1.8

Adjusted Signal

1.8

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

13.7K

Stars

TypeScript

Language

423.7K

Lines of Code

2.0K

Files

613

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 6.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 453 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.5/100 · LOW

Are imports declared and package/API names verified? 106 finding(s).

Agent Over-Engineering Ratio 2.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 197 finding(s).

PR Review Velocity Impact 8.0/100 · LOW

Which changes need focused human review? 613 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 10MEDIUM 20LOW 583

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 613 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block210 hits · 206 pts

Severity	File	Line	Snippet	Context
LOW	script/fds-upload.ts	1	#!/usr/bin/env bun	COMMENT
LOW	packages/cli/test/util/credential-env.test.ts	41	//	COMMENT
LOW	packages/cli/test/plugin/checkpoint-splitover.test.ts	321	expect(output.reason).toBeUndefined()	COMMENT
LOW	packages/cli/test/provider/empty-content-wire.test.ts	1	import { describe, expect, test } from "bun:test"	COMMENT
LOW	packages/cli/test/provider/strict-schema-wire.test.ts	1	import { describe, expect, test } from "bun:test"	COMMENT
LOW	packages/cli/test/provider/strict-schema-wire.test.ts	241	// The premise the exclusion above rests on, asserted rather than cited.	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	1	export {}	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	21	// path.join(dir, "mimocode.json"),	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	41	// test("GitLab Duo: config instanceUrl option sets baseURL", async () => {	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	61	// init: async () => {	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	81	// )	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	101	// Env.set("GITLAB_TOKEN", "")	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	121		COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	141	// expect(providers[ProviderID.gitlab].key).toBe("glpat-test-pat-token")	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	161	// }),	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	181	// await Bun.write(	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	201	// fn: async () => {	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	221	// init: async () => {	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	241	// provider: {	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	261	// const providers = await list()	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	281	// directory: tmp.path,	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	301	// await Bun.write(path.join(dir, "mimocode.json"), JSON.stringify({ $schema: "https://opencode.ai/config.json"	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	321	// options: { workflowRef: "claude_sonnet_4_6" },	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	341	// expect(language).toBeInstanceOf(GitLabWorkflowLanguageModel)	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	361	// expect(model).toBeDefined()	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	381	// const providers = await list()	COMMENT
LOW	packages/cli/test/provider/gitlab-duo.test.ts	401	// init: async () => {	COMMENT
LOW	…ages/cli/test/effect/app-runtime-mcp-singleton.test.ts	1	import { expect, test } from "bun:test"	COMMENT
LOW	…ages/cli/test/effect/app-runtime-mcp-singleton.test.ts	81		COMMENT
LOW	packages/cli/test/server/workflows-route.test.ts	221	await Effect.runPromise(WorkflowPersistence.writeScript(runID, "export const meta = {}\n"))	COMMENT
LOW	packages/cli/test/server/workflows-route.test.ts	241	// sessionID to stay robust against any residue in the shared in-memory DB.	COMMENT
LOW	packages/cli/test/mcp/sampling-e2e.test.ts	1041	const detail = h.samplingOutcomes[0].detail as any	COMMENT
LOW	packages/cli/test/mcp/sampling-e2e.test.ts	1281	// "unknown token" error branch instead.	COMMENT
LOW	packages/cli/test/mcp/sampling-e2e.test.ts	1541	hang.restore()	COMMENT
LOW	…ages/cli/test/mcp/openai-compatible-args-patch.test.ts	1	import { describe, expect, test } from "bun:test"	COMMENT
LOW	packages/cli/test/cli/tui/context-usage.test.ts	1	import { describe, expect, test } from "bun:test"	COMMENT
LOW	packages/cli/test/cli/tui/select-messages.test.ts	21		COMMENT
LOW	packages/cli/test/workflow/runtime-worktree.test.ts	201	const runtime = yield* WorkflowRuntime.Service	COMMENT
LOW	packages/cli/test/workflow/tool.test.ts	441	),	COMMENT
LOW	packages/cli/test/workflow/runtime.test.ts	301	}),	COMMENT
LOW	packages/cli/test/workflow/runtime.test.ts	621	// BOTH pass the guard, BOTH launch() — and launch does runs.set(runID, entry),	COMMENT
LOW	packages/cli/test/lib/llm-server.ts	461	export class Reply {	COMMENT
LOW	packages/cli/test/actor/liveness.test.ts	321	// tail-but-healthy row. This is what disqualifies 300_000 (== registry.ts	COMMENT
LOW	…actor/poststop-progress-write-permission.repro.test.ts	61	// own permission ruleset decide whether the file can ever be written?	COMMENT
LOW	packages/cli/test/actor/spawn-no-deadlock.test.ts	301		COMMENT
LOW	packages/cli/test/tool/actor-spawn-preference.test.ts	1	// Real-model verification that the actor tool's spawn-first affordance actually	COMMENT
LOW	packages/cli/test/tool/question.test.ts	121	expect(result.metadata.answers).toHaveLength(2)	COMMENT
LOW	packages/cli/test/tool/question.test.ts	141	// } catch (e: any) {	COMMENT
LOW	packages/cli/test/tool/question.test.ts	161	// expect(true).toBe(false)	COMMENT
LOW	packages/cli/test/tool/bash-conflict-ownership.test.ts	21	// read before the next tool call and a system prompt is not.	COMMENT
LOW	packages/cli/test/cron/end-to-end.test.ts	21		COMMENT
LOW	packages/cli/test/cron/cron-lock.test.ts	101	})	COMMENT
LOW	packages/cli/test/cron/cron-lock.test.ts	141	// Regression for PR #1479 finding #7 (re-review round). The earlier fix wrote	COMMENT
LOW	…es/cli/test/session/auto-overflow-writer-first.test.ts	201	cancel: () => Effect.void,	COMMENT
LOW	…es/cli/test/session/auto-overflow-writer-first.test.ts	301	// SessionPrompt's runLoop (prompt.ts, the `overflowCheck(...)` branch) against	COMMENT
LOW	…es/cli/test/session/auto-overflow-writer-first.test.ts	721	// scaffolds an EMPTY TEMPLATE (checkpoint.ts:650) before spawning the	COMMENT
LOW	…/test/session/checkpoint-splitover-integration.test.ts	61	// "CheckpointSplitoverPlugin" tracks the function's .name — applyPlugin	COMMENT
LOW	…/test/session/checkpoint-splitover-integration.test.ts	361		COMMENT
LOW	packages/cli/test/session/rebuild-on-the-spot.test.ts	101	})	COMMENT
LOW	packages/cli/test/session/rebuild-on-the-spot.test.ts	221	// same code path a user hits by running `/rebuild`) against a scripted LLM	COMMENT
150 more matches not shown…

