The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
This report presents the forensic synthetic code analysis of affaan-m/everything-claude-code, a JavaScript project with 229,336 GitHub stars. SynthScan v2.0 examined 663,926 lines of code across 3231 source files, recording 1639 pattern matches distributed across 20 syntactic categories. The overall adjusted score of 4.5 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1639 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | README.md | 309 | ### Step 1: Install the Plugin (Recommended) | COMMENT |
| LOW | README.md | 331 | ### Step 2: Install Rules Only If You Need Them | COMMENT |
| LOW | README.md | 426 | ### Step 3: Start Using | COMMENT |
| LOW⚡ | CONTRIBUTING.md | 216 | ### Step 1: Understand | COMMENT |
| LOW⚡ | CONTRIBUTING.md | 219 | ### Step 2: Execute | COMMENT |
| LOW⚡ | CONTRIBUTING.md | 222 | ### Step 3: Verify | COMMENT |
| LOW⚡ | .cursor/skills/documentation-lookup/SKILL.md | 30 | ### Step 1: Resolve the Library ID | COMMENT |
| LOW⚡ | .cursor/skills/documentation-lookup/SKILL.md | 39 | ### Step 2: Select the Best Match | COMMENT |
| LOW⚡ | .cursor/skills/documentation-lookup/SKILL.md | 48 | ### Step 3: Fetch the Documentation | COMMENT |
| LOW⚡ | .cursor/skills/documentation-lookup/SKILL.md | 57 | ### Step 4: Use the Documentation | COMMENT |
| LOW | .opencode/prompts/agents/kotlin-reviewer.txt | 13 | ### Step 1: Gather Context | COMMENT |
| LOW | .opencode/prompts/agents/kotlin-reviewer.txt | 17 | ### Step 2: Understand Project Structure | COMMENT |
| LOW | .opencode/prompts/agents/kotlin-reviewer.txt | 34 | ### Step 3: Read and Review | COMMENT |
| LOW | .opencode/prompts/agents/kotlin-reviewer.txt | 38 | ### Step 4: Report Findings | COMMENT |
| LOW | .opencode/prompts/agents/tdd-guide.txt | 13 | ### Step 1: Write Test First (RED) | COMMENT |
| LOW⚡ | .opencode/prompts/agents/tdd-guide.txt | 27 | ### Step 2: Run Test (Verify it FAILS) | COMMENT |
| LOW⚡ | .opencode/prompts/agents/tdd-guide.txt | 33 | ### Step 3: Write Minimal Implementation (GREEN) | COMMENT |
| LOW⚡ | .opencode/prompts/agents/tdd-guide.txt | 42 | ### Step 4: Run Test (Verify it PASSES) | COMMENT |
| LOW⚡ | .opencode/prompts/agents/tdd-guide.txt | 48 | ### Step 5: Refactor (IMPROVE) | COMMENT |
| LOW⚡ | .opencode/prompts/agents/tdd-guide.txt | 54 | ### Step 6: Verify Coverage | COMMENT |
| LOW⚡ | .opencode/prompts/agents/docs-lookup.txt | 13 | ### Step 1: Resolve the library | COMMENT |
| LOW⚡ | .opencode/prompts/agents/docs-lookup.txt | 21 | ### Step 2: Fetch documentation | COMMENT |
| LOW⚡ | .opencode/prompts/agents/docs-lookup.txt | 29 | ### Step 3: Return the answer | COMMENT |
| LOW⚡ | .opencode/commands/eval.md | 32 | ### Step 1: Define Criteria | COMMENT |
| LOW⚡ | .opencode/commands/eval.md | 41 | ### Step 2: Run Tests | COMMENT |
| LOW⚡ | .opencode/commands/eval.md | 48 | ### Step 3: Calculate Score | COMMENT |
| LOW⚡ | .opencode/commands/eval.md | 54 | ### Step 4: Report | COMMENT |
| LOW⚡ | .opencode/commands/tdd.md | 24 | ### Step 1: Define Interfaces (SCAFFOLD) | COMMENT |
| LOW⚡ | .opencode/commands/tdd.md | 28 | ### Step 2: Write Failing Tests (RED) | COMMENT |
| LOW⚡ | .opencode/commands/tdd.md | 33 | ### Step 3: Implement Minimal Code (GREEN) | COMMENT |
| LOW⚡ | .opencode/commands/tdd.md | 38 | ### Step 4: Refactor (IMPROVE) | COMMENT |
| LOW⚡ | .opencode/commands/tdd.md | 43 | ### Step 5: Check Coverage | COMMENT |
| LOW | .opencode/commands/rust-test.md | 22 | ### Step 1: Define Interface | COMMENT |
| LOW | .opencode/commands/rust-test.md | 33 | ### Step 2: Write Tests | COMMENT |
| LOW⚡ | .opencode/commands/rust-test.md | 55 | ### Step 3: Run Tests (RED) | COMMENT |
| LOW⚡ | .opencode/commands/rust-test.md | 60 | ### Step 4: Implement (GREEN) | COMMENT |
| LOW⚡ | .opencode/commands/rust-test.md | 69 | ### Step 5: Check Coverage | COMMENT |
| LOW | .opencode/commands/go-test.md | 22 | ### Step 1: Define Interface | COMMENT |
| LOW | .opencode/commands/go-test.md | 37 | ### Step 2: Table-Driven Tests | COMMENT |
| LOW⚡ | .opencode/commands/go-test.md | 73 | ### Step 3: Run Tests (RED) | COMMENT |
| LOW⚡ | .opencode/commands/go-test.md | 78 | ### Step 4: Implement (GREEN) | COMMENT |
| LOW⚡ | .opencode/commands/go-test.md | 85 | ### Step 5: Benchmark | COMMENT |
| LOW | .opencode/commands/skill-create.md | 19 | ### Step 1: Gather Commit Data | COMMENT |
| LOW | .opencode/commands/skill-create.md | 31 | ### Step 2: Identify Patterns | COMMENT |
| LOW | .opencode/commands/skill-create.md | 48 | ### Step 3: Generate SKILL.md | COMMENT |
| LOW | .opencode/commands/skill-create.md | 92 | ### Step 4: Generate Instincts | COMMENT |
| LOW | .agents/skills/x-api/SKILL.md | 159 | # Step 1: Upload media | COMMENT |
| LOW | .agents/skills/x-api/SKILL.md | 166 | # Step 2: Post with media | COMMENT |
| LOW⚡ | .agents/skills/deep-research/SKILL.md | 28 | ### Step 1: Understand the Goal | COMMENT |
| LOW⚡ | .agents/skills/deep-research/SKILL.md | 36 | ### Step 2: Plan the Research | COMMENT |
| LOW⚡ | .agents/skills/deep-research/SKILL.md | 46 | ### Step 3: Execute Multi-Source Search | COMMENT |
| LOW | .agents/skills/deep-research/SKILL.md | 67 | ### Step 4: Deep-Read Key Sources | COMMENT |
| LOW | .agents/skills/deep-research/SKILL.md | 83 | ### Step 5: Synthesize and Write Report | COMMENT |
| LOW | .agents/skills/deep-research/SKILL.md | 119 | ### Step 6: Deliver | COMMENT |
| LOW⚡ | .agents/skills/documentation-lookup/SKILL.md | 29 | ### Step 1: Resolve the Library ID | COMMENT |
| LOW⚡ | .agents/skills/documentation-lookup/SKILL.md | 38 | ### Step 2: Select the Best Match | COMMENT |
| LOW⚡ | .agents/skills/documentation-lookup/SKILL.md | 47 | ### Step 3: Fetch the Documentation | COMMENT |
| LOW⚡ | .agents/skills/documentation-lookup/SKILL.md | 56 | ### Step 4: Use the Documentation | COMMENT |
| LOW | .agents/skills/tdd-workflow/SKILL.md | 51 | ### Step 0: Detect the Test Runner | COMMENT |
| LOW | .agents/skills/tdd-workflow/SKILL.md | 79 | ### Step 1: Write User Journeys | COMMENT |
| 472 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | ecc_dashboard.py | 35 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | ecc_dashboard.py | 37 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | ecc_dashboard.py | 936 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | ecc_dashboard.py | 938 | # ============================================================================ | COMMENT |
| MEDIUM | ecc_dashboard.py | 283 | # ============================================================================ | COMMENT |
| MEDIUM | ecc_dashboard.py | 285 | # ============================================================================ | COMMENT |
| MEDIUM | ecc_dashboard.py | 393 | # ========================================================================= | COMMENT |
| MEDIUM | ecc_dashboard.py | 395 | # ========================================================================= | COMMENT |
| MEDIUM | ecc_dashboard.py | 498 | # ========================================================================= | COMMENT |
| MEDIUM | ecc_dashboard.py | 500 | # ========================================================================= | COMMENT |
| MEDIUM | ecc_dashboard.py | 620 | # ========================================================================= | COMMENT |
| MEDIUM | ecc_dashboard.py | 622 | # ========================================================================= | COMMENT |
| MEDIUM | ecc_dashboard.py | 663 | # ========================================================================= | COMMENT |
| MEDIUM | ecc_dashboard.py | 665 | # ========================================================================= | COMMENT |
| MEDIUM | ecc_dashboard.py | 740 | # ========================================================================= | COMMENT |
| MEDIUM | ecc_dashboard.py | 742 | # ========================================================================= | COMMENT |
