Home / andrewyng / openworker
AI Slop Code RIsk Monitor

andrewyng/openworker

21.1 Elevated pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for andrewyng/openworker, a Python project with 18,489 GitHub stars. SynthScan examined 237,951 lines of code across 860 source files, recording 4043 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 21.1 (Elevated pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

21.1
Adjusted Signal
21.1
Raw Pattern Score
100%
Time Factor
2026-10-10
Last Push
18.5K
Stars
Python
Language
238.0K
Lines of Code
860
Files
4.0K
Pattern Hits
2026-10-12
Scan Date
0.27
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 46.2/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 2819 finding(s).

Hallucinated Dependency & Supply Chain Risk 13.9/100 · LOW

Are imports declared and package/API names verified? 641 finding(s).

Agent Over-Engineering Ratio 57.1/100 · HIGH

Are wrappers, guards, and repeated structures necessary? 3159 finding(s).

PR Review Velocity Impact 67.1/100 · HIGH

Which changes need focused human review? 4043 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 231MEDIUM 48LOW 3764

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 4043 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers2564 hits · 2650 pts
SeverityFileLineSnippetContext
LOW⚡tests/test_run_cli.py237def test_an_unknown_key_asks_again_and_a_closed_terminal_is_a_no() -> None:CODE
LOW⚡tests/test_run_cli.py245def test_a_file_write_card_shows_its_arguments_and_the_reason() -> None:CODE
LOW⚡tests/test_run_cli.py254def test_the_network_card_offers_this_run_only() -> None:CODE
LOW⚡tests/test_run_cli.py542def test_the_root_cause_is_the_bottom_of_the_chain() -> None:CODE
LOW⚡tests/test_run_cli.py571def test_the_retry_line_says_why_the_model_call_failed(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py68def test_a_run_is_saved_under_the_state_folder_by_workspace_path(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py85def test_the_workspace_folder_name_is_the_path_with_dashes() -> None:CODE
LOWtests/test_run_cli.py91def test_this_computers_settings_are_read_and_not_changed(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py106def test_a_run_has_the_connectors_this_computer_has_connected(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py124def test_two_runs_in_one_workspace_are_two_sessions(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py134def test_the_default_mode_asks_and_with_no_terminal_the_card_is_refused(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py145def test_with_no_terminal_a_question_is_answered_by_rule(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py187def test_allowed_sites_come_from_the_flag_and_the_file(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py197def test_allow_site_says_so_when_no_list_holds_the_run(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py226def test_a_command_card_offers_once_this_session_and_no() -> None:CODE
LOWtests/test_run_cli.py278def test_a_question_takes_a_number_or_typed_text() -> None:CODE
LOWtests/test_run_cli.py293def test_grouped_questions_are_asked_in_turn_and_keyed_by_header() -> None:CODE
LOWtests/test_run_cli.py308def test_a_folder_request_is_asked_and_yes_gives_the_folder(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py350def test_a_tool_install_is_asked_and_yes_installs_the_pinned_build(monkeypatch: pytest.MonkeyPatch) -> None:CODE
LOWtests/test_run_cli.py369def test_with_auto_answer_the_cards_still_reach_the_person() -> None:CODE
LOWtests/test_run_cli.py425def test_at_a_terminal_the_approval_is_asked_and_yes_runs_the_call(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py434def test_at_a_terminal_no_refuses_the_call(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py448def test_at_a_terminal_a_question_is_asked_there(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py462def test_auto_answer_at_a_terminal_answers_the_question_and_still_asks_the_approval(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py475def test_ctrl_c_at_a_prompt_ends_the_run_and_leaves_the_record(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py516def test_at_a_terminal_a_folder_request_is_asked_and_the_folder_can_then_be_written(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py527def test_with_auto_answer_a_folder_request_is_declined_by_rule(tmp_path: Path) -> None:CODE
LOWtests/test_run_cli.py594def test_a_stop_signal_ends_the_run_during_the_wait_between_retries(tmp_path: Path) -> None:CODE
LOW⚡tests/test_team_open_surface.py38def test_claim_self_assigns_an_open_item(store):CODE
LOW⚡tests/test_team_open_surface.py45def test_second_claim_loses_cleanly(store):CODE
LOW⚡tests/test_team_open_surface.py52def test_claim_requires_open_and_unassigned(store):CODE
LOW⚡tests/test_team_open_surface.py64def test_lead_only_policy_blocks_worker_claims(store):CODE
LOW⚡tests/test_team_open_surface.py74def test_policy_defaults_open_and_validates(store):CODE
LOW⚡tests/test_team_open_surface.py82def test_claim_feeds_the_lead_subscription(store):CODE
LOW⚡tests/test_team_open_surface.py92def test_lead_assigns_are_not_subscription_news(store):CODE
LOW⚡tests/test_team_open_surface.py99def test_claim_feeds_journal_grants_like_assignment(store):CODE
LOW⚡tests/test_team_open_surface.py106def test_workers_see_the_claimable_pool(store):CODE
