Repository Analysis

anthropics/claude-code

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

10.9 Low AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of anthropics/claude-code, a Python project with 137,755 GitHub stars. SynthScan v2.0 examined 45,879 lines of code across 199 source files, recording 320 pattern matches distributed across 13 syntactic categories. The overall adjusted score of 10.9 places this repository in the Low AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

10.9
Adjusted Score
10.9
Raw Score
100%
Time Factor
2026-07-14
Last Push
137.8K
Stars
Python
Language
45.9K
Lines of Code
199
Files
320
Pattern Hits
2026-07-14
Scan Date
0.04
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 8MEDIUM 89LOW 223

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 320 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Decorative Section Separators56 hits · 182 pts
SeverityFileLineSnippetContext
MEDIUM…/learning-output-style/hooks-handlers/session-start.sh10 "additionalContext": "You are in 'learning' output style mode, which combines interactive learning with educational CODE
MEDIUMplugins/security-guidance/hooks/_base.py85# ──────────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py228# =====================================================================COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py230# =====================================================================COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py378# =====================================================================COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py380# =====================================================================COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py382# =====================================================================COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py384# =====================================================================COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py442# =====================================================================COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py444# =====================================================================COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py310# =====================================================================COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py319# =====================================================================COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py612# ─── push-sweep ─────────────────────────────────────────────────────────────COMMENT
MEDIUMplugins/security-guidance/hooks/patterns.py154 # =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/patterns.py156 # =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/diffstate.py21# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/diffstate.py23# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/diffstate.py39# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/diffstate.py41# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/diffstate.py207# ─── push-sweep reviewed-commit tracking ────────────────────────────────────COMMENT
MEDIUMplugins/security-guidance/hooks/diffstate.py223# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/diffstate.py225# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/diffstate.py227# ─── push-sweep reviewed-commit tracking ────────────────────────────────────COMMENT
MEDIUMplugins/security-guidance/hooks/diffstate.py312# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/diffstate.py314# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/review_api.py23# ---------------------------------------------------------------------------COMMENT
MEDIUMplugins/security-guidance/hooks/review_api.py25# ---------------------------------------------------------------------------COMMENT
MEDIUMplugins/security-guidance/hooks/review_api.py67# ---------------------------------------------------------------------------COMMENT
MEDIUMplugins/security-guidance/hooks/review_api.py69# ---------------------------------------------------------------------------COMMENT
MEDIUMplugins/security-guidance/hooks/review_api.py179# ---------------------------------------------------------------------------COMMENT
MEDIUMplugins/security-guidance/hooks/review_api.py181# ---------------------------------------------------------------------------COMMENT
MEDIUMplugins/security-guidance/hooks/review_api.py286# ---------------------------------------------------------------------------COMMENT
MEDIUMplugins/security-guidance/hooks/review_api.py288# ---------------------------------------------------------------------------COMMENT
MEDIUMplugins/security-guidance/hooks/llm.py78# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/llm.py80# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/llm.py144# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/llm.py146# =====================================================================COMMENT
MEDIUMplugins/security-guidance/hooks/llm.py243# ── 3rd-party provider routing (Bedrock / Vertex / Foundry / Mantle) ─────COMMENT
MEDIUMplugins/security-guidance/hooks/extensibility.py43# ── caps ─────────────────────────────────────────────────────────────────────COMMENT
MEDIUMplugins/security-guidance/hooks/extensibility.py57# ── public API ───────────────────────────────────────────────────────────────COMMENT
MEDIUMplugins/security-guidance/hooks/extensibility.py89# ── claude-security-guidance.md ───────────────────────────────────────────────────────COMMENT
MEDIUMplugins/security-guidance/hooks/extensibility.py144# ── security-patterns.{yaml,json} ────────────────────────────────────────────COMMENT
