120 marketing skills as an AI marketing staff — plugin, portable skills, or an 8-bot team across 7 disciplines (narrative, SEO/GEO, social, email, paid, influencer, launch) on one contract, with 8 auditor gates: TALE · CORE-EEAT · CITE · ECHO · SEND · ROAS · STAR · RAMP.
This report presents the forensic synthetic code analysis of aaron-he-zhu/aaron-marketing-skills, a Python project with 2,672 GitHub stars. SynthScan v2.0 examined 229,658 lines of code across 1012 source files, recording 1595 pattern matches distributed across 14 syntactic categories. The overall adjusted score of 6.8 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1595 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tests/test_workflow_loop.py | 635 | def test_plan_anchor_must_be_the_current_selected_head(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 643 | def test_plan_created_at_cannot_precede_anchor_timestamp(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 650 | def test_post_cutoff_recorded_event_is_fresh_despite_historical_occurred_at(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 838 | def test_fix_verdict_cannot_release_launch_day(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 841 | def test_block_verdict_cannot_release_launch_day(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 844 | def test_undecided_verdict_cannot_release_launch_day(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 847 | def test_ship_without_independent_execution_approval_stays_closed(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 852 | def test_ship_approval_not_bound_to_exact_audit_artifact_stays_closed(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 857 | def test_non_validator_clean_ship_stays_closed(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 862 | def test_self_reported_host_tool_allowed_cannot_release_gate(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 891 | def test_bad_approval_signature_cannot_release_gate(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 896 | def test_valid_signature_with_wrong_action_binding_cannot_release_gate(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 902 | def test_expired_signed_approval_cannot_release_gate(self): | CODE |
| LOW⚡ | tests/test_workflow_loop.py | 907 | def test_backdated_occurred_at_cannot_hide_runtime_approval_expiry(self): | CODE |
| LOW | tests/test_workflow_loop.py | 74 | def next_workflow_recorded_at(): | CODE |
| LOW | tests/test_workflow_loop.py | 563 | def test_full_fanout_join_converges_only_after_proposal(self): | CODE |
| LOW | tests/test_workflow_loop.py | 666 | def test_plan_persistence_cutoff_serializes_concurrent_run_event_append(self): | CODE |
| LOW | tests/test_workflow_loop.py | 756 | def test_preplan_artifact_validation_cannot_satisfy_verification(self): | CODE |
| LOW | tests/test_workflow_loop.py | 779 | def test_preplan_run_event_cannot_satisfy_decision_evidence(self): | CODE |
| LOW | tests/test_workflow_loop.py | 808 | def assert_gate_verdict_stays_closed( | CODE |
| LOW | tests/test_workflow_loop.py | 937 | def test_historical_valid_approval_remains_valid_on_later_verify(self): | CODE |
| LOW | tests/test_workflow_loop.py | 960 | def test_missing_or_drifted_external_trust_anchor_fails_closed(self): | CODE |