LOWtests/test_team_open_surface.py130def test_local_dialect_binds_identity(tmp_path):CODE
LOWtests/test_team_open_surface.py137def test_local_dialect_full_worker_loop(tmp_path):CODE
LOWtests/test_team_open_surface.py185def test_board_api_requires_a_token(api):CODE
LOWtests/test_team_open_surface.py192def test_status_over_http_is_owned_and_never_kicks_a_wake(api, monkeypatch):CODE
LOWtests/test_team_open_surface.py209def test_board_api_rejects_the_sidecar_token_as_a_board_token(api):CODE
LOWtests/test_team_open_surface.py218def test_token_binds_identity_and_store_enforces_authority(api):CODE
LOWtests/test_team_open_surface.py269def test_board_item_reads_hide_foreign_worker_items(api):CODE
LOWtests/test_team_open_surface.py374def test_board_item_reads_return_not_found_for_missing_items(api):CODE
LOWtests/test_team_open_surface.py392def test_board_item_create_hides_missing_and_foreign_parents(api):CODE
LOWtests/test_team_open_surface.py429def test_remote_dialect_round_trip(api):CODE
LOWtests/test_team_open_surface.py483def test_pending_and_consume_over_the_wire(api):CODE
LOWtests/test_team_open_surface.py516def test_attachment_store_is_content_addressed(tmp_path):CODE
LOWtests/test_team_open_surface.py529def test_attachment_store_validates(tmp_path):CODE
LOWtests/test_team_open_surface.py541def test_attach_over_the_wire_and_fetch(api):CODE
LOWtests/test_team_open_surface.py586def test_board_attachment_read_hides_foreign_worker_reference(api):CODE
LOWtests/test_team_open_surface.py640def test_board_attachment_read_requires_token(api):CODE
LOWtests/test_team_open_surface.py652def test_board_attachment_read_rejects_malformed_name(api):CODE
LOWtests/test_team_open_surface.py668def test_board_attachment_read_hides_unreferenced_blob(api):CODE
LOWtests/test_team_open_surface.py687def test_board_attachment_read_hides_missing_referenced_blob(api):CODE
LOWtests/test_team_open_surface.py722def test_local_attachment_read_tracks_worker_visibility(tmp_path):CODE
LOWtests/test_team_open_surface.py753def test_local_attachment_read_allows_a_visible_deduplicated_reference(tmp_path):CODE
LOWtests/test_team_open_surface.py783def test_local_attachment_read_rejects_forged_comment_and_transition_refs(tmp_path):CODE
LOWtests/test_team_open_surface.py815def test_legacy_attachment_refs_are_grandfathered_across_rebuild(tmp_path):CODE
2504 more matches not shown…
Empty Error Handlers196 hits · 962 pts
SeverityFileLineSnippetContext
HIGHtests/test_durable_resume.py51except asyncio.CancelledError:CODE
HIGHtests/test_providers.py233except RuntimeError:CODE
HIGHtests/test_skills_store.py127except ValueError:CODE
HIGHcoworker/catalog.py96except (AttributeError, TypeError):CODE
HIGHcoworker/sessions.py79except (TypeError, ValueError):CODE
HIGHcoworker/audit.py79except sqlite3.OperationalError:CODE
HIGHcoworker/audit.py147except Exception:CODE
HIGHcoworker/cloud.py670except httpx.HTTPError:CODE
HIGHcoworker/cloud.py735except ValueError:CODE
HIGHcoworker/cloud.py764except httpx.HTTPError:CODE
HIGHcoworker/cloud.py784except httpx.HTTPError:CODE
HIGHcoworker/cloud.py829except httpx.HTTPError:CODE
HIGHcoworker/statelock.py115except OSError:CODE
HIGHcoworker/statelock.py62except OSError:CODE
HIGHcoworker/subscriptions.py187except OSError:CODE
HIGHcoworker/subscriptions.py160except (OSError, ValueError, AttributeError):CODE
HIGHcoworker/engine.py1460except Exception:CODE
HIGHcoworker/engine.py2146except Exception:CODE
HIGHcoworker/engine.py2160except Exception:CODE
HIGHcoworker/engine.py343except Exception:CODE
HIGHcoworker/engine.py1262except Exception: # noqa: BLE001 - a broken getter must not open a card nobody seesCODE
HIGHcoworker/engine.py1493except Exception:CODE
HIGHcoworker/engine.py1539except Exception:CODE
HIGHcoworker/engine.py1028except OSError:CODE
HIGHcoworker/secrets.py117except OSError:CODE
HIGHcoworker/secrets.py93except OSError:CODE
HIGHcoworker/secrets.py200except OSError:CODE
HIGHcoworker/secrets.py132except OSError:CODE
HIGHcoworker/secrets.py183except (OSError, ImportError):CODE
HIGHcoworker/mentions.py75except OSError:CODE
HIGHcoworker/interactions.py39except Exception:CODE
HIGHcoworker/projects.py179except Exception:CODE
HIGHcoworker/projects.py208except Exception:CODE
HIGHcoworker/projects.py223except Exception:CODE
HIGHcoworker/projects.py229except Exception:CODE
HIGHcoworker/conversations.py121except sqlite3.OperationalError:CODE
HIGHcoworker/connectors/integration_tools.py378except Exception:CODE
HIGHcoworker/connectors/machine_poll.py74except asyncio.TimeoutError:CODE
HIGHcoworker/connectors/machine_poll.py161except Exception:CODE
HIGHcoworker/connectors/relay_client.py191except Exception:CODE
HIGHcoworker/connectors/relay_client.py553except Exception:CODE
HIGHcoworker/connectors/senders.py40except ValueError:CODE
HIGHcoworker/connectors/email_tools.py389except Exception:CODE
HIGHcoworker/connectors/email_tools.py671except Exception:CODE
HIGHcoworker/connectors/email_tools.py827except Exception:CODE
HIGHcoworker/connectors/email_tools.py838except Exception:CODE
HIGHcoworker/connectors/email_tools.py412except Exception:CODE
HIGHcoworker/connectors/adapters.py371except Exception:CODE
HIGHcoworker/connectors/parked.py66except OSError:CODE
HIGHcoworker/memory/tools.py61except Exception:CODE