| MEDIUM | tests/plugin-manifest.test.js | 179 | // ── Claude plugin manifest ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/plugin-manifest.test.js | 253 | // ── Codex plugin manifest ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/plugin-manifest.test.js | 322 | // ── .mcp.json at plugin root ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/plugin-manifest.test.js | 353 | // ── Codex marketplace file ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/plugin-manifest.test.js | 414 | // ── plugins/ecc marketplace plugin folder ───────────────────────────────────── | COMMENT |
| MEDIUM | tests/plugin-manifest.test.js | 535 | // ── Summary ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/post-bash-hooks.test.js | 37 | // ── post-bash-build-complete.js ────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/post-bash-hooks.test.js | 114 | // ── post-bash-pr-created.js ────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/detect-project-worktree.test.js | 75 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/detect-project-worktree.test.js | 77 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/detect-project-worktree.test.js | 109 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/detect-project-worktree.test.js | 111 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/detect-project-worktree.test.js | 158 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/detect-project-worktree.test.js | 160 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/detect-project-worktree.test.js | 291 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/detect-project-worktree.test.js | 293 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/governance-capture.test.js | 33 | // ── detectSecrets ────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/governance-capture.test.js | 70 | // ── detectApprovalRequired ───────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/governance-capture.test.js | 102 | // ── detectSensitivePath ──────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/governance-capture.test.js | 128 | // ── analyzeForGovernanceEvents ───────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/governance-capture.test.js | 255 | // ── run() function ───────────────────────────────────────── | COMMENT |
| MEDIUM | …/hooks/continuous-learning-shebang-consistency.test.js | 92 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/hooks/continuous-learning-shebang-consistency.test.js | 94 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/stop-format-typecheck.test.js | 46 | // ── post-edit-accumulator.js ───────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/stop-format-typecheck.test.js | 152 | // ── stop-format-typecheck: accumulator teardown ────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 51 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 53 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 93 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 95 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 131 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 133 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 166 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 168 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 283 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 285 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 332 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 334 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 428 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 430 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 471 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hooks/observer-memory.test.js | 473 | // ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/scripts/claw.test.js | 56 | // ── Storage tests (6) ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/scripts/claw.test.js | 117 | // ── Context tests (3) ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/scripts/claw.test.js | 163 | // ── Delegation tests (2) ────────────────────────────────────────────── | COMMENT |
| 119 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_templates.py | 14 | def restore_template_registry(): | CODE |
| LOW⚡ | tests/test_templates.py | 25 | def test_register_template_exposes_public_template_mapping(): | CODE |
| LOW⚡ | tests/test_templates.py | 34 | def test_templates_mapping_remains_mutable_for_existing_callers(): | CODE |
| LOW⚡ | tests/test_templates.py | 41 | def test_deregister_template_removes_named_template(): | CODE |
| LOW⚡ | tests/test_templates.py | 50 | def test_clear_templates_removes_all_registered_templates(): | CODE |
| LOW | tests/test_templates.py | 69 | def test_register_template_rejects_empty_inputs(name, template, error_match): | CODE |
| LOW | tests/test_astraflow_provider.py | 43 | def test_astraflow_provider_defaults_to_global_umodelverse_endpoint(monkeypatch): | CODE |
| LOW | tests/test_astraflow_provider.py | 56 | def test_astraflow_cn_provider_uses_cn_endpoint_and_model_fallback(monkeypatch): | CODE |
| LOW | tests/test_astraflow_provider.py | 71 | def test_astraflow_provider_generates_openai_compatible_chat_completion(): | CODE |
| LOW | tests/test_astraflow_provider.py | 103 | def test_astraflow_provider_forwards_non_default_temperature(): | CODE |
| LOW | tests/test_astraflow_provider.py | 113 | def test_astraflow_provider_parses_tool_calls(): | CODE |
| LOW | tests/test_astraflow_provider.py | 129 | def test_astraflow_provider_preserves_malformed_tool_arguments(): | CODE |
| LOW | tests/test_claude_provider.py | 40 | def test_generate_collects_text_and_tool_use_blocks() -> None: | CODE |
| LOW | tests/test_claude_provider.py | 62 | def test_generate_collects_multiple_tool_use_blocks() -> None: | CODE |
| LOW | tests/test_claude_provider.py | 85 | def test_generate_copies_tool_use_dict_arguments() -> None: | CODE |
| LOW | tests/test_claude_provider.py | 100 | def test_generate_text_only_has_no_tool_calls() -> None: | CODE |
| LOW | tests/test_invariant_runner.py | 47 | def test_setup_sandbox_blocks_dangerous_commands(setup_commands, test_id, tmp_path): | CODE |
| LOW | tests/test_atlas_provider.py | 43 | def test_atlas_provider_defaults_to_atlas_cloud_endpoint(monkeypatch): | CODE |
| LOW⚡ | tests/test_atlas_provider.py | 57 | def test_atlas_provider_reads_env_overrides(monkeypatch): | CODE |
| LOW⚡ | tests/test_atlas_provider.py | 67 | def test_atlas_provider_accepts_atlascloud_api_key_fallback(monkeypatch): | CODE |
| LOW⚡ | tests/test_atlas_provider.py | 77 | def test_atlas_provider_generates_openai_compatible_chat_completion(): | CODE |
| LOW | tests/test_atlas_provider.py | 109 | def test_atlas_provider_floors_max_tokens_for_reasoning_models(): | CODE |
| LOW | tests/test_atlas_provider.py | 123 | def test_atlas_provider_forwards_non_default_temperature(): | CODE |
| LOW | tests/test_atlas_provider.py | 133 | def test_atlas_provider_parses_tool_calls(): | CODE |
| LOW | tests/test_atlas_provider.py | 149 | def test_atlas_provider_preserves_malformed_tool_arguments(): | CODE |
| LOW | tests/test_builder.py | 8 | def test_build_without_system(self): | CODE |
| LOW⚡ | tests/test_builder.py | 27 | def test_build_adds_system_from_keyword_options(self): | CODE |
| LOW⚡ | tests/test_builder.py | 35 | def test_build_adds_system_from_prompt_config(self): | CODE |
| LOW⚡ | tests/test_builder.py | 43 | def test_rejects_config_with_keyword_options(self): | CODE |
| LOW⚡ | tests/test_builder.py | 50 | def test_empty_system_template_does_not_add_blank_system_message(self): | CODE |
| LOW | tests/test_executor.py | 57 | def test_execute_unknown_tool(self): | CODE |
| LOW | tests/test_provider_tools.py | 67 | def test_openai_provider_serializes_tools_for_chat_completions(): | CODE |
| LOW | tests/test_provider_tools.py | 87 | def test_openai_provider_can_be_constructed_without_credentials(monkeypatch): | CODE |
| LOW | tests/test_provider_tools.py | 95 | def test_openai_provider_rejects_empty_or_filtered_responses(): | CODE |
| LOW | tests/test_provider_tools.py | 107 | def test_openai_provider_allows_missing_usage(): | CODE |
| LOW | tests/test_provider_tools.py | 117 | def test_claude_provider_serializes_tools_for_messages_api(): | CODE |
| LOW⚡ | tests/test_resolver.py | 22 | def test_get_astraflow_provider(self): | CODE |