| LOW | tests/test_workflow_loop.py | 973 | def test_signed_approval_nonce_cannot_be_replayed_in_next_cycle(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1019 | def test_compare_and_swap_and_idempotent_retry(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1043 | def test_projection_failure_recovers_and_tampering_fails_closed(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1089 | def test_recorded_at_tampering_breaks_the_event_hash(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1104 | def test_runtime_recorded_at_must_advance_monotonically(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1121 | def test_recomputed_nonmonotonic_recorded_at_fails_replay(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1151 | def test_repeated_failed_verification_forces_escalation(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1184 | def test_retry_budget_is_separate_from_cycle_budget(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1205 | def test_cycle_cap_exhausts_without_conflating_retries(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1241 | def test_wait_and_abort_require_matching_typed_decisions(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1289 | def test_branch_action_failure_fails_closed_before_partial_join(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1310 | def test_deadline_requires_typed_escalation_terminal(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1333 | def test_illegal_transition_and_self_asserted_verification_fail_closed(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1355 | def test_sibling_run_branch_cannot_satisfy_selected_action(self): | CODE |
| LOW | tests/test_workflow_loop.py | 1373 | def test_event_budget_reserves_the_terminal_slot(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 66 | def test_checked_projection_is_current_and_deterministic(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 80 | def test_strict_json_rejects_duplicate_keys_and_nonfinite_numbers(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 102 | def test_build_reads_each_bound_source_once_and_hashes_that_snapshot(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 143 | def test_safe_source_read_rejects_symlinks(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 153 | def test_atomic_write_rejects_symlink_parent_without_external_write(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 169 | def test_atomic_write_preserves_existing_permissions(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 181 | def test_index_has_exact_catalog_order_and_hashes(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 197 | def test_contract_identity_and_runtime_sources_come_from_system_catalog(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 230 | def test_framework_inputs_profiles_and_vetoes_are_typed_projections(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 245 | def test_exactly_forty_runner_ready_semantic_variants(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 264 | def test_variant_semantics_match_scoring_and_authority_contract(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 311 | def test_contract_and_index_schemas_close_every_object_shape(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 332 | def test_contract_shapes_have_no_undeclared_projection_fields(self): | CODE |
| LOW | tests/test_auditor_prompt_contracts.py | 348 | def test_generator_does_not_hardcode_auditor_identities(self): | CODE |
| LOW⚡ | tests/test_behavior_evals_adapter.py | 373 | def test_failing_case_is_reported(self): | STRING |
| LOW⚡ | tests/test_behavior_evals_adapter.py | 377 | def test_dropped_case_is_a_coverage_mismatch(self): | STRING |
| LOW⚡ | tests/test_behavior_evals_adapter.py | 382 | def test_non_json_stdout_fails_closed(self): | STRING |
| LOW⚡ | tests/test_behavior_evals_adapter.py | 387 | def test_missing_evidence_fails_closed(self): | STRING |
| LOW⚡ | tests/test_behavior_evals_adapter.py | 392 | def test_adapter_crash_fails_closed(self): | STRING |
| LOW | tests/test_behavior_evals_adapter.py | 349 | def test_fixture_commands_bind_the_current_isolated_interpreter(self): | STRING |
| LOW | tests/test_behavior_evals_adapter.py | 357 | def test_passing_adapter_returns_no_failures(self): | STRING |
| LOW | tests/test_behavior_evals_adapter.py | 472 | def test_auto_routing_case_binds_router_and_primary_command_without_case_corpus(self): | STRING |
