AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents
This report summarizes scanner evidence for activepieces/activepieces, a TypeScript project with 25,305 GitHub stars. SynthScan examined 3,208,922 lines of code across 32936 source files, recording 1490 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 0.6 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 978 finding(s).
Are imports declared and package/API names verified? 459 finding(s).
Are wrappers, guards, and repeated structures necessary? 839 finding(s).
Which changes need focused human review? 1490 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1490 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/scripts/utils/piece-script-utils.ts | 60 | export async function findAllPiecesDirectoryInSource(): Promise<string[]> { | CODE |
| LOW | tools/scripts/utils/piece-script-utils.ts | 136 | function getChangedPiecesDistPaths(): string[] | null { | CODE |
| LOW | tools/scripts/utils/publish-npm-package.ts | 41 | function assertNoUnpublishableDeps(packageJsonPath: string): void { | CODE |
| LOW | packages/core/piece-types/src/lib/engine-tools.ts | 10 | export function normalizeToolOutputToExecuteResponse( | CODE |
| LOW | packages/core/piece-types/src/lib/ai-providers.ts | 163 | export function splitCloudflareGatewayModelId(modelId: string): { | CODE |
| LOW | packages/core/piece-types/src/lib/ai-providers.ts | 210 | export function getEffectiveProviderAndModel({ | CODE |
| LOW | packages/core/piece-types/src/lib/ai-providers.ts | 458 | function buildProviderCapabilities(provider: AIProviderName): AIProviderCapabilities { | CODE |
| LOW | packages/core/utils/src/lib/object-utils.ts | 71 | function sanitizeKeysForPostgresql(value: unknown): unknown { | CODE |
| LOW | packages/core/utils/src/lib/object-utils.ts | 81 | function removeCharactersPostgresRejects(str: string): string { | CODE |
| LOW | packages/core/shared/src/lib/core/file/index.ts | 140 | export function maxSocketHttpBufferSizeBytes(maxFileSizeMb: number): number { | CODE |
| LOW | packages/core/shared/src/lib/core/common/attribution.ts | 4 | function readAttributionFromSearch({ search }: { search: string }): AttributionParams { | CODE |
| LOW | …s/core/shared/src/lib/ee/agent/chat-personalization.ts | 45 | function isPersonalDefaultPlatformName(name: string): boolean { | CODE |
| LOW | …es/core/shared/src/lib/ee/agent/tool-classification.ts | 12 | function actionNameMatchesPatterns({ actionName, patterns }: { actionName: string, patterns: string[] }): boolean { | CODE |
| LOW | …e/shared/src/lib/ee/piece-set/piece-set-config-util.ts | 51 | function applyRequiredActionsUpdate({ config, request }: { config: PieceSetConfig, request: UpdatePieceSetRequestBody['r | CODE |
| LOW⚡ | …e/shared/src/lib/ee/piece-set/required-actions-util.ts | 5 | function dropUnavailableActionsInLatestPieceVersion({ actions, actionExists }: { actions: ActionsGroupedByPiece, actionE | CODE |
| LOW⚡ | …e/shared/src/lib/ee/piece-set/required-actions-util.ts | 9 | function removeExcludedRequiredActions({ config, requiredActions }: { config: PieceSetConfig, requiredActions: ActionsGr | CODE |
| LOW⚡ | …e/shared/src/lib/ee/piece-set/required-actions-util.ts | 13 | function findExcludedRequiredActions({ config, requiredActions }: { config: PieceSetConfig, requiredActions: ActionsGrou | CODE |
| LOW⚡ | …e/shared/src/lib/ee/piece-set/required-actions-util.ts | 17 | function checkRequiredActionsExistInFlowVersion({ requiredActions, flowVersion, actionExists }: CheckRequiredActionsExis | CODE |
| LOW⚡ | …e/shared/src/lib/ee/piece-set/required-actions-util.ts | 39 | function buildRequiredActionsMissingErrorMessage(result: RequiredActionsCheckResult): string { | CODE |
| LOW⚡ | …e/shared/src/lib/ee/piece-set/required-actions-util.ts | 47 | function buildExcludedRequiredActionsErrorMessage(excludedRequiredActions: ActionsGroupedByPiece): string { | CODE |
| LOW⚡ | …e/shared/src/lib/ee/piece-set/required-actions-util.ts | 57 | function getPieceActionsInFlowVersion({ steps }: { steps: Step[] }): (ActionAndPieceNames & { stepName: string })[] { | CODE |
| LOW | …e/shared/src/lib/ee/piece-set/required-actions-util.ts | 88 | function concatPieceNameAndActionName(ref: ActionAndPieceNames): string { | CODE |
| LOW | packages/core/shared/src/lib/ee/audit-events/index.ts | 714 | export function summarizeApplicationEvent(event: ApplicationEvent) { | CODE |
| LOW | packages/core/shared/src/lib/ee/audit-events/index.ts | 855 | function convertUpdateActionToDetails(event: FlowUpdatedEvent) { | CODE |
| LOW | packages/core/shared/src/lib/ee/audit-events/index.ts | 941 | function describeAuditLogRetention({ days, instanceLimitDays }: { days: number | null, instanceLimitDays: number | null | CODE |
| LOW | packages/core/shared/src/lib/ee/audit-events/index.ts | 948 | function describeAuditLogRetentionPeriod(days: number): string { | CODE |
| LOW | …e/shared/src/lib/management/platform/platform.model.ts | 85 | export function getConcurrentJobsLimitForCloudPlan(planName: string | null | undefined): number { | CODE |
| LOW | …s/core/shared/src/lib/management/ai-providers/index.ts | 249 | export function getEffectiveProviderAndModel({ | CODE |
| LOW | …s/core/shared/src/lib/management/ai-providers/index.ts | 285 | export function splitCloudflareGatewayModelId(modelId: string): { | CODE |
| LOW | packages/core/execution/src/lib/flow-run/flow-run.ts | 10 | export function truncateFailedStepMessage( | CODE |
| LOW | …ges/core/execution/src/lib/flow-run/waitpoint/index.ts | 19 | export function barrierReleasesOnLastPendingSignal({ policy, sealed }: BarrierReleaseShapeParams): boolean { | CODE |
| LOW | …ages/core/execution/src/lib/engine/engine-operation.ts | 240 | export function normalizeToolOutputToExecuteResponse( | CODE |
| LOW | …/core/execution/src/lib/flows/util/flow-canvas-util.ts | 104 | function computeRouterChildOffsets( | CODE |
| LOW | …/core/execution/src/lib/flows/util/flow-canvas-util.ts | 120 | function mergeBranchedChildBoundingBoxes( | CODE |
| LOW | …/core/execution/src/lib/flows/util/flow-canvas-util.ts | 142 | function boundingBoxToLayoutDimensions(b: CanvasBoundingBox): { width: number, left: number, right: number } { | CODE |
| LOW | …/core/execution/src/lib/flows/util/flow-canvas-util.ts | 172 | function getContinueOnFailureBranchPair(step: CodeAction | PieceAction): (FlowAction | undefined)[] { | CODE |
