120 marketing skills as an AI marketing staff — plugin, portable skills, or an 8-bot team across 7 disciplines (narrative, SEO/GEO, social, email, paid, influencer, launch) on one contract, with 8 auditor gates: TALE · CORE-EEAT · CITE · ECHO · SEND · ROAS · STAR · RAMP.
This report summarizes scanner evidence for aaron-he-zhu/aaron-marketing-skills, a Python project with 2,899 GitHub stars. SynthScan examined 245,679 lines of code across 1057 source files, recording 1809 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 8.1 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1518 finding(s).
Are imports declared and package/API names verified? 145 finding(s).
Are wrappers, guards, and repeated structures necessary? 1417 finding(s).
Which changes need focused human review? 1809 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1809 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tests/test_workflow_loop.py | 854 | def test_plan_anchor_must_be_the_current_selected_head(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 862 | def test_plan_created_at_cannot_precede_anchor_timestamp(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 869 | def test_post_cutoff_recorded_event_is_fresh_despite_historical_occurred_at(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1063 | def test_fix_verdict_cannot_release_launch_day(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1066 | def test_block_verdict_cannot_release_launch_day(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1069 | def test_undecided_verdict_cannot_release_launch_day(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1072 | def test_ship_without_independent_execution_approval_stays_closed(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1077 | def test_ship_approval_not_bound_to_exact_audit_artifact_stays_closed(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1082 | def test_non_validator_clean_ship_stays_closed(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1087 | def test_self_reported_host_tool_allowed_cannot_release_gate(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1116 | def test_bad_approval_signature_cannot_release_gate(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1121 | def test_valid_signature_with_wrong_action_binding_cannot_release_gate(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1127 | def test_expired_signed_approval_cannot_release_gate(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 1132 | def test_backdated_occurred_at_cannot_hide_runtime_approval_expiry(self): | CODE |
| LOW | tests/test_workflow_loop.py | 75 | def next_workflow_recorded_at(): | CODE |
| LOW | tests/test_workflow_loop.py | 256 | def measurement_control_record(self, artifact_id): | CODE |
| LOW | tests/test_workflow_loop.py | 782 | def test_full_fanout_join_converges_only_after_proposal(self): | CODE |
| LOW | tests/test_workflow_loop.py | 885 | def test_plan_persistence_cutoff_serializes_concurrent_run_event_append(self): | CODE |
| LOW | tests/test_workflow_loop.py | 981 | def test_preplan_artifact_validation_cannot_satisfy_verification(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1004 | def test_preplan_run_event_cannot_satisfy_decision_evidence(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1033 | def assert_gate_verdict_stays_closed( | CODE |
| LOW | tests/test_workflow_loop.py | 1162 | def test_historical_valid_approval_remains_valid_on_later_verify(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1185 | def test_missing_or_drifted_external_trust_anchor_fails_closed(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1198 | def test_signed_approval_nonce_cannot_be_replayed_in_next_cycle(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1244 | def test_revise_requires_fresh_action_receipt_measurement_and_run_evidence(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1304 | def test_replay_rejects_recomputed_cross_cycle_evidence_reuse(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1363 | def test_direct_evidence_cannot_be_reused_through_a_new_run_event(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1405 | def test_nested_evidence_cannot_be_reused_as_a_direct_reference(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1450 | def test_non_run_references_require_canonical_safe_paths(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1464 | def test_non_run_references_reject_symlink_and_hardlink_aliases(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1493 | def