Repository Analysis

NVIDIA/SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

40.4 Strong AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of NVIDIA/SkillSpector, a Python project with 15,116 GitHub stars. SynthScan v2.0 examined 108,179 lines of code across 275 source files, recording 3334 pattern matches distributed across 18 syntactic categories. The overall adjusted score of 40.4 places this repository in the Strong AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

40.4
Adjusted Score
40.4
Raw Score
100%
Time Factor
2026-08-28
Last Push
15.1K
Stars
Python
Language
108.2K
Lines of Code
275
Files
3.3K
Pattern Hits
2026-08-29
Scan Date
0.08
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 22MEDIUM 533LOW 2779

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 3334 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers2189 hits · 1897 pts
SeverityFileLineSnippetContext
LOWtests/test_bundled_execution_surface_acceptance.py89def test_issue_a_graph_reports_hook_mechanism_without_inventing_exfiltration(STRING
LOWtests/test_bundled_execution_surface_acceptance.py118def test_issue_b_graph_blocks_closed_project_permission_surface(STRING
LOWtests/test_bundled_execution_surface_acceptance.py137def test_bundled_project_disable_suppresses_ordinary_plugin_hook_findings(tmp_path: Path) -> None:STRING
LOWtests/test_bundled_execution_surface_acceptance.py162def test_issue_c_top_level_prefixed_zip_reports_full_chain(tmp_path: Path) -> None:STRING
LOWtests/test_bundled_execution_surface_acceptance.py176def test_issue_c_renders_all_public_report_formats(tmp_path: Path) -> None:STRING
LOWtests/test_bundled_execution_surface_acceptance.py209def test_document_surface_controls(STRING
LOWtests/test_bundled_execution_surface_acceptance.py223def test_malformed_sibling_keeps_valid_finding_and_is_incomplete(tmp_path: Path) -> None:STRING
LOWtests/test_bundled_execution_surface_acceptance.py244def test_malformed_modeled_settings_sibling_keeps_hook_findings_and_is_incomplete(STRING
LOWtests/test_bundled_execution_surface_acceptance.py288def test_public_cli_exit_contract(STRING
LOWtests/test_bundled_execution_surface_acceptance.py313def test_recursive_single_child_routes_execution_surfaces_from_child_root(STRING
LOWtests/test_bundled_execution_surface_acceptance.py349def test_cli_fail_on_incomplete_is_opt_in(tmp_path: Path) -> None:STRING
LOWtests/test_mcp_tool_poisoning.py675 def test_injection_in_param_description(self):CODE
LOWtests/test_mcp_tool_poisoning.py938 def test_skipped_no_description(self):CODE
LOWtests/test_mcp_tool_poisoning.py944 def test_llm_call_failure_returns_empty(self, monkeypatch: pytest.MonkeyPatch):CODE
LOWtests/test_mcp_tool_poisoning.py951 def test_persistently_malformed_response_returns_empty(self, monkeypatch: pytest.MonkeyPatch):CODE
LOWtests/test_mcp_tool_poisoning.py316 def test_data_uri_in_metadata(self):CODE
LOWtests/test_mcp_tool_poisoning.py334 def test_instruction_keyword_in_comment(self):CODE
LOWtests/test_mcp_tool_poisoning.py355 def test_zero_width_word_joiner_after_refactor(self):CODE
LOWtests/test_mcp_tool_poisoning.py372 def test_zero_width_bom_after_refactor(self):CODE
LOWtests/test_mcp_tool_poisoning.py489 def test_identifier_field_not_scanned(self):CODE
LOWtests/test_mcp_tool_poisoning.py650 def test_invisible_formatting_chars(self):CODE
LOWtests/test_mcp_tool_poisoning.py695 def test_system_token_in_param(self):CODE
LOWtests/test_mcp_tool_poisoning.py718 def test_exfiltration_in_param_description(self):CODE
LOWtests/test_mcp_tool_poisoning.py740 def test_malicious_default_value(self):CODE
LOWtests/test_mcp_tool_poisoning.py763 def test_excessive_description_length(self):CODE
LOWtests/test_mcp_tool_poisoning.py791 def test_localhost_prefixed_attacker_url_is_flagged(self):CODE
LOWtests/test_mcp_tool_poisoning.py814 def test_genuine_loopback_default_url_is_exempt(self):CODE
LOWtests/test_mcp_tool_poisoning.py922 def test_configured_output_language_is_included(self, monkeypatch: pytest.MonkeyPatch) -> None:CODE
LOWtests/test_mcp_tool_poisoning.py969 def test_malformed_response_is_retried(self, monkeypatch: pytest.MonkeyPatch):CODE
LOWtests/test_mcp_tool_poisoning.py985 def test_cli_parse_error_is_retried(self, monkeypatch: pytest.MonkeyPatch):CODE