| LOW | …re/execution/src/lib/flows/util/flow-structure-util.ts | 198 | function hasContinueOnFailureBranches(step: Step): step is CodeAction | PieceAction { | CODE |
| LOW | …re/execution/src/lib/flows/util/flow-structure-util.ts | 241 | function getAllNextActionsWithoutChildren(start: Step): Step[] { | CODE |
| LOW | …re/execution/src/lib/flows/util/flow-structure-util.ts | 254 | function extractConnectionIdsFromAuth(auth: string): string[] { | CODE |
| LOW⚡ | …core/execution/src/lib/flows/operations/import-flow.ts | 8 | function createDeleteActionOperation(actionName: string): FlowOperationRequest { | CODE |
| LOW⚡ | …core/execution/src/lib/flows/operations/import-flow.ts | 15 | function createUpdateTriggerOperation(trigger: FlowTrigger): FlowOperationRequest { | CODE |
| LOW⚡ | …core/execution/src/lib/flows/operations/import-flow.ts | 22 | function createChangeNameOperation(displayName: string): FlowOperationRequest { | CODE |
| LOW | …core/execution/src/lib/flows/operations/import-flow.ts | 134 | function removeAnySubsequentAction(action: FlowAction): FlowAction { | CODE |
| LOW | …/core/execution/src/lib/flows/operations/add-action.ts | 123 | function handleContinueOnFailureBranches(parentStep: Step, request: AddActionRequest): Step { | CODE |
| LOW⚡ | packages/core/execution/src/lib/flows/actions/action.ts | 196 | function buildBranchTextConditionValid(addMinLength: boolean) { | CODE |
| LOW⚡ | packages/core/execution/src/lib/flows/actions/action.ts | 205 | function buildBranchNumberConditionValid(addMinLength: boolean) { | CODE |
| LOW⚡ | packages/core/execution/src/lib/flows/actions/action.ts | 213 | function buildBranchDateConditionValid(addMinLength: boolean) { | CODE |
| LOW⚡ | packages/core/execution/src/lib/flows/actions/action.ts | 221 | function buildBranchSingleValueConditionValid(addMinLength: boolean) { | CODE |
| LOW⚡ | packages/core/execution/src/lib/flows/actions/action.ts | 228 | function buildBranchConditionValid(addMinLength: boolean) { | CODE |
| LOW | packages/core/formula/src/lib/formula-evaluator.ts | 428 | function findMatchingSquareBracket(text: string, openPos: number): number { | CODE |
| LOW⚡ | …i-providers/src/lib/create-cloudflare-gateway-model.ts | 11 | export function createCloudflareGatewayModel(params: CreateCloudflareGatewayModelParams & { isImage: true }): ImageModel | CODE |
| LOW⚡ | …i-providers/src/lib/create-cloudflare-gateway-model.ts | 12 | export function createCloudflareGatewayModel(params: CreateCloudflareGatewayModelParams & { isImage?: false }): Language | CODE |
| LOW⚡ | …i-providers/src/lib/create-cloudflare-gateway-model.ts | 13 | export function createCloudflareGatewayModel({ credentials, modelId, isImage = false, routing = 'compat', metadata, onOu | CODE |
| LOW | …i-providers/src/lib/create-cloudflare-gateway-model.ts | 87 | function withoutAuthorizationHeader(delegate: typeof globalThis.fetch | undefined): typeof globalThis.fetch { | CODE |
| LOW | …ges/core/ai-providers/src/lib/create-language-model.ts | 176 | function stripDefaultAuthorization({ headers, delegate }: { | CODE |
| LOW | …ges/core/ai-providers/src/lib/create-language-model.ts | 220 | async function generateWithAutoToolChoice({ params, model }: MiddlewareCall): Promise<GenerateResult> { | CODE |
| LOW | …ges/core/ai-providers/src/lib/create-language-model.ts | 288 | function createOpenRouterChatModel({ apiKey, modelId, options }: { | CODE |
| LOW | …ges/core/ai-providers/src/lib/create-language-model.ts | 300 | export function buildOpenAICompatibleHeaders({ apiKeyHeader, apiKey, defaultHeaders, extraHeaders }: { | CODE |
| LOW | …ckages/web/test/app/builder/flow-canvas/hooks.test.tsx | 639 | function DraftPushWatcherWithFlowLock() { | CODE |
| LOW | …ckages/web/test/app/builder/flow-canvas/hooks.test.tsx | 654 | function ReconnectAndReturnWatcher() { | CODE |
| 726 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/rules/mintlify.md | 121 | -d '{"name": "John Doe", "email": "john@example.com"}' | CODE |
| LOW | .agents/rules/mintlify.md | 129 | "name": "John Doe", | CODE |
| LOW | .agents/skills/agent-browser/SKILL.md | 23 | agent-browser fill @e1 "user@example.com" | CODE |
| LOW | .agents/skills/agent-browser/SKILL.md | 39 | agent-browser fill @e1 "user@example.com" && agent-browser fill @e2 "password123" && agent-browser click @e3 | CODE |
| LOW | .agents/skills/agent-browser/SKILL.md | 110 | agent-browser fill @e1 "Jane Doe" | CODE |
| LOW | …ents/skills/agent-browser/references/authentication.md | 31 | agent-browser fill @e1 "user@example.com" | CODE |
| LOW | …ents/skills/agent-browser/references/authentication.md | 50 | agent-browser fill @e1 "user@example.com" | CODE |
| LOW | …ents/skills/agent-browser/references/authentication.md | 107 | agent-browser fill @e1 "user@example.com" | CODE |
| LOW | …gents/skills/agent-browser/references/snapshot-refs.md | 72 | agent-browser fill @e10 "user@example.com" | CODE |
| LOW | …/skills/agent-browser/references/session-management.md | 29 | agent-browser --session auth fill @e1 "user@example.com" | CODE |
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 32 | # agent-browser fill @e1 "John Doe" # Text input | COMMENT |
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 33 | # agent-browser fill @e2 "user@example.com" # Email input | COMMENT |
| LOW | …ents/skills/mcp-builder/reference/python_mcp_server.md | 306 | "name": str, # Full name (e.g., "John Doe") | STRING |
| LOW | …ents/skills/mcp-builder/reference/python_mcp_server.md | 572 | return {"id": user_id, "name": "John Doe", "email": "john@example.com"} | CODE |
| LOW | .agents/skills/mcp-builder/reference/node_mcp_server.md | 173 | "name": string, // Full name (e.g., "John Doe") | CODE |
| LOW⚡ | .agents/skills/piece-builder/output-quality.md | 11 | user: { name: 'Jane Doe', email: 'jane@example.com' }, | CODE |
| LOW⚡ | .agents/skills/piece-builder/output-quality.md | 12 | company: { name: 'Acme Inc', industry: 'Tech' }, | CODE |
| LOW⚡ | .agents/skills/piece-builder/output-quality.md | 20 | user_name: 'Jane Doe', | CODE |
| LOW⚡ | .agents/skills/piece-builder/output-quality.md | 22 | company_name: 'Acme Inc', | CODE |
| LOW | .agents/skills/piece-builder/output-quality.md | 34 | { name: 'Alice', email: 'alice@x.com', phone: '555-1234' }, | CODE |
| LOW | .agents/skills/piece-builder/output-quality.md | 40 | { name: 'Alice', email: 'alice@x.com', phone: '555-1234' }, | CODE |