Hyper-Verbose Identifiers143 hits · 150 pts

Severity	File	Line	Snippet	Context
LOW	…ages/cli/test/mcp/openai-compatible-args-patch.test.ts	51	function overlappingSnapshotsLines(): string[] {	CODE
LOW	packages/cli/test/mcp/lifecycle.test.ts	45	function getOrCreateClientState(name?: string): MockClientState {	CODE
LOW	…es/cli/test/session/auto-overflow-writer-first.test.ts	142	function writerThatWritesCheckpointAfter(marker: string, delayMs: number, onSpawn?: () => void): SpawnImpl {	CODE
LOW	packages/cli/test/session/rebuild-on-the-spot.test.ts	116	function writerThatWritesCheckpoint(marker: string): SpawnImpl {	CODE
LOW	packages/cli/test/session/prompt-effect.test.ts	582	function restrictedAgentProviderCfg(url: string) {	CODE
LOW	packages/cli/src/flag/flag.ts	84	export function clearGeneratedServerPassword() {	CODE
LOW	packages/cli/src/skill/builtin/extract.ts	21	export function shouldExtractBuiltinSkill(	CODE
LOW	…kflows/create-data-context/tests/test_state_helpers.py	39	def test_preflight_is_stateless_and_has_no_setup_obligation(self) -> None:	CODE
LOW	…kflows/create-data-context/tests/test_state_helpers.py	70	def test_request_modes_do_not_create_setup_or_user_context_state(self) -> None:	CODE
LOW	…kflows/create-data-context/tests/test_state_helpers.py	88	def test_suppression_helper_records_and_preflight_surfaces_exact_plugin_id(self) -> None:	CODE
LOW	…kflows/create-data-context/tests/test_state_helpers.py	112	def test_suppression_helper_replaces_duplicate_plugin_ids(self) -> None:	CODE
LOW	…kflows/create-data-context/tests/test_state_helpers.py	138	def test_preflight_tolerates_invalid_suppression_file(self) -> None:	CODE
LOW	…kflows/create-data-context/tests/test_state_helpers.py	150	def test_source_category_config_is_exposed_without_readiness_claims(self) -> None:	CODE
LOW⚡	…kflows/create-data-context/tests/test_state_helpers.py	161	def test_source_category_config_documents_preferred_plugins_as_hints(self) -> None:	CODE
LOW⚡	…kflows/create-data-context/tests/test_state_helpers.py	169	def test_deleted_stateful_helpers_are_absent(self) -> None:	CODE
LOW⚡	…kflows/create-data-context/tests/test_state_helpers.py	178	def test_contract_text_keeps_setup_optional(self) -> None:	CODE
LOW	…kflows/create-data-context/tests/test_state_helpers.py	196	def test_focused_skills_do_not_restore_preflight_or_repeated_context(self) -> None:	CODE
LOW	…kflows/create-data-context/tests/test_state_helpers.py	223	def test_connector_playbook_treats_authenticated_cli_as_valid_existing_access(self) -> None:	CODE
LOW	…reate-data-context/scripts/data_analytics_preflight.py	42	def read_source_category_config() -> dict[str, Any]:	CODE
LOW	…reate-data-context/scripts/data_analytics_preflight.py	66	def read_plugin_install_suppressions(args: argparse.Namespace) -> dict[str, Any]:	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	53	def direct_children_with_class(node: Tag, class_name: str) -> list[Tag]:	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	74	def table_first_column_is_bold(raw_html: str) -> bool:	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	159	def cell_text_styles_and_links(	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	229	def panel_has_only_heading_and_table(panel: Tag) -> bool:	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	251	def two_col_can_render_as_table_grid(node: Tag) -> bool:	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	90	def render_simple_svg_with_pillow(	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	112	def scaled_points_from_attribute(points_value: str) -> list[tuple[float, float]]:	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	243	def render_two_col_table_grid(chart: dict[str, Any], path: Path) -> None:	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	351	def png_is_blank_or_near_empty(candidate: Path) -> bool:	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	522	def render_single_chart_image(chart: dict[str, Any], out_dir: Path) -> None:	CODE
LOW	…google-doc/scripts/report_to_google_doc/docx_writer.py	76	def use_portable_bullet_glyphs(document: Any) -> None:	CODE
LOW	…-to-google-doc/scripts/report_to_google_doc/quality.py	36	def is_expected_svg_mark_color(color: str) -> bool:	CODE
LOW	…-to-google-doc/scripts/report_to_google_doc/quality.py	91	def count_expected_color_hits(	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	236	def section_items_by_candidates(report: Report, candidates: list[str]) -> list[str]:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	243	def section_title_by_candidates(report: Report, candidates: list[str], fallback: str) -> str:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	456	def looks_like_chart_title_candidate(text: str) -> bool:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	779	def add_embedded_png_chart_item(	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	817	def parse_sections_and_charts(	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	1370	def render_embedded_png_chart(chart: ChartItem, out_dir: Path) -> tuple[Path \| None, dict[str, Any]]:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	2221	def source_bullets_with_links(report: Report) -> tuple[list[str], list[str \| None]]:	CODE
LOW	…ill/builtin/.bundle/pptx-official/scripts/dump_text.py	187	def _paragraphs_with_bullet_flag(slide,	CODE
LOW	…c/skill/builtin/.bundle/pptx-official/scripts/prune.py	193	def _drop_content_type_overrides(root: Path,	CODE
LOW	packages/cli/src/util/media.ts	136	export function oversizedAttachmentNotice(input: { label: string; size: number; compressed?: boolean; hint: string }) {	CODE
LOW	packages/cli/src/plugin/cloudflare.ts	3	export async function CloudflareWorkersAuthPlugin(_input: PluginInput): Promise<Hooks> {	CODE
LOW	packages/cli/src/plugin/cloudflare.ts	29	export async function CloudflareAIGatewayAuthPlugin(_input: PluginInput): Promise<Hooks> {	CODE
LOW	packages/cli/src/plugin/codex.ts	69	export function extractAccountIdFromClaims(claims: IdTokenClaims): string \| undefined {	CODE
LOW	packages/cli/src/plugin/subagent-progress-checker.ts	102	export async function SubagentProgressCheckerPlugin(pluginInput: PluginInput): Promise<Hooks> {	CODE
LOW	packages/cli/src/plugin/checkpoint-splitover.ts	16	export async function CheckpointSplitoverPlugin(pluginInput: PluginInput): Promise<Hooks> {	CODE
LOW	packages/cli/src/provider/xiaomi-family.ts	18	export function xiaomiProviderForEndpoint(url?: string): string {	CODE
LOW	packages/cli/src/provider/xiaomi-family.ts	53	export async function removeXiaomiFamilyCredentials(remove: (providerID: string) => Promise<unknown> \| unknown) {	CODE
LOW	packages/cli/src/provider/transform.ts	440	export function ensureTrailingUserMessage(msgs: ModelMessage[]): ModelMessage[] {	CODE
LOW	packages/cli/src/provider/transform.ts	480	export function dropTrailingAssistantPrefill(msgs: ModelMessage[]): ModelMessage[] {	CODE
LOW	packages/cli/src/provider/transform.ts	503	export function isAssistantPrefillRejection(error: unknown): boolean {	CODE
LOW	packages/cli/src/provider/transform.ts	661	function forceAnthropicReasoningContent(msgs: ModelMessage[], model: Provider.Model): ModelMessage[] {	CODE
LOW	packages/cli/src/provider/transform.ts	830	function providerImageDimensionCap(model: Provider.Model): number {	CODE
LOW	packages/cli/src/provider/transform.ts	1905	function flattenDiscriminatedUnion(schema: JSONSchema.BaseSchema \| JSONSchema7): JSONSchema7 {	CODE
LOW	packages/cli/src/provider/provider.ts	53	function shouldUseCopilotResponsesApi(modelID: string): boolean {	CODE
LOW	…dk/copilot/chat/map-openai-compatible-finish-reason.ts	3	export function mapOpenAICompatibleFinishReason(	CODE
LOW	…lot/chat/convert-to-openai-compatible-chat-messages.ts	13	export function convertToOpenAICompatibleChatMessages(prompt: LanguageModelV3Prompt): OpenAICompatibleChatPrompt {	CODE
LOW	…opilot/responses/map-openai-responses-finish-reason.ts	3	export function mapOpenAIResponseFinishReason({	CODE
83 more matches not shown…