| LOW⚡ | tests/test_resolver.py | 27 | def test_get_astraflow_cn_provider(self): | CODE |
| LOW⚡ | tests/test_resolver.py | 37 | def test_get_provider_by_enum(self): | CODE |
| LOW⚡ | tests/test_resolver.py | 41 | def test_invalid_provider_raises(self): | CODE |
| LOW⚡ | tests/test_resolver.py | 45 | def test_saved_llm_env_selects_provider(self, monkeypatch, tmp_path): | CODE |
| LOW⚡ | tests/test_resolver.py | 54 | def test_env_provider_overrides_saved_llm_env(self, monkeypatch, tmp_path): | CODE |
| LOW⚡ | tests/test_resolver.py | 63 | def test_env_provider_is_normalized(self, monkeypatch): | CODE |
| LOW⚡ | tests/test_resolver.py | 70 | def test_astraflow_env_provider_is_normalized(self, monkeypatch): | CODE |
| LOW⚡ | tests/test_resolver.py | 77 | def test_explicit_provider_overrides_saved_llm_env(self, monkeypatch, tmp_path): | CODE |
| LOW⚡ | tests/test_resolver.py | 86 | def test_saved_llm_env_selects_astraflow_cn_provider(self, monkeypatch, tmp_path): | CODE |
| LOW | tests/test_types.py | 86 | def test_tool_to_anthropic_tool(self): | CODE |
| LOW | tests/test_types.py | 136 | def test_output_with_tool_calls(self): | CODE |
| LOW⚡ | tests/ci/validators.test.js | 48 | function writeInstallComponentsManifest(testDir, components) { | CODE |
| LOW⚡ | tests/ci/validators.test.js | 55 | function writeInstallModulesManifest(testDir, modules) { | CODE |
| LOW⚡ | tests/ci/validators.test.js | 62 | function writeInstallProfilesManifest(testDir, profiles) { | CODE |
| LOW | tests/ci/no-personal-paths.test.js | 86 | function runValidatorAgainstRealRepo() { | CODE |
| LOW | tests/integration/hooks.test.js | 258 | function getHookCommandByDescription(hooks, lifecycle, descriptionText) { | CODE |
| LOW | tests/hooks/hooks.test.js | 88 | function getSessionStartAdditionalContext(stdout) { | CODE |
| LOW | tests/hooks/hooks.test.js | 269 | function assertNoProjectDetectionSideEffects(homeDir, testName) { | CODE |
| LOW | tests/hooks/hooks.test.js | 280 | async function assertObserveSkipBeforeProjectDetection(testCase) { | CODE |
| LOW | tests/hooks/test_insaits_security_monitor.py | 61 | def test_extract_content_handles_supported_payload_shapes(): | CODE |
| LOW | tests/hooks/test_insaits_security_monitor.py | 89 | def test_format_feedback_accepts_dict_and_object_anomalies(): | CODE |
| LOW | tests/hooks/test_insaits_security_monitor.py | 104 | def test_main_skips_short_or_empty_content(monkeypatch): | CODE |
| LOW | tests/hooks/test_insaits_security_monitor.py | 111 | def test_main_exits_cleanly_when_sdk_is_missing(monkeypatch): | CODE |
| 354 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/ja-JP/skills/python-testing/SKILL.md | 0 | test that dividing by zero raises zerodivisionerror. | STRING |
| HIGH | docs/zh-CN/skills/python-testing/SKILL.md | 0 | test that dividing by zero raises zerodivisionerror. | STRING |
| HIGH | skills/python-testing/SKILL.md | 0 | test that dividing by zero raises zerodivisionerror. | STRING |
| HIGH | …s/ja-JP/skills/videodb/reference/rtstream-reference.md | 0 | analyze the screen and return a json object with: { "app_name": "name of the active application", "activity": "what the | STRING |
| HIGH | …s/zh-CN/skills/videodb/reference/rtstream-reference.md | 0 | analyze the screen and return a json object with: { "app_name": "name of the active application", "activity": "what the | STRING |
| HIGH | skills/videodb/reference/rtstream-reference.md | 0 | analyze the screen and return a json object with: { "app_name": "name of the active application", "activity": "what the | STRING |
| HIGH | docs/ja-JP/skills/quarkus-tdd/SKILL.md | 0 | { "referencenumber": "doc-001", "description": "test document", "validuntil": "2030-01-01t00:00:00z", "categories": ["te | STRING |
| HIGH | docs/tr/skills/quarkus-tdd/SKILL.md | 0 | { "referencenumber": "doc-001", "description": "test document", "validuntil": "2030-01-01t00:00:00z", "categories": ["te | STRING |
| HIGH | skills/quarkus-tdd/SKILL.md | 0 | { "referencenumber": "doc-001", "description": "test document", "validuntil": "2030-01-01t00:00:00z", "categories": ["te | STRING |
| HIGH | docs/ja-JP/skills/quarkus-tdd/SKILL.md | 0 | { "referencenumber": "int-001", "description": "integration test", "validuntil": "2030-01-01t00:00:00z", "categories": [ | STRING |
| HIGH | docs/tr/skills/quarkus-tdd/SKILL.md | 0 | { "referencenumber": "int-001", "description": "integration test", "validuntil": "2030-01-01t00:00:00z", "categories": [ | STRING |
| HIGH | skills/quarkus-tdd/SKILL.md | 0 | { "referencenumber": "int-001", "description": "integration test", "validuntil": "2030-01-01t00:00:00z", "categories": [ | STRING |
| HIGH | docs/ja-JP/skills/springboot-tdd/SKILL.md | 0 | {"name":"test","description":"desc","enddate":"2030-01-01t00:00:00z","categories":["general"]} | STRING |
| HIGH | docs/zh-CN/skills/springboot-tdd/SKILL.md | 0 | {"name":"test","description":"desc","enddate":"2030-01-01t00:00:00z","categories":["general"]} | STRING |
| HIGH | docs/es/skills/springboot-tdd/SKILL.md | 0 | {"name":"test","description":"desc","enddate":"2030-01-01t00:00:00z","categories":["general"]} | STRING |
| HIGH | docs/tr/skills/springboot-tdd/SKILL.md | 0 | {"name":"test","description":"desc","enddate":"2030-01-01t00:00:00z","categories":["general"]} | STRING |
| HIGH | skills/springboot-tdd/SKILL.md | 0 | {"name":"test","description":"desc","enddate":"2030-01-01t00:00:00z","categories":["general"]} | STRING |
| HIGH | docs/ja-JP/skills/python-patterns/SKILL.md | 0 | process a user and return the updated user or none. | STRING |
| HIGH | docs/zh-CN/skills/python-patterns/SKILL.md | 0 | process a user and return the updated user or none. | STRING |
| HIGH | skills/python-patterns/SKILL.md | 0 | process a user and return the updated user or none. | STRING |
| HIGH | docs/ja-JP/skills/python-patterns/SKILL.md | 0 | render all items that implement the renderable protocol. | STRING |
| HIGH | docs/zh-CN/skills/python-patterns/SKILL.md | 0 | render all items that implement the renderable protocol. | STRING |
| HIGH | skills/python-patterns/SKILL.md | 0 | render all items that implement the renderable protocol. | STRING |
| HIGH | docs/ja-JP/skills/python-patterns/SKILL.md | 0 | user entity with automatic __init__, __repr__, and __eq__. | STRING |
| HIGH | docs/zh-CN/skills/python-patterns/SKILL.md | 0 | user entity with automatic __init__, __repr__, and __eq__. | STRING |
| HIGH | skills/python-patterns/SKILL.md | 0 | user entity with automatic __init__, __repr__, and __eq__. | STRING |
| HIGH | docs/ja-JP/skills/python-patterns/SKILL.md | 0 | decorator that counts how many times a function is called. | STRING |
| HIGH | docs/zh-CN/skills/python-patterns/SKILL.md | 0 | decorator that counts how many times a function is called. | STRING |
| HIGH | skills/python-patterns/SKILL.md | 0 | decorator that counts how many times a function is called. | STRING |
| HIGH | docs/ja-JP/skills/python-patterns/SKILL.md | 0 | process multiple datasets using multiple processes. | STRING |
| HIGH | docs/zh-CN/skills/python-patterns/SKILL.md | 0 | process multiple datasets using multiple processes. | STRING |
| HIGH | skills/python-patterns/SKILL.md | 0 | process multiple datasets using multiple processes. | STRING |
| HIGH | docs/ja-JP/skills/regex-vs-llm-structured-text/SKILL.md | 0 | full pipeline: regex -> confidence check -> llm for edge cases. | STRING |
| HIGH | docs/zh-CN/skills/regex-vs-llm-structured-text/SKILL.md | 0 | full pipeline: regex -> confidence check -> llm for edge cases. | STRING |
| HIGH | skills/regex-vs-llm-structured-text/SKILL.md | 0 | full pipeline: regex -> confidence check -> llm for edge cases. | STRING |
| HIGH | docs/ja-JP/skills/foundation-models-on-device/SKILL.md | 0 | you are a cooking assistant. provide recipe suggestions based on ingredients. keep suggestions brief and practical. | STRING |
| HIGH | docs/zh-CN/skills/foundation-models-on-device/SKILL.md | 0 | you are a cooking assistant. provide recipe suggestions based on ingredients. keep suggestions brief and practical. | STRING |