| LOW | .agents/skills/playwright-e2e-testing/SKILL.md | 195 | await page.getByRole('textbox', { name: 'Email' }).fill('user@example.com'); | CODE |
| LOW | .agents/skills/playwright-e2e-testing/SKILL.md | 235 | await form.locator('input[name="email"]').fill('user@example.com'); | CODE |
| LOW | .agents/skills/playwright-e2e-testing/SKILL.md | 363 | await page.fill('input[name="email"]', 'user@example.com'); | CODE |
| LOW | .agents/skills/playwright-e2e-testing/SKILL.md | 633 | { id: 1, name: 'John Doe' }, | CODE |
| LOW | .agents/skills/playwright-e2e-testing/SKILL.md | 641 | await expect(page.locator('.user-list')).toContainText('John Doe'); | CODE |
| LOW | .agents/skills/playwright-e2e-testing/SKILL.md | 1005 | await signUp(page, 'test@test.com'); // Conflicts in parallel | CODE |
| LOW | docs/openapi.json | 1 | {"openapi":"3.1.0","info":{"title":"Activepieces Documentation","version":"0.0.0"},"components":{"securitySchemes":{"api | CODE |
| LOW | …es/core/shared/test/formula/function-evaluator.test.ts | 80 | expect(result('extract_email("contact me at foo@bar.com today")')).toBe('foo@bar.com')) | CODE |
| LOW | packages/core/execution/test/flow/cof-branches.test.ts | 214 | const trigger = buildCodeAction({ name: 'placeholder' }) | CODE |
| LOW | packages/core/execution/test/flow/cof-branches.test.ts | 225 | parentStep: 'placeholder', | CODE |
| LOW | …est/app/routes/platform/security/sso/sso-page.test.tsx | 1201 | screen.getByLabelText('IDP Metadata').getAttribute('placeholder'), | CODE |
| LOW | …est/app/routes/platform/security/sso/sso-page.test.tsx | 1204 | screen.getByLabelText('IDP Certificate').getAttribute('placeholder'), | CODE |
| LOW | …onents/custom/smart-output-viewer/format-value.test.ts | 133 | expect(isSafeEmail('user@example.com')).toBe(true); | CODE |
| LOW | …/src/app/builder/piece-properties/properties-utils.tsx | 400 | 'placeholder' in property ? property.placeholder : undefined | CODE |
| LOW | …/src/app/builder/piece-properties/properties-utils.tsx | 418 | 'placeholder' in property ? property.placeholder : undefined | CODE |
| LOW | …s/core/word-documents/src/lib/actions/fill-template.ts | 258 | return part.type === 'placeholder'; | CODE |
| LOW | …pieces/core/csv/src/lib/actions/convert-json-to-csv.ts | 27 | street: '123 Main St', | CODE |
| LOW | …pieces/core/csv/src/lib/actions/convert-json-to-csv.ts | 35 | street: '123 Main St', | CODE |
| LOW | …ges/pieces/community/cal-com/src/lib/triggers/index.ts | 30 | name: 'John Doe', | CODE |
| LOW | …ges/pieces/community/cal-com/src/lib/triggers/index.ts | 79 | name: 'John Doe', | CODE |
| LOW | …ges/pieces/community/cal-com/src/lib/triggers/index.ts | 155 | name: 'John Doe', | CODE |
| LOW | …/pieces/community/granola/src/lib/triggers/new-note.ts | 57 | owner_name: 'Jane Doe', | CODE |
| LOW | …ces/community/granola/src/lib/triggers/updated-note.ts | 60 | owner_name: 'Jane Doe', | CODE |
| LOW | …pieces/community/time-ops/src/lib/triggers/new-user.ts | 58 | name: 'John Doe', | CODE |
| LOW | packages/pieces/community/drip/test/legacy.test.ts | 79 | expect(result).not.toHaveProperty('placeholder'); | CODE |
| LOW | …/community/zendesk-sell/src/lib/actions/create_lead.ts | 59 | description: 'An object containing address details (e.g., {"line1": "123 Main St", "city": "Anytown"}).', | CODE |
| LOW | …llout-forms/src/lib/triggers/new-form-response.test.ts | 13 | value: 'John Doe', | CODE |
| LOW | …ty/fillout-forms/src/lib/triggers/new-form-response.ts | 85 | value: 'John Doe', | CODE |
| LOW | …s/pieces/community/moxie-crm/src/lib/triggers/index.ts | 117 | commentUserName: 'Jane Doe', | CODE |
| LOW | …/src/lib/triggers/booking-canceled-then-rescheduled.ts | 53 | company: 'Acme Inc', | CODE |
| LOW | …/src/lib/triggers/booking-canceled-then-rescheduled.ts | 66 | street_address: '123 Main Street', | CODE |
| LOW | …ity/oncehub/src/lib/triggers/conversation-abandoned.ts | 40 | company: 'Acme Inc', | CODE |
| LOW | …ity/oncehub/src/lib/triggers/conversation-abandoned.ts | 53 | street_address: '123 Main Street', | CODE |
| LOW | …unity/oncehub/src/lib/triggers/conversation-started.ts | 40 | company: 'Acme Inc', | CODE |
| LOW | …unity/oncehub/src/lib/triggers/conversation-started.ts | 53 | street_address: '123 Main Street', | CODE |
| LOW | …community/oncehub/src/lib/triggers/booking-canceled.ts | 52 | company: 'Acme Inc', | CODE |
| LOW | …community/oncehub/src/lib/triggers/booking-canceled.ts | 65 | street_address: '123 Main Street', | CODE |
| LOW | …ommunity/oncehub/src/lib/triggers/booking-scheduled.ts | 53 | company: 'Acme Inc', | CODE |
| LOW | …ommunity/oncehub/src/lib/triggers/booking-scheduled.ts | 66 | street_address: '123 Main Street', | CODE |
| 376 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …s/pieces/community/xero/test/upload-attachment.test.ts | 14 | const options = xeroUploadAttachment.props.resource_type.options.options.map((option) => option.value); | CODE |
| CRITICAL | …munity/shopify/src/lib/actions/ai/add-product-media.ts | 89 | const existingIds = new Set(before.data.product.media.nodes.map((node) => node.id)); | CODE |
| CRITICAL | …/pieces/community/hubspot/src/lib/triggers/new-task.ts | 34 | const response = await client.crm.objects.tasks.searchApi.doSearch({ | CODE |
| CRITICAL | …kages/pieces/community/hubspot/src/lib/common/props.ts | 779 | const associationLabels = await client.crm.associations.v4.schema.definitionsApi.getAll( | CODE |
| CRITICAL | …kages/pieces/community/hubspot/src/lib/common/props.ts | 954 | const response = await client.cms.blogs.authors.blogAuthorsApi.getPage( | CODE |
| CRITICAL | …community/hubspot/src/lib/actions/find-associations.ts | 62 | const response = await client.crm.associations.v4.basicApi.getPage( | CODE |
| CRITICAL | …mmunity/hubspot/src/lib/actions/create-associations.ts | 90 | const associationLabels = await client.crm.associations.v4.schema.definitionsApi.getAll( | CODE |
| CRITICAL | …mmunity/hubspot/src/lib/actions/create-associations.ts | 110 | const response = await client.crm.associations.v4.batchApi.create( | CODE |
| CRITICAL | …mmunity/hubspot/src/lib/actions/remove-associations.ts | 90 | const associationLabels = await client.crm.associations.v4.schema.definitionsApi.getAll( | CODE |
| CRITICAL | …mmunity/hubspot/src/lib/actions/remove-associations.ts | 110 | const response = await client.crm.associations.v4.batchApi.archiveLabels( | CODE |
| CRITICAL | …ieces/community/bluesky/src/lib/actions/delete-list.ts | 45 | await agent.app.bsky.graph.list.delete({ repo: me, rkey: ref.rkey }); | CODE |