Structural Annotation Overuse44 hits · 76 pts

Severity	File	Line	Snippet	Context
LOW	packages/cli/test/cron/end-to-end.test.ts	152	// Step 1: register a recurring cron task via Scheduler.add — this is	COMMENT
LOW⚡	packages/cli/test/cron/end-to-end.test.ts	165	// Step 2: backdate createdAt so the task's next computed fire is in	COMMENT
LOW⚡	packages/cli/test/cron/end-to-end.test.ts	173	// Step 3: drive ONE tick. Verifies the scheduler's tick body actually	COMMENT
LOW⚡	packages/cli/test/cron/end-to-end.test.ts	180	// Step 4: drain the fire through injectScheduledPrompt → stubbed	COMMENT
LOW⚡	packages/cli/test/cron/end-to-end.test.ts	207	// Step 5: delete via Scheduler.remove — same path the `cron delete`	COMMENT
LOW⚡	packages/cli/test/cron/end-to-end.test.ts	214	// Step 6: drive another tick and verify NO further fires occur. This	COMMENT
LOW⚡	packages/cli/test/session/length-tool-safety.test.ts	48	// Step 0: complete `read` tool call, but the step is capped on output tokens	COMMENT
LOW⚡	packages/cli/test/session/length-tool-safety.test.ts	50	// Step 1: plain text + stop.	COMMENT
LOW⚡	…li/test/session/main-runloop-history-invariant.test.ts	59	// Step 0: LLM replies with a read tool-call on the tmp README.	COMMENT
LOW⚡	…li/test/session/main-runloop-history-invariant.test.ts	60	// Step 1: LLM replies with plain text + stop.	COMMENT
LOW	…s/workflows/build-business-case/references/workflow.md	6	### Step 1: Understand the customer context	COMMENT
LOW	…s/workflows/build-business-case/references/workflow.md	39	### Step 2: Find the account-native business-case anchor	COMMENT
LOW	…s/workflows/build-business-case/references/workflow.md	52	### Step 3: Run the public research pass	COMMENT
LOW	…s/workflows/build-business-case/references/workflow.md	81	### Step 4: Understand the customer workflow	COMMENT
LOW	…s/workflows/build-business-case/references/workflow.md	123	### Step 5: Identify the highest-priority use cases	COMMENT
LOW	…s/workflows/build-business-case/references/workflow.md	148	### Step 6: Define the value drivers	COMMENT
LOW	…s/workflows/build-business-case/references/workflow.md	170	### Step 7: Identify the metrics required	COMMENT
LOW	…s/workflows/build-business-case/references/workflow.md	206	### Step 8: Quantify the value	COMMENT
LOW	…s/workflows/build-business-case/references/workflow.md	234	### Step 9: Translate the impact into business outcomes	COMMENT
LOW	…s/workflows/build-business-case/references/workflow.md	258	### Step 10: Draft the business narrative	COMMENT
LOW	…r-call/references/opportunity-and-channel-selection.md	7	### Step 1: infer deal intent from the call	COMMENT
LOW	…r-call/references/opportunity-and-channel-selection.md	19	### Step 2: gather candidates	COMMENT
LOW	…r-call/references/opportunity-and-channel-selection.md	27	### Step 3: rank candidates	COMMENT
LOW	…s/cli/src/skill/builtin/.bundle/skill-creator/SKILL.md	25	### Step 1: Define 2-3 concrete use cases	COMMENT
LOW	…s/cli/src/skill/builtin/.bundle/skill-creator/SKILL.md	43	### Step 2: Plan the folder structure	COMMENT
LOW	…s/cli/src/skill/builtin/.bundle/skill-creator/SKILL.md	51	### Step 3: Write the frontmatter	COMMENT
LOW	…s/cli/src/skill/builtin/.bundle/skill-creator/SKILL.md	76	### Step 4: Write the instructions	COMMENT
LOW	…s/cli/src/skill/builtin/.bundle/skill-creator/SKILL.md	104	### Step 5: Validate	COMMENT
LOW	…s/cli/src/skill/builtin/.bundle/skill-creator/SKILL.md	114	### Step 6: Test and iterate	COMMENT
LOW⚡	…l/builtin/.bundle/skill-creator/references/patterns.md	17	### Step 1: Create Account	COMMENT
LOW⚡	…l/builtin/.bundle/skill-creator/references/patterns.md	20	### Step 2: Setup Payment	COMMENT
LOW⚡	…l/builtin/.bundle/skill-creator/references/patterns.md	23	### Step 3: Create Subscription	COMMENT
LOW⚡	…l/builtin/.bundle/skill-creator/references/patterns.md	26	### Step 4: Send Welcome Email	COMMENT
LOW	…design/workflows/user-context/references/onboarding.md	9	## Step 1: Orientation	COMMENT
LOW	…design/workflows/user-context/references/onboarding.md	29	## Step 2: Save Context	COMMENT
LOW	…design/workflows/user-context/references/onboarding.md	64	## Step 3: Read Context	COMMENT
LOW	packages/cli/src/skill/builtin/.bundle/mate/SKILL.md	86	### Step 1: Understand the Character	COMMENT
LOW	packages/cli/src/skill/builtin/.bundle/mate/SKILL.md	93	### Step 2: Generate the Spritesheet	COMMENT
LOW	packages/cli/src/skill/builtin/.bundle/mate/SKILL.md	137	### Step 3: Write the Manifest	COMMENT
LOW	packages/cli/src/skill/builtin/.bundle/mate/SKILL.md	145	### Step 4: Deliver	COMMENT
LOW	…/skill/builtin/.bundle/research-paper-writing/SKILL.md	10	## Step 1: Diagnose the request, then route	COMMENT
LOW	…/skill/builtin/.bundle/research-paper-writing/SKILL.md	29	## Step 2: Get the facts before writing	COMMENT
LOW⚡	packages/cli/src/session/boundary.ts	44	// Step 1: tool_use/tool_result pairing.	COMMENT
LOW	packages/cli/src/session/boundary.ts	64	// Step 2: same message.id walk-back (thinking blocks share id with sibling).	COMMENT

