Open-source Agent Operating System
904 matches across 13 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | crates/openfang-hands/bundled/twitter/HAND.toml | 29 | # ─── Configurable settings ─────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/twitter/HAND.toml | 176 | # ─── Agent configuration ───────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/clip/HAND.toml | 57 | # ─── Configurable settings ─────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/clip/HAND.toml | 124 | # ─── Publishing settings ──────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/clip/HAND.toml | 184 | # ─── Agent configuration ───────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/trader/HAND.toml | 8 | # ─── Configurable settings ─────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/trader/HAND.toml | 192 | # ─── Agent configuration ───────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/trader/HAND.toml | 688 | # ─── Dashboard metrics ──────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/infisical-sync/HAND.toml | 18 | # ─── Requirements ───────────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/infisical-sync/HAND.toml | 41 | # ─── Settings ───────────────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/infisical-sync/HAND.toml | 99 | # ─── Agent configuration ────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/infisical-sync/HAND.toml | 380 | # ─── Dashboard metrics ──────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/collector/HAND.toml | 8 | # ─── Configurable settings ─────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/collector/HAND.toml | 146 | # ─── Agent configuration ───────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/browser/HAND.toml | 49 | # ─── Configurable settings ─────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/browser/HAND.toml | 110 | # ─── Agent configuration ───────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/lead/HAND.toml | 8 | # ─── Configurable settings ─────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/lead/HAND.toml | 161 | # ─── Agent configuration ───────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/predictor/HAND.toml | 8 | # ─── Configurable settings ─────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/predictor/HAND.toml | 166 | # ─── Agent configuration ───────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/researcher/HAND.toml | 8 | # ─── Configurable settings ─────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/bundled/researcher/HAND.toml | 154 | # ─── Agent configuration ───────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/src/registry.rs | 32 | // ─── Settings availability types ──────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/src/lib.rs | 16 | // ─── Error types ───────────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/src/lib.rs | 38 | // ─── Core types ────────────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-hands/src/lib.rs | 153 | // ─── Hand settings types ──────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/web_fetch.rs | 495 | // ── SSRF allowlist tests ───────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/auth_cooldown.rs | 398 | // ── Auth Profile Rotation (Gap 3) ──────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 127 | // ── Command substitution ────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 141 | // ── Command chaining ────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 151 | // ── I/O redirection ─────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 158 | // ── Expansion and globbing ──────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 164 | // ── Embedded newlines ───────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 173 | // ── Background execution and logical chaining ────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 744 | // ── Env passthrough merge (issue #1169) ──────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 