| CRITICAL | …eces/community/bluesky/src/lib/actions/unblock-user.ts | 35 | await agent.app.bsky.graph.block.delete({ repo: me, rkey: parsed.rkey }); | CODE |
| CRITICAL | …pieces/community/bluesky/src/lib/actions/block-user.ts | 38 | (await agent.app.bsky.graph.block.create({ repo: me }, { subject: profile.did, createdAt: new Date().toISOStri | CODE |
| CRITICAL | …unity/bluesky/src/lib/actions/remove-user-from-list.ts | 47 | await agent.app.bsky.graph.listitem.delete({ repo: me, rkey }); | CODE |
| CRITICAL | …ieces/community/bluesky/src/lib/actions/create-list.ts | 58 | const response = await agent.app.bsky.graph.list.create( | CODE |
| CRITICAL | …/community/bluesky/src/lib/actions/add-user-to-list.ts | 38 | const response = await agent.app.bsky.graph.listitem.create({ repo: me }, { subject: did, list: list.uri, create | CODE |
| CRITICAL | …rver/worker/test/lib/execute/jobs/execute-flow.test.ts | 348 | const reported = ctx.apiClient.uploadRunLog.mock.calls.at(-1)[0] | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | deploy/activepieces-helm/values.yaml | 133 | # ============================================================================ | COMMENT |
| MEDIUM | deploy/activepieces-helm/values.yaml | 145 | # ============================================================================ | COMMENT |
| MEDIUM | deploy/activepieces-helm/values.yaml | 159 | # ============================================================================ | COMMENT |
| MEDIUM | deploy/activepieces-helm/values.yaml | 169 | # ============================================================================ | COMMENT |
| MEDIUM | …kills/agent-browser/templates/authenticated-session.sh | 32 | # ================================================================ | COMMENT |
| MEDIUM | …kills/agent-browser/templates/authenticated-session.sh | 34 | # ================================================================ | COMMENT |
| MEDIUM | …kills/agent-browser/templates/authenticated-session.sh | 54 | # ================================================================ | COMMENT |
| MEDIUM | …kills/agent-browser/templates/authenticated-session.sh | 56 | # ================================================================ | COMMENT |
| MEDIUM | …kills/agent-browser/templates/authenticated-session.sh | 76 | # ================================================================ | COMMENT |
| MEDIUM | …kills/agent-browser/templates/authenticated-session.sh | 78 | # ================================================================ | COMMENT |
| MEDIUM⚡ | …ckages/core/piece-types/src/lib/execution-contracts.ts | 10 | // ── store-entry ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ckages/core/piece-types/src/lib/execution-contracts.ts | 13 | // ── piece version patterns ───────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ckages/core/piece-types/src/lib/execution-contracts.ts | 21 | // ── piece package ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ckages/core/piece-types/src/lib/execution-contracts.ts | 55 | // ── trigger source / schedule ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ckages/core/piece-types/src/lib/execution-contracts.ts | 89 | // ── file ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ckages/core/piece-types/src/lib/execution-contracts.ts | 140 | // ── user (meta) ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/pieces/community/dataforb2b/src/lib/common/index.ts | 6 | // ─── Authentication ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/pieces/community/dataforb2b/src/lib/common/index.ts | 39 | // ─── Shared request helpers ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/pieces/community/dataforb2b/src/lib/common/index.ts | 72 | // ─── Operators ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/pieces/community/dataforb2b/src/lib/common/index.ts | 103 | // ─── Filter fields ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/pieces/community/dataforb2b/src/lib/common/index.ts | 200 | // ─── Shared props & condition builder ──────────────────────────────────────── | COMMENT |
| MEDIUM | …es/pieces/community/dataforb2b/src/lib/common/index.ts | 306 | // ─── Typeahead ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ges/pieces/community/linkupapi/src/lib/common/index.ts | 6 | // ─── Authentication ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ges/pieces/community/linkupapi/src/lib/common/index.ts | 40 | // ─── Shared props ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ges/pieces/community/linkupapi/src/lib/common/index.ts | 49 | // ─── Request helpers ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ges/pieces/community/amazon-textract/src/lib/common.ts | 14 | // ─── Output Types ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ges/pieces/community/amazon-textract/src/lib/common.ts | 108 | // ─── Client Factory ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ges/pieces/community/amazon-textract/src/lib/common.ts | 187 | // ─── Document Input Builder ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ges/pieces/community/amazon-textract/src/lib/common.ts | 205 | // ─── Block Tree Parsers ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ges/pieces/community/amazon-textract/src/lib/common.ts | 553 | // ─── Error Formatter ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 761 | // ── Fix 1: Step output reference format ─────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 828 | // ── Fix 2: Sample data preservation on trigger updates ──────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 905 | // ── Fix 3: Dynamic property resolution ──────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 948 | // ── Real-world agent scenarios (from MCP comparison report) ─────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 1233 | // ── ap_build_flow — batch flow creation ────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 1454 | // ── ap_flow_structure — step input visibility ──────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 1562 | // ── ap_duplicate_flow ──────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 1699 | // ── ap_update_branch ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 2031 | // ── ARRAY item schema exposure ─────────────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 2053 | // ── ap_list_flows with filters ─────────────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 2086 | // ── ROUTER validation UX ───────────────────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 2122 | // ── Published flow warning ──────────────────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 2165 | // ── Error sanitization ─────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 2183 | // ── Router branch condition validation ─────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 2458 | // ── ap_run_action ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 2549 | // ── Private (CUSTOM) pieces visibility ─────────────────────────── | COMMENT |