HIGHcoworker/web/fetch.py73except Exception:CODE
HIGHcoworker/providers/openai_responses.py450except Exception:CODE
HIGHcoworker/providers/openrouter_auth.py143except (ValueError, UnicodeError, asyncio.TimeoutError):CODE
HIGHcoworker/providers/openrouter_auth.py153except ConnectionError:CODE
HIGHcoworker/providers/local_machine.py72except (AttributeError, ValueError, OSError):CODE
HIGHcoworker/providers/codex_auth.py377except Exception:CODE
HIGHcoworker/providers/router.py44except Exception:CODE
HIGHcoworker/server/run.py124except Exception:CODE
HIGHcoworker/server/run.py58except PermissionError:CODE
HIGHcoworker/server/app.py3439except WebSocketDisconnect:CODE
136 more matches not shown…
Unused Imports591 hits · 557 pts
SeverityFileLineSnippetContext
LOWpackaging/make_update_manifest.py27CODE
LOWtests/test_run_cli.py7CODE
LOWtests/test_hubspot_portals.py9CODE
LOWtests/test_sandbox_windows.py9CODE
LOWtests/test_engine_stop.py6CODE
LOWtests/test_web_search.py7CODE
LOWtests/test_toolchain.py7CODE
LOWtests/test_session_usage.py5CODE
LOWtests/test_openshell_inside.py5CODE
LOWtests/test_sandbox_openshell.py8CODE
LOWtests/test_provenance.py7CODE
LOWtests/test_provenance.py10CODE
LOWtests/test_automation_create.py7CODE
LOWtests/test_engine.py3CODE
LOWtests/test_persona_loading.py3CODE
LOWtests/test_matrix_current_models.py10CODE
LOWtests/test_risk_overrides.py9CODE
LOWtests/test_risk_overrides.py16CODE
LOWtests/conftest.py9CODE
LOWtests/test_skills_api.py8CODE
LOWtests/test_skills_api.py14CODE
LOWtests/test_network_access.py9CODE
LOWtests/test_network_access.py14CODE
LOWtests/test_team_live_gaps.py4CODE
LOWtests/test_compaction_transcript.py5CODE
LOWtests/test_compaction_transcript.py8CODE
LOWtests/test_openai_provider.py8CODE
LOWtests/test_shell_non_utf8_output.py9CODE
LOWtests/test_openrouter_auth.py3CODE
LOWtests/test_slack_approval_owners.py3CODE
LOWtests/test_shadow_eval.py9CODE
LOWtests/test_catalog.py8CODE
LOWtests/test_connector_registry.py8CODE
LOWtests/test_ui_refresh_e2e.py23CODE
LOWtests/test_worker_connectors.py7CODE
LOWtests/test_standing_approvals.py8CODE
LOWtests/test_standing_approvals.py13CODE
LOWtests/test_reviewer_persona.py6CODE
LOWtests/test_inbox.py3CODE
LOWtests/test_providers.py3CODE
LOWtests/test_message_source.py12CODE
LOWtests/test_sandbox_seatbelt.py8CODE
LOWtests/test_readonly_scoping.py9CODE
LOWtests/test_readonly_scoping.py11CODE
LOWtests/test_gemini_provider.py5CODE
LOWtests/test_sandbox_lifetime.py4CODE
LOWtests/test_tool_request.py7CODE
LOWtests/test_audit_export.py3CODE
LOWtests/test_mcp_connectors.py8CODE
LOWtests/test_dangerous_mode.py10CODE
LOWtests/test_pdf_support.py3CODE
LOWtests/test_slack_workspaces.py9CODE
LOWtests/test_headless_run.py8CODE
LOWtests/test_sandbox_selection.py4CODE
LOWtests/test_local_server.py5CODE
LOWtests/test_local_server.py12CODE
LOWtests/test_gateway_inbox_reply.py7CODE
LOWtests/test_autotitle.py8CODE
LOWtests/test_session_persona.py7CODE
LOWtests/test_fake_slack.py8CODE
531 more matches not shown…
Excessive Try-Catch Wrapping327 hits · 308 pts
SeverityFileLineSnippetContext
LOW⚡tests/test_run_cli.py550 except Exception as low:CODE
LOW⚡tests/test_run_cli.py552 except Exception as mid:CODE
LOW⚡tests/test_run_cli.py554 except Exception as top:CODE
LOW⚡tests/test_run_cli.py560 except Exception as low:CODE
LOW⚡tests/test_run_cli.py562 except Exception as top:CODE
LOWtests/test_sandbox_tools.py75 except Exception as exc:CODE
LOWcoworker/pdf_support.py76 except Exception:CODE
LOWcoworker/pdf_support.py95 except Exception:CODE
LOWcoworker/pdf_support.py98 except Exception as exc:CODE
LOWcoworker/pdf_support.py124 except Exception:CODE
LOWcoworker/pdf_support.py193 except Exception:CODE
LOWcoworker/audit.py147 except Exception:CODE
LOWcoworker/cloud.py852 except Exception as exc: # malformed manifest: surface, don't crashCODE
MEDIUMcoworker/engine.py1059def produce():CODE
MEDIUMcoworker/engine.py1330def _review_inputs(self) -> tuple[str, list[dict[str, Any]], dict]:CODE
MEDIUMcoworker/engine.py1518def _shadow() -> None:CODE
LOWcoworker/engine.py343 except Exception:CODE
LOWcoworker/engine.py475 except Exception:CODE
LOWcoworker/engine.py546 except Exception as exc:CODE
LOWcoworker/engine.py630 except Exception:CODE
LOWcoworker/engine.py691 except Exception as exc: # provider failureCODE
LOWcoworker/engine.py983 except Exception:CODE
LOWcoworker/engine.py1008 except Exception:CODE
LOWcoworker/engine.py1069 except Exception as exc: # surfaced to the awaiting consumerCODE
LOWcoworker/engine.py1252 except Exception: # noqa: BLE001 - a broken getter must read as attendedCODE
LOWcoworker/engine.py1262 except Exception: # noqa: BLE001 - a broken getter must not open a card nobody seesCODE
LOWcoworker/engine.py1335 except Exception:CODE
LOWcoworker/engine.py1460 except Exception:CODE
LOWcoworker/engine.py1493 except Exception:CODE
LOWcoworker/engine.py1539 except Exception:CODE
LOWcoworker/engine.py2010 except Exception as exc:CODE
LOWcoworker/engine.py2146 except Exception:CODE
LOWcoworker/engine.py2160 except Exception:CODE
LOWcoworker/engine.py2425 except Exception as exc: # noqa: BLE001 - the agent must hear whyCODE
LOWcoworker/engine.py2518 except Exception: # noqa: BLE001 - evidence is a help, never a reason to fail the cardCODE
LOWcoworker/reviewer.py417 except Exception as exc:CODE