Unused Imports58 hits · 58 pts

Severity	File	Line	Context
LOW	…ll/builtin/.bundle/docx-official/scripts/render_pdf.py	12	CODE
LOW	…c/skill/builtin/.bundle/docx-official/scripts/audit.py	26	CODE
LOW	…ill/builtin/.bundle/docx-official/scripts/transcode.py	16	CODE
LOW	…kill/builtin/.bundle/docx-official/scripts/annotate.py	22	CODE
LOW	…kill/builtin/.bundle/docx-official/scripts/assemble.py	21	CODE
LOW	…/builtin/.bundle/docx-official/scripts/extract_text.py	22	CODE
LOW	…skill/builtin/.bundle/docx-official/scripts/explode.py	21	CODE
LOW	…tin/.bundle/docx-official/scripts/resolve_revisions.py	23	CODE
LOW	…kflows/create-data-context/tests/test_state_helpers.py	4	CODE
LOW	…a-context/scripts/record_plugin_install_suppression.py	4	CODE
LOW	…reate-data-context/scripts/data_analytics_preflight.py	11	CODE
LOW	…data-context/scripts/validate_data_context_contract.py	4	CODE
LOW	…ort-to-google-doc/scripts/report_to_google_doc_plan.py	4	CODE
LOW	…ort-to-google-doc/scripts/report_to_google_doc/plan.py	1	CODE
LOW	…google-doc/scripts/report_to_google_doc/table_utils.py	1	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	1	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	1	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/constants.py	1	CODE
LOW	…google-doc/scripts/report_to_google_doc/docx_writer.py	1	CODE
LOW	…rt-to-google-doc/scripts/report_to_google_doc/model.py	1	CODE
LOW	…port-to-google-doc/scripts/report_to_google_doc/cli.py	14	CODE
LOW	…rt-to-google-doc/scripts/report_to_google_doc/utils.py	1	CODE
LOW	…-to-google-doc/scripts/report_to_google_doc/quality.py	1	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	9	CODE
LOW	…/.bundle/super-research/evals/toy_pipeline/pipeline.py	18	CODE
LOW	…rc/skill/builtin/.bundle/xlsx-official/scripts/bake.py	15	CODE
LOW	…c/skill/builtin/.bundle/xlsx-official/scripts/audit.py	13	CODE
LOW	…kill/builtin/.bundle/xlsx-official/scripts/assemble.py	11	CODE
LOW	…kill/builtin/.bundle/xlsx-official/scripts/overview.py	15	CODE
LOW	…skill/builtin/.bundle/xlsx-official/scripts/csv_out.py	16	CODE
LOW	…skill/builtin/.bundle/xlsx-official/scripts/explode.py	13	CODE
LOW	…skill/builtin/.bundle/xlsx-official/scripts/pdf_out.py	9	CODE
LOW	…n/.bundle/xlsx-official/scripts/runtime/libreoffice.py	15	CODE
LOW	…c/skill/builtin/.bundle/pdf-official/scripts/survey.py	16	CODE
LOW	…/skill/builtin/.bundle/pdf-official/scripts/combine.py	13	CODE
LOW	…rc/skill/builtin/.bundle/pdf-official/scripts/carve.py	24	CODE
LOW	…skill/builtin/.bundle/pdf-official/scripts/reorient.py	13	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/probe_fields.py	25	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/sanity_check.py	18	CODE
LOW	…kill/builtin/.bundle/pdf-official/scripts/text_dump.py	19	CODE
LOW	…kill/builtin/.bundle/pdf-official/scripts/recognize.py	17	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/render_pages.py	14	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/overlay_text.py	40	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/apply_values.py	27	CODE
LOW	…rkflows/user-context/scripts/user_context_preflight.py	4	CODE
LOW	…gn/workflows/user-context/scripts/init_user_context.py	4	CODE
LOW	…builtin/.bundle/pptx-official/scripts/contact_sheet.py	15	CODE
LOW	…builtin/.bundle/pptx-official/scripts/contact_sheet.py	140	CODE
LOW	…ll/builtin/.bundle/pptx-official/scripts/render_pdf.py	11	CODE
LOW	…ill/builtin/.bundle/pptx-official/scripts/dump_text.py	25	CODE
LOW	…ill/builtin/.bundle/pptx-official/scripts/dump_text.py	28	CODE
LOW	…kill/builtin/.bundle/pptx-official/scripts/assemble.py	21	CODE
LOW	…/builtin/.bundle/pptx-official/scripts/insert_slide.py	31	CODE
LOW	…kill/builtin/.bundle/pptx-official/scripts/diagnose.py	29	CODE
LOW	…builtin/.bundle/pptx-official/scripts/render_slides.py	17	CODE
LOW	…skill/builtin/.bundle/pptx-official/scripts/explode.py	18	CODE
LOW	…c/skill/builtin/.bundle/pptx-official/scripts/prune.py	28	CODE
LOW	…uiltin/.bundle/pptx-official/scripts/soffice_bridge.py	21	CODE