| LOW | tests/test_behavior_evals_adapter.py | 508 | def test_memory_management_auto_requests_bind_seo_command_without_case_corpus(self): | STRING |
| 1074 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_auditor_prompt_contracts.py | 80 | CODE | |
| LOW | tests/test_behavior_evals_adapter.py | 907 | CODE | |
| LOW | tests/test_context_plan.py | 439 | CODE | |
| LOW | tests/test_context_profile_resolver.py | 238 | CODE | |
| LOW | tests/test_context_resolver.py | 734 | CODE | |
| LOW | tests/test_distribution_builder.py | 55 | CODE | |
| LOW | tests/test_distribution_builder.py | 431 | CODE | |
| LOW | tests/test_distribution_builder.py | 848 | CODE | |
| LOW | tests/test_distribution_builder.py | 933 | CODE | |
| LOW | tests/test_codex_behavior_adapter.py | 1042 | CODE | |
| LOW | tests/test_context_assembly.py | 198 | CODE | |
| LOW | tests/test_release_receipt.py | 41 | CODE | |
| LOW | tests/test_run_events.py | 127 | CODE | |
| LOW | tests/test_skill_capsules.py | 35 | CODE | |
| LOW | tests/test_skill_capsules.py | 174 | CODE | |
| LOW | tests/test_publish_release.py | 1191 | CODE | |
| LOW | tests/test_bot_projections.py | 108 | CODE | |
| LOW | tests/test_bot_projections.py | 136 | CODE | |
| LOW | tests/test_profile_outcomes.py | 264 | CODE | |
| LOW | scripts/generate-auditor-prompt-contracts.py | 104 | CODE | |
| LOW | scripts/generate-auditor-prompt-contracts.py | 810 | CODE | |
| LOW | scripts/audit-trends.py | 109 | CODE | |
| LOW | scripts/audit-trends.py | 138 | CODE | |
| LOW | scripts/audit-trends.py | 648 | CODE | |
| LOW | scripts/issue-engineering-release-receipt.py | 583 | CODE | |
| LOW | scripts/context-assembly.py | 665 | CODE | |
| LOW | scripts/context-assembly.py | 997 | CODE | |
| LOW | scripts/build-distribution.py | 982 | CODE | |
| LOW | scripts/build-distribution.py | 1359 | CODE | |
| LOW | scripts/build-distribution.py | 1651 | CODE | |
| LOW | scripts/eval_cases.py | 128 | CODE | |
| LOW | scripts/eval_cases.py | 374 | CODE | |
| LOW | scripts/eval_cases.py | 649 | CODE | |
| LOW | scripts/eval_cases.py | 888 | CODE | |
| LOW | scripts/eval_cases.py | 1121 | CODE | |
| LOW | scripts/context-resolver.py | 337 | CODE | |
| LOW | scripts/context-resolver.py | 997 | CODE | |
| LOW | scripts/context-resolver.py | 1698 | CODE | |
| LOW | scripts/context-resolver.py | 1776 | CODE | |
| LOW | scripts/golden-auditor-math.py | 71 | CODE | |
| LOW | scripts/workflow_loop.py | 876 | CODE | |
| LOW | scripts/workflow_loop.py | 1587 | CODE | |
| LOW | scripts/workflow_loop.py | 1855 | CODE | |
| LOW | scripts/workflow_loop.py | 1923 | CODE | |
| LOW | scripts/run-prompt-profile-ablation.py | 254 | CODE | |
| LOW | scripts/runtime-controller.py | 735 | CODE | |
| LOW | scripts/generate-auditor-runtime.py | 268 | CODE | |
| LOW | scripts/check-context-efficiency.py | 134 | CODE | |
| LOW | scripts/build-release-assets.py | 282 | CODE | |
| LOW | scripts/build-release-assets.py | 595 | CODE | |
| LOW | scripts/create-github-release.py | 331 | CODE | |
| LOW | scripts/create-github-release.py | 772 | CODE | |
| LOW | scripts/rubric-score.py | 100 | CODE | |
| LOW | scripts/rubric-score.py | 205 | CODE | |
| LOW | scripts/generate-release-surfaces.py | 103 | CODE | |
| LOW | scripts/check-engineering-maturity.py | 495 | CODE | |
| LOW | scripts/generate-skill-contracts.py | 315 | CODE | |
| LOW | scripts/generate-skill-contracts.py | 353 | CODE | |
| LOW | scripts/generate-skill-contracts.py | 435 | CODE | |
| LOW | scripts/generate-skill-contracts.py | 495 | CODE | |
| 98 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_behavior_evals_adapter.py | 7 | CODE | |
| LOW | tests/test_context_usage.py | 3 | CODE | |