| MEDIUM | …s/server/api/test/integration/ce/mcp/mcp-tools.test.ts | 2699 | // ── Flow attribution (createdBy / ownerId) ─────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 20 | # Step 1: Navigate to form | COMMENT |
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 24 | # Step 2: Snapshot to discover form elements | COMMENT |
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 29 | # Step 3: Fill form fields (customize these refs based on snapshot output) | COMMENT |
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 46 | # Step 4: Wait for submission | COMMENT |
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 50 | # Step 5: Verify result | COMMENT |
| LOW | .agents/skills/analyze-logs/SKILL.md | 99 | ### Step 1: Read the most recent log file | COMMENT |
| LOW | .agents/skills/analyze-logs/SKILL.md | 103 | ### Step 2: Identify the relevant events | COMMENT |
| LOW | .agents/skills/analyze-logs/SKILL.md | 114 | ### Step 3: Analyze and explain | COMMENT |
| LOW⚡ | .agents/skills/mcp-builder/reference/evaluation.md | 176 | ### Step 1: Documentation Inspection | COMMENT |
| LOW⚡ | .agents/skills/mcp-builder/reference/evaluation.md | 184 | ### Step 2: Tool Inspection | COMMENT |
| LOW⚡ | .agents/skills/mcp-builder/reference/evaluation.md | 191 | ### Step 3: Developing Understanding | COMMENT |
| LOW⚡ | .agents/skills/mcp-builder/reference/evaluation.md | 200 | ### Step 4: Read-Only Content Inspection | COMMENT |
| LOW | .agents/skills/mcp-builder/reference/evaluation.md | 214 | ### Step 5: Task Generation | COMMENT |
| LOW⚡ | .agents/skills/piece-builder/SKILL.md | 22 | ### Step 1: RESEARCH | COMMENT |
| LOW⚡ | .agents/skills/piece-builder/SKILL.md | 29 | ### Step 2: PLAN | COMMENT |
| LOW⚡ | .agents/skills/piece-builder/SKILL.md | 36 | ### Step 3: SCAFFOLD | COMMENT |
| LOW | .agents/skills/piece-builder/SKILL.md | 56 | ### Step 4: IMPLEMENT | COMMENT |
| LOW | .agents/skills/piece-builder/SKILL.md | 75 | ### Step 5: WIRE & VERIFY | COMMENT |
| LOW⚡ | …munity/microsoft-excel-365/src/lib/actions/find-row.ts | 100 | // Step 1: Apply the filter to the specified column | COMMENT |
| LOW⚡ | …munity/microsoft-excel-365/src/lib/actions/find-row.ts | 105 | // Step 2: Get the visible rows (i.e., the filtered results) | COMMENT |
| LOW⚡ | …munity/microsoft-excel-365/src/lib/actions/find-row.ts | 113 | // Step 3: Clear the filter to restore the table to its original state. | COMMENT |
| LOW⚡ | …icrosoft-excel-365/src/lib/actions/create-worksheet.ts | 54 | // Step 1: Create the new worksheet | COMMENT |
| LOW⚡ | …icrosoft-excel-365/src/lib/actions/create-worksheet.ts | 61 | // Step 2: If headers are provided, add them and create a table from them | COMMENT |
| LOW | …munity/simplyprint/src/lib/actions/upload-to-folder.ts | 75 | // Step 1: stage the bytes via files.simplyprint.io to get a hex fileId. | COMMENT |
| LOW | …munity/simplyprint/src/lib/actions/upload-to-folder.ts | 99 | // Step 2: commit the staged file into the user file system at folderId. | COMMENT |
| LOW | …tions/create-document-from-template-and-send-invite.ts | 116 | // Step 1: Create document from template | COMMENT |
| LOW | …tions/create-document-from-template-and-send-invite.ts | 139 | // Step 2: Send free form invite | COMMENT |
| LOW | …create-document-group-from-template-and-send-invite.ts | 108 | // Step 1: Create document group from template | COMMENT |
| LOW | …create-document-group-from-template-and-send-invite.ts | 137 | // Step 2: Build invite_steps by grouping signers by their order/step | COMMENT |
| LOW | …create-document-group-from-template-and-send-invite.ts | 194 | // Step 3: Send document group invite | COMMENT |
| LOW | …e-document-from-template-and-send-role-based-invite.ts | 133 | // Step 1: Create document from template | COMMENT |
| LOW | …e-document-from-template-and-send-role-based-invite.ts | 156 | // Step 2: Send role-based field invite | COMMENT |
| LOW⚡ | …ity/toggl-track/src/lib/common/webhook-instructions.ts | 14 | ### Step 1: Publish Your Flow in ActivePieces | COMMENT |
| LOW⚡ | …ity/toggl-track/src/lib/common/webhook-instructions.ts | 19 | ### Step 2: Access Toggl Track Webhooks | COMMENT |
| LOW⚡ | …ity/toggl-track/src/lib/common/webhook-instructions.ts | 24 | ### Step 3: Configure the Webhook | COMMENT |
| LOW⚡ | …ity/toggl-track/src/lib/common/webhook-instructions.ts | 33 | ### Step 4: Complete Setup | COMMENT |
| LOW⚡ | …ity/toggl-track/src/lib/common/webhook-instructions.ts | 38 | ### Step 5: Verification | COMMENT |
| LOW | packages/pieces/community/toggl-track/src/i18n/zh.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/nl.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/ja.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/de.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/pt.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/fr.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | …pieces/community/toggl-track/src/i18n/translation.json | 302 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/es.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW⚡ | …s/pieces/community/cody/src/lib/actions/upload-file.ts | 28 | // Step 1: Determine Content-Type from filename using the mime-types library | COMMENT |
| LOW⚡ | …s/pieces/community/cody/src/lib/actions/upload-file.ts | 31 | // Step 2: Get a Signed URL from the Cody API | COMMENT |
| LOW⚡ | …s/pieces/community/cody/src/lib/actions/upload-file.ts | 38 | // Step 3: Upload the actual file data to the signed URL | COMMENT |
| LOW⚡ | …s/pieces/community/cody/src/lib/actions/upload-file.ts | 41 | // Step 4: Finalize the document creation in Cody | COMMENT |
| LOW⚡ | …es/community/cody/src/lib/actions/upload-file-to-kb.ts | 35 | // Step 1: Determine Content-Type from filename using the mime-types library | COMMENT |
| LOW⚡ | …es/community/cody/src/lib/actions/upload-file-to-kb.ts | 38 | // Step 2: Get a Signed URL from the Cody API | COMMENT |