test_copied_or_mutated_control_identity_stays_consumed_after_revise(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1567 | def test_action_evidence_is_single_use_across_loops_in_one_run(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1609 | def test_compare_and_swap_and_idempotent_retry(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1633 | def test_projection_failure_recovers_and_tampering_fails_closed(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1679 | def test_recorded_at_tampering_breaks_the_event_hash(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1694 | def test_runtime_recorded_at_must_advance_monotonically(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1711 | def test_recomputed_nonmonotonic_recorded_at_fails_replay(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1741 | def test_repeated_failed_verification_forces_escalation(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1774 | def test_retry_budget_is_separate_from_cycle_budget(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1795 | def test_cycle_cap_exhausts_without_conflating_retries(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1831 | def test_wait_and_abort_require_matching_typed_decisions(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1879 | def test_branch_action_failure_fails_closed_before_partial_join(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1900 | def test_deadline_requires_typed_escalation_terminal(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1923 | def test_illegal_transition_and_self_asserted_verification_fail_closed(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1945 | def test_sibling_run_branch_cannot_satisfy_selected_action(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1963 | def test_required_control_inputs_block_turn_only_and_missing_receipt_or_measurement(self): | CODE |
| LOW | tests/test_workflow_loop.py | 2014 | def test_unsuccessful_receipts_cannot_release_completion_edges(self): | CODE |
| LOW | tests/test_workflow_loop.py | 2064 | def test_unsuccessful_receipt_completion_is_rejected_on_replay(self): | CODE |
| LOW | tests/test_workflow_loop.py | 2107 | def test_failed_receipt_remains_available_for_failure_handling(self): | CODE |
| LOW | tests/test_workflow_loop.py | 2131 | def test_required_control_artifact_must_be_selected_and_untampered(self): | CODE |
| LOW | tests/test_workflow_loop.py | 2175 | def test_event_budget_reserves_the_terminal_slot(self): | CODE |
| LOW | tests/test_workflow_loop.py | 2222 | def test_receipt_business_status_raises_workflow_loop_error(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 66 | def test_checked_projection_is_current_and_deterministic(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 80 | def test_strict_json_rejects_duplicate_keys_and_nonfinite_numbers(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 102 | def test_build_reads_each_bound_source_once_and_hashes_that_snapshot(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 143 | def test_safe_source_read_rejects_symlinks(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 153 | def test_atomic_write_rejects_symlink_parent_without_external_write(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 169 | def test_atomic_write_preserves_existing_permissions(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 181 | def test_index_has_exact_catalog_order_and_hashes(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 197 | def test_contract_identity_and_runtime_sources_come_from_system_catalog(self): | CODE |
| 1197 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/test_connectors_local.py | 258 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | tests/test_run_events.py | 362 | except ProcessLookupError: | CODE |
| HIGH | scripts/generate-auditor-prompt-contracts.py | 793 | except FileNotFoundError: | CODE |
| HIGH | scripts/generate-auditor-prompt-contracts.py | 119 | except FileExistsError: | CODE |
| HIGH | scripts/generate-auto-routing-shards.py | 242 | except FileNotFoundError: | CODE |
| HIGH | scripts/audit-trends.py | 210 | except FileNotFoundError: | CODE |
| HIGH | scripts/generate-system-docs.py | 295 | except FileNotFoundError: | CODE |
| HIGH | scripts/issue-engineering-release-receipt.py | 578 | except ValueError: | CODE |
| HIGH | scripts/issue-engineering-release-receipt.py | 683 | except OSError: | CODE |
| HIGH | scripts/build-distribution.py | 842 | except ValueError: | CODE |
| HIGH | scripts/build-distribution.py | 696 | except FileNotFoundError: | CODE |