| LOW | tests/test_change_impact.py | 2 | CODE | |
| LOW | tests/test_codex_behavior_adapter.py | 3 | CODE | |
| LOW | tests/test_rubric_score.py | 2 | CODE | |
| LOW | tests/test_issue_engineering_release_receipt.py | 2 | CODE | |
| LOW | tests/test_agent_plugin_builder.py | 2 | CODE | |
| LOW | tests/test_agent_plugin_builder.py | 7 | CODE | |
| LOW | tests/test_isolated_evals.py | 3 | CODE | |
| LOW | tests/test_release_policy_docs.py | 2 | CODE | |
| LOW | tests/test_connectors_local.py | 45 | CODE | |
| LOW | tests/test_agent_plugins_provenance.py | 2 | CODE | |
| LOW | tests/test_bump_release.py | 2 | CODE | |
| LOW | tests/test_release_receipt.py | 2 | CODE | |
| LOW | tests/test_architecture.py | 3 | CODE | |
| LOW | tests/test_final_release_gate.py | 2 | CODE | |
| LOW | tests/test_auto_routing_shards.py | 3 | CODE | |
| LOW | tests/test_create_github_release.py | 2 | CODE | |
| LOW | tests/test_routing.py | 7 | CODE | |
| LOW | tests/test_context_efficiency.py | 3 | CODE | |
| LOW | tests/test_semantic_evidence_verifier.py | 1 | CODE | |
| LOW | tests/test_context_budget.py | 7 | CODE | |
| LOW | tests/test_behavior_profiles.py | 2 | CODE | |
| LOW | tests/test_bot_projections.py | 2 | CODE | |
| LOW | tests/test_profile_outcomes.py | 2 | CODE | |
| LOW | tests/test_agent_plugin_validator.py | 3 | CODE | |
| LOW | tests/test_agent_plugin_validator.py | 10 | CODE | |
| LOW | tests/test_workflow_graph.py | 3 | CODE | |
| LOW | tests/test_release_surfaces.py | 3 | CODE | |
| LOW | tests/test_markdown_guard_exclusions.py | 3 | CODE | |
| LOW | tests/test_validate_skill.py | 7 | CODE | |
| LOW | tests/test_check_versions.py | 8 | CODE | |
| LOW | tests/test_memory_privacy.py | 3 | CODE | |
| LOW | tests/test_eval_cases.py | 2 | CODE | |
| LOW | tests/test_profile_resolver.py | 4 | CODE | |
| LOW | tests/test_audit_trends.py | 3 | CODE | |
| LOW | scripts/generate-auditor-prompt-contracts.py | 11 | CODE | |
| LOW | scripts/generate-auto-routing-shards.py | 13 | CODE | |
| LOW | scripts/audit-trends.py | 13 | CODE | |
| LOW | scripts/generate-system-docs.py | 3 | CODE | |
| LOW | scripts/issue-engineering-release-receipt.py | 13 | CODE | |
| LOW | scripts/context-assembly.py | 3 | CODE | |
| LOW | scripts/build-distribution.py | 3 | CODE | |
| LOW | scripts/eval_cases.py | 10 | CODE | |
| LOW | scripts/context-resolver.py | 9 | CODE | |
| LOW | scripts/golden-auditor-math.py | 9 | CODE | |
| LOW | scripts/golden-auditor-math.py | 11 | CODE | |
| LOW | scripts/check-routing.py | 28 | CODE | |
| LOW | scripts/workflow_loop.py | 14 | CODE | |
| LOW | scripts/run-prompt-profile-ablation.py | 3 | CODE | |
| LOW | scripts/runtime-controller.py | 11 | CODE | |
| LOW | scripts/runtime-controller.py | 17 | CODE | |
| LOW | scripts/verify-prompt-profile-release.py | 3 | CODE | |
| LOW | scripts/generate-auditor-runtime.py | 9 | CODE | |
| LOW | scripts/check-context-efficiency.py | 11 | CODE | |
| LOW | scripts/build-release-assets.py | 3 | CODE | |
| LOW | scripts/create-github-release.py | 9 | CODE | |
| LOW | scripts/create-github-release.py | 16 | CODE | |
| LOW | scripts/run-isolated-evals.py | 20 | CODE | |
| LOW | scripts/rubric-score.py | 8 | CODE | |
| 66 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/test_workflow_loop.py | 683 | def append_during_plan_write(): | CODE |
| LOW | tests/test_workflow_loop.py | 713 | except Exception as exc: # surfaced deterministically in the main thread | CODE |
| LOW | tests/test_hook_artifact_gate.sh | 52 | except Exception: | CODE |
| LOW | tests/test_run_events.py | 139 | except Exception as exc: | CODE |
| LOW | hooks/claude-hook.sh | 21 | except Exception: | CODE |
| LOW | hooks/claude-hook.sh | 96 | except Exception: sys.exit(0) | CODE |
| LOW | scripts/audit-trends.py | 188 | except Exception: | CODE |