Fake / Example Data44 hits · 48 pts

Severity	File	Line	Snippet	Context
LOW	packages/cli/test/config/config.test.ts	956	email: "user@example.com",	CODE
LOW	packages/cli/test/config/config.test.ts	966	email: "user@example.com",	CODE
LOW	packages/cli/test/account/service.test.ts	183	email: "user@example.com",	CODE
LOW	packages/cli/test/account/service.test.ts	224	email: "user@example.com",	CODE
LOW	packages/cli/test/account/service.test.ts	268	email: "user@example.com",	CODE
LOW	packages/cli/test/account/service.test.ts	332	email: "user@example.com",	CODE
LOW	packages/cli/test/account/service.test.ts	377	? json(req, { id: "user-1", email: "user@example.com" })	CODE
LOW	packages/cli/test/account/service.test.ts	388	expect(res.email).toBe("user@example.com")	CODE
LOW	packages/cli/test/account/service.test.ts	395	email: "user@example.com",	CODE
LOW	packages/cli/test/share/share-next.test.ts	79	email: "user@example.com",	CODE
LOW	packages/cli/test/session/message-v2.test.ts	231	{ ...base, id: PartID.make("placeholder"), type: "text", text: "ignored placeholder", ignored: true }])	CODE
LOW⚡	packages/cli/test/session/tool-attachment.test.ts	104	expect(routeToolAttachment({ model, attachment: attachment("audio/aac"), allowNative: true })).toBe("placeholder")	CODE
LOW⚡	packages/cli/test/session/tool-attachment.test.ts	111	expect(routeToolAttachment({ model, attachment: attachment("video/webm"), allowNative: true })).toBe("placeholder")	CODE
LOW⚡	packages/cli/test/session/tool-attachment.test.ts	113	"placeholder",	CODE
LOW⚡	packages/cli/test/session/tool-attachment.test.ts	121	).toBe("placeholder")	CODE
LOW⚡	packages/cli/test/session/tool-attachment.test.ts	123	"placeholder",	CODE
LOW⚡	packages/cli/test/session/tool-attachment.test.ts	126	"placeholder",	CODE
LOW	packages/cli/test/session/tool-attachment.test.ts	139	"placeholder",	CODE
LOW	packages/cli/test/session/tool-attachment.test.ts	142	"placeholder",	CODE
LOW	packages/cli/test/session/tool-attachment.test.ts	153	expect(routeToolAttachment({ model, attachment: attachment("audio/wav"), allowNative: false })).toBe("placeholder")	CODE
LOW⚡	packages/cli/test/session/tool-attachment.test.ts	189	expect(routeToolAttachment({ model, attachment: attachment("image/png"), allowNative: false })).toBe("placeholder")	CODE
LOW⚡	packages/cli/test/session/tool-attachment.test.ts	190	expect(routeToolAttachment({ model, attachment: attachment("audio/wav"), allowNative: false })).toBe("placeholder")	CODE
LOW⚡	packages/cli/test/session/tool-attachment.test.ts	197	expect(routeToolAttachment({ model, attachment: attachment("text/css"), allowNative: false })).toBe("placeholder")	CODE
LOW	packages/cli/test/session/checkpoint-main-slice.test.ts	131	const big = "lorem ipsum ".repeat(800) // ≈ 9.6KB → ~2.4k tokens, 5 pairs > TAIL_MIN_TOKENS	CODE
LOW	…es/cli/src/skill/builtin/.bundle/docx-official/edit.md	50	mapping = {"client": "Acme Corp", "date": "2026-07-04", "amount": "$120,000"}	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	284	"placeholder": placeholder,	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	323	"placeholder": placeholder,	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	412	"placeholder": placeholder,	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	550	"placeholder": placeholder,	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	629	"placeholder": placeholder,	CODE
LOW	…google-doc/scripts/report_to_google_doc/docx_writer.py	341	table_by_placeholder = {table["placeholder"]: table for table in manifest["tables"]}	CODE
LOW	…google-doc/scripts/report_to_google_doc/docx_writer.py	342	chart_by_placeholder = {chart["placeholder"]: chart for chart in manifest["chart_images"]}	CODE
LOW	…ages/cli/src/skill/builtin/.bundle/playwright/SKILL.md	98	"$PWCLI" fill e1 "user@example.com"	CODE
LOW	…ill/builtin/.bundle/playwright/references/workflows.md	21	pwcli fill e1 "user@example.com"	CODE
LOW	…src/skill/builtin/.bundle/playwright/references/cli.md	29	pwcli fill e5 "user@example.com"	CODE
LOW	…s/cli/src/skill/builtin/.bundle/pptx-official/SKILL.md	283	`"Acme Inc" logo site:acme.com`, or `<product name> screenshot`) instead of	CODE
LOW	packages/cli/src/auth/index.ts	7	export const OAUTH_DUMMY_KEY = "mimocode-oauth-dummy-key"	CODE