LOWtests/test_mcp_tool_poisoning.py1002 def test_out_of_range_confidence_is_retried(self, monkeypatch: pytest.MonkeyPatch):CODE
LOWtests/test_mcp_tool_poisoning.py1023 def test_successful_call_records_ok_true(self, monkeypatch: pytest.MonkeyPatch):CODE
LOWtests/test_mcp_tool_poisoning.py1029 def test_failed_call_records_ok_false(self, monkeypatch: pytest.MonkeyPatch):CODE
LOWtests/test_mcp_tool_poisoning.py1043 def test_no_llm_call_attempted_records_nothing(self):CODE
LOWtests/test_mcp_tool_poisoning.py1050 def test_use_llm_false_records_nothing(self):CODE
LOWtests/test_mcp_tool_poisoning.py1088 def test_static_finding_cap_is_enforced_during_detector_construction(CODE
LOWtests/test_mcp_tool_poisoning.py1182 def test_full_pipeline_poisoned_skill(self):CODE
LOWtests/test_mcp_tool_poisoning.py1200 def test_full_pipeline_clean_skill(self):CODE
LOWtests/test_mcp_tool_poisoning.py1217 def test_sarif_output_contains_tp_rules(self):CODE
LOWtests/conftest.py25def mock_resolve_context_length():CODE
LOWtests/test_structured_skill.py38def test_cache_api_never_traverses_or_rereads_filesystem(CODE
LOWtests/test_structured_skill.py63def test_cache_api_accepts_bounded_text_cache(tmp_path: Path) -> None:CODE
LOWtests/test_structured_skill.py74def test_candidates_are_processed_in_deterministic_lexical_order(tmp_path: Path) -> None:CODE
LOWtests/test_structured_skill.py89def test_oversized_document_is_partial_without_json_parse(CODE
LOWtests/test_structured_skill.py111def test_later_valid_context_retains_earlier_partial_limitation(CODE
LOWtests/test_structured_skill.py133def test_total_candidate_input_bytes_are_bounded(CODE
LOWtests/test_structured_skill.py152def test_candidate_count_overflow_does_not_choose_arbitrary_subset(CODE
LOWtests/test_structured_skill.py174def test_deep_json_reports_nesting_limit(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> None:CODE
LOWtests/test_structured_skill.py193def test_json_node_work_is_bounded(tmp_path: Path) -> None:CODE
LOWtests/test_structured_skill.py211def test_oversized_numeric_scalar_is_partial_instead_of_crashing(tmp_path: Path) -> None:CODE
LOWtests/test_structured_skill.py227def test_structured_output_records_are_bounded(CODE
LOWtests/test_structured_skill.py248def test_runtime_limit_is_reported_after_parser_work(CODE
LOWtests/test_structured_skill.py268def test_cache_api_honors_tighter_caller_deadline(CODE
LOWtests/test_structured_skill.py289def test_compatibility_wrapper_is_bounded_and_avoids_rglob_read_text(CODE
LOWtests/test_structured_skill.py308def test_compatibility_wrapper_fails_closed_on_directory_entry_overflow(CODE
LOWtests/test_batch_scan_reports.py13def test_json_marks_error_entries_as_unsuccessful() -> None:CODE
LOWtests/test_python_ast.py18def test_parse_python_source_exposes_import_aliases() -> None:CODE
LOWtests/test_python_ast.py33def test_parse_python_source_retains_syntax_error_result() -> None:CODE
LOWtests/test_python_ast.py42def test_parse_python_source_retains_value_error_result(monkeypatch) -> None:CODE
LOWtests/test_python_ast.py54def test_parse_python_source_retains_recursion_error_result(monkeypatch) -> None:CODE
2129 more matches not shown…
Decorative Section Separators518 hits · 1780 pts
SeverityFileLineSnippetContext
MEDIUMtests/test_mcp_tool_poisoning.py669# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py671# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py33# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py35# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py238# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py240# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py390# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py392# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py586# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py588# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py832# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py834# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py886# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py888# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py1169# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_tool_poisoning.py1171# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_least_privilege.py27# