management/sandbox-agent.sh44 "placeholder",CODE
LOWscripts/agents/runtime/harnesses/codex/exec.sh51 "placeholder",CODE
LOWe2e/python/test_inference_routing.py225 "Authorization": "Bearer dummy-key",CODE
LOWe2e/python/test_inference_routing.py304 "x-api-key": "dummy-key",CODE
LOWe2e/rust/tests/cf_auth_smoke.rs294 "/tmp/fake-key",CODE
LOWe2e/rust/tests/sync.rs207 .args(["config", "user.email", "test@test.com"])CODE
Unused Imports49 hits · 46 pts
SeverityFileLineSnippetContext
LOWtasks/scripts/sync_docs_website.py12CODE
LOWtasks/scripts/release.py6CODE
LOWtasks/scripts/verify-python-wheel.py6CODE
LOWtasks/scripts/sync_docs_website_test.py11CODE
LOWpython/release_tooling_test.py4CODE
LOWpython/wheel_verifier_test.py4CODE
LOWpython/openshell/sandbox_test.py4CODE
LOWpython/openshell/__init__.py6CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/__init__.py8CODE
LOWpython/openshell/sandbox.py4CODE
LOWpython/openshell/release_formula_test.py4CODE
LOWdeploy/sbom/sbom_to_csv.py13CODE
LOWdeploy/sbom/resolve_licenses_test.py4CODE
LOWdeploy/sbom/resolve_licenses.py21CODE
LOWexamples/policy-advisor/ctf.py22CODE
LOWexamples/transparent-tcp-redis/redis_client.py6CODE
LOWscripts/update_license_headers.py19CODE
LOWscripts/baseline_workflow_metrics.py23CODE
LOWscripts/generate_third_party_notices.py18CODE
LOWe2e/python/test_sandbox_exec_python.py4CODE
LOWe2e/python/conftest.py4CODE
LOWe2e/python/test_sandbox_providers.py12CODE
LOWe2e/python/test_sandbox_providers.py26CODE
LOWe2e/python/test_workspace_api.py4CODE
LOWe2e/python/test_inference_routing.py11CODE
LOWe2e/python/test_policy_validation.py11CODE
LOWe2e/python/test_security_tls.py12CODE
LOWe2e/python/test_sandbox_venv.py19CODE
LOWe2e/python/test_sandbox_api.py4CODE
LOWe2e/python/test_sandbox_api.py14CODE
LOWe2e/python/test_sandbox_policy.py4CODE
LOWe2e/python/test_sandbox_policy.py17CODE
LOWe2e/python/test_sandbox_landlock.py21CODE
LOWe2e/python/oidc/oidc_auth_test.py14CODE
LOWe2e/python/oidc/helpers.py9CODE
LOWe2e/python/oidc/workspace_authz_test.py15CODE
Example Usage Blocks17 hits · 24 pts
SeverityFileLineSnippetContext
LOWtasks/sbom.toml6# Usage:COMMENT
LOWtasks/notices.toml6# Usage:COMMENT
LOWtasks/scripts/keycloak-k8s-setup.sh13# Usage:COMMENT
LOWtasks/scripts/package-deb-install.sh15# Usage:COMMENT
LOWtasks/scripts/vm/download-kernel-runtime.sh11# Usage:COMMENT
LOWtasks/scripts/vm/compress-vm-runtime.sh11# Usage:COMMENT
LOWtasks/scripts/vm/build-libkrun-macos.sh22# Usage:COMMENT
LOWtasks/scripts/vm/package-vm-runtime.sh12# Usage:COMMENT
LOWtasks/scripts/vm/vm-setup.sh13# Usage:COMMENT
LOWtasks/scripts/vm/build-libkrun.sh20# Usage:COMMENT
LOWexamples/local-inference/routes.yaml6# Usage:COMMENT
LOWscripts/smoke-test-network-policy.sh17# Usage:COMMENT
LOWscripts/keycloak-dev.sh6# Usage:COMMENT
LOWscripts/docker-cleanup.sh15# Usage:COMMENT
LOWscripts/test-release-tag.sh8# Usage:COMMENT
LOWe2e/rust/e2e-vm.sh22# Usage:COMMENT
LOWe2e/rust/e2e-openshift.sh11# Usage:COMMENT
Cross-Language Confusion3 hits · 22 pts
SeverityFileLineSnippetContext
HIGHe2e/python/test_sandbox_api.py81 "[ -t 0 ] && printf T || printf N; "CODE
HIGHe2e/python/test_sandbox_api.py82 "[ -t 1 ] && printf T || printf N; "CODE
HIGHe2e/python/test_sandbox_api.py83 "[ -t 2 ] && printf T || printf N; printf '\\n'; "CODE
Self-Referential Comments5 hits · 18 pts
SeverityFileLineSnippetContext
MEDIUMtasks/scripts/vm/build-libkrun-macos.sh145# Create the unversioned symlink that libkrun links againstCOMMENT
MEDIUMdeploy/docker/gateway.toml6# This file is the primary configuration source for docker-compose.yml in thisCOMMENT
MEDIUMscripts/smoke-test-network-policy.sh134# Create a sandbox with a sleep, wait for Ready (sandboxes are kept by default).COMMENT
MEDIUM.github/workflows/release-tag.yml419 # Create a tagged GitHub Release with CLI, gateway, driver, and wheelsCOMMENT