| HIGH | skills/foundation-models-on-device/SKILL.md | 0 | you are a cooking assistant. provide recipe suggestions based on ingredients. keep suggestions brief and practical. | STRING |
| HIGH | docs/zh-CN/examples/django-api-CLAUDE.md | 0 | create an order with stock validation and payment hold. | STRING |
| HIGH | docs/pt-BR/examples/django-api-CLAUDE.md | 0 | create an order with stock validation and payment hold. | STRING |
| HIGH | examples/django-api-CLAUDE.md | 0 | create an order with stock validation and payment hold. | STRING |
| HIGH | docs/zh-CN/skills/content-hash-cache-pattern/SKILL.md | 0 | sha-256 of file contents (chunked for large files). | STRING |
| HIGH | .kiro/skills/content-hash-cache-pattern/SKILL.md | 0 | sha-256 of file contents (chunked for large files). | STRING |
| HIGH | skills/content-hash-cache-pattern/SKILL.md | 0 | sha-256 of file contents (chunked for large files). | STRING |
| HIGH | docs/zh-CN/skills/content-hash-cache-pattern/SKILL.md | 0 | service layer: cache check -> extraction -> cache write. | STRING |
| HIGH | .kiro/skills/content-hash-cache-pattern/SKILL.md | 0 | service layer: cache check -> extraction -> cache write. | STRING |
| HIGH | skills/content-hash-cache-pattern/SKILL.md | 0 | service layer: cache check -> extraction -> cache write. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | WORKING-CONTEXT.md | 108 | - 2026-04-02: Closed the full Argus cluster `#1098`, `#1099`, `#1100`, `#1101`, and `#1102` after full diff audit. The c | CODE |
| MEDIUM | WORKING-CONTEXT.md | 123 | - 2026-04-01: Follow-up bundle cleanup closed `#1080` and `#1079`, which were generated `.claude/` bundle PRs duplicatin | CODE |
| MEDIUM | WORKING-CONTEXT.md | 140 | - 2026-04-02: Ported the safe core of `#1153` directly into `main`: markdownlint cleanup for orchestration/docs surfaces | CODE |
| MEDIUM | README.md | 678 | | |-- autonomous-loops/ # Autonomous loop patterns: sequential pipelines, PR loops, DAG orchestration (NEW) | CODE |
| MEDIUM⚡ | README.md | 703 | | |-- multi-execute.md # /multi-execute - Orchestrated multi-agent workflows (NEW) | CODE |
| MEDIUM⚡ | README.md | 704 | | |-- multi-backend.md # /multi-backend - Backend multi-service orchestration (NEW) | CODE |
| MEDIUM⚡ | README.md | 705 | | |-- multi-frontend.md # /multi-frontend - Frontend multi-service orchestration (NEW) | CODE |
| MEDIUM | README.md | 717 | | |-- orchestrate.md # /orchestrate - Prefer dmux-workflows or multi-workflow | CODE |
| MEDIUM | README.md | 769 | | |-- go-microservice-CLAUDE.md # Real-world Go microservice (gRPC + PostgreSQL) | CODE |
| MEDIUM | README.zh-CN.md | 376 | | |-- orchestrate.md # /orchestrate - 优先使用 dmux-workflows 或 multi-workflow | CODE |
| MEDIUM | SECURITY.md | 156 | - **OWASP Agentic Applications Top 10:** <https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-202 | CODE |
| MEDIUM | ecc2/src/main.rs | 7409 | "# ECC2 migration scaffold generated from {}\n# Review every section before merging it into a real ecc2.toml | CODE |
| MEDIUM | agents/java-reviewer.md | 144 | ### MEDIUM -- Workflow and State Machine (payment / event-driven code) | COMMENT |
| MEDIUM | agents/spec-miner.md | 8 | ## Tool guardrails | COMMENT |
| MEDIUM | docs/ECC-PRO-SECURITY-ROADMAP.md | 41 | 4. Merge the verified correctness/Windows batch (PR #2133 model-ID fix, #2307/#2063 Windows, #2273/#2246/#2312 docs, #22 | CODE |
| MEDIUM | docs/ECC-PRO-SECURITY-ROADMAP.md | 106 | Merge the clean, verified batch: PR #2133 (Claude provider model-ID + adaptive-thinking fix — replaces invalid IDs with | CODE |
| MEDIUM | docs/ECC-PRO-SECURITY-ROADMAP.md | 285 | | needs-work | PR #2318 | feat: add OpenSpec ecosystem (5 agents, 2 orchestration skills, 3 integrations) | | CODE |
| MEDIUM | docs/ECC-PRO-SECURITY-ROADMAP.md | 308 | | merge | issue #2316 | plan-orchestrate: stale ECC install detection after marketplace rename to ecc@ecc | | CODE |
| MEDIUM | docs/ECC-PRO-SECURITY-ROADMAP.md | 333 | Triaged all open PRs (30) and issues (24) on affaan-m/ECC. MERGE-READY (clean, correct, mergeable): PR #2320 (maintainer | CODE |
| MEDIUM | docs/ECC-2.0-GA-ROADMAP.md | 701 | - ECC-Tools PR #35 added RAG/evaluator predictive follow-ups and a | CODE |
| MEDIUM | docs/ECC-2.0-GA-ROADMAP.md | 718 | - ECC-Tools PR #40 added a checked-in evaluator/RAG corpus contract covering | CODE |
| MEDIUM | docs/ECC-2.0-GA-ROADMAP.md | 958 | | Salvage useful stale work | `docs/stale-pr-salvage-ledger.md` plus `docs/legacy-artifact-inventory.md` | Ledger record | CODE |
| MEDIUM | docs/ECC-2.0-GA-ROADMAP.md | 967 | | Harness-agnostic learning system | Audit, adapter matrix, observability, traces, promotion loop | Audit/adapters/obser | CODE |
| MEDIUM | docs/ECC-2.0-GA-ROADMAP.md | 989 | | ECC Tools app | ECC-Tools PR evidence, billing audit, risk taxonomy, evaluator/RAG corpus | ECC-Tools #53 published th | CODE |
| MEDIUM | docs/stale-pr-salvage-ledger.md | 42 | | #1558 | `agentic-os` skill | Salvaged in #1772. | | CODE |
| MEDIUM | docs/stale-pr-salvage-ledger.md | 46 | | #1603 | `plan-orchestrate` skill | Salvaged in #1766 with current manifest/catalog wiring. | | CODE |
| MEDIUM | docs/stale-pr-salvage-ledger.md | 88 | | #1603 | Useful `/plan-orchestrate` work was already preserved in #1766 with current package/catalog metadata. | | CODE |
| MEDIUM | docs/de-DE/README.md | 640 | | |-- orchestrate.md # /orchestrate - Bevorzuge dmux-workflows oder multi-workflow | CODE |
| MEDIUM | docs/ru/README.md | 542 | | |-- autonomous-loops/ # Паттерны автономных циклов: sequential pipelines, PR loops, DAG orchestration (НОВ | CODE |
| MEDIUM | docs/ru/README.md | 567 | | |-- multi-backend.md # /multi-backend - Backend multi-service orchestration (НОВОЕ) | CODE |
| MEDIUM | docs/ru/README.md | 568 | | |-- multi-frontend.md # /multi-frontend - Frontend multi-service orchestration (НОВОЕ) | CODE |
| MEDIUM | docs/ru/README.md | 580 | | |-- orchestrate.md # /orchestrate - Предпочитайте dmux-workflows или multi-workflow | CODE |
| MEDIUM | docs/ru/README.md | 631 | | |-- go-microservice-CLAUDE.md # Реальный Go microservice (gRPC + PostgreSQL) | CODE |
| MEDIUM | docs/ru/README.md | 1301 | ### Поддержка multi-agent | COMMENT |
| MEDIUM | docs/ja-JP/the-openclaw-guide.md | 451 | * [OWASP エージェントアプリケーションのトップ 10 セキュリティリスク (2026)](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications- | COMMENT |
| MEDIUM | docs/ja-JP/SECURITY.md | 101 | - **OWASP Agentic Applications Top 10**: [genai.owasp.org](https://genai.owasp.org/resource/owasp-top-10-for-agentic-app | CODE |
| MEDIUM | docs/ja-JP/skills/flox-environments/SKILL.md | 488 | 以下のスキルは、より深い統合のために[Flox Claude Codeプラグイン](https://github.com/flox/flox-agentic)の一部として利用可能です: | STRING |
| MEDIUM | docs/ja-JP/skills/plan-orchestrate/SKILL.md | 7 | # plan-orchestrate - 日本語翻訳進行中 | COMMENT |
| MEDIUM⚡ | docs/ja-JP/skills/hexagonal-architecture/SKILL.md | 54 | ### Step 3: Implement the use case with pure orchestration | COMMENT |
| MEDIUM | docs/ja-JP/skills/agentic-os/SKILL.md | 249 | # ~/.config/systemd/user/agentic-daily-sync.service | COMMENT |
| MEDIUM | docs/ja-JP/skills/agentic-os/SKILL.md | 259 | # ~/.config/systemd/user/agentic-daily-sync.timer | COMMENT |
| MEDIUM⚡ | docs/zh-CN/the-security-guide.md | 177 | | OWASP Agentic Applications Top 10 | <https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/> | CODE |
| MEDIUM⚡ | docs/zh-CN/the-security-guide.md | 184 | | AI 网络犯罪激增 1500% | <https://www.hstoday.us/subject-matter-areas/cybersecurity/2026-global-threat-intelligence-report-hi | CODE |
| MEDIUM⚡ | docs/zh-CN/the-security-guide.md | 186 | | Dark Reading: 智能体攻击面 | <https://www.darkreading.com/threat-intelligence/2026-agentic-ai-attack-surface-poster-child> | | CODE |
| MEDIUM⚡ | docs/zh-CN/the-security-guide.md | 190 | | Agentic-Radar (SPLX-AI) | <https://github.com/splx-ai/agentic-radar> | | CODE |
| MEDIUM | docs/zh-CN/the-security-guide.md | 202 | | NVIDIA: 沙盒化智能体工作流 | <https://developer.nvidia.com/blog/practical-security-guidance-for-sandboxing-agentic-workflows/> | CODE |
| MEDIUM | docs/zh-CN/README.md | 425 | | |-- orchestrate.md # /orchestrate - 优先使用 dmux-workflows 或 multi-workflow | CODE |