| LOW⚡ | …es/community/cody/src/lib/actions/upload-file-to-kb.ts | 45 | // Step 3: Upload the actual file data to the signed URL | COMMENT |
| LOW⚡ | …es/community/cody/src/lib/actions/upload-file-to-kb.ts | 48 | // Step 4: Finalize the document creation in Cody | COMMENT |
| LOW | …munity/salesforce/src/lib/trigger/new-case-in-queue.ts | 113 | // Step 2: Fetch full Case records in sequential batches of 200 (FIELDS(ALL) limit). | COMMENT |
| LOW | …ity/teamwork/src/lib/actions/upload-file-to-project.ts | 93 | // Step 1: Get presigned URL | COMMENT |
| LOW | …ity/teamwork/src/lib/actions/upload-file-to-project.ts | 104 | // Step 2: Upload file to S3 | COMMENT |
| LOW | …ity/teamwork/src/lib/actions/upload-file-to-project.ts | 115 | // Step 3: Finalize file upload | COMMENT |
| LOW | …kages/server/api/test/integration/ee/scim/scim.test.ts | 786 | // Step 1: IdP creates users | COMMENT |
| LOW | …kages/server/api/test/integration/ee/scim/scim.test.ts | 818 | // Step 2: IdP creates an "Engineering" group with both users | COMMENT |
| LOW | …kages/server/api/test/integration/ee/scim/scim.test.ts | 838 | // Step 3: IdP removes Bob from the group | COMMENT |
| 8 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 20 | # Step 1: Navigate to form | COMMENT |
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 24 | # Step 2: Snapshot to discover form elements | COMMENT |
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 29 | # Step 3: Fill form fields (customize these refs based on snapshot output) | COMMENT |
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 46 | # Step 4: Wait for submission | COMMENT |
| LOW⚡ | …ents/skills/agent-browser/templates/form-automation.sh | 50 | # Step 5: Verify result | COMMENT |
| LOW⚡ | …munity/microsoft-excel-365/src/lib/actions/find-row.ts | 100 | // Step 1: Apply the filter to the specified column | COMMENT |
| LOW⚡ | …munity/microsoft-excel-365/src/lib/actions/find-row.ts | 105 | // Step 2: Get the visible rows (i.e., the filtered results) | COMMENT |
| LOW⚡ | …munity/microsoft-excel-365/src/lib/actions/find-row.ts | 113 | // Step 3: Clear the filter to restore the table to its original state. | COMMENT |
| LOW⚡ | …icrosoft-excel-365/src/lib/actions/create-worksheet.ts | 54 | // Step 1: Create the new worksheet | COMMENT |
| LOW⚡ | …icrosoft-excel-365/src/lib/actions/create-worksheet.ts | 61 | // Step 2: If headers are provided, add them and create a table from them | COMMENT |
| LOW | …munity/simplyprint/src/lib/actions/upload-to-folder.ts | 75 | // Step 1: stage the bytes via files.simplyprint.io to get a hex fileId. | COMMENT |
| LOW | …munity/simplyprint/src/lib/actions/upload-to-folder.ts | 99 | // Step 2: commit the staged file into the user file system at folderId. | COMMENT |
| LOW | …tions/create-document-from-template-and-send-invite.ts | 116 | // Step 1: Create document from template | COMMENT |
| LOW | …tions/create-document-from-template-and-send-invite.ts | 139 | // Step 2: Send free form invite | COMMENT |
| LOW | …create-document-group-from-template-and-send-invite.ts | 108 | // Step 1: Create document group from template | COMMENT |
| LOW | …create-document-group-from-template-and-send-invite.ts | 137 | // Step 2: Build invite_steps by grouping signers by their order/step | COMMENT |
| LOW | …create-document-group-from-template-and-send-invite.ts | 194 | // Step 3: Send document group invite | COMMENT |
| LOW | …e-document-from-template-and-send-role-based-invite.ts | 133 | // Step 1: Create document from template | COMMENT |
| LOW | …e-document-from-template-and-send-role-based-invite.ts | 156 | // Step 2: Send role-based field invite | COMMENT |
| LOW⚡ | …ity/toggl-track/src/lib/common/webhook-instructions.ts | 14 | ### Step 1: Publish Your Flow in ActivePieces | COMMENT |
| LOW⚡ | …ity/toggl-track/src/lib/common/webhook-instructions.ts | 19 | ### Step 2: Access Toggl Track Webhooks | COMMENT |
| LOW⚡ | …ity/toggl-track/src/lib/common/webhook-instructions.ts | 24 | ### Step 3: Configure the Webhook | COMMENT |
| LOW⚡ | …ity/toggl-track/src/lib/common/webhook-instructions.ts | 33 | ### Step 4: Complete Setup | COMMENT |
| LOW⚡ | …ity/toggl-track/src/lib/common/webhook-instructions.ts | 38 | ### Step 5: Verification | COMMENT |
| LOW | packages/pieces/community/toggl-track/src/i18n/zh.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/nl.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/ja.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/de.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/pt.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/fr.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | …pieces/community/toggl-track/src/i18n/translation.json | 302 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW | packages/pieces/community/toggl-track/src/i18n/es.json | 300 | "\n## Setup Instructions\n\n**IMPORTANT: Publish Your Flow First**\n\nBefore you can set up the webhook in Toggl Track | CODE |
| LOW⚡ | …s/pieces/community/cody/src/lib/actions/upload-file.ts | 28 | // Step 1: Determine Content-Type from filename using the mime-types library | COMMENT |
| LOW⚡ | …s/pieces/community/cody/src/lib/actions/upload-file.ts | 31 | // Step 2: Get a Signed URL from the Cody API | COMMENT |
| LOW⚡ | …s/pieces/community/cody/src/lib/actions/upload-file.ts | 38 | // Step 3: Upload the actual file data to the signed URL | COMMENT |
| LOW⚡ | …s/pieces/community/cody/src/lib/actions/upload-file.ts | 41 | // Step 4: Finalize the document creation in Cody | COMMENT |
| LOW⚡ | …es/community/cody/src/lib/actions/upload-file-to-kb.ts | 35 | // Step 1: Determine Content-Type from filename using the mime-types library | COMMENT |
| LOW⚡ | …es/community/cody/src/lib/actions/upload-file-to-kb.ts | 38 | // Step 2: Get a Signed URL from the Cody API | COMMENT |
| LOW⚡ | …es/community/cody/src/lib/actions/upload-file-to-kb.ts | 45 | // Step 3: Upload the actual file data to the signed URL | COMMENT |
| LOW⚡ | …es/community/cody/src/lib/actions/upload-file-to-kb.ts | 48 | // Step 4: Finalize the document creation in Cody | COMMENT |
| LOW | …munity/salesforce/src/lib/trigger/new-case-in-queue.ts | 113 | // Step 2: Fetch full Case records in sequential batches of 200 (FIELDS(ALL) limit). | COMMENT |
| LOW | …ity/teamwork/src/lib/actions/upload-file-to-project.ts | 93 | // Step 1: Get presigned URL | COMMENT |