744 | // ── Env passthrough merge (issue #1169) ──────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 857 | // ── Exec policy tests ────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 960 | // ── Shell metacharacter injection tests ────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 1052 | // ── CJK / multi-byte safety tests (issue #490) ────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 1052 | // ── CJK / multi-byte safety tests (issue #490) ────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 1124 | // ── Shell wrapper bypass tests (issue #794) ──────────────────────── |
| MEDIUM | crates/openfang-runtime/src/subprocess_sandbox.rs | 1124 | // ── Shell wrapper bypass tests (issue #794) ──────────────────────── |
| MEDIUM | crates/openfang-runtime/src/provider_health.rs | 45 | // ── Probe cache ────────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/tool_runner.rs | 4537 | // ─── Canvas / A2UI tests ──────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/tool_runner.rs | 4625 | // ── Regression: GitHub issue #919 — rm bypass via process_start ────── |
| MEDIUM | crates/openfang-runtime/src/tool_runner.rs | 4625 | // ── Regression: GitHub issue #919 — rm bypass via process_start ────── |
| MEDIUM | crates/openfang-runtime/src/docker_sandbox.rs | 544 | // ── Container Pool tests ────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/docker_sandbox.rs | 586 | // ── Bind Mount Validation tests ────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 30 | // ── Constants ────────────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 39 | // ── Public types ─────────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 82 | // ── CDP connection ───────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 224 | // ── Browser session ──────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 416 | // ── Command implementations ──────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 621 | // ── Helpers ──────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 672 | // ── Chromium discovery ───────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 796 | // ── Browser manager ──────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 871 | // ── Tool handler functions ───────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 1121 | // ── Embedded JavaScript ──────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 1171 | // ── Root detection ───────────────────────────────────────────────────────── |
| MEDIUM | crates/openfang-runtime/src/browser.rs | 1201 | // ── Tests ────────────────────────────────────────────────────────────────── |
| 448 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | crates/openfang-hands/bundled/researcher/HAND.toml | 321 | ## Sources |
| LOW | crates/openfang-hands/src/lib.rs | 121 | pub check_value: String, |
| LOW | crates/openfang-hands/src/lib.rs | 281 | #[serde(default = "default_provider")] |
| LOW | crates/openfang-hands/src/lib.rs | 361 | /// Unique hand identifier (e.g. "clip"). |
| LOW | crates/openfang-hands/src/lib.rs | 381 | /// Requirements that must be satisfied before activation. |
| LOW | crates/openfang-hands/src/lib.rs | 421 | pub instance_id: Uuid, |
| LOW | crates/openfang-runtime/src/context_budget.rs | 1 | //! Dynamic context budget for tool result truncation. |
| LOW | crates/openfang-runtime/src/web_fetch.rs | 181 | // --------------------------------------------------------------------------- |
| LOW | crates/openfang-runtime/src/agent_loop.rs | 41 | const BASE_RETRY_DELAY_MS: u64 = 1000; |
| LOW | crates/openfang-runtime/src/agent_loop.rs | 141 | /// signatures, Gemini 2.5+ thoughts, OpenAI-compat reasoning_content, |
| LOW | crates/openfang-runtime/src/agent_loop.rs | 2361 | let _ = hook_reg.fire(&ctx); |
| LOW | crates/openfang-runtime/src/auth_cooldown.rs | 1 | //! Provider circuit breaker with exponential cooldown backoff. |