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_least_privilege.py29# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_least_privilege.py169# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/test_mcp_least_privilege.py171# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py117# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py119# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py141# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py143# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py225# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py227# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py267# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py269# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py313# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py315# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py342# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py344# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py380# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py382# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py533# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py535# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py545# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py547# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py558# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py560# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py647# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py649# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py738# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py740# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py58# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py60# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py608# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_agent_cli.py610# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_model_info.py65# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_model_info.py67# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_model_info.py86# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_model_info.py88# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_model_info.py164# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_model_info.py166# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_model_info.py246# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_model_info.py248# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_model_info.py278# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_model_info.py280# ---------------------------------------------------------------------------COMMENT
MEDIUMtests/unit/test_new_providers.py122# ── Azure OpenAI ────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/unit/test_new_providers.py223# ── Generic OpenAI-Compatible ───────────────────────────────────────────────COMMENT
458 more matches not shown…
Unused Imports227 hits · 204 pts
SeverityFileLineSnippetContext
LOWtests/test_bundled_execution_surface_acceptance.py6CODE
LOWtests/test_mcp_tool_poisoning.py18CODE
LOWtests/test_structured_skill.py6CODE
LOWtests/test_batch_scan_reports.py6CODE
LOWtests/test_python_ast.py6CODE
LOWtests/test_mcp_rug_pull.py18CODE
LOWtests/test_mcp_least_privilege.py18CODE
LOWtests/test_multi_skill.py18CODE
LOWtests/unit/test_agent_cli.py34CODE
LOWtests/unit/test_inference_usage.py6CODE
LOWtests/unit/test_llm_utils.py23CODE
LOWtests/unit/test_providers.py23CODE
LOWtests/unit/test_suppression.py18CODE
LOWtests/unit/test_github_release_workflow.py6CODE
LOWtests/unit/test_model_info.py18CODE
LOWtests/unit/test_model_info.py33CODE
LOWtests/unit/test_osv_client.py18CODE
LOWtests/unit/test_create_github_release.py6CODE
LOWtests/unit/test_input_handler_ssrf.py18CODE
LOWtests/unit/test_bedrock_provider.py24CODE
LOWtests/unit/test_new_providers.py18CODE
LOWtests/unit/test_wheel_contents.py6CODE
LOWtests/unit/test_input_handler_bounds.py26CODE
LOWtests/unit/test_anthropic_proxy_provider.py18CODE
LOWtests/unit/test_compare_scan_accuracy.py4CODE
LOWtests/unit/test_constants.py18CODE
LOWtests/unit/test_sarif.py18CODE
LOWtests/unit/test_patterns_new.py22CODE
LOWtests/nodes/test_deduplicate.py18CODE
LOWtests/nodes/test_nested_artifacts.py6CODE