| HIGH | scripts/build-distribution.py | 1355 | except FileNotFoundError: | CODE |
| HIGH | scripts/build-distribution.py | 1548 | except FileNotFoundError: | CODE |
| HIGH | scripts/context-resolver.py | 1821 | except FileNotFoundError: | CODE |
| HIGH | scripts/context-resolver.py | 1835 | except FileNotFoundError: | CODE |
| HIGH | scripts/workflow_loop.py | 608 | except ValueError: | CODE |
| HIGH | scripts/workflow_loop.py | 1547 | except FileNotFoundError: | CODE |
| HIGH | scripts/workflow_loop.py | 1535 | except OSError: | CODE |
| HIGH | scripts/verify-prompt-profile-release.py | 62 | except FileNotFoundError: | CODE |
| HIGH | scripts/build-release-assets.py | 137 | except OSError: | CODE |
| HIGH | scripts/run-isolated-evals.py | 440 | except ValueError: | CODE |
| HIGH | scripts/generate-release-surfaces.py | 516 | except FileNotFoundError: | CODE |
| HIGH | scripts/generate-claude-index.py | 108 | except FileNotFoundError: | CODE |
| HIGH | scripts/check-engineering-maturity.py | 1339 | except FileNotFoundError: | CODE |
| HIGH | scripts/generate-skill-contracts.py | 1042 | except FileNotFoundError: | CODE |
| HIGH | scripts/publish-state.py | 184 | except FileNotFoundError: | CODE |
| HIGH | scripts/run-behavior-evals.py | 1784 | except OSError: | CODE |
| HIGH | scripts/validate-audit-artifact.py | 681 | except FileNotFoundError: | CODE |
| HIGH | scripts/verify-profile-outcomes.py | 910 | except ValueError: | CODE |
| HIGH | scripts/verify-profile-outcomes.py | 935 | except OSError: | CODE |
| HIGH | scripts/bump-release.py | 607 | except OSError: | CODE |
| HIGH | scripts/run-events.py | 854 | except FileExistsError: | CODE |
| HIGH | scripts/run-events.py | 1384 | except FileExistsError: | CODE |
| HIGH | scripts/run-events.py | 1029 | except FileExistsError: | CODE |
| HIGH | scripts/agent_plugin_builder.py | 273 | except OSError: | CODE |
| HIGH | scripts/workflow-graph.py | 1281 | except FileNotFoundError: | CODE |
| HIGH | scripts/audit-loop.py | 185 | except FileNotFoundError: | CODE |
| HIGH | scripts/context-plan.py | 1040 | except FileNotFoundError: | CODE |
| HIGH | scripts/validate-agent-plugin.py | 213 | except OSError: | CODE |
| HIGH | scripts/context-profile-resolver.py | 271 | except FileNotFoundError: | CODE |
| HIGH | scripts/registry-events.py | 1018 | except FileExistsError: | CODE |
| HIGH | scripts/registry-events.py | 518 | except ValueError: | CODE |
| HIGH | scripts/registry-events.py | 1320 | except FileNotFoundError: | CODE |
| HIGH | scripts/verify-release-receipt.py | 313 | except ValueError: | CODE |
| HIGH | scripts/verify-release-receipt.py | 430 | except ValueError: | CODE |
| HIGH | scripts/connectors/crawl.py | 184 | except Exception: # malformed markup — keep whatever we parsed | CODE |
| HIGH | scripts/connectors/_http.py | 549 | except (BrokenPipeError, EOFError, OSError): | CODE |
| HIGH | scripts/connectors/_http.py | 589 | except (AssertionError, OSError, ValueError): | CODE |
| HIGH | scripts/connectors/_http.py | 699 | except OSError: | CODE |
| HIGH | scripts/connectors/_http.py | 704 | except OSError: | CODE |
| HIGH | scripts/connectors/_http.py | 483 | except (AttributeError, KeyError, OSError, ValueError): | CODE |
| HIGH | scripts/connectors/_http.py | 491 | except (AttributeError, KeyError, OSError, ValueError): | CODE |
| HIGH | scripts/connectors/_http.py | 496 | except (AttributeError, KeyError, OSError, ValueError): | CODE |
| HIGH | scripts/connectors/_http.py | 513 | except (TypeError, ValueError, OverflowError): | CODE |
| HIGH | scripts/connectors/onpage.py | 209 | except Exception: # malformed markup — keep whatever we parsed so far | CODE |
| HIGH | scripts/connectors/onpage.py | 192 | except ValueError: | CODE |
| HIGH | scripts/connectors/schema_lint.py | 244 | except Exception: # malformed markup — keep whatever we captured | CODE |
| HIGH | scripts/connectors/robots.py | 166 | except ValueError: | CODE |
| HIGH | scripts/adapters/codex-behavior-adapter.py | 1670 | except OSError: | CODE |
| HIGH | scripts/adapters/codex-behavior-adapter.py | 1661 | except OSError: | CODE |
| 1 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_workflow_loop.py | 342 | CODE | |
| LOW | tests/test_workflow_loop.py | 2014 | CODE | |
| LOW | tests/test_auditor_prompt_contracts.py | 80 | CODE | |
| LOW | tests/test_behavior_evals_adapter.py | 907 | CODE | |
| LOW | tests/test_context_plan.py | 472 | CODE | |