| LOW | crates/openfang-runtime/src/auth_cooldown.rs | 61 | // --------------------------------------------------------------------------- |
| LOW | crates/openfang-runtime/src/think_filter.rs | 1 | //! Streaming think-tag filter. |
| LOW | crates/openfang-runtime/src/llm_driver.rs | 21 | status: u16, |
| LOW | crates/openfang-runtime/src/llm_driver.rs | 181 | /// Base URL override. |
| LOW | crates/openfang-runtime/src/llm_driver.rs | 201 | /// |
| LOW | crates/openfang-runtime/src/session_repair.rs | 1 | //! Session history validation and repair. |
| LOW | crates/openfang-runtime/src/session_repair.rs | 21 | /// Number of orphaned ToolResult blocks removed. |
| LOW | crates/openfang-runtime/src/session_repair.rs | 41 | /// - 2c. Deduplicates ToolResults with the same tool_use_id |
| LOW | crates/openfang-runtime/src/session_repair.rs | 121 | ..Default::default() |
| LOW | crates/openfang-runtime/src/session_repair.rs | 361 | }, |
| LOW | crates/openfang-runtime/src/session_repair.rs | 1001 | assert_eq!(result_count, 1, "Should keep only the first ToolResult"); |
| LOW | crates/openfang-runtime/src/apply_patch.rs | 1 | //! Multi-hunk diff-based file patching. |
| LOW | crates/openfang-runtime/src/llm_errors.rs | 1 | //! LLM error classification and sanitization. |
| LOW | crates/openfang-runtime/src/llm_errors.rs | 41 | /// Classified error with metadata. |
| LOW | crates/openfang-runtime/src/llm_errors.rs | 221 | "network error", |
| LOW | crates/openfang-runtime/src/llm_errors.rs | 541 | } |
| LOW | crates/openfang-runtime/src/prompt_builder.rs | 1 | //! Centralized system prompt builder. |
| LOW | crates/openfang-runtime/src/prompt_builder.rs | 61 | pub sender_id: Option<String>, |
| LOW | crates/openfang-runtime/src/a2a.rs | 1 | //! A2A (Agent-to-Agent) Protocol — cross-framework agent interoperability. |
| LOW | crates/openfang-runtime/src/a2a.rs | 21 | |
| LOW | crates/openfang-runtime/src/a2a.rs | 61 | #[derive(Debug, Clone, Serialize, Deserialize)] |
| LOW | crates/openfang-runtime/src/a2a.rs | 81 | /// A2A Task — unit of work exchanged between agents. |
| LOW | crates/openfang-runtime/src/a2a.rs | 101 | #[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)] |
| LOW | crates/openfang-runtime/src/a2a.rs | 181 | }, |
| LOW | crates/openfang-runtime/src/a2a.rs | 201 | #[serde(default)] |
| LOW | crates/openfang-runtime/src/graceful_shutdown.rs | 1 | //! Graceful shutdown — ordered subsystem teardown for clean exit. |
| LOW | crates/openfang-runtime/src/compactor.rs | 1 | //! LLM-based session compaction. |
| LOW | crates/openfang-runtime/src/hooks.rs | 1 | //! Plugin lifecycle hooks — intercept points at key moments in agent execution. |
| LOW | crates/openfang-runtime/src/context_overflow.rs | 1 | //! Context overflow recovery pipeline. |
| LOW | crates/openfang-runtime/src/subprocess_sandbox.rs | 1 | //! Subprocess environment sandboxing. |
| LOW | crates/openfang-runtime/src/subprocess_sandbox.rs | 21 | "USERPROFILE", |
| LOW | crates/openfang-runtime/src/subprocess_sandbox.rs | 401 | |
| LOW | crates/openfang-runtime/src/subprocess_sandbox.rs | 1081 | #[test] |
| LOW | crates/openfang-runtime/src/provider_health.rs | 1 | //! Provider health probing — lightweight HTTP checks for local LLM providers. |
| LOW | crates/openfang-runtime/src/reply_directives.rs | 1 | //! Reply directive parsing and streaming accumulation. |
| LOW | crates/openfang-runtime/src/mcp_server.rs | 1 | //! MCP Server — expose OpenFang tools via the Model Context Protocol. |
| LOW | crates/openfang-runtime/src/loop_guard.rs | 1 | //! Tool loop detection for the agent execution loop. |
| LOW | crates/openfang-runtime/src/agent_context.rs | 1 | //! Per-turn agent context loader for external `context.md` files. |
| LOW | crates/openfang-runtime/src/agent_context.rs | 21 | /// Maximum size of `context.md` to inject into the prompt (32 KB). |