LOWcoworker/agent.py197 except Exception:CODE
LOWcoworker/agent.py772 except Exception as exc: # noqa: BLE001CODE
LOWcoworker/permissions.py780 except Exception as exc: # noqa: BLE001CODE
LOWcoworker/permissions.py843 except Exception: # noqa: BLE001 - an unknown provider reads as "not allowed"CODE
LOWcoworker/interactions.py39 except Exception:CODE
LOWcoworker/projects.py179 except Exception:CODE
LOWcoworker/projects.py208 except Exception:CODE
LOWcoworker/projects.py223 except Exception:CODE
LOWcoworker/projects.py229 except Exception:CODE
LOWcoworker/connectors/chat_tools.py201 except Exception as exc: # noqa: BLE001 — surfaced to the model as a tool errorCODE
LOWcoworker/connectors/integration_tools.py347 except Exception as exc:CODE
LOWcoworker/connectors/integration_tools.py378 except Exception:CODE
LOWcoworker/connectors/slack_directory.py146 except Exception as exc:CODE
LOWcoworker/connectors/slack_directory.py186 except Exception as exc:CODE
LOWcoworker/connectors/gateway.py122 except Exception:CODE
LOWcoworker/connectors/gateway.py135 except Exception:CODE
LOWcoworker/connectors/gateway.py145 except Exception:CODE
LOWcoworker/connectors/gateway.py186 except Exception: # bad token / network — skip, don't break the serverCODE
LOWcoworker/connectors/gateway.py194 except Exception:CODE
LOWcoworker/connectors/machine_poll.py149 except Exception as exc:CODE
LOWcoworker/connectors/machine_poll.py161 except Exception:CODE
LOWcoworker/connectors/tools.py324 except Exception as exc:CODE
LOWcoworker/connectors/relay_client.py119 except Exception as exc:CODE
LOWcoworker/connectors/relay_client.py132 except Exception:CODE
267 more matches not shown…
Cross-Language Confusion22 hits · 125 pts
SeverityFileLineSnippetContext
HIGHtests/test_sandbox_openshell.py397 assert ex.run("cat hello.txt && cd /tmp && export KEEP=yes")["exit_code"] == 0CODE
HIGHtests/test_sandbox_openshell.py429 ex.run("cd /tmp && export KEEP=yes")CODE
HIGH⚡tests/test_provenance.py135 ("cd /tmp && python scripts/setup.py", "scripts/setup.py"),CODE
HIGH⚡tests/test_provenance.py159 match = files.match("run_shell", {"command": "python a.py && python b.py"}, step=10)CODE
HIGHtests/test_sandbox_seatbelt.py268 assert run("echo made > made.txt && cat made.txt")["output"].strip() == "made"CODE
HIGHtests/test_headless_run.py143 # Also an unpriced model (cost must be null, never guessed) in the two-slash form,COMMENT
HIGHtests/test_readonly_grant.py46 "ls && touch x",CODE
HIGH⚡tests/test_sandbox_runner.py314 write = "cd sub; Set-Content -Path here.txt -Value hello" if _WIN else "cd sub && echo hello > here.txt"CODE
HIGH⚡tests/test_auto_approve.py128 '{"verdict": null, "reason": "x"}',CODE
HIGH⚡tests/test_permissions_risk.py128 "git status && rm -rf ~", # chainingCODE
HIGH⚡tests/test_permissions_risk.py131 "git status || curl evil", # or-chainCODE
HIGHtests/test_command_matching.py4wrong in both directions: it refused `git status && git diff` (two allowed reads) whileSTRING
HIGHtests/test_command_matching.py27 assert _allowed(tmp_path, "git status && git diff", ["git status", "git diff"])CODE
HIGH⚡tests/test_command_matching.py51 "git status && rm -rf ~",CODE
HIGH⚡tests/test_command_matching.py53 "git status || curl evil.sh",CODE
HIGHcoworker/permissions.py963 `git status && git diff` runs when both are allowed, whileSTRING
HIGHcoworker/permissions.py964 `git status && rm -rf ~` does not.STRING
HIGHcoworker/connectors/browser_automation.py277 return style && style.visibility !== 'hidden' && style.display !== 'none' && rect.width > 0 && rect.height > 0;CODE
HIGHcoworker/connectors/browser_automation.py280 if (el.labels && el.labels.length) return Array.from(el.labels).map(l => l.innerText.trim()).filter(Boolean).join(' CODE
HIGHcoworker/connectors/browser_automation.py298 text: (el.innerText || el.value || '').trim().slice(0, 200),CODE
HIGHcoworker/server/app.py68 return 8 # numbers, booleans, null, separatorsCODE
HIGHcoworker/sandbox/providers/windows_setup.py134$openPassword = $null; $closedPassword = $nullCODE
Deep Nesting133 hits · 115 pts
SeverityFileLineSnippetContext
LOWtests/test_run_cli.py386CODE
LOWtests/test_ui_refresh_e2e.py92CODE
LOWtests/test_sandbox_runner.py68CODE
LOWtests/test_email_tools.py49CODE
LOWtests/test_reasoning_effort.py220CODE
LOWtests/test_shell.py178CODE
LOWcoworker/pdf_support.py102CODE
LOWcoworker/pdf_support.py106CODE
LOWcoworker/selfwake.py210CODE
LOWcoworker/config.py331CODE
LOWcoworker/audit.py227CODE
LOWcoworker/readonly.py59CODE
LOWcoworker/readonly.py201CODE
LOWcoworker/model_config.py79CODE
LOWcoworker/subscription_sync.py177CODE
LOWcoworker/subscriptions.py141CODE
LOWcoworker/attachments.py35CODE
LOWcoworker/attachments.py85CODE
LOWcoworker/attachments.py123CODE
LOWcoworker/engine.py576CODE
LOWcoworker/engine.py612CODE
LOWcoworker/engine.py638CODE
LOWcoworker/engine.py1551CODE
LOWcoworker/engine.py2390CODE
LOWcoworker/compaction.py300CODE
LOWcoworker/compaction.py424CODE
LOWcoworker/permissions.py427CODE
LOWcoworker/toolchain.py235CODE
LOWcoworker/provenance.py172CODE
LOWcoworker/conversations.py160CODE
LOWcoworker/conversations.py279CODE
LOWcoworker/conversations.py313CODE
LOWcoworker/roots.py33CODE
LOWcoworker/roots.py61CODE
LOWcoworker/connectors/integration_tools.py308CODE
LOWcoworker/connectors/email_tools.py355CODE