LOWtests/nodes/test_transitive_analyzer_deadlines.py6CODE
LOWtests/nodes/test_security_remediation.py6CODE
LOWtests/nodes/test_analysis_completeness.py6CODE
LOWtests/nodes/test_llm_analyzer_base.py18CODE
LOWtests/nodes/test_report.py18CODE
LOWtests/nodes/test_sarif_rules_and_empty_findings.py18CODE
LOWtests/nodes/test_security_end_to_end.py6CODE
LOWtests/nodes/test_meta_analyzer_fallback.py18CODE
LOWtests/nodes/test_finalize_inspection_ledger.py6CODE
LOWtests/nodes/test_meta_analyzer.py23CODE
LOWtests/nodes/test_build_context.py21CODE
LOWtests/nodes/test_report_sanitizer.py18CODE
LOWtests/nodes/test_semantic_quality_policy.py18CODE
LOWtests/nodes/analyzers/test_mp2_regex_backtracking.py18CODE
LOW…sts/nodes/analyzers/test_ea1_wildcard_line_boundary.py29CODE
LOWtests/nodes/analyzers/test_registry.py18CODE
LOWtests/nodes/analyzers/test_behavioral_ast.py18CODE
LOWtests/nodes/analyzers/test_semantic_developer_intent.py18CODE
LOWtests/nodes/analyzers/conftest.py18CODE
LOWtests/nodes/analyzers/test_shared_python_ast.py6CODE
LOWtests/nodes/analyzers/test_whitespace_padding.py18CODE
LOWtests/nodes/analyzers/test_static_runner_filtering.py18CODE
LOWtests/nodes/analyzers/test_structured_skill_roles.py18CODE
LOWtests/nodes/analyzers/test_static_patterns.py18CODE
LOW…ts/nodes/analyzers/test_semantic_security_discovery.py18CODE
LOW…odes/analyzers/test_static_patterns_deserialization.py18CODE
LOWtests/nodes/analyzers/test_mcp_rug_pull.py18CODE
LOW…s/nodes/analyzers/test_static_patterns_anti_refusal.py18CODE
LOW…nodes/analyzers/test_static_false_positive_controls.py6CODE
LOWtests/nodes/analyzers/test_binary_and_pe3_filtering.py18CODE
167 more matches not shown…
Over-Commented Block192 hits · 172 pts
SeverityFileLineSnippetContext
LOWmodel_registry.yaml1# Model registry — context window and output token limits.COMMENT
LOW.skillspector-baseline.example.yaml1# SkillSpector baseline (example)COMMENT
LOWREADME.md261export SKILLSPECTOR_PROVIDER=bedrockCOMMENT
LOWtests/test_mcp_tool_poisoning.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/conftest.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/__init__.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/test_mcp_rug_pull.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/test_mcp_least_privilege.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/test_multi_skill.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_agent_cli.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_transitive.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_mcp_server.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_llm_utils.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_providers.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_suppression.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_patterns.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/__init__.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_model_info.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_osv_client.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_input_handler_ssrf.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_bedrock_provider.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_reviewer_nits.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_new_providers.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_input_handler_bounds.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_anthropic_proxy_provider.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_cli.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_constants.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_input_handler.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_sarif.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/unit/test_patterns_new.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/test_deduplicate.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/test_llm_analyzer_base.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/__init__.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/test_report.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/test_sarif_rules_and_empty_findings.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/test_resolve_input.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/test_meta_analyzer_fallback.