| MEDIUM | docs/zh-CN/the-openclaw-guide.md | 451 | * [OWASP 智能体应用十大安全风险 (2026)](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/) — Palo Al | COMMENT |
| MEDIUM | docs/zh-CN/SECURITY.md | 53 | * **OWASP Agentic Applications Top 10**:[genai.owasp.org](https://genai.owasp.org/resource/owasp-top-10-for-agentic-appl | COMMENT |
| MEDIUM | docs/architecture/evaluator-rag-prototype.md | 1 | # Evaluator RAG Prototype | COMMENT |
| MEDIUM | docs/es/SECURITY.md | 101 | - **OWASP Agentic Applications Top 10**: [genai.owasp.org](https://genai.owasp.org/resource/owasp-top-10-for-agentic-app | CODE |
| MEDIUM | docs/tr/SECURITY.md | 53 | - **OWASP Agentic Applications Top 10**: [genai.owasp.org](https://genai.owasp.org/resource/owasp-top-10-for-agentic-app | CODE |
| MEDIUM | docs/tr/agents/java-reviewer.md | 66 | ### MEDIUM -- Workflow ve State Machine (ödeme / event-driven kod) | COMMENT |
| MEDIUM | .codex/config.toml | 10 | # - https://developers.openai.com/codex/multi-agent | COMMENT |
| MEDIUM | .codex/config.toml | 91 | # Codex multi-agent collaboration is stable and on by default in current builds. | COMMENT |
| MEDIUM | examples/rails-app-CLAUDE.md | 106 | controllers/ # HTTP request handling. Thin orchestration only. | CODE |
| MEDIUM | .kiro/README.md | 372 | ├── longform-guide.md # Deep dive on agentic workflows | CODE |
| MEDIUM | .kiro/agents/mle-reviewer.json | 15 | "prompt": "# MLE Reviewer\n\nYou are a senior machine-learning engineering reviewer focused on moving model code from | CODE |
| MEDIUM | .kiro/skills/docker-patterns/SKILL.md | 351 | # BAD: Using docker compose in production without orchestration | COMMENT |
| MEDIUM | .kiro/skills/autonomous-loops/SKILL.md | 33 | | [Infinite Agentic Loop](#3-infinite-agentic-loop) | Medium | Parallel content generation, spec-driven work | | CODE |
| 15 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ecc_dashboard.py | 25 | CODE | |
| LOW | ecc_dashboard.py | 27 | CODE | |
| LOW | tests/test_builder.py | 2 | CODE | |
| LOW | tests/test_executor.py | 1 | CODE | |
| LOW | tests/test_executor.py | 2 | CODE | |
| LOW | tests/test_types.py | 1 | CODE | |
| LOW | integrations/aura/adapter.py | 24 | CODE | |
| LOW | integrations/aura/__init__.py | 16 | CODE | |
| LOW | integrations/aura/__init__.py | 16 | CODE | |
| LOW | integrations/aura/__init__.py | 16 | CODE | |
| LOW | integrations/aura/__init__.py | 16 | CODE | |
| LOW | integrations/aura/__init__.py | 16 | CODE | |
| LOW | integrations/aura/__init__.py | 16 | CODE | |
| LOW | integrations/aura/__init__.py | 16 | CODE | |
| LOW | integrations/aura/tests/test_adapter.py | 14 | CODE | |
| LOW | integrations/aura/tests/fixtures.py | 9 | CODE | |
| LOW | scripts/hooks/insaits-security-monitor.py | 62 | CODE | |
| LOW | scripts/lib/ecc_dashboard_runtime.py | 6 | CODE | |
| LOW | skills/delivery-gate/hooks/quality-gate.py | 10 | CODE | |
| LOW | skills/skill-comply/tests/test_runner.py | 3 | CODE | |
| LOW | skills/skill-comply/tests/test_runner.py | 7 | CODE | |
| LOW | skills/skill-comply/tests/test_grader.py | 8 | CODE | |
| LOW | skills/skill-comply/scripts/run.py | 3 | CODE | |
| LOW | skills/skill-comply/scripts/runner.py | 3 | CODE | |
| LOW | skills/skill-comply/scripts/classifier.py | 3 | CODE | |
| LOW | skills/skill-comply/scripts/grader.py | 3 | CODE | |
| LOW | skills/skill-comply/scripts/spec_generator.py | 3 | CODE | |
| LOW | skills/skill-comply/scripts/parser.py | 3 | CODE | |
| LOW | skills/skill-comply/scripts/utils.py | 3 | CODE | |
| LOW | skills/skill-comply/scripts/scenario_generator.py | 3 | CODE | |
| LOW | skills/skill-comply/scripts/report.py | 3 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 32 | CODE | |
| LOW | src/llm/__init__.py | 7 | CODE | |
| LOW | src/llm/__init__.py | 8 | CODE | |
| LOW | src/llm/__init__.py | 8 | CODE | |
| LOW | src/llm/__init__.py | 8 | CODE | |
| LOW | src/llm/__init__.py | 8 | CODE | |
| LOW | src/llm/__init__.py | 8 | CODE | |
| LOW | src/llm/__init__.py | 8 | CODE | |
| LOW | src/llm/__init__.py | 9 | CODE | |
| LOW | src/llm/__init__.py | 10 | CODE | |
| LOW | src/llm/__init__.py | 10 | CODE | |
| LOW | src/llm/__init__.py | 11 | CODE | |
| LOW | src/llm/tools/__init__.py | 3 | CODE | |
| LOW | src/llm/tools/__init__.py | 3 | CODE | |
| LOW | src/llm/tools/__init__.py | 3 | CODE | |
| LOW | src/llm/tools/executor.py | 3 | CODE | |
| LOW | src/llm/tools/executor.py | 5 | CODE | |
| LOW | src/llm/tools/executor.py | 5 | CODE | |
| LOW | src/llm/tools/executor.py | 8 | CODE | |
| LOW | src/llm/core/interface.py | 3 | CODE | |
| LOW | src/llm/core/types.py | 3 | CODE | |
| LOW | src/llm/providers/claude.py | 3 | CODE | |
| LOW | src/llm/providers/__init__.py | 3 | CODE | |
| LOW | src/llm/providers/__init__.py | 3 | CODE | |
| LOW | src/llm/providers/__init__.py | 4 | CODE | |
| LOW | src/llm/providers/__init__.py | 5 | CODE | |
| LOW | src/llm/providers/__init__.py | 6 | CODE | |
| LOW | src/llm/providers/__init__.py | 7 | CODE | |
| LOW | src/llm/providers/__init__.py | 8 | CODE | |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ecc_dashboard.py | 915 | def update_widget_colors(widget): | CODE |
| LOW⚡ | ecc_dashboard.py | 918 | except Exception: | CODE |
| LOW⚡ | ecc_dashboard.py | 922 | except Exception: | CODE |
| LOW⚡ | ecc_dashboard.py | 928 | except Exception: | CODE |
| LOW | ecc_dashboard.py | 133 | except Exception: | CODE |
| LOW | ecc_dashboard.py | 207 | except Exception: | CODE |
| LOW | ecc_dashboard.py | 301 | except Exception: | CODE |
| LOW | ecc_dashboard.py | 365 | except Exception: | CODE |
| LOW | ecc_dashboard.py | 831 | except Exception as exc: | CODE |
| MEDIUM | docs/ja-JP/agents/python-reviewer.md | 351 | print("Error occurred") | CODE |
| LOW | docs/ja-JP/skills/videodb/SKILL.md | 181 | except Exception as e: | CODE |
| LOW | docs/ja-JP/skills/videodb/reference/search.md | 46 | except Exception as e: | CODE |
| LOW | docs/ja-JP/skills/redis-patterns/SKILL.md | 228 | except Exception: | STRING |
| LOW | docs/ja-JP/skills/windows-desktop-e2e/SKILL.md | 171 | except Exception: | CODE |
| LOW | docs/ja-JP/skills/windows-desktop-e2e/SKILL.md | 187 | except Exception as e: | CODE |
| LOW | docs/ja-JP/skills/windows-desktop-e2e/SKILL.md | 202 | except Exception: | CODE |
| LOW⚡ | docs/ja-JP/skills/windows-desktop-e2e/SKILL.md | 274 | except Exception: | CODE |
| LOW⚡ | docs/ja-JP/skills/windows-desktop-e2e/SKILL.md | 281 | except Exception: | CODE |
| LOW⚡ | docs/ja-JP/skills/windows-desktop-e2e/SKILL.md | 441 | except Exception: | CODE |
| LOW⚡ | docs/ja-JP/skills/windows-desktop-e2e/SKILL.md | 446 | except Exception: | CODE |
| LOW | docs/ja-JP/skills/fastapi-patterns/SKILL.md | 164 | except Exception: | CODE |
| LOW | docs/ja-JP/skills/evm-token-decimals/SKILL.md | 72 | except Exception: | CODE |
| LOW | docs/ja-JP/skills/python-patterns/SKILL.md | 462 | except Exception as e: | CODE |
| LOW | docs/zh-CN/skills/videodb/SKILL.md | 181 | except Exception as e: | CODE |
| LOW | docs/zh-CN/skills/videodb/reference/search.md | 46 | except Exception as e: | CODE |
| LOW | docs/zh-CN/skills/data-scraper-agent/SKILL.md | 506 | except Exception as e: | CODE |
| LOW | docs/zh-CN/skills/evm-token-decimals/SKILL.md | 72 | except Exception: | CODE |
| LOW | docs/zh-CN/skills/python-patterns/SKILL.md | 463 | except Exception as e: | CODE |
| LOW | docs/es/skills/python-patterns/SKILL.md | 462 | except Exception as e: | CODE |
| LOW | docs/tr/skills/python-patterns/SKILL.md | 463 | except Exception as e: | CODE |
| LOW | scripts/hooks/insaits-security-monitor.py | 221 | except Exception as exc: # Broad catch intentional: unknown SDK internals | CODE |
| LOW⚡ | scripts/lib/ecc_dashboard_runtime.py | 19 | except Exception: | CODE |
| LOW⚡ | scripts/lib/ecc_dashboard_runtime.py | 26 | except Exception: | CODE |
| LOW⚡ | scripts/lib/ecc_dashboard_runtime.py | 31 | except Exception: | CODE |
| LOW | .kiro/skills/fastapi-patterns/SKILL.md | 164 | except Exception: | CODE |
| LOW | .kiro/skills/python-patterns/SKILL.md | 91 | except Exception: | CODE |
| LOW | skills/videodb/SKILL.md | 174 | except Exception as e: | CODE |