| LOW | scripts/audit-trends.py | 376 | except Exception: | CODE |
| LOW | scripts/audit-trends.py | 417 | except Exception: | CODE |
| MEDIUM | scripts/audit-trends.py | 86 | def _path_reference(root, path): | CODE |
| LOW | scripts/issue-engineering-release-receipt.py | 280 | except Exception as exc: | CODE |
| LOW | scripts/issue-engineering-release-receipt.py | 671 | except Exception: | CODE |
| LOW | scripts/issue-engineering-release-receipt.py | 837 | except Exception as exc: | CODE |
| LOW | scripts/issue-engineering-release-receipt.py | 866 | except Exception: | CODE |
| LOW | scripts/issue-engineering-release-receipt.py | 881 | except Exception: | CODE |
| LOW | scripts/build-distribution.py | 188 | except Exception: | CODE |
| LOW | scripts/build-distribution.py | 627 | except Exception: | CODE |
| MEDIUM | scripts/build-distribution.py | 74 | def canonical_json(value): | CODE |
| MEDIUM | scripts/build-distribution.py | 218 | def load_json(path): | CODE |
| LOW | scripts/context-resolver.py | 378 | except Exception: | CODE |
| LOW | scripts/context-resolver.py | 1726 | except Exception: | CODE |
| LOW | scripts/workflow_loop.py | 265 | except Exception as exc: | CODE |
| LOW | scripts/workflow_loop.py | 1276 | except Exception: | CODE |
| LOW | scripts/workflow_loop.py | 1914 | except Exception as exc: | CODE |
| MEDIUM | scripts/workflow_loop.py | 89 | def canonical_json(value): | CODE |
| LOW | scripts/runtime-controller.py | 434 | except Exception: | CODE |
| LOW | scripts/runtime-controller.py | 468 | except Exception: | CODE |
| MEDIUM | scripts/runtime-controller.py | 59 | def _exact(value, required, optional, label): | CODE |
| LOW | scripts/check-context-efficiency.py | 184 | except Exception as exc: | CODE |
| LOW | scripts/build-release-assets.py | 134 | except Exception: | CODE |
| LOW | scripts/build-release-assets.py | 1069 | except Exception: | CODE |
| MEDIUM | scripts/build-release-assets.py | 67 | def canonical_json(value): | CODE |
| MEDIUM | scripts/build-release-assets.py | 153 | def _validate_repo(path): | CODE |
| LOW | scripts/check-engineering-maturity.py | 535 | except Exception as exc: | CODE |
| MEDIUM | scripts/check-engineering-maturity.py | 338 | def git(*arguments): | CODE |
| LOW | scripts/bump-release.py | 365 | except Exception: | CODE |
| MEDIUM | scripts/run-events.py | 155 | def canonical_json(value): | CODE |
| MEDIUM | scripts/run-events.py | 1638 | def _serialized_immutable_json_bytes(value): | CODE |
| LOW | scripts/run-events.py | 1158 | except Exception: | CODE |
| LOW | scripts/run-events.py | 1455 | except Exception as exc: | CODE |
| LOW | scripts/run-events.py | 2453 | except Exception as exc: | CODE |
| LOW | scripts/run-events.py | 2933 | except Exception as exc: | CODE |
| LOW | scripts/agent_plugin_builder.py | 263 | except Exception: | CODE |
| MEDIUM | scripts/agent_plugin_builder.py | 153 | def _canonical_json(value): | CODE |
| LOW | scripts/stats-dashboard.py | 48 | except Exception: | CODE |
| LOW | scripts/stats-dashboard.py | 58 | except Exception: | CODE |
| LOW | scripts/stats-dashboard.py | 271 | except Exception: | CODE |
| LOW | scripts/check-stdlib-only.sh | 94 | except Exception: | CODE |
| MEDIUM | scripts/audit-loop.py | 89 | def canonical_json(value): | CODE |
| MEDIUM | scripts/audit-loop.py | 115 | def validate_sha(value, label): | CODE |
| MEDIUM | scripts/audit-loop.py | 122 | def validate_uuid(value, label): | CODE |
| MEDIUM | scripts/audit-loop.py | 129 | def validate_safe_id(value, label): | CODE |
| MEDIUM | scripts/audit-loop.py | 136 | def validate_ref(value, label): | CODE |
| MEDIUM | scripts/audit-loop.py | 1133 | def _serialized_step_bytes(document): | CODE |
| LOW⚡ | scripts/audit-loop.py | 118 | except Exception as exc: | CODE |