LOWcoworker/connectors/email_tools.py392CODE
LOWcoworker/connectors/email_tools.py421CODE
LOWcoworker/connectors/email_tools.py532CODE
LOWcoworker/tools/ask.py277CODE
LOWcoworker/tui/app.py179CODE
LOWcoworker/tui/app.py209CODE
LOWcoworker/providers/ollama_context.py346CODE
LOWcoworker/providers/openai_responses.py82CODE
LOWcoworker/providers/openai_responses.py128CODE
LOWcoworker/providers/openai_responses.py256CODE
LOWcoworker/providers/openai_responses.py403CODE
LOWcoworker/providers/registry.py1038CODE
LOWcoworker/providers/bedrock_provider.py124CODE
LOWcoworker/providers/bedrock_provider.py168CODE
LOWcoworker/providers/bedrock_provider.py357CODE
LOWcoworker/providers/bedrock_provider.py404CODE
LOWcoworker/providers/openai_provider.py612CODE
LOWcoworker/providers/openai_provider.py683CODE
LOWcoworker/providers/openai_provider.py346CODE
LOWcoworker/providers/openrouter_auth.py118CODE
LOWcoworker/providers/local_server.py91CODE
LOWcoworker/providers/local_machine.py175CODE
LOWcoworker/providers/model_controls.py136CODE
LOWcoworker/providers/anthropic_provider.py255CODE
73 more matches not shown…
Over-Commented Block74 hits · 68 pts
SeverityFileLineSnippetContext
LOWpackaging/build_macos_cli.sh1#!/usr/bin/env bashCOMMENT
LOWpackaging/install.sh1#!/bin/shCOMMENT
LOWpackaging/build_linux.sh1#!/usr/bin/env bashCOMMENT
LOWpackaging/setup_dev_env.sh1#!/usr/bin/env bashCOMMENT
LOWpackaging/build_dmg.sh1#!/usr/bin/env bashCOMMENT
LOWpackaging/build_dmg.sh21# `tauri build` signs the .app + the bundled sidecar with it. Left unset → UNSIGNED (first launchCOMMENT
LOWpackaging/build_dmg.sh81fiCOMMENT
LOWpackaging/openshell/providers/openworker-openai.yaml1# OpenShell provider profile: OpenWorker calling OpenAI models.COMMENT
LOWpackaging/openshell/providers/openworker-anthropic.yaml1# OpenShell provider profile: OpenWorker calling Anthropic models.COMMENT
LOWcoworker/sessions.py41 # Persisted so a reloaded session keeps its compacted outbound view.COMMENT
LOWcoworker/config.py41 mode: str = "interactive"COMMENT
LOWcoworker/config.py61 # at min(80% of the model's window, this cap); the built-in cap is 250,000, which on aCOMMENT
LOWcoworker/config.py81 # that judges would-be approval cards in Mode.AUTO_APPROVE. Off by default; user-globalCOMMENT
LOWcoworker/config.py101 cloud_client_id: str = "g1l4Q1lhYWmyS03qPSf4KEJGrgq02Qam"COMMENT
LOWcoworker/config.py121 sandbox_provider: Optional[str] = NoneCOMMENT
LOWcoworker/engine.py181 # Returns an ephemeral `<system-context>` block appended to the LAST user message atCOMMENT
LOWcoworker/engine.py201 self.team_approver = team_approverCOMMENT
LOWcoworker/engine.py221 # getter returning "attended" / "inbox" / "auto"; None reads as attended. In "auto"COMMENT
LOWcoworker/engine.py241 # the owner-hit 2026-08-24 was a 2-denial cumulative trip silently downgrading aCOMMENT
LOWcoworker/engine.py261 self.reviewer_shadow = FalseCOMMENT
LOWcoworker/engine.py281 # PERMISSION_REQUIRED payload — e.g. web_search's live provider name, so the cardCOMMENT
LOWcoworker/engine.py381 # -- main loop --------------------------------------------------------------COMMENT
LOWcoworker/engine.py2841 )COMMENT
LOWcoworker/engine.py2901 "role": "assistant",COMMENT
LOWcoworker/agent.py241 # Twentieth pass: the project key memory loads/saves under. Defaults to theCOMMENT
LOWcoworker/agent.py301 # The session's directories. Explicit `roots` (orphan Cowork: scratch + added folders) wins;COMMENT
LOWcoworker/agent.py561 # Per-session effective menu (SKILLS-SPEC §3). The manager passes a CALLABLE soCOMMENT
LOWcoworker/agent.py621COMMENT
LOWcoworker/agent.py821 "If required for your assignment, comment on the item and transition it to blocked, "COMMENT
LOWcoworker/compaction.py21# Trigger: min(threshold_pct × context_window, cap_tokens). The cap exists so 1M-contextCOMMENT
LOWcoworker/permissions.py261 # folders, files that run later such as git hooks / CI configs, and authority thatCOMMENT
LOWcoworker/permissions.py301class Decision:COMMENT
LOWcoworker/permissions.py361 # (the session is not sandboxed, or its network setting is "Allow everything"). A list,COMMENT
LOWcoworker/permissions.py381 site_open_errors: dict[str, str] = field(default_factory=dict)COMMENT
LOWcoworker/risk.py21 WRITE_LOCAL = "write_local" # mutates the workspace — path-scoped + mode-gatedCOMMENT
LOWcoworker/connectors/descriptors.py61 # Registry metadata (UI-Refresh §1): the connector's brand color (hex; fallback gray) and aCOMMENT
LOWcoworker/connectors/descriptors.py81 # Manual token paste ALWAYS remains available — signed out or in — managedCOMMENT
LOWcoworker/tools/ask.py21COMMENT
LOWcoworker/providers/matrix.py281 # GLM 5.3 via OpenRouter (openrouter.ai/api/v1/models/z-ai/glm-5.3/endpoints, readCOMMENT
LOWcoworker/providers/openai_provider.py221 base_url: Optional[str] = None,COMMENT
LOWcoworker/providers/anthropic_provider.py61# with the default cap, so above the ceiling the request carries an explicit timeout sizedCOMMENT
LOWcoworker/providers/base.py61 raw: Any = field(default=None, repr=False, compare=False)COMMENT
LOWcoworker/agents/base.py41 # read-only explorer fan-out. scheduling: scheduled tasks + self-wake. messaging:COMMENT
LOWcoworker/server/app.py2941COMMENT
LOWcoworker/server/manager.py2301 # Removing a server must not leave its connection running until the nextCOMMENT