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/test_meta_analyzer.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/test_build_context.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/test_report_sanitizer.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/test_semantic_quality_policy.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_mp2_regex_backtracking.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOW…sts/nodes/analyzers/test_ea1_wildcard_line_boundary.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_registry.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_behavioral_ast.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_semantic_developer_intent.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/conftest.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_whitespace_padding.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_static_runner_filtering.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_structured_skill_roles.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_static_patterns.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOW…ts/nodes/analyzers/test_semantic_security_discovery.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_sc8_shipped_bytecode.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOW…odes/analyzers/test_static_patterns_deserialization.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_mcp_rug_pull.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOW…alyzers/test_static_patterns_supply_chain_lockfiles.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOW…s/nodes/analyzers/test_static_patterns_anti_refusal.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_binary_and_pe3_filtering.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_static_yara.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
LOWtests/nodes/analyzers/test_behavioral_taint_tracking.py1# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.COMMENT
132 more matches not shown…
Deep Nesting91 hits · 81 pts
SeverityFileLineSnippetContext
LOWtests/test_mcp_tool_poisoning.py90CODE
LOWtests/test_mcp_least_privilege.py84CODE
LOWtests/unit/test_cli.py3601CODE
LOWtests/nodes/test_security_end_to_end.py109CODE
LOWtests/nodes/test_security_end_to_end.py778CODE
LOWcontrib/batch_scan/detection.py50CODE
LOWcontrib/batch_scan/batch_scan.py192CODE
LOWcontrib/batch_scan/api_pool.py165CODE
LOWcontrib/batch_scan/reports.py376CODE
LOWcontrib/batch_scan/tests/tests-pro/mutation_max.py120CODE
LOWsrc/skillspector/references.py59CODE
LOWsrc/skillspector/references.py140CODE
LOWsrc/skillspector/inspection_ledger.py336CODE
LOWsrc/skillspector/inspection_ledger.py672CODE
LOWsrc/skillspector/structured_skill.py277CODE
LOWsrc/skillspector/structured_skill.py339CODE
LOWsrc/skillspector/structured_skill.py392CODE
LOWsrc/skillspector/structured_skill.py689CODE
LOWsrc/skillspector/structured_skill.py355CODE
LOWsrc/skillspector/structured_skill.py400CODE
LOWsrc/skillspector/nested_artifacts.py549CODE
LOWsrc/skillspector/nested_artifacts.py1002CODE
LOWsrc/skillspector/cli.py873CODE
LOWsrc/skillspector/cli.py1326CODE
LOWsrc/skillspector/cli.py1416CODE
LOWsrc/skillspector/cli.py2064CODE
LOWsrc/skillspector/python_ast.py114CODE
LOWsrc/skillspector/transitive.py376CODE
LOWsrc/skillspector/input_handler.py781CODE
LOWsrc/skillspector/input_handler.py989CODE
LOWsrc/skillspector/input_handler.py1081CODE
LOWsrc/skillspector/input_handler.py1177CODE
LOWsrc/skillspector/input_handler.py1225CODE
LOWsrc/skillspector/input_handler.py1364CODE
LOWsrc/skillspector/artifacts.py150CODE
LOWsrc/skillspector/artifacts.py264CODE
LOWsrc/skillspector/multi_skill.py229CODE
LOWsrc/skillspector/multi_skill.py329CODE
LOWsrc/skillspector/multi_skill.py388CODE
LOWsrc/skillspector/nodes/build_context.py265CODE
LOWsrc/skillspector/nodes/build_context.py779CODE
LOWsrc/skillspector/nodes/build_context.py1290CODE
LOWsrc/skillspector/nodes/build_context.py1368CODE
LOWsrc/skillspector/nodes/build_context.py1508CODE
LOWsrc/skillspector/nodes/build_context.py1683CODE
LOWsrc/skillspector/nodes/build_context.py1402CODE
LOWsrc/skillspector/nodes/meta_analyzer.py381CODE
LOWsrc/skillspector/nodes/report.py883CODE
LOWsrc/skillspector/nodes/report.py1277CODE