| LOW | …ity/teamwork/src/lib/actions/upload-file-to-project.ts | 104 | // Step 2: Upload file to S3 | COMMENT |
| LOW | …ity/teamwork/src/lib/actions/upload-file-to-project.ts | 115 | // Step 3: Finalize file upload | COMMENT |
| LOW | …kages/server/api/test/integration/ee/scim/scim.test.ts | 786 | // Step 1: IdP creates users | COMMENT |
| LOW | …kages/server/api/test/integration/ee/scim/scim.test.ts | 818 | // Step 2: IdP creates an "Engineering" group with both users | COMMENT |
| LOW | …kages/server/api/test/integration/ee/scim/scim.test.ts | 838 | // Step 3: IdP removes Bob from the group | COMMENT |
| LOW | …kages/server/api/test/integration/ee/scim/scim.test.ts | 857 | // Step 4: IdP deactivates Bob (offboarding) | COMMENT |
| LOW | …kages/server/api/test/integration/ee/scim/scim.test.ts | 875 | // Step 5: Verify final state | COMMENT |
| LOW⚡ | …/migration/postgres/1769084311004-AddEventStreaming.ts | 37 | // Step 1: Add the column with a nullable constraint temporarily | COMMENT |
| LOW⚡ | …/migration/postgres/1769084311004-AddEventStreaming.ts | 42 | // Step 2: Set all current rows to false | COMMENT |
| LOW⚡ | …/migration/postgres/1769084311004-AddEventStreaming.ts | 47 | // Step 3: Alter the column to not null | COMMENT |
| LOW⚡ | …migration/postgres/1710098373707-AddAuthorsToPieces.ts | 7 | // Step 1: Add the column "authors" with a varying array type | COMMENT |
| LOW⚡ | …migration/postgres/1710098373707-AddAuthorsToPieces.ts | 13 | // Step 2: Set the existing data in "authors" to an empty array | COMMENT |
| LOW⚡ | …migration/postgres/1710098373707-AddAuthorsToPieces.ts | 19 | // Step 3: Add the NOT NULL constraint to the "authors" column | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | benchmark/docker-compose.ci.yml | 1 | # CI-only override layered on top of docker-compose.yml. | COMMENT |
| LOW | benchmark/docker-compose.workerpool.yml | 1 | # Worker-is-the-sandbox benchmark (ADR 0003): N worker replicas, each its own container capped at | COMMENT |
| LOW | benchmark/setup.ts | 1 | #!/usr/bin/env bun | COMMENT |
| LOW | benchmark/run-local.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | deploy/activepieces-helm/Chart.yaml | 1 | apiVersion: v2 | COMMENT |
| LOW | deploy/activepieces-helm/values-openshift.yaml | 1 | # Overlay for OpenShift 4.x under the default `restricted-v2` SCC. | COMMENT |
| LOW | deploy/activepieces-helm/values.yaml | 41 | podSecurityContext: {} | COMMENT |
| LOW | deploy/activepieces-helm/values.yaml | 81 | # We usually recommend not to specify default resources and to leave this as a conscious | COMMENT |
| LOW | deploy/activepieces-helm/values.yaml | 141 | # AP_POSTGRES_DATABASE=activepieces | COMMENT |
| LOW | deploy/activepieces-helm/values.yaml | 161 | # Set enabled=true to deploy a bundled Redis instance. | COMMENT |
| LOW | …nts/skills/agent-browser/templates/capture-workflow.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …ents/skills/agent-browser/templates/form-automation.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …ents/skills/agent-browser/templates/form-automation.sh | 21 | agent-browser open "$FORM_URL" | COMMENT |
| LOW | …kills/agent-browser/templates/authenticated-session.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …kills/agent-browser/templates/authenticated-session.sh | 81 | # | COMMENT |
| LOW | …kills/agent-browser/templates/authenticated-session.sh | 101 | # # Save state for future runs | COMMENT |
| LOW | smoke-test/verify-perf.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | packages/core/utils/src/lib/mustache-utils.ts | 1 | // Extracts `{{ ... }}` tokens from a string using brace counting rather than a | COMMENT |
| LOW | …p/routes/chat-with-ai/components/assistant-message.tsx | 281 | !hasSkeletonAfter && | COMMENT |
| LOW | …ntication/components/auth-landing/auth-drawer-body.tsx | 81 | // Steps cross-fade instead of snapping, and the card animates to the new | COMMENT |
| LOW | …es/framework/src/lib/property/authentication/common.ts | 21 | // (e.g. the account email, or Slack's "display-name (workspace)"), shown in | COMMENT |
| LOW | …eces/community/webflow/src/lib/actions/refund-order.ts | 21 | // required: false, | COMMENT |
| LOW | …quickbooks-desktop-conductor/src/lib/common/polling.ts | 1 | import { HttpMethod } from '@activepieces/pieces-common'; | COMMENT |
| LOW | …soft-excel-365/src/lib/actions/append-multiple-rows.ts | 61 | // if ( | COMMENT |
| LOW | …soft-excel-365/src/lib/actions/append-multiple-rows.ts | 81 | // } = {}; | COMMENT |
| LOW | …community/simplyprint/src/lib/common/chunked-upload.ts | 1 | // Pure, framework-free driver for the SimplyPrint files.simplyprint.io | COMMENT |
| LOW | …es/community/simplyprint/src/lib/actions/assign-tag.ts | 61 | const subjects = context.propsValue.subjectIds ?? []; | COMMENT |
| LOW | …central/src/lib/common/props/salesQuoteLines.entity.ts | 21 | options: [ | COMMENT |
| LOW | …central/src/lib/common/props/salesOrderLines.entity.ts | 21 | options: [ | COMMENT |
| LOW | …ntral/src/lib/common/props/salesInvoiceLines.entity.ts | 21 | options: [ | COMMENT |
| LOW | …eces/community/convertkit/src/lib/common/tags/index.ts | 221 | }, | COMMENT |
| LOW | …eces/community/convertkit/src/lib/common/tags/index.ts | 241 | // let optionsFnRef: any; | COMMENT |
| LOW | …ages/pieces/community/useinbox/src/lib/common/props.ts | 361 | }, | COMMENT |
| LOW | …ages/pieces/community/useinbox/src/lib/common/props.ts | 381 | // auth: auth as BasicAuthValue, | COMMENT |
| LOW | …ages/pieces/community/useinbox/src/lib/common/props.ts | 401 | // options: data.map((f) => ({ | COMMENT |
| LOW | …eces/community/recall-ai/src/lib/actions/create-bot.ts | 21 | displayName: 'Bot Name', | COMMENT |
| LOW | …eces/community/recall-ai/src/lib/actions/create-bot.ts | 41 | // description: | COMMENT |
| LOW | …eces/community/recall-ai/src/lib/actions/create-bot.ts | 61 | // }), | COMMENT |
| LOW | …eces/community/recall-ai/src/lib/actions/create-bot.ts | 101 | // body['chat'] = chat; | COMMENT |
| LOW | …pi/src/app/workers/job-queue/job-assignment-tracker.ts | 1 | import { isNil } from '@activepieces/core-utils' | COMMENT |
| LOW | …ker/src/lib/execute/jobs/ee/agent/execute-agent-run.ts | 21 | const APPROVAL_BLOCK_MS = 50_000 | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .agents/rules/mintlify.md | 109 | -H 'Authorization: Bearer YOUR_API_KEY' | CODE |
| HIGH | .agents/rules/mintlify.md | 249 | Bearer token for API authentication. Format: `Bearer YOUR_API_KEY` | CODE |