| LOW⚡ | scripts/audit-loop.py | 125 | except Exception as exc: | CODE |
| LOW⚡ | scripts/audit-loop.py | 132 | except Exception as exc: | CODE |
| LOW⚡ | scripts/audit-loop.py | 139 | except Exception as exc: | CODE |
| LOW | scripts/audit-loop.py | 106 | except Exception as exc: | CODE |
| LOW | scripts/audit-loop.py | 155 | except Exception as exc: | CODE |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | VERSIONS.md | 539 | ### v9.9.10 — focus on skills: scaffolding cleanup, 5 commands, quality pass, bundled connectors (2026-06-05) | COMMENT |
| MEDIUM | VERSIONS.md | 604 | ### v9.0.0 — Quality pass + multi-agent compatibility (2026-04-17) | COMMENT |
| MEDIUM | README.md | 711 | memory/ # HOT/WARM/COLD scaffolding + registry stores + ignored non-authoritative run evidence | CODE |
| MEDIUM | references/skill-capsules/voice-dossier-builder.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:voice-dossier-builder","execution":{"done_when":"e | CODE |
| MEDIUM | references/skill-capsules/brand-language-codifier.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:brand-language-codifier","execution":{"done_when": | CODE |
| MEDIUM | …ferences/skill-capsules/fatigue-frequency-manager.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:fatigue-frequency-manager","execution":{"done_when | CODE |
| MEDIUM | references/skill-capsules/launch-asset-packager.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:launch-asset-packager","execution":{"done_when":"e | CODE |
| MEDIUM | references/skill-capsules/budget-optimizer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:budget-optimizer","execution":{"done_when":"1. All | CODE |
| MEDIUM | references/skill-capsules/product-feed-optimizer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:product-feed-optimizer","execution":{"done_when":" | CODE |
| MEDIUM | references/skill-capsules/campaign-architect.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:campaign-architect","execution":{"done_when":"camp | CODE |
| MEDIUM | references/skill-capsules/audience-segment-builder.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:audience-segment-builder","execution":{"done_when" | CODE |
| MEDIUM | references/skill-capsules/ad-test-designer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:ad-test-designer","execution":{"done_when":"a fals | CODE |
| MEDIUM | references/skill-capsules/ad-test-designer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:ad-test-designer","execution":{"done_when":"a fals | CODE |
| MEDIUM | references/skill-capsules/bid-strategy-planner.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:bid-strategy-planner","execution":{"done_when":"1. | CODE |
| MEDIUM | …ferences/skill-capsules/narrative-cascade-planner.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:narrative-cascade-planner","execution":{"done_when | CODE |
| MEDIUM | references/skill-capsules/page-play-builder.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:page-play-builder","execution":{"done_when":"the m | CODE |
| MEDIUM | references/skill-capsules/send-experiment-designer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:send-experiment-designer","execution":{"done_when" | CODE |
| MEDIUM | references/skill-capsules/ad-creative-builder.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:ad-creative-builder","execution":{"done_when":"eve | CODE |
| MEDIUM | …erences/skill-capsules/landing-experience-checker.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:landing-experience-checker","execution":{"done_whe | CODE |
| MEDIUM | …ferences/skill-capsules/advocacy-program-designer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:advocacy-program-designer","execution":{"done_when | CODE |