LOW…tor/nodes/analyzers/static_patterns_harmful_content.py85CODE
LOW…tor/nodes/analyzers/static_patterns_harmful_content.py198CODE
LOW…tor/nodes/analyzers/static_patterns_output_handling.py221CODE
LOW…tor/nodes/analyzers/static_patterns_output_handling.py340CODE
LOW…tor/nodes/analyzers/static_patterns_output_handling.py382CODE
LOW…tor/nodes/analyzers/static_patterns_output_handling.py404CODE
LOWsrc/skillspector/nodes/analyzers/mcp_least_privilege.py283CODE
LOWsrc/skillspector/nodes/analyzers/mcp_least_privilege.py458CODE
LOW…or/nodes/analyzers/static_patterns_prompt_injection.py226CODE
LOW…llspector/nodes/analyzers/behavioral_taint_tracking.py418CODE
LOW…llspector/nodes/analyzers/behavioral_taint_tracking.py454CODE
31 more matches not shown…
Cross-File Repetition10 hits · 50 pts
SeverityFileLineSnippetContext
HIGHtests/unit/test_providers.py0isolate provider-related env vars and the yaml cache for each test.STRING
HIGHtests/unit/test_bedrock_provider.py0isolate provider-related env vars and the yaml cache for each test.STRING
HIGHtests/unit/test_new_providers.py0isolate provider-related env vars and the yaml cache for each test.STRING
HIGHsrc/skillspector/providers/azure_openai/provider.py0resolve model: ``skillspector_model`` env > slot default > ``default_model``.STRING
HIGHsrc/skillspector/providers/bedrock/provider.py0resolve model: ``skillspector_model`` env > slot default > ``default_model``.STRING
HIGHsrc/skillspector/providers/nv_build/provider.py0resolve model: ``skillspector_model`` env > slot default > ``default_model``.STRING
HIGH…c/skillspector/providers/openai_compatible/provider.py0resolve model: ``skillspector_model`` env > slot default > ``default_model``.STRING
HIGHsrc/skillspector/providers/anthropic/provider.py0resolve model: ``skillspector_model`` env > slot default > ``default_model``.STRING
HIGHsrc/skillspector/providers/ollama/provider.py0resolve model: ``skillspector_model`` env > slot default > ``default_model``.STRING
HIGHsrc/skillspector/providers/openai/provider.py0resolve model: ``skillspector_model`` env > slot default > ``default_model``.STRING
Cross-Language Confusion9 hits · 48 pts
SeverityFileLineSnippetContext
HIGHtests/unit/test_patterns.py389 content = "cat /etc/passwd && docker run -v /etc/passwd:/etc/passwd:ro image"CODE
HIGHtests/unit/test_patterns_new.py374 "const match = condition ? /yes/.exec(output) : null;",CODE
HIGHtests/unit/test_patterns_new.py1544 'rm -rf "$BRANCH_CTX_PARENT" 2>/dev/null || true',CODE
HIGHtests/unit/test_patterns_new.py1584 pytest.param("ls && rm -rf /tmp", "cleanup.sh", "shell", id="chain_rm"),CODE
HIGHtests/unit/test_patterns_new.py1630 "RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*\n"CODE
HIGHtests/unit/test_patterns_new.py1644 "RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*\n"CODE
HIGHtests/unit/test_patterns_new.py1658 "RUN useradd --create-home appuser && chown -R appuser:appuser /app\n"CODE
HIGHtests/nodes/analyzers/test_static_yara.py465ssh target 'rm -rf ~/trt_profile_model && mkdir -p ~/trt_profile_model/results'CODE
HIGHcontrib/batch_scan/runner.py216 '"end_line": null, "confidence": 0.0-1.0, 'CODE
Excessive Try-Catch Wrapping43 hits · 38 pts
SeverityFileLineSnippetContext
LOWtests/unit/test_input_handler_ssrf.py167 except Exception:CODE
LOWdocs/LLM_ANALYZER_BASE_GUIDE.md89 except Exception as e:CODE
LOWcontrib/batch_scan/runner.py157 except Exception as exc:CODE
LOWcontrib/batch_scan/runner.py202 except Exception as exc:CODE
LOWcontrib/batch_scan/runner.py766 except Exception as exc:CODE
LOWcontrib/batch_scan/batch_scan.py371 except Exception:CODE
LOWcontrib/batch_scan/api_pool.py472 except Exception as exc:CODE
LOWcontrib/batch_scan/api_pool.py515 except Exception as exc:CODE
LOWcontrib/batch_scan/gap_fill.py237 except Exception as exc:CODE
LOWcontrib/batch_scan/gap_fill.py303 except Exception as exc:CODE
LOW…trib/batch_scan/tests/test_monkeypatch_invasiveness.py281 except Exception as exc:CODE
LOWcontrib/batch_scan/tests/tests-pro/mutation_max.py479 except Exception:CODE
LOWcontrib/batch_scan/tests/tests-pro/mutation_max.py321 except Exception:CODE
LOWcontrib/batch_scan/tests/tests-pro/mutation_max.py349 except Exception:CODE
LOWcontrib/batch_scan/tests/tests-pro/mutation_max.py396 except Exception:CODE