| LOW | crates/openfang-runtime/src/command_lane.rs | 1 | //! Command lane system — lane-based command queue with concurrency control. |
| LOW | crates/openfang-runtime/src/tool_policy.rs | 1 | //! Multi-layer tool policy resolution. |
| LOW | crates/openfang-runtime/src/tool_runner.rs | 21 | /// Check if a tool name refers to a shell execution tool. |
| LOW | crates/openfang-runtime/src/tool_runner.rs | 3321 | "container_id": container.container_id, |
| LOW | crates/openfang-runtime/src/tool_runner.rs | 4621 | // Cleanup |
| LOW | crates/openfang-runtime/src/workspace_sandbox.rs | 1 | //! Workspace filesystem sandboxing. |
| LOW | crates/openfang-runtime/src/sandbox.rs | 1 | //! WASM sandbox for secure skill/plugin execution. |
| LOW | crates/openfang-runtime/src/shell_bleed.rs | 1 | //! Shell bleed detection — scan script files for environment variable leaks. |
| LOW | crates/openfang-runtime/src/browser.rs | 1 | //! Native browser automation via Chrome DevTools Protocol (CDP). |
| 217 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 369 | ### Step 1: Extract the clip |
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 374 | ### Step 2: Crop to vertical (9:16) |
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 383 | ### Step 3: Generate SRT captions from transcript |
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 400 | ### Step 4: Burn captions onto the clip |
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 439 | ### Step 5: Generate thumbnail |
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 454 | ### Step 1: Check settings |
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 461 | ### Step 2: Validate credentials |
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 473 | ### Step 3: Publish to Telegram |
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 489 | ### Step 4: Publish to WhatsApp |
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 516 | ### Step 5: Rate limiting |
| LOW | crates/openfang-hands/bundled/clip/HAND.toml | 522 | ### Step 6: Publishing summary |
| LOW | crates/openfang-hands/bundled/trader/HAND.toml | 396 | ### Step 1: Build the BULL Case |
| LOW | crates/openfang-hands/bundled/trader/HAND.toml | 409 | ### Step 2: Build the BEAR Case |
| LOW | crates/openfang-hands/bundled/trader/HAND.toml | 422 | ### Step 3: Cognitive Bias Check |
| LOW | crates/openfang-hands/bundled/trader/HAND.toml | 430 | ### Step 4: Synthesis & Final Signal |
| LOW | crates/openfang-runtime/src/web_fetch.rs | 55 | // Step 1: SSRF protection — BEFORE any network I/O |
| LOW | crates/openfang-runtime/src/web_fetch.rs | 58 | // Step 2: Cache lookup (only for GET) |
| LOW | crates/openfang-runtime/src/web_fetch.rs | 67 | // Step 3: Build request with configured method |
| LOW | crates/openfang-runtime/src/web_fetch.rs | 127 | // Step 4: For GET requests, detect HTML and convert to Markdown. |
| LOW | crates/openfang-runtime/src/web_fetch.rs | 143 | // Step 5: Truncate (char-boundary-safe to avoid panics on multi-byte UTF-8) |
| LOW | crates/openfang-runtime/src/web_fetch.rs | 154 | // Step 6: Wrap with external content markers |
| LOW | crates/openfang-runtime/src/web_fetch.rs | 160 | // Step 7: Cache (only GET responses) |
| LOW | crates/openfang-runtime/src/drivers/gemini.rs | 392 | // Step 1: Merge consecutive same-role turns |
| LOW | crates/openfang-runtime/src/drivers/gemini.rs | 404 | // Step 2: Drop orphaned functionCall parts from model turns. |
| LOW | crates/openfang-runtime/src/drivers/gemini.rs | 443 | // Step 3: Drop orphaned functionResponse parts from user turns. |
| LOW | crates/openfang-runtime/src/drivers/gemini.rs | 473 | // Step 4: Remove turns that ended up empty after filtering |
| LOW | crates/openfang-runtime/src/drivers/gemini.rs | 476 | // Step 5: Final merge pass (removing parts may have created new consecutive same-role) |
| LOW | crates/openfang-runtime/src/drivers/copilot.rs | 751 | // Step 1: Request device code. |