| MEDIUM | references/skill-capsules/message-test-designer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:message-test-designer","execution":{"done_when":"t | CODE |
| MEDIUM | references/skill-capsules/cold-outbound-sequencer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:cold-outbound-sequencer","execution":{"done_when": | CODE |
| MEDIUM | …ences/skill-capsules/participation-warmup-planner.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:participation-warmup-planner","execution":{"done_w | CODE |
| MEDIUM | docs/README.pt.md | 660 | memory/ # scaffolding HOT/WARM/COLD + armazenamentos de registro (entities/creators/claims/consent/launch/chann | CODE |
| MEDIUM | scripts/run-prompt-profile-ablation.py | 167 | # Behavioral failures are experimental observations, not orchestration | COMMENT |
| MEDIUM | scripts/publish-package.sh | 13 | # v17.0.0 (413 Request Entity Too Large). The same committed-HEAD guardrails | COMMENT |
| MEDIUM | scripts/connectors/sitemap.py | 243 | # ---- crawl orchestration -------------------------------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tune/on-page-seo-checker/references/audit-templates.md | 99 | ## Step 11: Generate Audit Summary | COMMENT |
| LOW | …arkup-builder/references/schema-instructions-detail.md | 5 | ## Step 1: Identify Content Type and Rich Result Opportunity | COMMENT |
| LOW | …arkup-builder/references/schema-instructions-detail.md | 30 | ## Step 2: Generate Schema Markup | COMMENT |
| LOW | …arkup-builder/references/schema-instructions-detail.md | 42 | ## Step 3: Provide Implementation and Validation | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 5 | ## Step 1: Gather Page Information | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 19 | ## Step 2: Create Optimized Title Tag | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 36 | ## Step 3: Write Meta Description | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 50 | ## Step 4: Create Social and Supporting Tags | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 61 | ## Step 5: CORE-EEAT Alignment Check | COMMENT |
| LOW | …-markup-builder/references/meta-instructions-detail.md | 70 | ## Step 6: CTR Optimization Tips | COMMENT |
| LOW | …eo-content-optimizer/references/instructions-detail.md | 5 | ## Step 1: Load GEO-First Targets | COMMENT |
| LOW | …eo-content-optimizer/references/instructions-detail.md | 30 | ## Step 2: Analyze Current Content | COMMENT |
| LOW | …eo-content-optimizer/references/instructions-detail.md | 50 | ## Step 3: Apply GEO Optimization Techniques | COMMENT |
| LOW | …eo-content-optimizer/references/instructions-detail.md | 60 | ## Step 4: Generate GEO-Optimized Output | COMMENT |
| LOW | …eo-content-optimizer/references/instructions-detail.md | 88 | ## Step 5: CORE-EEAT GEO Self-Check | COMMENT |
| LOW | …plement/content-writer/references/refresh-templates.md | 98 | ## Step 8: Republishing Strategy | COMMENT |
| LOW | …plement/content-writer/references/refresh-templates.md | 124 | ## Step 9: Refresh Report | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | tests/test_connectors_local.py | 1561 | # Relative lift from a zero baseline is undefined; callers need an absolute bar. | COMMENT |
| HIGH | tests/test_memory_privacy.py | 167 | "sysctl hw.memsize && vm_stat", | CODE |
| HIGH | scripts/connectors/experiment.py | 192 | "do NOT imply non-significance. A zero control makes relative lift undefined, " | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/test_release_receipt.py | 0 | #!/usr/bin/env python3 from pathlib import path import sys root = path(sys.argv[sys.argv.index("--evidence-root") + 1]) | STRING |
| HIGH | tests/test_final_release_gate.py | 0 | #!/usr/bin/env python3 from pathlib import path import sys root = path(sys.argv[sys.argv.index("--evidence-root") + 1]) | STRING |