MEDIUMcontrib/batch_scan/tests/tests-pro/test_api_pool.py401def worker():CODE
LOWcontrib/batch_scan/tests/tests-pro/test_api_pool.py408 except Exception as e:CODE
MEDIUM…trib/batch_scan/tests/tests-pro/test_runner_patches.py393def test_chatopenai_init_receives_both_timeout_and_request_timeout(self):CODE
LOW…trib/batch_scan/tests/tests-pro/test_runner_patches.py469 except Exception:CODE
LOWcontrib/batch_scan/docs/DESIGN.md164except Exception:CODE
LOWcontrib/batch_scan/docs/archive/PITFALLS.md120except Exception:CODE
LOWscripts/compare_scan_accuracy.py793 except Exception as error:CODE
LOWsrc/skillspector/inspection_ledger.py1024 except Exception as exc: # pragma: no cover - exact exception is node-dependentCODE
LOWsrc/skillspector/cli.py578 except Exception as e:CODE
LOWsrc/skillspector/cli.py712 except Exception as e:CODE
LOWsrc/skillspector/cli.py1752 except Exception:CODE
LOWsrc/skillspector/cli.py2208 except Exception as e:CODE
LOWsrc/skillspector/cli.py2522 except Exception as e:CODE
LOWsrc/skillspector/llm_analyzer_base.py725 except Exception as exc:CODE
LOWsrc/skillspector/llm_analyzer_base.py794 except Exception as exc:CODE
LOWsrc/skillspector/llm_analyzer_base.py866 except Exception as exc:CODE
LOWsrc/skillspector/nodes/meta_analyzer.py860 except Exception as e:CODE
LOW…spector/nodes/analyzers/semantic_security_discovery.py283 except Exception as exc:CODE
LOW…llspector/nodes/analyzers/bundled_execution_surface.py1727 except Exception as exc:CODE
LOWsrc/skillspector/nodes/analyzers/__init__.py48 except Exception as exc:CODE
LOWsrc/skillspector/nodes/analyzers/static_yara.py875 except Exception as exc:CODE
LOW…killspector/nodes/analyzers/semantic_quality_policy.py243 except Exception as exc:CODE
LOW…llspector/nodes/analyzers/semantic_developer_intent.py275 except Exception as exc:CODE
LOWsrc/skillspector/nodes/analyzers/static_runner.py1209 except Exception as exc:CODE
LOWsrc/skillspector/nodes/analyzers/mcp_tool_poisoning.py371 except Exception:CODE
LOWsrc/skillspector/nodes/analyzers/mcp_tool_poisoning.py482 except Exception:CODE
LOWsrc/skillspector/nodes/analyzers/mcp_tool_poisoning.py1468 except Exception as exc:CODE
LOWsrc/skillspector/providers/registry.py57 except Exception:CODE
Modern AI Meta-Vocabulary10 hits · 29 pts
SeverityFileLineSnippetContext
MEDIUMmodel_registry.yaml1# Model registry — context window and output token limits.COMMENT
MEDIUMmodel_registry.yaml10# context_length: <int> # total context window in tokens (required)COMMENT
MEDIUMdocs/LLM_ANALYZER_BASE_GUIDE.md627 context_length: 128000 # total context window in tokens (required)CODE
MEDIUM…killspector/providers/azure_openai/model_registry.yaml8# context_length: <int> # total context window in tokens (required)COMMENT
MEDIUMsrc/skillspector/providers/bedrock/model_registry.yaml8# context_length: <int> # total context window in tokens (required)COMMENT
MEDIUMsrc/skillspector/providers/nv_build/model_registry.yaml8# context_length: <int> # total context window in tokens (required)COMMENT
MEDIUM…pector/providers/openai_compatible/model_registry.yaml9# context_length: <int> # total context window in tokens (required)COMMENT
MEDIUM…c/skillspector/providers/anthropic/model_registry.yaml8# context_length: <int> # total context window in tokens (required)COMMENT
MEDIUMsrc/skillspector/providers/ollama/model_registry.yaml8# context_length: <int> # total context window in tokens (required)COMMENT
MEDIUMsrc/skillspector/providers/openai/model_registry.yaml8# context_length: <int> # total context window in tokens (required)COMMENT
Modern Structural Boilerplate23 hits · 24 pts
SeverityFileLineSnippetContext
LOWcontrib/batch_scan/runner.py58def set_api_pool(pool: "ApiKeyPool | None") -> None:CODE
LOWcontrib/batch_scan/__init__.py54__all__ = [CODE
LOWsrc/skillspector/logging_config.py64def set_level(level: int | str) -> None:CODE
LOWsrc/skillspector/inspection_ledger.py16logger = logging.getLogger(__name__)CODE
LOWsrc/skillspector/constants.py23logger = logging.getLogger(__name__)CODE
LOWsrc/skillspector/__init__.py37__all__ = ["create_graph", "graph", "__version__"]CODE
LOWsrc/skillspector/inference_usage.py337 def set_provider(self, provider: str) -> None:CODE
LOWsrc/skillspector/nodes/analyzers/__init__.py63__all__ = ["ANALYZER_NODE_IDS", "ANALYZER_NODES", "ANALYZER_MODULES"]CODE