| LOW | tests/test_context_profile_resolver.py | 238 | CODE | |
| LOW | tests/test_context_resolver.py | 734 | CODE | |
| LOW | tests/test_distribution_builder.py | 55 | CODE | |
| LOW | tests/test_distribution_builder.py | 447 | CODE | |
| LOW | tests/test_distribution_builder.py | 897 | CODE | |
| LOW | tests/test_distribution_builder.py | 982 | CODE | |
| LOW | tests/test_codex_behavior_adapter.py | 1042 | CODE | |
| LOW | tests/test_context_assembly.py | 206 | CODE | |
| LOW | tests/test_release_receipt.py | 41 | CODE | |
| LOW | tests/test_run_events.py | 342 | CODE | |
| LOW | tests/test_skill_capsules.py | 35 | CODE | |
| LOW | tests/test_skill_capsules.py | 174 | CODE | |
| LOW | tests/test_publish_release.py | 1019 | CODE | |
| LOW | tests/test_control_bindings.py | 126 | CODE | |
| LOW | tests/test_bot_projections.py | 116 | CODE | |
| LOW | tests/test_bot_projections.py | 144 | CODE | |
| LOW | tests/test_profile_outcomes.py | 264 | CODE | |
| LOW | scripts/generate-auditor-prompt-contracts.py | 104 | CODE | |
| LOW | scripts/generate-auditor-prompt-contracts.py | 810 | CODE | |
| LOW | scripts/audit-trends.py | 109 | CODE | |
| LOW | scripts/audit-trends.py | 138 | CODE | |
| LOW | scripts/audit-trends.py | 648 | CODE | |
| LOW | scripts/validate-control-artifact.py | 186 | CODE | |
| LOW | scripts/validate-control-artifact.py | 488 | CODE | |
| LOW | scripts/validate-control-artifact.py | 742 | CODE | |
| LOW | scripts/validate-control-artifact.py | 982 | CODE | |
| LOW | scripts/validate-control-artifact.py | 1176 | CODE | |
| LOW | scripts/validate-control-artifact.py | 1272 | CODE | |
| LOW | scripts/issue-engineering-release-receipt.py | 585 | CODE | |
| LOW | scripts/context-assembly.py | 665 | CODE | |
| LOW | scripts/context-assembly.py | 997 | CODE | |
| LOW | scripts/build-distribution.py | 1047 | CODE | |
| LOW | scripts/build-distribution.py | 1424 | CODE | |
| LOW | scripts/build-distribution.py | 1756 | CODE | |
| LOW | scripts/eval_cases.py | 128 | CODE | |
| LOW | scripts/eval_cases.py | 374 | CODE | |
| LOW | scripts/eval_cases.py | 649 | CODE | |
| LOW | scripts/eval_cases.py | 888 | CODE | |
| LOW | scripts/eval_cases.py | 1121 | CODE | |
| LOW | scripts/context-resolver.py | 337 | CODE | |
| LOW | scripts/context-resolver.py | 997 | CODE | |
| LOW | scripts/context-resolver.py | 1698 | CODE | |
| LOW | scripts/context-resolver.py | 1776 | CODE | |
| LOW | scripts/golden-auditor-math.py | 71 | CODE | |
| LOW | scripts/workflow_loop.py | 1132 | CODE | |
| LOW | scripts/workflow_loop.py | 1906 | CODE | |
| LOW | scripts/workflow_loop.py | 2174 | CODE | |
| LOW | scripts/workflow_loop.py | 2249 | CODE | |
| LOW | scripts/workflow_loop.py | 2324 | CODE | |
| LOW | scripts/workflow_loop.py | 2361 | CODE | |
| LOW | scripts/run-prompt-profile-ablation.py | 254 | CODE | |
| LOW | scripts/skill-dashboard.py | 197 | CODE | |
| LOW | scripts/skill-dashboard.py | 220 | CODE | |
| LOW | scripts/skill-dashboard.py | 360 | CODE | |
| LOW | scripts/skill-dashboard.py | 544 | CODE | |
| 116 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_behavior_evals_adapter.py | 7 | CODE | |
| LOW | tests/test_context_usage.py | 3 | CODE | |
| LOW | tests/test_change_impact.py | 2 | CODE | |
| LOW | tests/test_routing_retrieval.py | 3 | CODE | |
| LOW | tests/test_codex_behavior_adapter.py | 3 | CODE | |
| LOW | tests/test_rubric_score.py | 2 | CODE | |
| LOW | tests/test_issue_engineering_release_receipt.py | 2 | CODE | |
| LOW | tests/test_agent_plugin_builder.py | 2 | CODE | |
| LOW | tests/test_agent_plugin_builder.py | 7 | CODE | |
| LOW | tests/test_isolated_evals.py | 3 | CODE | |
| LOW | tests/test_release_policy_docs.py | 2 | CODE | |
| LOW | tests/test_connectors_local.py | 45 | CODE | |
| LOW | tests/test_agent_plugins_provenance.py | 2 | CODE | |
| LOW | tests/test_bump_release.py | 2 | CODE | |
| LOW | tests/test_skill_dashboard.py | 3 | CODE | |
| LOW | tests/test_release_receipt.py | 2 | CODE | |
| LOW | tests/test_architecture.py | 3 | CODE | |
| LOW | tests/test_final_release_gate.py | 2 | CODE | |
| LOW | tests/test_auto_routing_shards.py | 3 | CODE | |
| LOW | tests/test_create_github_release.py | 2 | CODE | |
| LOW | tests/test_routing.py | 7 | CODE | |
| LOW | tests/test_context_efficiency.py | 3 | CODE | |
| LOW | tests/test_semantic_evidence_verifier.py | 1 | CODE | |
| LOW | tests/test_context_budget.py | 7 | CODE | |
| LOW | tests/test_control_bindings.py | 2 | CODE | |
| LOW | tests/test_behavior_profiles.py | 2 | CODE | |