MEDIUMe2e/with-kube-gateway.sh13# Create a local k3d cluster via tasks/scripts/helm-k3s-local.sh, installCOMMENT
AI Slop Vocabulary7 hits · 18 pts
SeverityFileLineSnippetContext
MEDIUMcrates/openshell-providers/src/profiles.rs6#![allow(deprecated)] // NetworkBinary::harness remains in the public proto for compatibility.COMMENT
MEDIUMscripts/agents/run.sh89 [[ $# -ge 2 ]] || fail "--harness requires a value"CODE
MEDIUMscripts/agents/run.sh186abort "unsupported harness: #{harness} (supported: #{supported.keys.join(', ')})" unless supported.key?(harness)CODE
MEDIUMscripts/lint-mermaid/package-lock.json1633 "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",CODE
MEDIUMe2e/with-podman-gateway.sh18# Podman sandbox stop timeout. The harness default is intentionally shorterCOMMENT
MEDIUMe2e/with-podman-gateway.sh492 # the harness discovered (e.g. via `podman machine inspect` on macOS) soCOMMENT
MEDIUMe2e/mcp-conformance/client-through-openshell.sh9# script with that URL. The parent harness creates one reusable conformanceCOMMENT
Deep Nesting18 hits · 14 pts
SeverityFileLineSnippetContext
LOWtasks/scripts/release.py176CODE
LOWtasks/scripts/release.py493CODE
LOWpython/openshell/sandbox.py1413CODE
LOWpython/openshell/sandbox.py274CODE
LOWpython/openshell/sandbox.py909CODE
LOWpython/openshell/sandbox.py1270CODE
LOWdeploy/sbom/resolve_licenses.py400CODE
LOWexamples/policy-advisor/ctf.py388CODE
LOWe2e/python/test_sandbox_providers.py334CODE
LOWe2e/python/test_inference_routing.py57CODE
LOWe2e/python/test_sandbox_api.py66CODE
LOWe2e/python/test_sandbox_api.py74CODE
LOWe2e/python/test_sandbox_policy.py97CODE
LOWe2e/python/test_sandbox_policy.py202CODE
LOWe2e/python/test_sandbox_policy.py280CODE
LOWe2e/python/test_sandbox_policy.py100CODE
LOWe2e/python/test_sandbox_policy.py210CODE
LOWe2e/python/test_sandbox_policy.py283CODE
Excessive Try-Catch Wrapping14 hits · 14 pts
SeverityFileLineSnippetContext
LOWtasks/scripts/sync_docs_website.py354 except Exception as exc:CODE
MEDIUMtasks/scripts/sync_docs_website.py347def main() -> None:CODE
LOWpython/openshell/__init__.py29except Exception:CODE
LOWpython/openshell/sandbox.py358 except Exception:CODE
LOWexamples/policy-advisor/ctf.py213 except Exception as exc: # noqa: BLE001CODE
LOWexamples/policy-advisor/ctf.py258 except Exception as exc: # noqa: BLE001CODE
LOWscripts/agents/runtime/supervisor.sh63except Exception:CODE
LOWe2e/python/test_inference_routing.py268 except Exception as e:CODE
LOWe2e/python/test_inference_routing.py368 except Exception as exc:CODE
LOWe2e/python/test_sandbox_policy.py1642 except Exception as e:CODE
LOWe2e/python/test_sandbox_policy.py1652 except Exception as e:CODE
LOWe2e/rust/tests/podman_corporate_proxy.rs346 except Exception as err:CODE
LOWe2e/rust/tests/forward_proxy_l7_bypass.rs127 except Exception as e:CODE
LOWe2e/rust/tests/forward_proxy_l7_bypass.rs170except Exception as e:CODE
Redundant / Tautological Comments3 hits · 4 pts
SeverityFileLineSnippetContext
LOWe2e/with-podman-gateway.sh17# Set OPENSHELL_E2E_PODMAN_STOP_TIMEOUT_SECS to override the managed gateway'sCOMMENT
LOWe2e/with-kube-gateway.sh19# Set OPENSHELL_E2E_KUBE_EXTRA_VALUES to one or more colon-separated Helm valuesCOMMENT
LOWe2e/with-kube-gateway.sh38# Set OPENSHELL_E2E_KUBE_EXTERNAL_POSTGRES_SECRET to create an ephemeralCOMMENT
Modern Structural Boilerplate3 hits · 3 pts
SeverityFileLineSnippetContext
LOWtasks/scripts/sync_docs_website.py238def update_docs_yml(docs_yml: Path, updated: VersionEntry, fern_dir: Path) -> None:CODE
LOWpython/openshell/__init__.py32__all__ = [CODE
LOWdeploy/sbom/resolve_licenses.py337def set_license(comp: dict, license_id: str) -> None:CODE
Modern AI Meta-Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMproviders/github.yaml19 # writes require an explicit policy proposal so the agentic loop +COMMENT
AI Structural Patterns1 hit · 1 pts
SeverityFileLineSnippetContext
LOWpython/openshell/sandbox.py1169CODE