LOW	packages/cli/src/cli/cmd/tui/component/prompt/index.tsx	574	setStore("placeholder", randomIndex(list().length))	CODE
LOW	packages/cli/src/cli/cmd/tui/component/prompt/index.tsx	1652	setStore("placeholder", randomIndex(shell().length))	CODE
LOW	packages/cli/src/tool/history.ts	158	if (!model \|\| routeToolAttachment({ model, attachment, allowNative: true }) === "placeholder")	CODE
LOW	packages/cli/src/session/message-v2.ts	1183	if (route === "placeholder") {	CODE
LOW	packages/cli/src/session/tool-attachment.ts	9	export type ToolAttachmentRoute = "native" \| "synthetic" \| "placeholder"	CODE
LOW	packages/cli/src/session/tool-attachment.ts	126	if (!modelAcceptsMime(input.model, input.attachment.mime)) return "placeholder"	CODE
LOW	packages/cli/src/session/tool-attachment.ts	129	return "placeholder"	CODE

Excessive Try-Catch Wrapping37 hits · 38 pts

Severity	File	Line	Snippet	Context
LOW	…ll/builtin/.bundle/docx-official/scripts/render_pdf.py	90	except Exception as exc:	CODE
LOW	…c/skill/builtin/.bundle/docx-official/scripts/audit.py	92	except Exception as exc:	CODE
LOW	…/builtin/.bundle/docx-official/scripts/extract_text.py	162	except Exception as exc:	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	363	except Exception:	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	382	except Exception:	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	395	except Exception:	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	599	except Exception as exc:	CODE
MEDIUM	…o-google-doc/scripts/report_to_google_doc/rendering.py	335	def load_bar_chart_font() -> Any:	CODE
LOW	…-to-google-doc/scripts/report_to_google_doc/quality.py	284	except Exception as exc:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	548	except Exception:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	559	except Exception:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	1315	except Exception as cairosvg_error:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	1331	except Exception as pillow_error:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	1353	except Exception as exc:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	1384	except Exception as exc:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	1423	except Exception as exc:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	1934	except Exception as exc:	CODE
LOW	…n/.bundle/super-research/evals/toy_regression/setup.sh	58	except Exception as e:	CODE
LOW	…builtin/.bundle/super-research/scripts/paper_search.py	28	except Exception as e:	CODE
LOW	…/builtin/.bundle/super-research/scripts/fetch_paper.py	39	except Exception as e:	CODE
LOW	…/builtin/.bundle/super-research/scripts/fetch_paper.py	55	except Exception as e:	CODE
LOW	…ltin/.bundle/super-research/scripts/verify_citation.py	37	except Exception as e:	CODE
LOW	…rc/skill/builtin/.bundle/xlsx-official/scripts/bake.py	228	except Exception as exc: # noqa: BLE001	CODE
LOW	…c/skill/builtin/.bundle/xlsx-official/scripts/audit.py	116	except Exception as exc: # noqa: BLE001 — surface any openpyxl error	CODE
LOW	…/cli/src/skill/builtin/.bundle/pdf-official/compose.md	202	except Exception:	CODE
LOW	…c/skill/builtin/.bundle/pdf-official/scripts/survey.py	49	except Exception:	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/probe_fields.py	343	except Exception as err:	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/sanity_check.py	72	except Exception as err:	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/render_pages.py	122	except Exception as err:	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/overlay_text.py	305	except Exception:	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/overlay_text.py	322	except Exception as err:	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/apply_values.py	157	except Exception as err:	CODE
LOW	…builtin/.bundle/pptx-official/scripts/contact_sheet.py	58	except Exception:	CODE
LOW	…ill/builtin/.bundle/pptx-official/scripts/dump_text.py	253	except Exception:	CODE
LOW	…ill/builtin/.bundle/pptx-official/scripts/dump_text.py	309	except Exception as exc:	CODE
LOW	…kill/builtin/.bundle/pptx-official/scripts/diagnose.py	100	except Exception as exc:	CODE
LOW	…c/skill/builtin/.bundle/pptx-official/scripts/prune.py	351	except Exception as exc:	CODE