| LOW | skills/videodb/scripts/ws_listener.py | 163 | except Exception as e: | CODE |
| LOW | skills/videodb/scripts/ws_listener.py | 207 | except Exception as e: | CODE |
| LOW | skills/videodb/reference/search.md | 46 | except Exception as e: | CODE |
| LOW | skills/redis-patterns/SKILL.md | 229 | except Exception: | STRING |
| LOW | skills/data-scraper-agent/SKILL.md | 504 | except Exception as e: | CODE |
| LOW | skills/windows-desktop-e2e/SKILL.md | 172 | except Exception: | CODE |
| LOW | skills/windows-desktop-e2e/SKILL.md | 188 | except Exception as e: | CODE |
| LOW | skills/windows-desktop-e2e/SKILL.md | 203 | except Exception: | CODE |
| LOW⚡ | skills/windows-desktop-e2e/SKILL.md | 275 | except Exception: | CODE |
| LOW⚡ | skills/windows-desktop-e2e/SKILL.md | 282 | except Exception: | CODE |
| LOW | skills/windows-desktop-e2e/SKILL.md | 401 | except Exception: | CODE |
| LOW⚡ | skills/windows-desktop-e2e/SKILL.md | 503 | except Exception: | CODE |
| LOW⚡ | skills/windows-desktop-e2e/SKILL.md | 508 | except Exception: | CODE |
| LOW | skills/django-celery/SKILL.md | 329 | except Exception as exc: | CODE |
| LOW | skills/fastapi-patterns/SKILL.md | 183 | except Exception: | CODE |
| MEDIUM | skills/agent-self-evaluation/scripts/evaluate.py | 373 | print(f"Error: output file '{path}' not found", file=sys.stderr) | CODE |
| MEDIUM | skills/agent-self-evaluation/scripts/evaluate.py | 400 | print("Error: no output to evaluate", file=sys.stderr) | CODE |
| LOW | skills/evm-token-decimals/SKILL.md | 73 | except Exception: | CODE |
| LOW | skills/continuous-learning-v2/hooks/observe.sh | 257 | except Exception as e: | CODE |
| LOW | skills/continuous-learning-v2/hooks/observe.sh | 288 | except Exception: | CODE |
| LOW | skills/continuous-learning-v2/hooks/observe.sh | 326 | except Exception: | CODE |
| MEDIUM⚡ | skills/continuous-learning-v2/scripts/instinct-cli.py | 893 | print(f"Error fetching URL: {e}", file=sys.stderr) | CODE |
| MEDIUM⚡ | skills/continuous-learning-v2/scripts/instinct-cli.py | 902 | print(f"Error: '{path}' is not a regular file.", file=sys.stderr) | CODE |
| 11 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | docs/ja-JP/skills/django-security/SKILL.md | 393 | from django.core.exceptions import ValidationError | CODE |
| CRITICAL | docs/ja-JP/skills/django-tdd/SKILL.md | 243 | from django.core.exceptions import ValidationError | CODE |
| CRITICAL | docs/zh-CN/skills/django-security/SKILL.md | 394 | from django.core.exceptions import ValidationError | CODE |
| CRITICAL | docs/zh-CN/skills/django-tdd/SKILL.md | 244 | from django.core.exceptions import ValidationError | CODE |
| CRITICAL | .kiro/skills/django-security/SKILL.md | 394 | from django.core.exceptions import ValidationError | CODE |
| CRITICAL | skills/django-security/SKILL.md | 396 | from django.core.exceptions import ValidationError | CODE |
| CRITICAL | skills/django-security/SKILL.md | 440 | from django.core.exceptions import ValidationError | CODE |
| CRITICAL | skills/django-tdd/SKILL.md | 245 | from django.core.exceptions import ValidationError | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .trae/uninstall.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .trae/install.sh | 1 | #!/bin/bash | COMMENT |
| LOW | ecc2/src/main.rs | 121 | /// Agent profile defined in ecc2.toml | COMMENT |
| LOW | ecc2/src/main.rs | 141 | #[arg(long)] | COMMENT |
| LOW | ecc2/src/main.rs | 161 | Assign { | COMMENT |
| LOW | ecc2/src/main.rs | 181 | #[arg(short, long)] | COMMENT |
| LOW | ecc2/src/main.rs | 201 | CoordinateBacklog { | COMMENT |
| LOW | ecc2/src/main.rs | 221 | max_passes: usize, | COMMENT |
| LOW | ecc2/src/main.rs | 241 | lead_limit: usize, | COMMENT |
| LOW | ecc2/src/main.rs | 301 | /// Include a bounded patch preview when a worktree is attached | COMMENT |
| LOW | ecc2/src/main.rs | 321 | }, | COMMENT |
| LOW | ecc2/src/main.rs | 341 | /// Process the queue, auto-rebasing clean blocked worktrees and merging what becomes ready | COMMENT |
| LOW | ecc2/src/main.rs | 361 | /// Alternative considered and rejected; repeat for multiple entries | COMMENT |
| LOW | ecc2/src/main.rs | 481 | #[arg(long)] | COMMENT |
| LOW | ecc2/src/main.rs | 521 | /// Task description to dispatch | COMMENT |
| LOW | ecc2/src/main.rs | 541 | /// Optional task-group grouping override | COMMENT |
| LOW | ecc2/src/main.rs | 561 | to_session: Option<String>, | COMMENT |
| LOW | ecc2/src/main.rs | 581 | json: bool, | COMMENT |
| LOW | ecc2/src/main.rs | 621 | source: PathBuf, | COMMENT |
| LOW | ecc2/src/main.rs | 641 | #[arg(long)] | COMMENT |
| LOW | ecc2/src/main.rs | 661 | }, | COMMENT |
| LOW | ecc2/src/main.rs | 681 | dry_run: bool, | COMMENT |
| LOW | ecc2/src/main.rs | 701 | /// Scaffold ECC-native templates from legacy tool scripts | COMMENT |
| LOW | ecc2/src/main.rs | 741 | /// Create or update a graph entity | COMMENT |
| LOW | ecc2/src/main.rs | 761 | /// Emit machine-readable JSON instead of the human summary | COMMENT |
| LOW | ecc2/src/main.rs | 781 | summary: String, | COMMENT |
| LOW | ecc2/src/main.rs | 801 | /// List relations in the shared context graph | COMMENT |
| LOW | ecc2/src/main.rs | 821 | /// Observation type such as completion_summary, incident_note, or reminder | COMMENT |
| LOW | ecc2/src/main.rs | 841 | PinObservation { | COMMENT |
| LOW | ecc2/src/main.rs | 861 | #[arg(long)] | COMMENT |
| LOW | ecc2/src/main.rs | 881 | }, | COMMENT |
| LOW | ecc2/src/main.rs | 921 | /// Maximum incoming/outgoing relations to return | COMMENT |
| LOW | tests/lib/session-bridge.test.js | 141 | // suffix; with concurrent writers it raced over a shared tmp path, | COMMENT |
| LOW | workflows/orch-review.workflow.js | 21 | // } | COMMENT |
| LOW | agents/performance-optimizer.md | 321 | # 1. Take heap snapshot | COMMENT |
| LOW | docs/ja-JP/agents/performance-optimizer.md | 321 | # 1. ヒープスナップショットを取得 | COMMENT |
| LOW | docs/ja-JP/skills/homelab-vlan-segmentation/SKILL.md | 281 | ``` | COMMENT |
| LOW | docs/ja-JP/skills/git-workflow/SKILL.md | 301 | ``` | COMMENT |
| LOW | docs/ja-JP/skills/rust-testing/SKILL.md | 361 | /// assert_eq!(add(-1, 1), 0); | COMMENT |
| LOW | docs/ja-JP/skills/homelab-pihole-dns/SKILL.md | 241 | COMMENT | |
| LOW | docs/zh-CN/skills/git-workflow/SKILL.md | 301 | git merge feature/user-auth --no-commit --no-ff | COMMENT |
| LOW | docs/zh-CN/skills/rust-testing/SKILL.md | 361 | /// assert_eq!(add(-1, 1), 0); | COMMENT |
| LOW | docs/es/skills/docker-patterns/SKILL.md | 341 | docker network inspect <project>_default | COMMENT |
| LOW | docs/es/skills/rust-testing/SKILL.md | 361 | /// assert_eq!(add(-1, 1), 0); | COMMENT |
| LOW | docs/tr/skills/docker-patterns/SKILL.md | 341 | docker network inspect <project>_default | COMMENT |
| LOW | docs/tr/skills/rust-testing/SKILL.md | 361 | /// assert_eq!(add(-1, 1), 0); | COMMENT |
| LOW | .codex/config.toml | 1 | #:schema https://developers.openai.com/codex/config-schema.json | COMMENT |
| LOW | .codex/config.toml | 81 | # | COMMENT |
| LOW | scripts/gan-harness.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/ci/check-unicode-safety.js | 121 | // vector for "ASCII smuggling" / "Tag smuggling" prompt injection: | COMMENT |
| LOW | scripts/ci/validate-workflow-security.js | 21 | eventPattern: /\bpull_request_target\s*:/m, | COMMENT |
| LOW | scripts/hooks/gateguard-fact-force.js | 41 | const ROUTINE_BASH_SESSION_KEY = '__bash_session__'; | COMMENT |
| LOW | scripts/hooks/gateguard-fact-force.js | 881 | return saveState(state); | COMMENT |
| LOW | scripts/hooks/session-end.js | 181 | } | COMMENT |
| LOW | scripts/hooks/config-protection.js | 101 | // path (e.g. scaffolding ESLint into a fresh repo). | COMMENT |
| LOW | .kiro/install.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .kiro/README.md | 441 | COMMENT | |
| LOW | .kiro/README.md | 461 | # - SQL injection prevention | COMMENT |
| LOW | .kiro/README.md | 501 | # - Triggers when you save .ts or .tsx files | COMMENT |
| LOW | .kiro/README.md | 601 | ### Example 10: Documentation Updates | COMMENT |
| 17 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/opencode-tools.test.js | 197 | spawnSync("git", ["config", "user.email", "test@test.com"], { cwd: projectDir }) | CODE |