| LOW | tests/test_bot_projections.py | 2 | CODE | |
| LOW | tests/test_profile_outcomes.py | 2 | CODE | |
| LOW | tests/test_wiki.py | 3 | CODE | |
| LOW | tests/test_agent_plugin_validator.py | 3 | CODE | |
| LOW | tests/test_agent_plugin_validator.py | 10 | CODE | |
| LOW | tests/test_release_surfaces.py | 3 | CODE | |
| LOW | tests/test_markdown_guard_exclusions.py | 3 | CODE | |
| LOW | tests/test_validate_skill.py | 7 | CODE | |
| LOW | tests/test_check_versions.py | 8 | CODE | |
| LOW | tests/test_memory_privacy.py | 3 | CODE | |
| LOW | tests/test_eval_cases.py | 2 | CODE | |
| LOW | tests/test_profile_resolver.py | 4 | CODE | |
| LOW | tests/test_audit_trends.py | 3 | CODE | |
| LOW | scripts/generate-auditor-prompt-contracts.py | 11 | CODE | |
| LOW | scripts/generate-auto-routing-shards.py | 13 | CODE | |
| LOW | scripts/audit-trends.py | 13 | CODE | |
| LOW | scripts/generate-system-docs.py | 3 | CODE | |
| LOW | scripts/validate-control-artifact.py | 10 | CODE | |
| LOW | scripts/issue-engineering-release-receipt.py | 13 | CODE | |
| LOW | scripts/context-assembly.py | 3 | CODE | |
| LOW | scripts/build-distribution.py | 3 | CODE | |
| LOW | scripts/eval_cases.py | 10 | CODE | |
| LOW | scripts/context-resolver.py | 9 | CODE | |
| LOW | scripts/golden-auditor-math.py | 9 | CODE | |
| LOW | scripts/golden-auditor-math.py | 11 | CODE | |
| LOW | scripts/check-routing.py | 28 | CODE | |
| LOW | scripts/workflow_loop.py | 14 | CODE | |
| LOW | scripts/run-prompt-profile-ablation.py | 3 | CODE | |
| LOW | scripts/skill-dashboard.py | 13 | CODE | |
| LOW | scripts/runtime-controller.py | 11 | CODE | |
| LOW | scripts/runtime-controller.py | 17 | CODE | |
| LOW | scripts/verify-prompt-profile-release.py | 3 | CODE | |
| LOW | scripts/smoke-bot-projections.py | 12 | CODE | |
| LOW | scripts/generate-auditor-runtime.py | 9 | CODE | |
| 75 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/test_workflow_loop.py | 902 | def append_during_plan_write(): | CODE |
| LOW | tests/test_workflow_loop.py | 932 | except Exception as exc: # surfaced deterministically in the main thread | CODE |
| LOW | tests/test_hook_artifact_gate.sh | 52 | except Exception: | CODE |
| LOW | tests/test_run_events.py | 354 | except Exception as exc: | CODE |
| LOW | hooks/claude-hook.sh | 21 | except Exception: | CODE |
| LOW | hooks/claude-hook.sh | 96 | except Exception: sys.exit(0) | CODE |
| LOW | scripts/audit-trends.py | 188 | except Exception: | CODE |
| LOW | scripts/audit-trends.py | 376 | except Exception: | CODE |
| LOW | scripts/audit-trends.py | 417 | except Exception: | CODE |
| MEDIUM | scripts/audit-trends.py | 86 | def _path_reference(root, path): | CODE |
| LOW | scripts/issue-engineering-release-receipt.py | 282 | except Exception as exc: | CODE |
| LOW | scripts/issue-engineering-release-receipt.py | 673 | except Exception: | CODE |
| LOW | scripts/issue-engineering-release-receipt.py | 840 | except Exception as exc: | CODE |
| LOW | scripts/issue-engineering-release-receipt.py | 869 | except Exception: | CODE |
| LOW | scripts/issue-engineering-release-receipt.py | 884 | except Exception: | CODE |
| MEDIUM | scripts/build-distribution.py | 126 | def canonical_json(value): | CODE |
| MEDIUM | scripts/build-distribution.py | 270 | def load_json(path): | CODE |
| LOW | scripts/build-distribution.py | 240 | except Exception: | CODE |
| LOW | scripts/build-distribution.py | 689 | except Exception: | CODE |
| LOW | scripts/context-resolver.py | 378 | except Exception: | CODE |
| LOW | scripts/context-resolver.py | 1726 | except Exception: | CODE |
| MEDIUM | scripts/workflow_loop.py | 95 | def canonical_json(value): | CODE |
| LOW | scripts/workflow_loop.py | 268 | except Exception as exc: | CODE |
| LOW | scripts/workflow_loop.py | 1532 | except Exception: | CODE |
| LOW | scripts/workflow_loop.py | 2240 | except Exception as exc: | CODE |
| LOW | scripts/runtime-controller.py | 434 | except Exception: | CODE |
| LOW | scripts/runtime-controller.py | 468 | except Exception: | CODE |
| MEDIUM | scripts/runtime-controller.py | 59 | def _exact(value, required, optional, label): | CODE |
| LOW | scripts/check-context-efficiency.py | 184 | except Exception as exc: | CODE |
| LOW | scripts/build-release-assets.py | 134 | except Exception: | CODE |
| LOW | scripts/build-release-assets.py | 1069 | except Exception: | CODE |
| MEDIUM | scripts/build-release-assets.py | 67 | def canonical_json(value): | CODE |