Deep Nesting32 hits · 32 pts

Severity	File	Line	Context
LOW	…kill/builtin/.bundle/docx-official/scripts/assemble.py	88	CODE
LOW	…/builtin/.bundle/docx-official/scripts/extract_text.py	43	CODE
LOW	…/builtin/.bundle/docx-official/scripts/extract_text.py	64	CODE
LOW	…/builtin/.bundle/docx-official/scripts/extract_text.py	67	CODE
LOW	…tin/.bundle/docx-official/scripts/resolve_revisions.py	142	CODE
LOW	…reate-data-context/scripts/data_analytics_preflight.py	66	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	431	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	462	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	648	CODE
LOW	…google-doc/scripts/report_to_google_doc/html_parser.py	696	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	90	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	243	CODE
LOW	…o-google-doc/scripts/report_to_google_doc/rendering.py	522	CODE
LOW	…google-doc/scripts/report_to_google_doc/docx_writer.py	135	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	817	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	1252	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	2000	CODE
LOW	…builtin/.bundle/super-research/scripts/paper_search.py	163	CODE
LOW	…rc/skill/builtin/.bundle/xlsx-official/scripts/bake.py	57	CODE
LOW	…rc/skill/builtin/.bundle/xlsx-official/scripts/bake.py	138	CODE
LOW	…rc/skill/builtin/.bundle/xlsx-official/scripts/bake.py	165	CODE
LOW	…c/skill/builtin/.bundle/xlsx-official/scripts/audit.py	90	CODE
LOW	…c/skill/builtin/.bundle/xlsx-official/scripts/audit.py	125	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/probe_fields.py	184	CODE
LOW	…l/builtin/.bundle/pdf-official/scripts/overlay_text.py	149	CODE
LOW	…ill/builtin/.bundle/pptx-official/scripts/dump_text.py	162	CODE
LOW	…ill/builtin/.bundle/pptx-official/scripts/dump_text.py	177	CODE
LOW	…ill/builtin/.bundle/pptx-official/scripts/dump_text.py	187	CODE
LOW	…ill/builtin/.bundle/pptx-official/scripts/dump_text.py	296	CODE
LOW	…kill/builtin/.bundle/pptx-official/scripts/diagnose.py	79	CODE
LOW	…kill/builtin/.bundle/pptx-official/scripts/diagnose.py	104	CODE
LOW	…uiltin/.bundle/pptx-official/scripts/soffice_bridge.py	180	CODE

Empty Error Handlers6 hits · 30 pts

Severity	File	Line	Snippet	Context
HIGH	…google-doc/scripts/report_to_google_doc/html_parser.py	572	except (TypeError, ValueError):	CODE
HIGH	…google-doc/scripts/report_to_google_doc/html_parser.py	580	except ValueError:	CODE
HIGH	…o-google-doc/scripts/report_to_google_doc/rendering.py	395	except Exception:	CODE
HIGH	…/builtin/.bundle/super-research/scripts/fetch_paper.py	134	except OSError:	CODE
HIGH	…/builtin/.bundle/pptx-official/scripts/insert_slide.py	147	except ValueError:	CODE
HIGH	…uiltin/.bundle/pptx-official/scripts/soffice_bridge.py	208	except OSError:	CODE