| LOW | tests/hooks/detect-project-worktree.test.js | 178 | GIT_AUTHOR_EMAIL: 'test@test.com', | CODE |
| LOW | tests/hooks/detect-project-worktree.test.js | 180 | GIT_COMMITTER_EMAIL: 'test@test.com' | CODE |
| LOW | tests/hooks/detect-project-worktree.test.js | 252 | GIT_AUTHOR_EMAIL: 'test@test.com', | CODE |
| LOW | tests/hooks/detect-project-worktree.test.js | 254 | GIT_COMMITTER_EMAIL: 'test@test.com' | CODE |
| LOW | tests/hooks/observe-subdirectory-detection.test.js | 81 | GIT_AUTHOR_EMAIL: 'test@test.com', | CODE |
| LOW | tests/hooks/observe-subdirectory-detection.test.js | 83 | GIT_COMMITTER_EMAIL: 'test@test.com', | CODE |
| LOW | docs/ja-JP/agents/e2e-runner.md | 42 | agent-browser fill @e2 "user@example.com" # 参照で入力を埋める | CODE |
| LOW | docs/ja-JP/agents/database-reviewer.md | 175 | SELECT email, name FROM users WHERE email = 'user@example.com'; | CODE |
| LOW | docs/ja-JP/rules/angular/testing.md | 147 | cy.get('[data-cy=email]').type('user@example.com'); | CODE |
| LOW | docs/ja-JP/commands/go-test.md | 74 | {"simple email", "user@example.com", false}, | CODE |
| LOW⚡ | docs/ja-JP/skills/kotlin-testing/SKILL.md | 73 | validateEmail("user@example.com").shouldBeSuccess("user@example.com") | CODE |
| LOW | docs/ja-JP/skills/csharp-testing/SKILL.md | 91 | [InlineData("user@example.com", true)] | CODE |
| LOW | docs/ja-JP/skills/django-verification/SKILL.md | 145 | echo "from apps.users.models import User; User.objects.create_superuser('admin@example.com', 'admin')" | python manage.p | CODE |
| LOW | docs/ja-JP/skills/fsharp-testing/SKILL.md | 119 | [<InlineData("user@example.com", true)>] | CODE |
| LOW | docs/ja-JP/skills/django-tdd/SKILL.md | 124 | email='admin@example.com', | CODE |
| LOW | docs/ja-JP/skills/django-tdd/SKILL.md | 260 | email='admin@example.com', | CODE |
| LOW | docs/zh-CN/commands/cpp-test.md | 69 | auto result = validate_email("user@example.com"); | CODE |
| LOW | docs/zh-CN/commands/go-test.md | 75 | {"simple email", "user@example.com", false}, | CODE |
| LOW⚡ | docs/zh-CN/skills/kotlin-testing/SKILL.md | 73 | validateEmail("user@example.com").shouldBeSuccess("user@example.com") | CODE |
| LOW | docs/zh-CN/skills/csharp-testing/SKILL.md | 91 | [InlineData("user@example.com", true)] | CODE |
| LOW | docs/zh-CN/skills/django-verification/SKILL.md | 158 | echo "from apps.users.models import User; User.objects.create_superuser('admin@example.com', 'admin')" | python manage.p | CODE |
| LOW | docs/zh-CN/skills/django-tdd/SKILL.md | 125 | email='admin@example.com', | CODE |
| LOW | docs/zh-CN/skills/django-tdd/SKILL.md | 261 | email='admin@example.com', | CODE |
| LOW | docs/zh-TW/agents/e2e-runner.md | 42 | agent-browser fill @e2 "user@example.com" # 依 ref 填入輸入 | CODE |
| LOW | docs/zh-TW/agents/database-reviewer.md | 172 | SELECT email, name FROM users WHERE email = 'user@example.com'; | CODE |
| LOW | docs/ko-KR/commands/go-test.md | 74 | {"단순 이메일", "user@example.com", false}, | CODE |
| LOW | docs/pt-BR/commands/go-test.md | 74 | {"simple email", "user@example.com", false}, | CODE |
| LOW | docs/es/commands/go-test.md | 65 | {"email simple", "user@example.com", false}, | CODE |
| LOW | docs/es/skills/kotlin-testing/SKILL.md | 73 | validateEmail("user@example.com").shouldBeSuccess("user@example.com") | CODE |
| LOW | docs/tr/commands/go-test.md | 74 | {"basit e-posta", "user@example.com", false}, | CODE |
| LOW | docs/tr/skills/kotlin-testing/SKILL.md | 61 | validateEmail("user@example.com").shouldBeSuccess("user@example.com") | CODE |
| LOW | rules/angular/testing.md | 147 | cy.get('[data-cy=email]').type('user@example.com'); | CODE |
| LOW | rules/react/testing.md | 63 | await user.type(screen.getByLabelText("Email"), "user@example.com"); | CODE |
| LOW | rules/react/testing.md | 66 | expect(handleSubmit).toHaveBeenCalledWith({ email: "user@example.com" }); | CODE |
| LOW | commands/cpp-test.md | 68 | auto result = validate_email("user@example.com"); | CODE |
| LOW | commands/go-test.md | 74 | {"simple email", "user@example.com", false}, | CODE |
| LOW | .kiro/skills/python-testing/SKILL.md | 123 | ("user@example.com", True), | CODE |
| LOW | .kiro/skills/python-testing/SKILL.md | 220 | service.send("user@example.com", "Hello") | CODE |
| LOW⚡ | .kiro/skills/kotlin-testing/SKILL.md | 73 | validateEmail("user@example.com").shouldBeSuccess("user@example.com") | CODE |
| LOW | .kiro/skills/react-testing/SKILL.md | 83 | await user.type(screen.getByLabelText("Email"), "user@example.com"); | CODE |
| LOW | .kiro/skills/react-testing/SKILL.md | 86 | expect(onSubmit).toHaveBeenCalledWith({ email: "user@example.com" }); | CODE |
| LOW | .kiro/skills/golang-testing/SKILL.md | 33 | email: "user@example.com", | CODE |
| LOW | .kiro/skills/golang-testing/SKILL.md | 166 | email := "user@example.com" | CODE |
| LOW⚡ | skills/kotlin-testing/SKILL.md | 74 | validateEmail("user@example.com").shouldBeSuccess("user@example.com") | CODE |
| LOW | skills/csharp-testing/SKILL.md | 92 | [InlineData("user@example.com", true)] | CODE |
| LOW | …/continuous-learning-v2/scripts/test_parse_instinct.py | 215 | trigger: "placeholder" | CODE |
| LOW | …/continuous-learning-v2/scripts/test_parse_instinct.py | 518 | yaml_file.write_text("placeholder") | CODE |
| LOW | skills/react-testing/SKILL.md | 84 | await user.type(screen.getByLabelText("Email"), "user@example.com"); | CODE |
| LOW | skills/react-testing/SKILL.md | 87 | expect(onSubmit).toHaveBeenCalledWith({ email: "user@example.com" }); | CODE |
| LOW | skills/django-verification/SKILL.md | 155 | echo "from apps.users.models import User; User.objects.create_superuser('admin@example.com', 'admin')" | python manage.p | CODE |
| LOW | skills/angular-developer/references/e2e-testing.md | 29 | cy.get('[data-cy=email]').type('user@example.com'); | CODE |
| LOW | skills/angular-developer/references/e2e-testing.md | 44 | await page.getByLabel('Email').fill('user@example.com'); | CODE |
| LOW | skills/fsharp-testing/SKILL.md | 120 | [<InlineData("user@example.com", true)>] | CODE |
| LOW | skills/django-tdd/SKILL.md | 126 | email='admin@example.com', | CODE |
| LOW | skills/django-tdd/SKILL.md | 262 | email='admin@example.com', | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/ja-JP/skills/x-api/SKILL.md | 53 | export X_API_KEY="your-api-key" | CODE |
| HIGH | docs/ja-JP/skills/videodb/reference/api-reference.md | 11 | api_key="your-api-key", # or set VIDEO_DB_API_KEY env var | CODE |
| HIGH | docs/ja-JP/skills/flox-environments/SKILL.md | 318 | # 使用方法: API_KEY="<your-api-key>" flox activate | STRING |
| HIGH | docs/ja-JP/skills/nutrient-document-processing/SKILL.md | 142 | "NUTRIENT_DWS_API_KEY": "YOUR_API_KEY", | CODE |
| HIGH | docs/zh-CN/skills/x-api/SKILL.md | 53 | export X_API_KEY="your-api-key" | CODE |
| HIGH | docs/zh-CN/skills/videodb/reference/api-reference.md | 11 | api_key="your-api-key", # or set VIDEO_DB_API_KEY env var | CODE |
| HIGH | docs/zh-CN/skills/nutrient-document-processing/SKILL.md | 143 | "NUTRIENT_DWS_API_KEY": "YOUR_API_KEY", | CODE |
| HIGH | skills/videodb/reference/api-reference.md | 11 | api_key="your-api-key", # or set VIDEO_DB_API_KEY env var | CODE |
| HIGH | skills/flox-environments/SKILL.md | 319 | # Use: API_KEY="<your-api-key>" flox activate | STRING |
| HIGH | skills/nutrient-document-processing/SKILL.md | 146 | "NUTRIENT_DWS_API_KEY": "YOUR_API_KEY", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | scripts/gan-harness.sh | 2 | # gan-harness.sh — GAN-Style Generator-Evaluator Harness Orchestrator | COMMENT |
| MEDIUM⚡ | scripts/gan-harness.sh | 5 | # https://www.anthropic.com/engineering/harness-design-long-running-apps | COMMENT |
| MEDIUM⚡ | scripts/gan-harness.sh | 8 | # ./scripts/gan-harness.sh "Build a music streaming dashboard" | COMMENT |
| MEDIUM⚡ | scripts/gan-harness.sh | 9 | # GAN_MAX_ITERATIONS=10 GAN_PASS_THRESHOLD=8.0 ./scripts/gan-harness.sh "Build a Kanban board" | COMMENT |
| MEDIUM | .kiro/agents/architect.json | 15 | "prompt": "You are a senior software architect specializing in scalable, maintainable system design.\n\n## Your Role\n | CODE |