| LOW | crates/openfang-runtime/src/drivers/copilot.rs | 754 | // Step 2: Tell the user what to do + try to open browser. |
| LOW | crates/openfang-runtime/src/drivers/copilot.rs | 767 | // Step 3: Poll for authorization. |
| LOW | crates/openfang-runtime/src/drivers/copilot.rs | 770 | // Step 4: Persist. |
| LOW | crates/openfang-runtime/src/drivers/bedrock.rs | 561 | // Step 1: remove toolResult blocks whose ID is not in the assistant's toolUse set. |
| LOW | crates/openfang-runtime/src/drivers/bedrock.rs | 582 | // Step 2: deduplicate — keep only the first toolResult block per tool_use_id. |
| LOW | crates/openfang-runtime/src/drivers/bedrock.rs | 605 | // Step 3: insert a synthetic error result for any toolUse ID with no result. |
| LOW | crates/openfang-runtime/src/drivers/bedrock.rs | 626 | // Step 4: if all blocks were removed and nothing was inserted, the message is |
| LOW | crates/openfang-runtime/src/drivers/anthropic.rs | 931 | // Step 1: API delivers a thinking block with signature |
| LOW | crates/openfang-runtime/src/drivers/anthropic.rs | 951 | // Step 2: Verify the signature reached the ContentBlock |
| LOW | crates/openfang-runtime/src/drivers/anthropic.rs | 965 | // Step 3: Now feed the assistant turn back into the driver as if |
| LOW | crates/openfang-runtime/src/drivers/anthropic.rs | 997 | // Step 4: Verify on-the-wire JSON shape (`type=thinking`, `signature` present). |
| LOW | crates/openfang-runtime/src/drivers/anthropic.rs | 1076 | // Step 1: API delivers a response with a redacted_thinking block. |
| LOW | crates/openfang-runtime/src/drivers/anthropic.rs | 1095 | // Step 2: The opaque blob must reach the ContentBlock layer. |
| LOW | crates/openfang-runtime/src/drivers/anthropic.rs | 1103 | // Step 3: Resubmit the assistant turn as conversation history. |
| LOW | crates/openfang-runtime/src/drivers/anthropic.rs | 1128 | // Step 4: On-the-wire JSON shape (`type=redacted_thinking`, `data` present). |
| LOW | crates/openfang-runtime/src/drivers/openai.rs | 2204 | // Step 1: parse server response shape. |
| LOW | crates/openfang-runtime/src/drivers/openai.rs | 2217 | // Step 2: simulate the driver building blocks (mirrors the live |
| LOW | crates/openfang-runtime/src/drivers/openai.rs | 2232 | // Step 3: replay through the outbound path. |
| LOW | crates/openfang-cli/src/main.rs | 6800 | // Step 1: Show what will be removed |
| LOW | crates/openfang-cli/src/main.rs | 6839 | // Step 2: Confirm |
| LOW | crates/openfang-cli/src/main.rs | 6849 | // Step 3: Stop running daemon |
| LOW | crates/openfang-cli/src/main.rs | 6864 | // Step 4: Remove auto-start entries |
| LOW | crates/openfang-cli/src/main.rs | 6868 | // Step 5: Clean PATH from shell configs |
| LOW | crates/openfang-cli/src/main.rs | 6875 | // Step 6: Remove ~/.openfang/ data |
| LOW | crates/openfang-cli/src/main.rs | 6888 | // Step 7: Remove cargo bin copy if it exists and is separate from current exe |
| LOW | crates/openfang-cli/src/main.rs | 6896 | // Step 8: Remove the binary itself (must be last) |
| LOW | crates/openfang-cli/src/tui/screens/init_wizard.rs | 891 | // Step 1: request device code |
| LOW | crates/openfang-cli/src/tui/screens/init_wizard.rs | 913 | // Step 2: poll for token |
| LOW | crates/openfang-cli/src/tui/screens/init_wizard.rs | 937 | // Step 3: fetch models |
| LOW | crates/openfang-api/static/js/pages/wizard.js | 21 | // Step 2: Provider setup |
| LOW | crates/openfang-api/static/js/pages/wizard.js | 30 | // Step 3: Agent creation |
| LOW | crates/openfang-api/static/js/pages/wizard.js | 148 | // Step 3: Category filtering |
| 18 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | crates/openfang-api/tests/api_integration_test.rs | 937 | state.kernel.config.auth.password_hash.clone() |
| CRITICAL | crates/openfang-api/src/server.rs | 154 | state.kernel.config.auth.password_hash.clone() |
| CRITICAL | crates/openfang-api/src/routes.rs | 5455 | && !state.kernel.config.network.shared_secret.is_empty(); |