| MEDIUM | scripts/build-release-assets.py | 153 | def _validate_repo(path): | CODE |
| LOW | scripts/check-engineering-maturity.py | 535 | except Exception as exc: | CODE |
| MEDIUM | scripts/check-engineering-maturity.py | 338 | def git(*arguments): | CODE |
| LOW | scripts/bump-release.py | 604 | except Exception: | CODE |
| MEDIUM | scripts/run-events.py | 159 | def canonical_json(value): | CODE |
| MEDIUM | scripts/run-events.py | 1839 | def _serialized_immutable_json_bytes(value): | CODE |
| LOW | scripts/run-events.py | 1162 | except Exception: | CODE |
| LOW | scripts/run-events.py | 1656 | except Exception as exc: | CODE |
| LOW | scripts/run-events.py | 2771 | except Exception as exc: | CODE |
| LOW | scripts/run-events.py | 3320 | except Exception as exc: | CODE |
| LOW | scripts/agent_plugin_builder.py | 270 | except Exception: | CODE |
| MEDIUM | scripts/agent_plugin_builder.py | 160 | def _canonical_json(value): | CODE |
| LOW | scripts/stats-dashboard.py | 48 | except Exception: | CODE |
| LOW | scripts/stats-dashboard.py | 58 | except Exception: | CODE |
| LOW | scripts/stats-dashboard.py | 271 | except Exception: | CODE |
| LOW | scripts/check-stdlib-only.sh | 94 | except Exception: | CODE |
| MEDIUM | scripts/audit-loop.py | 89 | def canonical_json(value): | CODE |
| MEDIUM | scripts/audit-loop.py | 115 | def validate_sha(value, label): | CODE |
| MEDIUM | scripts/audit-loop.py | 122 | def validate_uuid(value, label): | CODE |
| MEDIUM | scripts/audit-loop.py | 129 | def validate_safe_id(value, label): | CODE |
| MEDIUM | scripts/audit-loop.py | 136 | def validate_ref(value, label): | CODE |
| MEDIUM | scripts/audit-loop.py | 1133 | def _serialized_step_bytes(document): | CODE |
| LOW⚡ | scripts/audit-loop.py | 118 | except Exception as exc: | CODE |
| LOW⚡ | scripts/audit-loop.py | 125 | except Exception as exc: | CODE |
| LOW⚡ | scripts/audit-loop.py | 132 | except Exception as exc: | CODE |
| LOW⚡ | scripts/audit-loop.py | 139 | except Exception as exc: | CODE |
| LOW | scripts/audit-loop.py | 106 | except Exception as exc: | CODE |
| LOW | scripts/audit-loop.py | 155 | except Exception as exc: | CODE |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | VERSIONS.md | 583 | ### v9.9.10 — focus on skills: scaffolding cleanup, 5 commands, quality pass, bundled connectors (2026-06-05) | COMMENT |
| MEDIUM | VERSIONS.md | 648 | ### v9.0.0 — Quality pass + multi-agent compatibility (2026-04-17) | COMMENT |
| MEDIUM | references/skill-capsules/voice-dossier-builder.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:voice-dossier-builder","execution":{"done_when":"e | CODE |
| MEDIUM | references/skill-capsules/brand-language-codifier.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:brand-language-codifier","execution":{"done_when": | CODE |
| MEDIUM | …ferences/skill-capsules/fatigue-frequency-manager.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:fatigue-frequency-manager","execution":{"done_when | CODE |
| MEDIUM | references/skill-capsules/launch-asset-packager.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:launch-asset-packager","control_requirements":["ar | CODE |
| MEDIUM | references/skill-capsules/budget-optimizer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:budget-optimizer","control_requirements":["artifac | CODE |
| MEDIUM | references/skill-capsules/product-feed-optimizer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:product-feed-optimizer","execution":{"done_when":" | CODE |
| MEDIUM | references/skill-capsules/campaign-architect.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:campaign-architect","control_requirements":["evide | CODE |
| MEDIUM | references/skill-capsules/audience-segment-builder.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:audience-segment-builder","execution":{"done_when" | CODE |
| MEDIUM | references/skill-capsules/ad-test-designer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:ad-test-designer","control_requirements":["artifac | CODE |
| MEDIUM | references/skill-capsules/ad-test-designer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:ad-test-designer","control_requirements":["artifac | CODE |
| MEDIUM | references/skill-capsules/bid-strategy-planner.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:bid-strategy-planner","execution":{"done_when":"1. | CODE |
| MEDIUM | …ferences/skill-capsules/narrative-cascade-planner.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:narrative-cascade-planner","execution":{"done_when | CODE |