LOWcoworker/server/manager.py8181 # sleeping (a self-wake is pending) / idle — a count-less dot that never bubbles.COMMENT
LOWcoworker/personas/manifest.py81 # `all` sentinel, reserved for built-in general personas. Coarser grants leakedCOMMENT
LOWcoworker/headless/runner.py221# re-enters the conversation with a nudge, up to ~18 minutes in total. Permanent errorsCOMMENT
LOWdocs/config.example.toml1# coworker config — copy to one of:COMMENT
LOWdocs/config.example.toml41# sandbox_network_profile = "allowlist"COMMENT
LOWdocs/config.example.toml61# [[sandbox_toolchains]]COMMENT
LOW.github/workflows/release.yml1# Desktop release builds — macOS (.dmg, arm64 + Intel) and Windows (.msi + NSIS .exe) — andCOMMENT
LOW.github/workflows/image.yml1# The OpenWorker CLI image (packaging/openshell/Dockerfile), published to GitHub's containerCOMMENT
LOWsurfaces/gui/src-tauri/src/lib.rs1//! OpenWorker desktop shell.COMMENT
LOWsurfaces/gui/src-tauri/src/lib.rs101/// — so every tool the user installed via Homebrew/nvm/pyenv/asdf is invisible to the agent:COMMENT
LOWsurfaces/gui/src-tauri/src/lib.rs201/// Windows GUI apps inherit the user's full environment already.COMMENT
LOWsurfaces/gui/src/routes.ts1// Hash deep links, v1 (owner-ruled 2026-08-30: hash-based; the full routingCOMMENT
LOWsurfaces/gui/src/App.tsx261 // The server refused to build this session (its sandbox cannot be used) and closed theCOMMENT
LOWsurfaces/gui/src/itemsFromMessages.ts1// Maps the raw transcript from GET /v1/sessions/{id}/messages into the GUI's `Item[]` model.COMMENT
LOWsurfaces/gui/src/streamGate.ts1// §33 refinement #3 (owner, 2026-07-14 — v2's gate only covered turn START; mid-turnCOMMENT
14 more matches not shown…
Modern Structural Boilerplate49 hits · 49 pts
SeverityFileLineSnippetContext
LOWcoworker/pdf_support.py27logger = logging.getLogger(__name__)CODE
LOWcoworker/selfwake.py194 def set_stopped(self, session_id: str, stopped: bool) -> None:CODE
LOWcoworker/overrides.py109 def set_rule(self, pattern: str, risk: RiskClass | str) -> None:CODE
LOWcoworker/overrides.py144 def set_trust(self, pattern: str) -> None:CODE
LOWcoworker/engine.py69logger = logging.getLogger(__name__)CODE
LOWcoworker/inbox_routing.py82 def set_persona_default(self, persona_id: str, inbox_name: str) -> None:CODE
LOWcoworker/inbox_routing.py87 def set_session_override(self, session_id: str, inbox_name: str) -> None:CODE
LOWcoworker/mentions.py25logger = logging.getLogger(__name__)CODE
LOWcoworker/conversations.py431 def set_spawn(self, session_id: str, spawn: dict) -> None:CODE
LOWcoworker/conversations.py441 def set_team(self, session_id: str, team: dict) -> None:CODE
LOWcoworker/conversations.py461 def set_bindings(self, session_id: str, bindings: dict) -> None:CODE
LOWcoworker/conversations.py472 def set_extra_roots(self, session_id: str, extra_roots: list[dict]) -> None:CODE
LOWcoworker/connectors/gateway.py67 def set_handler(self, handler: MessageHandler) -> None:CODE
LOWcoworker/connectors/github_relay.py106 def set_install(self, installation_id: str, info: dict[str, Any]) -> None:CODE
LOWcoworker/connectors/__init__.py41__all__ = [CODE
LOWcoworker/connectors/base.py165 def set_message_handler(self, handler: MessageHandler) -> None:CODE
LOWcoworker/connectors/base.py168 def set_interaction_handler(self, handler: InteractionHandler) -> None:CODE
LOWcoworker/connectors/adapters.py394 async def update_message(self, chat_id: str, message_id: str, text: str) -> None:CODE
LOWcoworker/tools/__init__.py3__all__ = ["ToolRegistry", "ToolSpec"]CODE
LOWcoworker/memory/__init__.py14__all__ = [CODE
LOWcoworker/tui/__init__.py3__all__ = ["CoworkerApp"]CODE
LOWcoworker/web/__init__.py17__all__ = [CODE
LOWcoworker/providers/__init__.py29__all__ = [CODE
LOWcoworker/providers/codex_auth.py36logger = logging.getLogger(__name__)CODE
LOWcoworker/providers/anthropic_provider.py66logger = logging.getLogger(__name__)CODE
LOWcoworker/agents/__init__.py8__all__ = [CODE
LOWcoworker/server/__init__.py4__all__ = ["create_app", "SessionManager"]CODE
LOWcoworker/mcp/__init__.py19__all__ = [CODE
LOWcoworker/mcp/oauth.py33logger = logging.getLogger(__name__)CODE
LOWcoworker/mcp/oauth.py98 async def set_tokens(self, tokens: OAuthToken) -> None:CODE
LOWcoworker/mcp/oauth.py115 async def set_client_info(self, info: OAuthClientInformationFull) -> None:CODE
LOWcoworker/personas/registry.py351 def set_enabled(self, persona_id: str, enabled: bool) -> None:CODE
LOWcoworker/personas/registry.py362 def set_surfaced(self, persona_id: str, surfaced: bool) -> None:CODE
LOWcoworker/personas/registry.py368 def set_default(self, persona_id: str) -> None:CODE
LOWcoworker/personas/registry.py566def set_registry(registry: PersonaRegistry) -> None:CODE
LOWcoworker/personas/__init__.py14__all__ = [CODE
LOWcoworker/testing/fake_slack/__init__.py10__all__ = ["FakeSlack"]CODE
LOWcoworker/sandbox/setup_job.py50 def _set_row(self, key: str, **changes: Any) -> None:CODE
LOWcoworker/teams/store.py454 def _set_cursor(self, key: str, seq: int) -> None:CODE
LOWcoworker/teams/registry.py117 def set_paused(self, team_id: str, paused: bool) -> None:CODE
LOWcoworker/teams/__init__.py18__all__ = [CODE
LOWcoworker/skills/store.py265 def set_enabled(self, name: str, enabled: bool) -> None:CODE