MEDIUM…planatory-output-style/hooks-handlers/session-start.sh10 "additionalContext": "You are in 'explanatory' output style mode, where you should provide educational insights abouCODE
MEDIUMexamples/gateway/gcp/terraform/main.tf24# ── 1 Project & API setup ───────────────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/main.tf34# ── 2 Service account & IAM (least-privilege) ───────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/main.tf57# ── 3 Artifact Registry repo ────────────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/main.tf68# ── 4 VPC + Private Services Access ──────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/main.tf106# ── 4 Cloud SQL (private IP only) ───────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/main.tf150# ── 5/6 Secrets + secretAccessor ────────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/main.tf273# ── 7 Cloud Run (Direct VPC egress) ─────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/variables.tf14# ── Service account (§2) ────────────────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/variables.tf21# ── Image (§3) ──────────────────────────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/variables.tf45# ── Networking (§4) ─────────────────────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/variables.tf70# ── Cloud SQL (§4) ──────────────────────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/variables.tf101# ── Secrets (§5 / §6) ─────────────────────────────────────────────────────COMMENT
MEDIUMexamples/gateway/gcp/terraform/variables.tf139# ── Cloud Run (§7) ──────────────────────────────────────────────────────────COMMENT
Structural Annotation Overuse38 hits · 63 pts
SeverityFileLineSnippetContext
LOW…s/command-development/references/advanced-workflows.md24## Step 1: Fetch PR DetailsCOMMENT
LOW…s/command-development/references/advanced-workflows.md27## Step 2: Review FilesCOMMENT
LOW…s/command-development/references/advanced-workflows.md35## Step 3: Run ChecksCOMMENT
LOW…s/command-development/references/advanced-workflows.md43## Step 4: Provide FeedbackCOMMENT
LOW…s/command-development/references/advanced-workflows.md216## Step 1: Get test resultsCOMMENT
LOW…s/command-development/references/advanced-workflows.md221## Step 2: Categorize failuresCOMMENT
LOW…s/command-development/references/advanced-workflows.md226## Step 3: PrioritizeCOMMENT
LOW…s/command-development/references/advanced-workflows.md232## Step 4: Generate fix planCOMMENT
LOW…s/command-development/references/advanced-workflows.md530## Step 1: TestsCOMMENT
LOW…s/command-development/references/advanced-workflows.md546## Step 2: BuildCOMMENT
LOW…command-development/references/interactive-commands.md82## Step 1: Gather ConfigurationCOMMENT
LOW…command-development/references/interactive-commands.md113## Step 2: Process AnswersCOMMENT
LOW…command-development/references/interactive-commands.md122## Step 3: Generate ConfigurationCOMMENT
LOW…command-development/references/interactive-commands.md144## Step 4: Confirm and Next StepsCOMMENT
LOWplugins/plugin-dev/skills/skill-development/SKILL.md91### Step 1: Understanding the Skill with Concrete ExamplesCOMMENT
LOWplugins/plugin-dev/skills/skill-development/SKILL.md108### Step 2: Planning the Reusable Skill ContentsCOMMENT
LOWplugins/plugin-dev/skills/skill-development/SKILL.md137### Step 3: Create Skill StructureCOMMENT
LOWplugins/plugin-dev/skills/skill-development/SKILL.md148### Step 4: Edit the SkillCOMMENT
LOWplugins/plugin-dev/skills/skill-development/SKILL.md212### Step 5: Validate and TestCOMMENT
LOWplugins/plugin-dev/skills/skill-development/SKILL.md232### Step 6: IterateCOMMENT
LOW…skill-development/references/skill-creator-original.md91### Step 1: Understanding the Skill with Concrete ExamplesCOMMENT
LOW…skill-development/references/skill-creator-original.md108### Step 2: Planning the Reusable Skill ContentsCOMMENT
LOW…skill-development/references/skill-creator-original.md132### Step 3: Initializing the SkillCOMMENT
LOW…skill-development/references/skill-creator-original.md155### Step 4: Edit the SkillCOMMENT
LOW…skill-development/references/skill-creator-original.md175### Step 5: Packaging a SkillCOMMENT
LOW…skill-development/references/skill-creator-original.md201### Step 6: IterateCOMMENT
LOW…ls/plugin-settings/examples/create-settings-command.md12### Step 1: Ask User for PreferencesCOMMENT
LOW…ls/plugin-settings/examples/create-settings-command.md57### Step 2: Parse AnswersCOMMENT
LOW…ls/plugin-settings/examples/create-settings-command.md64### Step 3: Create Settings FileCOMMENT
LOW…ls/plugin-settings/examples/create-settings-command.md83### Step 4: Inform UserCOMMENT
LOW…ls/agent-development/examples/agent-creation-prompt.md7### Step 1: Describe Your Agent NeedCOMMENT
LOW…ls/agent-development/examples/agent-creation-prompt.md15### Step 2: Use the Generation PromptCOMMENT
LOW…ls/agent-development/examples/agent-creation-prompt.md27### Step 3: Claude Returns JSONCOMMENT
LOW…ls/agent-development/examples/agent-creation-prompt.md39### Step 4: Convert to Agent FileCOMMENT
LOWplugins/hookify/commands/hookify.md17### Step 1: Gather Behavior InformationCOMMENT
LOWplugins/hookify/commands/hookify.md60### Step 2: Present Findings to UserCOMMENT
LOWplugins/hookify/commands/hookify.md82### Step 3: Generate Rule FilesCOMMENT
LOWplugins/hookify/commands/hookify.md126### Step 4: Create Files and ConfirmCOMMENT
Modern AI Meta-Vocabulary21 hits · 62 pts
SeverityFileLineSnippetContext
MEDIUMfeed.xml225<p>• Changed /review <pr> back to a fast single-pass review; use /code-review <level> CODE
MEDIUMCHANGELOG.md197- Changed `/review <pr>` back to a fast single-pass review; use `/code-review <level> <pr#>` for the multi-agent review CODE