| HIGH | .agents/skills/mcp-builder/reference/evaluation.md | 557 | export ANTHROPIC_API_KEY=your_api_key | CODE |
| HIGH | packages/pieces/community/browserless/README.md | 19 | 3. Your API endpoint URL (typically https://your-api-key.browserless.io) | CODE |
| HIGH | packages/pieces/community/browserless/README.md | 25 | 3. Use your API endpoint URL in the format: `https://your-api-key.browserless.io` | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | packages/pieces/community/mailchain/src/i18n/zh.json | 12 | "**Getting Started with Mailchain:**\n\nTo send emails using the Mailchain Protocol, you need to first create an accou | CODE |
| MEDIUM | packages/pieces/community/mailchain/src/i18n/nl.json | 12 | "**Getting Started with Mailchain:**\n\nTo send emails using the Mailchain Protocol, you need to first create an accou | CODE |
| MEDIUM | packages/pieces/community/mailchain/src/i18n/ja.json | 12 | "**Getting Started with Mailchain:**\n\nTo send emails using the Mailchain Protocol, you need to first create an accou | CODE |
| MEDIUM | packages/pieces/community/mailchain/src/i18n/de.json | 12 | "**Getting Started with Mailchain:**\n\nTo send emails using the Mailchain Protocol, you need to first create an accou | CODE |
| MEDIUM | packages/pieces/community/mailchain/src/i18n/ru.json | 13 | "**Getting Started with Mailchain:**\n\nTo send emails using the Mailchain Protocol, you need to first create an accou | CODE |
| MEDIUM | packages/pieces/community/mailchain/src/i18n/pt.json | 12 | "**Getting Started with Mailchain:**\n\nTo send emails using the Mailchain Protocol, you need to first create an accou | CODE |
| MEDIUM | packages/pieces/community/mailchain/src/i18n/fr.json | 12 | "**Getting Started with Mailchain:**\n\nTo send emails using the Mailchain Protocol, you need to first create an accou | CODE |
| MEDIUM | …s/pieces/community/mailchain/src/i18n/translation.json | 12 | "**Getting Started with Mailchain:**\n\nTo send emails using the Mailchain Protocol, you need to first create an accou | CODE |
| MEDIUM | packages/pieces/community/mailchain/src/i18n/vi.json | 13 | "**Getting Started with Mailchain:**\n\nTo send emails using the Mailchain Protocol, you need to first create an accou | CODE |
| MEDIUM | packages/pieces/community/mailchain/src/i18n/es.json | 12 | "**Getting Started with Mailchain:**\n\nTo send emails using the Mailchain Protocol, you need to first create an accou | CODE |
| MEDIUM | packages/pieces/community/zuora/src/i18n/pt.json | 14 | "\n - **Establish a Dedicated API User** : Zuora recommends creating a distinct API user specifically for OAuth authe | CODE |
| MEDIUM | …kages/server/worker/test/lib/agent-eval/live/report.ts | 10 | lines.push(`# Chat harness — failure-mode scorecard (${label})`) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/web/public/locales/ja/translation.json | 2865 | "Follow these instructions to get your Cloudflare AI Gateway API Key:\n1. Go to https://developers.cloudflare.com/ai-g | CODE |
| LOW | packages/web/public/locales/pt/translation.json | 2865 | "Follow these instructions to get your Cloudflare AI Gateway API Key:\n1. Go to https://developers.cloudflare.com/ai-g | CODE |
| LOW | packages/web/public/locales/zh/translation.json | 2865 | "Follow these instructions to get your Cloudflare AI Gateway API Key:\n1. Go to https://developers.cloudflare.com/ai-g | CODE |
| LOW | packages/web/public/locales/zh-TW/translation.json | 2865 | "Follow these instructions to get your Cloudflare AI Gateway API Key:\n1. Go to https://developers.cloudflare.com/ai-g | CODE |
| LOW | packages/web/public/locales/nl/translation.json | 2865 | "Follow these instructions to get your Cloudflare AI Gateway API Key:\n1. Go to https://developers.cloudflare.com/ai-g | CODE |
| LOW | packages/web/public/locales/de/translation.json | 2865 | "Follow these instructions to get your Cloudflare AI Gateway API Key:\n1. Go to https://developers.cloudflare.com/ai-g | CODE |
| LOW | packages/web/public/locales/fr/translation.json | 2865 | "Follow these instructions to get your Cloudflare AI Gateway API Key:\n1. Go to https://developers.cloudflare.com/ai-g | CODE |
| LOW | packages/web/public/locales/es/translation.json | 2865 | "Follow these instructions to get your Cloudflare AI Gateway API Key:\n1. Go to https://developers.cloudflare.com/ai-g | CODE |
| LOW | packages/web/public/locales/en/translation.json | 2865 | "Follow these instructions to get your Cloudflare AI Gateway API Key:\n1. Go to https://developers.cloudflare.com/ai-g | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/mcp-builder/scripts/evaluation.py | 74 | except Exception as e: | CODE |
| MEDIUM | .agents/skills/mcp-builder/scripts/evaluation.py | 75 | print(f"Error parsing evaluation file {file_path}: {e}") | CODE |
| LOW | .agents/skills/mcp-builder/scripts/evaluation.py | 118 | except Exception as e: | CODE |
| MEDIUM | .agents/skills/mcp-builder/scripts/evaluation.py | 340 | print(f"Error: Evaluation file not found: {args.eval_file}") | STRING |
| MEDIUM | .agents/skills/mcp-builder/scripts/evaluation.py | 356 | print(f"Error: {e}") | STRING |
| LOW | …ents/skills/mcp-builder/reference/python_mcp_server.md | 467 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ents/skills/mcp-builder/reference/python_mcp_server.md | 282 | Search for users in the Example system by name, email, or team. This tool searches across all user profiles in | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/core/utils/src/lib/deno.ts | 394 | print(${JSON.stringify(marker)} + JSON.stringify(payload)); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ry-no-jargon--plain_language--2026-10-03T13-19-13.json | 6 | "transcript": "TOOL_CALL: ap_load_guide {\"topic\":\"build_flow\"}\nTOOL_RESULT: \"# Guide: Build an automation Load | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deploy/activepieces-helm/values-openshift.yaml | 19 | # Set AP_EXECUTION_MODE to SANDBOX_CODE_ONLY (or UNSANDBOXED) in the | COMMENT |
| LOW | smoke-test/verify-memory.sh | 106 | # Print results table | COMMENT |
| LOW | .github/workflows/crowdin-pr-merger.yml | 75 | # Check if there are any changes | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/mcp-builder/scripts/connections.py | 112 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/web/src/features/forms/api/human-input-api.tsx | 89 | async function processData( | CODE |