| HIGH | tests/test_publish_release.py | 0 | #!/usr/bin/env python3 from pathlib import path import sys root = path(sys.argv[sys.argv.index("--evidence-root") + 1]) | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_hook_artifact_gate.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …formance-monitor/references/report-output-templates.md | 61 | ## Content Performance | COMMENT |
| LOW | scripts/sync-about.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/check-versions.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/check-versions.sh | 21 | # scripts/sync-about.sh + about-drift.yml handle projecting/verifying it on GitHub. | COMMENT |
| LOW | scripts/publish-package.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/sync-family.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/check-stdlib-only.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/publish-registries.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/publish-registries.sh | 21 | # window, account-wide. Exceeding it returns 发布频率过高 for every skill, and | COMMENT |
| LOW | scripts/publish-clawhub.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/registry-status.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/publish-skillhub.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/connectors/smoke-live.sh | 1 | #!/usr/bin/env bash | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_workflow_loop.py | 349 | CODE | |
| LOW | tests/test_workflow_loop.py | 808 | CODE | |
| LOW | tests/test_audit_loop.py | 163 | CODE | |
| LOW | tests/test_codex_behavior_adapter.py | 159 | CODE | |
| LOW | tests/test_engineering_maturity.py | 265 | CODE | |
| LOW | tests/test_context_budget.py | 53 | CODE | |
| LOW | tests/test_audit_trends.py | 69 | CODE | |
| LOW | scripts/context-assembly.py | 665 | CODE | |
| LOW | scripts/check-context-efficiency.py | 259 | CODE | |
| LOW | scripts/run-behavior-evals.py | 2271 | CODE | |
| LOW | scripts/run-behavior-evals.py | 2452 | CODE | |
| LOW | scripts/context-plan.py | 652 | CODE | |
| LOW | scripts/context-profile-resolver.py | 1152 | CODE | |
| LOW | scripts/connectors/_http.py | 404 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/sync-about.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/publish-package.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/sync-family.sh | 7 | # Usage: | COMMENT |
| LOW | scripts/publish-registries.sh | 12 | # Usage: | COMMENT |
| LOW | scripts/publish-clawhub.sh | 16 | # Usage: | COMMENT |
| LOW | scripts/registry-status.sh | 11 | # Usage: | COMMENT |
| LOW | scripts/publish-skillhub.sh | 17 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | references/skill-capsules/content-amplifier.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:content-amplifier","execution":{"done_when":"- *pa | CODE |
| MEDIUM | references/skill-capsules/site-structure-optimizer.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:site-structure-optimizer","execution":{"done_when" | CODE |
| MEDIUM | references/skill-capsules/report-generator.json | 1 | {"$schema":"../skill-capsule.schema.json","capsule_id":"skill-capsule:report-generator","execution":{"done_when":"1. The | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_registry_events.py | 919 | "consent", "free-text-address", authorization_ref="123 Main Street", | CODE |
| LOW | tests/test_audit_trends.py | 633 | tmp, "ansi.md", target="placeholder", observed_at="2026-07-01", | CODE |
| LOW | scripts/check-pii.py | 75 | # never the whole line (whole-line skipping would let a real key on a "placeholder"/"example" line slip). | COMMENT |
| LOW | scripts/check-pii.py | 76 | TOKEN_PLACEHOLDER = ("xxxx", "redacted", "placeholder", "example", "akiaiosfodnn7example", "your-token") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/eval_cases.py | 1233 | __all__ = [ | CODE |