MEDIUMplugins/plugin-dev/skills/plugin-settings/SKILL.md426### multi-agent-swarm PluginCOMMENT
MEDIUM…ills/plugin-settings/references/real-world-examples.md5## multi-agent-swarm PluginCOMMENT
MEDIUM…ev/skills/plugin-structure/examples/advanced-plugin.md225### agents/orchestration/deployment-orchestrator.mdCOMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py1290 # `agentic` = which path produced the result, not which was attempted.COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py1291 # On race-loss the _fallback() metrics dict has agentic=False — emittingCOMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py1293 # `agentic=true` queries and overstates agentic yield.COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py1300 # 1 = agentic won, 2 = single-shot fallback won. review_ms alreadyCOMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py73# review_api is the importable surface for the agentic-review prompts,COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py74# schemas, and pure filters. External callers (e.g. agentic review harnesses)COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py155# Lets multi-agent / shared-worktree deployments keep the commit reviewerCOMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py878 return # agentic finished within the delay — never start fallbackCODE
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py1237 # Fall back to single-shot only on agentic FAILURE (SDK/investigateCOMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py1238 # crash). If agentic completed and returned 0 findings, trust that.COMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py1629 # Metrics — keep within the 10-key cap; agentic sub-metrics are droppedCOMMENT
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py1631 # to the per-commit fires for agentic detail). rewake_summary must rideCOMMENT
MEDIUMplugins/security-guidance/hooks/gitutil.py483# single-shot and agentic reviews disagree on most (auth, routing, IPC,COMMENT
MEDIUMplugins/security-guidance/hooks/llm.py296 # the agentic path to have run first.COMMENT
MEDIUMplugins/security-guidance/hooks/llm.py1036 # core.pager, core.sshCommand, or an inherited GIT_* var. The agenticCOMMENT
MEDIUMplugins/security-guidance/hooks/llm.py1253 # cause of agentic fallbacks in remote sessions. Clearing themCOMMENT
Excessive Try-Catch Wrapping42 hits · 48 pts
SeverityFileLineSnippetContext
LOWplugins/security-guidance/hooks/_base.py52 except Exception:CODE
LOWplugins/security-guidance/hooks/_base.py78 except Exception:CODE
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py339def _sweep(state):CODE
MEDIUM…gins/security-guidance/hooks/security_reminder_hook.py865def _agentic() -> None:CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py371 except Exception as e:CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py868 except Exception as e: # pragma: no cover — crash → let fallback winCODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py884 except Exception as e: # pragma: no coverCODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py399 except Exception:CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py408 except Exception:CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py421 except Exception:CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py1264 except Exception:CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py2016 except Exception:CODE
LOWplugins/security-guidance/hooks/session_state.py84 except Exception:CODE
LOWplugins/security-guidance/hooks/ensure_agent_sdk.py41 except Exception:CODE
LOWplugins/security-guidance/hooks/ensure_agent_sdk.py53 except Exception:CODE
LOWplugins/security-guidance/hooks/ensure_agent_sdk.py103 except Exception:CODE
LOWplugins/security-guidance/hooks/ensure_agent_sdk.py177 except Exception as e:CODE
LOWplugins/security-guidance/hooks/ensure_agent_sdk.py199 except Exception as exc:CODE
MEDIUMplugins/security-guidance/hooks/llm.py1194def _tolerant(data):CODE
LOWplugins/security-guidance/hooks/llm.py1115 except Exception as e: # ImportError or transitive failureCODE
LOWplugins/security-guidance/hooks/llm.py293 except Exception:CODE
LOWplugins/security-guidance/hooks/llm.py315 except Exception as e:CODE
LOWplugins/security-guidance/hooks/llm.py376 except Exception as e:CODE
LOWplugins/security-guidance/hooks/llm.py1086 except Exception:CODE
LOWplugins/security-guidance/hooks/llm.py1197 except Exception:CODE
LOWplugins/security-guidance/hooks/llm.py1202 except Exception:CODE
LOWplugins/security-guidance/hooks/llm.py1310 except Exception as e:CODE
LOWplugins/security-guidance/hooks/llm.py1377 except Exception:CODE
LOWplugins/security-guidance/hooks/llm.py1545 except Exception:CODE
LOWplugins/security-guidance/hooks/extensibility.py69 except Exception as e:CODE
LOWplugins/security-guidance/hooks/extensibility.py74 except Exception as e:CODE
LOWplugins/hookify/core/config_loader.py236 except Exception as e:CODE
MEDIUMplugins/hookify/core/config_loader.py264 print(f"Error: Cannot read {file_path}: {e}", file=sys.stderr)CODE
MEDIUMplugins/hookify/core/config_loader.py267 print(f"Error: Malformed rule file {file_path}: {e}", file=sys.stderr)CODE
MEDIUMplugins/hookify/core/config_loader.py270 print(f"Error: Invalid encoding in {file_path}: {e}", file=sys.stderr)CODE
LOWplugins/hookify/core/config_loader.py272 except Exception as e:CODE
MEDIUMplugins/hookify/core/config_loader.py273 print(f"Error: Unexpected error parsing {file_path} ({type(e).__name__}): {e}", file=sys.stderr)CODE
LOWplugins/hookify/hooks/userpromptsubmit.py46 except Exception as e:CODE
LOWplugins/hookify/hooks/stop.py46 except Exception as e:CODE
LOWplugins/hookify/hooks/pretooluse.py61 except Exception as e:CODE
LOWplugins/hookify/hooks/posttooluse.py54 except Exception as e:CODE