Verbosity Indicators12 hits · 26 pts

Severity	File	Line	Snippet	Context
LOW	packages/cli/test/cron/end-to-end.test.ts	152	// Step 1: register a recurring cron task via Scheduler.add — this is	COMMENT
LOW⚡	packages/cli/test/cron/end-to-end.test.ts	165	// Step 2: backdate createdAt so the task's next computed fire is in	COMMENT
LOW⚡	packages/cli/test/cron/end-to-end.test.ts	173	// Step 3: drive ONE tick. Verifies the scheduler's tick body actually	COMMENT
LOW⚡	packages/cli/test/cron/end-to-end.test.ts	180	// Step 4: drain the fire through injectScheduledPrompt → stubbed	COMMENT
LOW⚡	packages/cli/test/cron/end-to-end.test.ts	207	// Step 5: delete via Scheduler.remove — same path the `cron delete`	COMMENT
LOW⚡	packages/cli/test/cron/end-to-end.test.ts	214	// Step 6: drive another tick and verify NO further fires occur. This	COMMENT
LOW⚡	packages/cli/test/session/length-tool-safety.test.ts	48	// Step 0: complete `read` tool call, but the step is capped on output tokens	COMMENT
LOW⚡	packages/cli/test/session/length-tool-safety.test.ts	50	// Step 1: plain text + stop.	COMMENT
LOW⚡	…li/test/session/main-runloop-history-invariant.test.ts	59	// Step 0: LLM replies with a read tool-call on the tmp README.	COMMENT
LOW⚡	…li/test/session/main-runloop-history-invariant.test.ts	60	// Step 1: LLM replies with plain text + stop.	COMMENT
LOW⚡	packages/cli/src/session/boundary.ts	44	// Step 1: tool_use/tool_result pairing.	COMMENT
LOW	packages/cli/src/session/boundary.ts	64	// Step 2: same message.id walk-back (thinking blocks share id with sibling).	COMMENT

Decorative Section Separators8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/cli/test/server/workflows-route.test.ts	75	// ── P0 (MR104 #3): path traversal via unvalidated runID ──────────────────	COMMENT
MEDIUM	packages/cli/test/server/workflows-route.test.ts	75	// ── P0 (MR104 #3): path traversal via unvalidated runID ──────────────────	COMMENT
MEDIUM	packages/cli/test/server/workflows-route.test.ts	108	// ── Regression: read routes must accept a NESTED child runID ──────────────	COMMENT
MEDIUM	packages/cli/test/server/workflows-route.test.ts	143	// ── P0 (MR104 #3): GET /workflows must NOT leak all-session runs ──────────	COMMENT
MEDIUM	packages/cli/test/server/workflows-route.test.ts	143	// ── P0 (MR104 #3): GET /workflows must NOT leak all-session runs ──────────	COMMENT
MEDIUM	packages/cli/test/server/workflows-route.test.ts	177	// ── P0 (MR104 #3): defense-in-depth at the persistence layer ──────────────	COMMENT
MEDIUM	packages/cli/test/server/workflows-route.test.ts	177	// ── P0 (MR104 #3): defense-in-depth at the persistence layer ──────────────	COMMENT
MEDIUM	packages/cli/test/session/rebuild-on-the-spot.test.ts	784	// ── THE "IMMEDIATELY" ASSERTIONS ────────────────────────────	COMMENT

Modern AI Meta-Vocabulary8 hits · 22 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/compose/spec/session-memory-dir-reminder.md	44	### Memory paths reminder: once per context window	COMMENT
MEDIUM	docs/compose/spec/context-budget-control.md	207	### S2.6 Display / "how do I see my context window"	COMMENT
MEDIUM	packages/cli/test/provider/gitlab-duo.test.ts	269	// test("GitLab Duo: has multiple agentic chat models available", async () => {	COMMENT
MEDIUM	…ages/cli/test/session/checkpoint-child-session.test.ts	505	// before spawning, and that is a CONDITIONAL write — so the scaffold	COMMENT
MEDIUM	…ges/cli/src/skill/builtin/.bundle/claude-code/SKILL.md	24	\| High-stakes PR review \| `claude ultrareview [pr#]` \| Cloud multi-agent, exit-code driven (uploads diff to cloud —	CODE
MEDIUM	…tin/.bundle/claude-code/references/interactive-tmux.md	72	claude ultrareview [pr#] [--json] [--timeout <min>] # cloud multi-agent review; exit 0/1; default 30 min	CODE
MEDIUM	…es/cli/src/skill/builtin/.bundle/docx-official/edit.md	80	new_p = deepcopy(paragraph._p) # copy formatting scaffolding	CODE
MEDIUM⚡	…l/builtin/.bundle/skill-creator/references/patterns.md	10	## Pattern 1: Sequential workflow orchestration	COMMENT

Cross-Language Confusion (JS/TS)4 hits · 20 pts

Severity	File	Line	Snippet	Context
HIGH	packages/cli/src/cli/ui.ts	33	print(...message)	CODE
HIGH	packages/cli/src/cli/cmd/models.ts	92	print(ProviderID.make(providerID), args.verbose)	CODE
HIGH	packages/cli/src/cli/cmd/tui/context/keybind.tsx	94	print(key: string) {	CODE
HIGH	packages/cli/src/cli/cmd/tui/plugin/api.tsx	325	print(key) {	CODE

AI Slop Vocabulary3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/cli/test/server/workflows-route.test.ts	241	// sessionID to stay robust against any residue in the shared in-memory DB.	COMMENT
MEDIUM	packages/cli/test/tool/question.test.ts	133	// header: "This Header is Definitely More Than Thirty Characters Long",	COMMENT
MEDIUM	packages/cli/src/tool/memory-path-guard.ts	33	// escape. (apply_patch already resolves; this makes the guard robust for all	COMMENT

Modern Structural Boilerplate3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	…google-doc/scripts/report_to_google_doc/docx_writer.py	66	def set_cell_width(cell: Any, width_twips: int) -> None:	CODE
LOW	…rt-to-google-slides/scripts/report_to_google_slides.py	1045	def set_shape_fill(shape: Any, color: str, transparency: float = 0.0) -> None:	CODE
LOW	…ltin/.bundle/xlsx-official/scripts/runtime/__init__.py	3	__all__ = ["libreoffice"]	CODE

Overly Generic Function Names1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	packages/cli/src/mcp/oauth-callback.ts	80	function handleRequest(req: import("http").IncomingMessage, res: import("http").ServerResponse) {	CODE

XiaomiMiMo/MiMo-Code

Open-Source Code Quality, Security and Technical Debt Review