LOWsrc/skillspector/nodes/analyzers/mcp_tool_poisoning.py65logger = logging.getLogger(__name__)CODE
LOWsrc/skillspector/providers/chat_models.py28logger = logging.getLogger(__name__)CODE
LOWsrc/skillspector/providers/__init__.py299__all__ = [CODE
LOWsrc/skillspector/providers/codex_cli/__init__.py29__all__ = ["CodexCLIProvider"]CODE
LOWsrc/skillspector/providers/azure_openai/__init__.py20__all__ = ["REGISTRY_PATH", "AzureOpenAIProvider"]CODE
LOWsrc/skillspector/providers/anthropic_proxy/__init__.py20__all__ = ["REGISTRY_PATH", "AnthropicProxyProvider"]CODE
LOWsrc/skillspector/providers/bedrock/__init__.py25__all__ = [CODE
LOWsrc/skillspector/providers/claude_cli/__init__.py25__all__ = ["ClaudeCLIProvider"]CODE
LOWsrc/skillspector/providers/gemini_cli/__init__.py22__all__ = ["GeminiCLIProvider"]CODE
LOWsrc/skillspector/providers/nv_build/__init__.py20__all__ = ["BUILD_BASE_URL", "REGISTRY_PATH", "NvBuildProvider"]CODE
LOW…c/skillspector/providers/openai_compatible/__init__.py20__all__ = ["REGISTRY_PATH", "OpenAICompatibleProvider"]CODE
LOWsrc/skillspector/providers/antigravity_cli/__init__.py22__all__ = ["AntigravityCLIProvider"]CODE
LOWsrc/skillspector/providers/anthropic/__init__.py20__all__ = ["ANTHROPIC_BASE_URL", "REGISTRY_PATH", "AnthropicProvider"]CODE
LOWsrc/skillspector/providers/ollama/__init__.py20__all__ = ["OLLAMA_DEFAULT_BASE_URL", "REGISTRY_PATH", "OllamaProvider"]CODE
LOWsrc/skillspector/providers/openai/__init__.py20__all__ = ["OPENAI_DEFAULT_BASE_URL", "REGISTRY_PATH", "OpenAIProvider"]CODE
Docstring Block Structure3 hits · 15 pts
SeverityFileLineSnippetContext
HIGHsrc/skillspector/llm_utils.py495 Run an async coroutine in a synchronous context, even if there's already a running event loop. This function sSTRING
HIGHsrc/skillspector/input_handler.py666 Resolve input to a scannable directory. Args: input_path: Path or URL to resolve STRING
HIGHsrc/skillspector/providers/_agent_cli.py747Run an agent CLI and return the assistant response text. This is the single security-hardened entry point. All secSTRING
Self-Referential Comments2 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUM…trib/batch_scan/tests/tests-pro/test_runner_patches.py445 # Create a loop via _patched_asyncio_run — it calls _make_quiet_loop internallyCOMMENT
MEDIUM…trib/batch_scan/tests/tests-pro/test_runner_patches.py454 # Create a loop, then manually invoke the quiet-loop logic from the patchCOMMENT
Verbosity Indicators3 hits · 6 pts
SeverityFileLineSnippetContext
LOWcontrib/batch_scan/api_pool.py198 # Step 1: recover rate-limited keys whose backoff has expiredCOMMENT
LOWcontrib/batch_scan/api_pool.py201 # Step 2: find available keys (not rate-limited, slots open)COMMENT
LOWcontrib/batch_scan/api_pool.py219 # Step 3: no capacity — compute wait timeCOMMENT
Structural Annotation Overuse3 hits · 6 pts
SeverityFileLineSnippetContext
LOWcontrib/batch_scan/api_pool.py198 # Step 1: recover rate-limited keys whose backoff has expiredCOMMENT
LOWcontrib/batch_scan/api_pool.py201 # Step 2: find available keys (not rate-limited, slots open)COMMENT
LOWcontrib/batch_scan/api_pool.py219 # Step 3: no capacity — compute wait timeCOMMENT
AI Structural Patterns7 hits · 5 pts
SeverityFileLineSnippetContext
LOWtests/unit/test_suppression.py46CODE
LOWsrc/skillspector/inspection_ledger.py336CODE
LOWsrc/skillspector/nested_artifacts.py439CODE
LOWsrc/skillspector/cli.py386CODE
LOWsrc/skillspector/cli.py2064CODE
LOWsrc/skillspector/nodes/report.py1150CODE
LOWsrc/skillspector/nodes/analyzers/mcp_tool_poisoning.py995CODE
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMtests/integration/test_agent_cli_live.py59#: Real ``stdin -> stdout`` agent CLIs this harness can drive. Add a new CLI hereCOMMENT
Overly Generic Function Names2 hits · 2 pts
SeverityFileLineSnippetContext
LOWtests/unit/test_anthropic_proxy_provider.py210 def handle_request(self, request: httpx.Request) -> httpx.Response:CODE
LOWsrc/skillspector/providers/anthropic_proxy/provider.py109 def handle_request(self, request: httpx.Request) -> httpx.Response:CODE
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOWsrc/skillspector/nodes/analyzers/mcp_tool_poisoning.py355 # Check if this match overlaps with a data URI rangeCOMMENT