LOWcoworker/skills/__init__.py10__all__ = [CODE
LOWcoworker/automation/__init__.py10__all__ = [CODE
LOWcoworker/remote/registry.py241 def set_seal_pubkey(self, machine_id: str, seal_pubkey: str) -> None:CODE
LOWcoworker/remote/stores.py53 def set_seal_pubkey(self, machine_id: str, seal_pubkey: str) -> None: ...CODE
LOWcoworker/remote/stores.py109 def update_grant(self, device_code: str, **fields: Any) -> None: ...CODE
LOWcoworker/remote/stores.py183 def update_grant(self, device_code: str, **fields: Any) -> None:CODE
LOWcoworker/remote/audit_export.py244 def set_policy(self, policy: ExportPolicy) -> None:CODE
Cross-File Repetition9 hits · 45 pts
SeverityFileLineSnippetContext
HIGHtests/test_message_source.py0inbound delivery is gated on the connector being connected (§4.3). tests used to pass by riding the developer's real slaSTRING
HIGHtests/test_subscriptions.py0inbound delivery is gated on the connector being connected (§4.3). tests used to pass by riding the developer's real slaSTRING
HIGHtests/test_dm_routing.py0inbound delivery is gated on the connector being connected (§4.3). tests used to pass by riding the developer's real slaSTRING
HIGHcoworker/connectors/accounts.py0the default account email: the stored pointer if it still exists, else the first connected account, else "".STRING
HIGHcoworker/connectors/gmail_accounts.py0the default account email: the stored pointer if it still exists, else the first connected account, else "".STRING
HIGHcoworker/connectors/gcal_accounts.py0the default account email: the stored pointer if it still exists, else the first connected account, else "".STRING
HIGHcoworker/sandbox/providers/seatbelt.py0tests only: what a sandbox restart looks like from the client's side.STRING
HIGHcoworker/sandbox/providers/runner_local.py0tests only: what a sandbox restart looks like from the client's side.STRING
HIGHcoworker/sandbox/providers/windows.py0tests only: what a sandbox restart looks like from the client's side.STRING
AI Slop Vocabulary13 hits · 42 pts
SeverityFileLineSnippetContext
MEDIUMpyproject.toml50# aiohttp is slack-bolt's Socket Mode transport at runtime (and the FakeSlack test harnessCOMMENT
MEDIUM⚡tests/test_shadow_eval.py355 # if the harness passes one. Tag and field must agree in both directions, so a rowCOMMENT
MEDIUMtests/test_shadow_eval.py168# -- harness scoring (scripts/eval_reviewer.py) ----------------------------------COMMENT
MEDIUMtests/test_shadow_eval.py189 # claims to test (the trap that hid until the harness was wired for it).COMMENT
MEDIUM⚡tests/test_worker_connectors.py550 # The harness must resolve a real original action before allowing a proxy.COMMENT
MEDIUMtests/test_headless_run.py380 # A harness whose output contract lives outside the workspace (CyberGym: /output).COMMENT
MEDIUMtests/test_remote_home.py168# -- loopback harness ----------------------------------------------------------COMMENT
MEDIUMtests/test_shell.py195 # (robust to a one-tick gap between chunks). Bounded and cheap —COMMENT
MEDIUMcoworker/connectors/adapters.py178 # slack_sdk's own reconnect stays on in production (seamless on Slack's graceful cycling);COMMENT
MEDIUMcoworker/connectors/adapters.py202 # Base-URL override so tests (and the FakeSlack harness) can redirect every Web APICOMMENT
MEDIUMsurfaces/gui/src/api.ts1188 // bounded per-persona cards. Defaults to "flat" (absent → flat) so the GUI is robust to an olderCOMMENT
MEDIUMsurfaces/gui/src/api.ts1209 // and attach-time thresholds. Optional so the GUI is robust to an older backend.COMMENT
MEDIUMsurfaces/gui/src/api.ts1215 // Optional so the GUI is robust to an older backend.COMMENT
Fake / Example Data28 hits · 29 pts
SeverityFileLineSnippetContext
LOWtests/test_hubspot_portals.py217 "account": "Acme Inc",CODE
LOWtests/test_hubspot_portals.py230 "name": "Acme Inc",CODE
LOW⚡tests/test_codex_provider.py156 assert result == {"ok": True, "account": "user@example.com"}CODE
LOW⚡tests/test_codex_provider.py164 assert profile["account_email"] == "user@example.com"CODE
LOW⚡tests/test_codex_provider.py448 assert result == {"ok": True, "account": "user@example.com"}CODE
LOWtests/test_codex_provider.py51def _id_token(email: str = "user@example.com", account: str = "acct_1") -> str:CODE
LOWtests/test_codex_provider.py136 "id_token": _id_token("user@example.com"),CODE
LOWtests/test_codex_provider.py544 return {"ok": True, "account": "user@example.com"}CODE
LOWcoworker/connectors/descriptors.py32 "placeholder": self.placeholder,CODE
LOWcoworker/connectors/browser_automation.py297 placeholder: el.getAttribute('placeholder') || '',CODE
LOWcoworker/providers/registry.py65 "placeholder": self.placeholder,CODE
LOWui-mocks/voice-input-settings.html119 <div class="placeholder">Ask OpenCoworker anything…</div>CODE
LOWsurfaces/gui/scripts/export-scenario.py47 text = EMAIL.sub("user@example.com", text)CODE
LOWsurfaces/gui/e2e/fixtures.ts564 { hub_id: "111", name: "Acme Inc", sandbox: false },CODE
LOWsurfaces/gui/e2e/provider-keys.spec.ts41 await expect(page.getByTestId("set-field-api_key")).toHaveAttribute("placeholder", "••••••••");CODE
LOWsurfaces/gui/e2e/provider-keys.spec.ts53 await expect(page.getByTestId("set-field-api_key")).toHaveAttribute("placeholder", "••••••••");CODE
LOWsurfaces/gui/e2e/onboarding.spec.ts81 await expect(page.getByTestId("ob-field-api_key")).toHaveAttribute("placeholder", "••••••••");CODE