| CRITICAL | crates/openfang-api/src/routes.rs | 7735 | state.kernel.config.default_model.provider.clone(), |
| CRITICAL | crates/openfang-api/src/routes.rs | 7736 | state.kernel.config.default_model.api_key_env.clone(), |
| CRITICAL | crates/openfang-api/src/ws.rs | 332 | state.kernel.config.auth.password_hash.clone() |
| CRITICAL | crates/openfang-kernel/src/kernel.rs | 2515 | ssrf_allowed_hosts: self.config.web.fetch.ssrf_allowed_hosts.clone(), |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | crates/openfang-runtime/src/media_understanding.rs | 238 | description: "[Video description would be generated by Gemini]".to_string(), |
| HIGH | crates/openfang-runtime/src/web_search.rs | 207 | // Include AI-generated answer if available |
| HIGH | crates/openfang-types/src/config.rs | 286 | /// Include AI-generated answer summary. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | crates/openfang-hands/bundled/lead/SKILL.md | 177 | "Jane Smith","VP Engineering","Acme Corp","https://acme.com","https://linkedin.com/in/janesmith","SaaS","SMB (120 employ |
| LOW | crates/openfang-hands/bundled/lead/SKILL.md | 186 | "company": "Acme Corp", |
| LOW | crates/openfang-memory/src/knowledge.rs | 318 | name: "Acme Corp".to_string(), |
| LOW | crates/openfang-memory/src/knowledge.rs | 344 | assert_eq!(matches[0].target.name, "Acme Corp"); |
| LOW | crates/openfang-types/src/approval.rs | 508 | decided_by: Some("admin@example.com".into()), |
| LOW | crates/openfang-types/src/approval.rs | 514 | assert_eq!(back.decided_by, Some("admin@example.com".into())); |
| LOW | crates/openfang-channels/src/xmpp.rs | 231 | platform_id: "user@example.com".to_string(), |
| LOW | crates/openfang-channels/src/email.rs | 598 | assert_eq!(extract_email_addr("user@example.com"), "user@example.com"); |
| LOW | crates/openfang-channels/src/linkedin.rs | 440 | "fromName": "Jane Doe", |
| LOW | crates/openfang-channels/src/linkedin.rs | 449 | assert_eq!(name, "Jane Doe"); |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | docs/troubleshooting.md | 434 | curl -H "Authorization: Bearer your-api-key" http://127.0.0.1:4200/api/agents |
| HIGH | docs/api-reference.md | 39 | Authorization: Bearer <your-api-key> |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test_vertex_e2e.py | 87 | except Exception as e: |
| LOW | test_vertex_e2e.py | 156 | except Exception as e: |
| MEDIUM | test_vertex_e2e.py | 12 | def test_vertex_ai(): |
| LOW | agents/langchain-code-reviewer/server.py | 158 | except Exception as e: |
| LOW | docs/skill-development.md | 253 | except Exception as e: |
| LOW | sdk/python/openfang_sdk.py | 120 | except Exception as e: |
| LOW | sdk/python/openfang_sdk.py | 128 | except Exception as e: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | sdk/python/openfang_client.py | 10 | # Create an agent |
| MEDIUM | sdk/python/examples/client_basic.py | 25 | # Create a new agent from the "assistant" template |
| MEDIUM | sdk/python/examples/client_streaming.py | 17 | # Create an agent |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | crates/openfang-hands/bundled/researcher/HAND.toml | 168 | system_prompt = """You are Researcher Hand — an autonomous deep research agent that conducts exhaustive investigations, |
| MEDIUM | crates/openfang-channels/src/router.rs | 779 | // leverage line in the patch from issue #1127. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test_vertex_e2e.py | 7 | |
| LOW | agents/langchain-code-reviewer/server.py | 20 | |
| LOW | agents/langchain-code-reviewer/server.py | 20 | |
| LOW | sdk/python/openfang_client.py | 31 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test_vertex_e2e.py | 91 | |
| LOW | sdk/python/openfang_client.py | 82 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | crates/openfang-api/static/js/pages/wizard.js | 5 | function wizardTomlMultilineEscape(s) { |