| MEDIUM | references/skill-capsules/page-play-builder.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:page-play-builder","execution":{"done_when":"the m | CODE |
| MEDIUM | references/skill-capsules/send-experiment-designer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:send-experiment-designer","control_requirements":[ | CODE |
| MEDIUM | references/skill-capsules/ad-creative-builder.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:ad-creative-builder","execution":{"done_when":"eve | CODE |
| MEDIUM | …erences/skill-capsules/landing-experience-checker.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:landing-experience-checker","execution":{"done_whe | CODE |
| MEDIUM | …ferences/skill-capsules/advocacy-program-designer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:advocacy-program-designer","control_requirements": | CODE |
| MEDIUM | references/skill-capsules/attribution-reconciler.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:attribution-reconciler","control_requirements":["e | CODE |
| MEDIUM | references/skill-capsules/fit-scorer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:fit-scorer","control_requirements":["artifact-bind | CODE |
| MEDIUM | references/skill-capsules/paid-measurement-loop.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:paid-measurement-loop","control_requirements":["ac | CODE |
| MEDIUM | references/skill-capsules/message-test-designer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:message-test-designer","control_requirements":["ar | CODE |
| MEDIUM | references/skill-capsules/conversion-signal-qa.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:conversion-signal-qa","control_requirements":["art | CODE |
| MEDIUM | references/skill-capsules/cold-outbound-sequencer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:cold-outbound-sequencer","execution":{"done_when": | CODE |
| MEDIUM | …ences/skill-capsules/participation-warmup-planner.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:participation-warmup-planner","execution":{"done_w | CODE |
| MEDIUM | docs/README.pt.md | 660 | memory/ # scaffolding HOT/WARM/COLD + armazenamentos de registro (entities/creators/claims/consent/launch/chann | CODE |
| MEDIUM | scripts/run-prompt-profile-ablation.py | 167 | # Behavioral failures are experimental observations, not orchestration | COMMENT |
| MEDIUM | scripts/publish-package.sh | 13 | # v17.0.0 (413 Request Entity Too Large). The same committed-HEAD guardrails | COMMENT |
| MEDIUM | scripts/connectors/sitemap.py | 243 | # ---- crawl orchestration -------------------------------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | tests/test_connectors_local.py | 1674 | # Relative lift from a zero baseline is undefined; callers need an absolute bar. | COMMENT |
| HIGH | tests/test_memory_privacy.py | 167 | "sysctl hw.memsize && vm_stat", | CODE |
| HIGH | scripts/build-distribution.py | 61 | When `distribution-manifest.json.source.commit` is non-null, use that exact | CODE |
| HIGH | scripts/build-distribution.py | 73 | When `distribution-manifest.json.source.commit` is non-null, use that exact | CODE |
| HIGH | scripts/build-distribution.py | 85 | When `distribution-manifest.json.source.commit` is non-null, use that exact | CODE |
| HIGH | scripts/connectors/experiment.py | 192 | "do NOT imply non-significance. A zero control makes relative lift undefined, " | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tune/on-page-seo-checker/references/audit-templates.md | 99 | ## Step 11: Generate Audit Summary | COMMENT |
| LOW | …arkup-builder/references/schema-instructions-detail.md | 5 | ## Step 1: Identify Content Type and Rich Result Opportunity | COMMENT |
| LOW | …arkup-builder/references/schema-instructions-detail.md | 30 | ## Step 2: Generate Schema Markup | COMMENT |
| LOW | …arkup-builder/references/schema-instructions-detail.md | 42 | ## Step 3: Provide Implementation and Validation | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 5 | ## Step 1: Gather Page Information | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 19 | ## Step 2: Create Optimized Title Tag | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 36 | ## Step 3: Write Meta Description | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 50 | ## Step 4: Create Social and Supporting Tags | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 61 | ## Step 5: CORE-EEAT Alignment Check | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 70 | ## Step 6: CTR Optimization Tips | COMMENT |