LOWsurfaces/gui/e2e/hubspot-page.spec.ts35 await expect(page.getByTestId("connector-hubspot")).toContainText("Acme Inc", {CODE
LOWsurfaces/gui/e2e/hubspot-page.spec.ts61 await expect(page.getByTestId("connector-hubspot")).toContainText("Acme Inc", { timeout: 10_000 });CODE
LOWsurfaces/gui/e2e/hubspot-page.spec.ts84 await expect(page.getByTestId("connector-hubspot")).toContainText("Acme Inc", { timeout: 10_000 });CODE
LOWsurfaces/gui/e2e/chat.spec.ts68 "reply OK. " + "lorem ipsum dolor sit amet consectetur ".repeat(60) + tail; // ~2.4k charsCODE
LOWsurfaces/gui/e2e/chat.spec.ts68 "reply OK. " + "lorem ipsum dolor sit amet consectetur ".repeat(60) + tail; // ~2.4k charsCODE
LOWsurfaces/gui/src/locales/zh.json147 "placeholder": "问问同事…",CODE
LOWsurfaces/gui/src/locales/zh.json725 "placeholder": "搜索会话",CODE
LOWsurfaces/gui/src/locales/zh.json798 "placeholder": "registry.npmjs.org",CODE
LOWsurfaces/gui/src/locales/en.json149 "placeholder": "Ask the coworker…",CODE
LOWsurfaces/gui/src/locales/en.json736 "placeholder": "Search chats",CODE
LOWsurfaces/gui/src/locales/en.json810 "placeholder": "registry.npmjs.org",CODE
Modern AI Meta-Vocabulary9 hits · 26 pts
SeverityFileLineSnippetContext
MEDIUMtests/test_autotitle.py156 # agentic turn left the session titled by its first message for the whole run. TheCOMMENT
MEDIUMcoworker/cloud.py554 # guardrails (pacing, uniform 401s, failure auto-suspend) apply.COMMENT
MEDIUMcoworker/engine.py36# downgraded long agentic turns to hand-approval after one over-strict pair).COMMENT
MEDIUMcoworker/engine.py242 # long agentic turn to hand-approval for everything after one over-strict pair.COMMENT
MEDIUMcoworker/compaction.py208# -- mechanical extraction (no LLM — zero hallucination risk) -----------------COMMENT
MEDIUM⚡coworker/server/app.py2577 # Auto-compaction overrides (OPE-27): threshold % of the context window, theCOMMENT
MEDIUMcoworker/server/app.py3115 # a long agentic turn (owner catch 2026-08-24).COMMENT
MEDIUMcoworker/server/manager.py375 # catch 2026-08-24 — waiting for an agentic turn to COMPLETE left sessionsCOMMENT
MEDIUMcoworker/server/manager.py4759 # {full id → context window in tokens}, verified matrix entries only —COMMENT
Synthetic Comment Markers3 hits · 15 pts
SeverityFileLineSnippetContext
HIGHsurfaces/gui/src/gallery/states.contract.json10372 "note": "Two workers for issue #3, as requested: nia implements the api/ + web/ fix, checks independently provCODE
HIGHsurfaces/gui/src/gallery/states.contract.json12219 "note": "Two workers for issue #3, as requested: nia implements the api/ + web/ fix, checks independently prCODE
HIGHsurfaces/gui/src/gallery/states/team-request.ts210 note: "Two workers for issue #3, as requested: nia implements the api/ + web/ fix, checks independently proves theCODE
AI Structural Patterns12 hits · 10 pts
SeverityFileLineSnippetContext
LOWtests/test_configured_spawn.py17CODE
LOWcoworker/engine.py125CODE
LOWcoworker/agent.py224CODE
LOWcoworker/inbox.py137CODE
LOWcoworker/inbox.py215CODE
LOWcoworker/connectors/email_tools.py421CODE
LOWcoworker/tui/app.py81CODE
LOWcoworker/providers/vertex_provider.py76CODE
LOWcoworker/providers/bedrock_provider.py477CODE
LOWcoworker/server/manager.py786CODE
LOWcoworker/sandbox/workspace.py363CODE
LOWcoworker/remote/acceptor.py193CODE
AI Response Leakage1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHcoworker/server/manager.py8510 # "I've updated what I remember" and Undo restores this text.COMMENT
Decorative Section Separators2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMtests/test_conversations_repair.py21# ── helpers ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/test_conversations_repair.py41# ── tests ────────────────────────────────────────────────────────────────────COMMENT
Overly Generic Function Names4 hits · 4 pts
SeverityFileLineSnippetContext
LOWtests/test_model_config.py119 def handle_request(self, request):CODE
LOWtests/test_ollama_context.py96 def handle_request(self, request: httpx.Request) -> httpx.Response:CODE
LOWcoworker/providers/ollama_context.py153 def handle_request(self, request: httpx.Request) -> httpx.Response:CODE
LOW⚡coworker/automation/scheduler.py103 async def run_task(self, task: ScheduledTask, *, trigger: str) -> Optional[TaskRun]:CODE
Verbosity Indicators3 hits · 4 pts
SeverityFileLineSnippetContext
LOWsurfaces/gui/e2e/ask-upgrades.spec.ts125 // Step 1: "Chart style · 1 of 2 · Distribution ›" — and no free-text row (allow_text: false).COMMENT
LOWsurfaces/gui/src/components/models/PickModelDialog.tsx85 // Step 2: the models the chosen provider offers. Also read when the dialog opens onCOMMENT
LOWsurfaces/gui/src/components/models/PickModelDialog.tsx107 // Step 3: the settings in force for the chosen model.COMMENT
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMtests/test_base_dir.py66 # Creating a new folder outside is refused before anything is made.COMMENT
Structural Annotation Overuse2 hits · 3 pts
SeverityFileLineSnippetContext
LOWsurfaces/gui/src/components/models/PickModelDialog.tsx85 // Step 2: the models the chosen provider offers. Also read when the dialog opens onCOMMENT
LOWsurfaces/gui/src/components/models/PickModelDialog.tsx107 // Step 3: the settings in force for the chosen model.COMMENT