| MEDIUM | .kiro/agents/tdd-guide.json | 16 | "prompt": "You are a Test-Driven Development (TDD) specialist who ensures all code is developed test-first with compre | CODE |
| MEDIUM⚡ | .kiro/agents/kotlin-reviewer.json | 15 | "prompt": "You are a senior Kotlin and Android/KMP code reviewer ensuring idiomatic, safe, and maintainable code.\n\n# | CODE |
| MEDIUM | .kiro/agents/database-reviewer.json | 15 | "prompt": "# Database Reviewer\n\nYou are an expert PostgreSQL database specialist focused on query optimization, sche | CODE |
| MEDIUM | .kiro/agents/e2e-runner.json | 16 | "prompt": "# E2E Test Runner\n\nYou are an expert end-to-end testing specialist. Your mission is to ensure critical us | CODE |
| MEDIUM | .kiro/agents/fsharp-reviewer.json | 15 | "prompt": "You are a senior F# code reviewer ensuring high standards of idiomatic functional F# code and best practice | CODE |
| MEDIUM | .kiro/agents/harness-optimizer.json | 14 | "prompt": "You are the harness optimizer.\n\n## Mission\n\nRaise agent completion quality by improving harness configu | CODE |
| MEDIUM | .kiro/agents/harness-optimizer.json | 14 | "prompt": "You are the harness optimizer.\n\n## Mission\n\nRaise agent completion quality by improving harness configu | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .trae/uninstall.sh | 50 | # Check if ~ was specified (or expanded to $HOME) | COMMENT |
| LOW | .trae/uninstall.sh | 57 | # Check if we're already inside a .trae or .trae-cn directory | COMMENT |
| LOW | .trae/install.sh | 81 | # Check if ~ was specified (or expanded to $HOME) | COMMENT |
| LOW | .trae/install.sh | 88 | # Check if we're already inside a .trae or .trae-cn directory | COMMENT |
| LOW⚡ | skills/continuous-learning-v2/agents/start-observer.sh | 14 | # start-observer.sh status # Check if observer is running | COMMENT |
| LOW | skills/continuous-learning-v2/agents/start-observer.sh | 175 | # Check if observer is disabled in config | COMMENT |
| LOW | skills/continuous-learning-v2/agents/start-observer.sh | 182 | # Check if already running | COMMENT |
| LOW | skills/continuous-learning-v2/hooks/observe.sh | 261 | # Check if parsing succeeded | COMMENT |
| LOW | skills/continuous-learning-v2/hooks/observe.sh | 434 | # Check if observer is now running after cleanup | COMMENT |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 1342 | # Check if already global | COMMENT |
| LOW | skills/skill-stocktake/scripts/quick-diff.sh | 59 | # Check if this file is known to results.json (exact whole-line match to | COMMENT |
| LOW | .codebuddy/uninstall.sh | 39 | # Check if ~ was specified (or expanded to $HOME) | COMMENT |
| LOW | .codebuddy/uninstall.sh | 46 | # Check if we're already inside a .codebuddy directory | COMMENT |
| LOW | .codebuddy/install.sh | 91 | # Check if ~ was specified (or expanded to $HOME) | COMMENT |
| LOW | .codebuddy/install.sh | 98 | # Check if we're already inside a .codebuddy directory | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/scripts/ecc-dashboard.test.js | 62 | print(json.dumps({'argv': argv, 'kwargs': kwargs})) | CODE |
| HIGH | tests/scripts/ecc-dashboard.test.js | 79 | print(json.dumps({'argv': argv, 'kwargs': kwargs})) | CODE |
| HIGH | tests/scripts/ecc-dashboard.test.js | 97 | print(json.dumps({'error': str(exc)})) | CODE |
| HIGH | tests/scripts/ecc-dashboard.test.js | 129 | print(json.dumps(window.calls)) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/lib/project-detect.js | 340 | // Step 1: Detect languages | COMMENT |
| LOW | scripts/lib/project-detect.js | 356 | // Step 2: Detect frameworks based on markers and dependencies | COMMENT |
| LOW | scripts/lib/project-detect.js | 414 | // Step 3: Determine primary type | COMMENT |
| LOW | .kiro/agents/chief-of-staff.json | 16 | "prompt": "You are a personal chief of staff that manages all communication channels — email, Slack, LINE, Messenger, | CODE |
| LOW⚡ | .kiro/agents/kotlin-reviewer.json | 15 | "prompt": "You are a senior Kotlin and Android/KMP code reviewer ensuring idiomatic, safe, and maintainable code.\n\n# | CODE |
| LOW⚡ | skills/skill-comply/scripts/run.py | 64 | # Step 1: Generate compliance spec | COMMENT |
| LOW⚡ | skills/skill-comply/scripts/run.py | 69 | # Step 2: Generate scenarios | COMMENT |
| LOW | skills/skill-comply/scripts/run.py | 91 | # Step 3: Execute scenarios | COMMENT |
| LOW | skills/skill-comply/scripts/run.py | 102 | # Step 4: Generate report | COMMENT |
| LOW⚡ | skills/skill-comply/scripts/grader.py | 72 | # Step 1: LLM classifies all events in one batch call | COMMENT |
| LOW⚡ | skills/skill-comply/scripts/grader.py | 81 | # Step 2: Check temporal ordering (deterministic) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .trae/uninstall.sh | 6 | # Usage: | COMMENT |
| LOW | .trae/install.sh | 6 | # Usage: | COMMENT |
| LOW⚡ | scripts/gan-harness.sh | 7 | # Usage: | COMMENT |
| LOW | scripts/codex/install-global-git-hooks.sh | 5 | # Usage: | COMMENT |
| LOW | .kiro/install.sh | 6 | # Usage: | COMMENT |
| LOW | skills/ios-icon-gen/scripts/iconify_gen.sh | 6 | # Usage: | COMMENT |
| LOW⚡ | skills/continuous-learning-v2/agents/start-observer.sh | 10 | # Usage: | COMMENT |
| LOW | skills/frontend-slides/scripts/export-pdf.sh | 4 | # Usage: | COMMENT |
| LOW | .codebuddy/uninstall.sh | 6 | # Usage: | COMMENT |
| LOW | .codebuddy/install.sh | 6 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ecc_dashboard.py | 44 | CODE | |
| LOW | ecc_dashboard.py | 108 | CODE | |
| LOW | ecc_dashboard.py | 188 | CODE | |
| LOW | ecc_dashboard.py | 237 | CODE | |
| LOW | scripts/hooks/insaits-security-monitor.py | 95 | CODE | |
| LOW | skills/delivery-gate/hooks/quality-gate.py | 80 | CODE | |
| LOW | skills/delivery-gate/hooks/quality-gate.py | 129 | CODE | |
| LOW | skills/videodb/scripts/ws_listener.py | 78 | CODE | |
| LOW | skills/videodb/scripts/ws_listener.py | 147 | CODE | |
| LOW | skills/skill-comply/scripts/runner.py | 125 | CODE | |
| LOW | skills/skill-comply/scripts/report.py | 13 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 285 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 506 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 560 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 876 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 1065 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 1254 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 1734 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 1749 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 1825 | CODE | |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 1876 | CODE | |
| LOW | skills/frontend-slides/scripts/extract-pptx.py | 18 | CODE | |
| LOW | src/llm/providers/claude.py | 58 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .kiro/agents/code-reviewer.json | 15 | "prompt": "You are a senior code reviewer ensuring high standards of code quality and security.\n\n## Review Process\n | CODE |
| HIGH | .kiro/agents/code-reviewer.json | 15 | "prompt": "You are a senior code reviewer ensuring high standards of code quality and security.\n\n## Review Process\n | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | …/continuous-learning-v2/scripts/test_parse_instinct.py | 735 | # Create a project dir with instincts | COMMENT |
| MEDIUM | skills/frontend-slides/scripts/export-pdf.sh | 354 | # Create a minimal package.json so npm install works | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | ecc_dashboard.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | integrations/aura/adapter.py | 33 | __all__ = [ | CODE |
| LOW | integrations/aura/__init__.py | 26 | __all__ = [ | CODE |
| LOW | skills/skill-comply/scripts/run.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | skills/skill-comply/scripts/runner.py | 101 | def _setup_sandbox(sandbox_dir: Path, scenario: Scenario) -> None: | CODE |
| LOW | skills/skill-comply/scripts/classifier.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | skills/continuous-learning-v2/scripts/instinct-cli.py | 421 | def _update_registry(pid: str, pname: str, proot: str, premote: str) -> None: | CODE |