| LOW | …eo-content-optimizer/references/instructions-detail.md | 5 | ## Step 1: Load GEO-First Targets | COMMENT |
| LOW | …eo-content-optimizer/references/instructions-detail.md | 30 | ## Step 2: Analyze Current Content | COMMENT |
| LOW | …eo-content-optimizer/references/instructions-detail.md | 50 | ## Step 3: Apply GEO Optimization Techniques | COMMENT |
| LOW | …eo-content-optimizer/references/instructions-detail.md | 60 | ## Step 4: Generate GEO-Optimized Output | COMMENT |
| LOW | …eo-content-optimizer/references/instructions-detail.md | 88 | ## Step 5: CORE-EEAT GEO Self-Check | COMMENT |
| LOW | …plement/content-writer/references/refresh-templates.md | 98 | ## Step 8: Republishing Strategy | COMMENT |
| LOW | …plement/content-writer/references/refresh-templates.md | 124 | ## Step 9: Refresh Report | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_hook_artifact_gate.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …formance-monitor/references/report-output-templates.md | 61 | ## Content Performance | COMMENT |
| LOW | scripts/sync-about.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/check-versions.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/check-versions.sh | 21 | # scripts/sync-about.sh + about-drift.yml handle projecting/verifying it on GitHub. | COMMENT |
| LOW | scripts/publish-package.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/sync-family.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/check-stdlib-only.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/publish-registries.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/publish-registries.sh | 21 | # window, account-wide. Exceeding it returns 发布频率过高 for every skill, and | COMMENT |
| LOW | scripts/publish-clawhub.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/registry-status.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/publish-skillhub.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/connectors/smoke-live.sh | 1 | #!/usr/bin/env bash | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_workflow_loop.py | 556 | CODE | |
| LOW | tests/test_workflow_loop.py | 1033 | CODE | |
| LOW | tests/test_audit_loop.py | 163 | CODE | |
| LOW | tests/test_codex_behavior_adapter.py | 159 | CODE | |
| LOW | tests/test_engineering_maturity.py | 265 | CODE | |
| LOW | tests/test_context_budget.py | 53 | CODE | |
| LOW | tests/test_audit_trends.py | 69 | CODE | |
| LOW | scripts/context-assembly.py | 665 | CODE | |
| LOW | scripts/check-context-efficiency.py | 259 | CODE | |
| LOW | scripts/run-behavior-evals.py | 2271 | CODE | |
| LOW | scripts/run-behavior-evals.py | 2452 | CODE | |
| LOW | scripts/context-plan.py | 785 | CODE | |
| LOW | scripts/context-profile-resolver.py | 1152 | CODE | |
| LOW | scripts/connectors/_http.py | 404 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/sync-about.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/publish-package.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/sync-family.sh | 7 | # Usage: | COMMENT |
| LOW | scripts/publish-registries.sh | 12 | # Usage: | COMMENT |
| LOW | scripts/publish-clawhub.sh | 16 | # Usage: | COMMENT |
| LOW | scripts/registry-status.sh | 11 | # Usage: | COMMENT |
| LOW | scripts/publish-skillhub.sh | 17 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | references/skill-capsules/content-amplifier.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:content-amplifier","control_requirements":["action | CODE |
| MEDIUM | references/skill-capsules/site-structure-optimizer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:site-structure-optimizer","execution":{"done_when" | CODE |
| MEDIUM | references/skill-capsules/report-generator.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:report-generator","control_requirements":["artifac | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_registry_events.py | 919 | "consent", "free-text-address", authorization_ref="123 Main Street", | CODE |
| LOW | tests/test_audit_trends.py | 633 | tmp, "ansi.md", target="placeholder", observed_at="2026-07-01", | CODE |
| LOW | scripts/check-pii.py | 75 | # never the whole line (whole-line skipping would let a real key on a "placeholder"/"example" line slip). | COMMENT |
| LOW | scripts/check-pii.py | 76 | TOKEN_PLACEHOLDER = ("xxxx", "redacted", "placeholder", "example", "akiaiosfodnn7example", "your-token") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/eval_cases.py | 1233 | __all__ = [ | CODE |