MEDIUMexamples/hooks/bash_command_validator_example.py60 print(f"Error: Invalid JSON input: {e}", file=sys.stderr)CODE
Unused Imports71 hits · 37 pts
SeverityFileLineSnippetContext
LOW…gins/security-guidance/hooks/security_reminder_hook.py59CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py60CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py67CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py68CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py69CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py70CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py79CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py80CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py80CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py80CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py80CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py80CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py80CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py80CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py80CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py87CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py87CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py87CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py87CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py87CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py87CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py87CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py93CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py93CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py93CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py93CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py93CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py97CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py111CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py111CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py111CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py111CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py111CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py111CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py111CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py121CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py121CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py121CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py121CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py121CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py121CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py121CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py121CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py121CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py121CODE
11 more matches not shown…
Over-Commented Block32 hits · 22 pts
SeverityFileLineSnippetContext
LOWplugins/security-guidance/hooks/_base.py81COMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py141# Empty string or unset = enabled (default); "0" = disabledCOMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py301 return False, len(ts_list)COMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py481 # touched_paths is still populated because consume_stop_state is the onlyCOMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py581 re.compile(r'^ delete mode ', re.MULTILINE),COMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py601# docstring for the rationale that motivated the switch from a lifetime cap.COMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py621# `gh pr create` is intentionally NOT a separate hooks.json matcher: gh runsCOMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py941 commit_succeeded = (COMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py1021 debug_log("Commit review: not in a git repo")COMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py1041 # Output-based detection already failed above; the reflog SHAs are theCOMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py1061 _base = {**_base, "sha_via_reflog": True,COMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py1081 # already populates `shas` with every fresh commit (amend + anyCOMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py1261 if r.returncode == 0:COMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py1441 # `git fetch && git push` produces fetch range lines that the regex wouldCOMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py1561 sys.exit(0)COMMENT
LOW…gins/security-guidance/hooks/security_reminder_hook.py2081 #COMMENT
LOWplugins/security-guidance/hooks/diffstate.py21# =====================================================================COMMENT
LOWplugins/security-guidance/hooks/diffstate.py201 return sha if sha else NoneCOMMENT
LOWplugins/security-guidance/hooks/diffstate.py221COMMENT
LOWplugins/security-guidance/hooks/gitutil.py441COMMENT
LOWplugins/security-guidance/hooks/gitutil.py561 if ext in SOURCE_CODE_EXTENSIONS:COMMENT
LOWplugins/security-guidance/hooks/ensure_agent_sdk.py201 BUILD_FAILED, "main", f"exc:{type(exc).__name__}"COMMENT
LOWplugins/security-guidance/hooks/llm.py61# interruptive review surfaces — false positives are the dominant uninstallCOMMENT
LOWplugins/security-guidance/hooks/llm.py1161 # CLAUDE_CODE_EXECPATH is the absolute path to the running CC binaryCOMMENT
LOWplugins/security-guidance/hooks/llm.py1221 # a write/exec tool to allowed_tools is caught by the gate.COMMENT
LOWplugins/security-guidance/hooks/llm.py1241 # OAuth token) injected by Claude Code. The SDK builds the childCOMMENT
LOWplugins/security-guidance/hooks/llm.py1321 # before refute drops most real findings; the eval-validated config keepsCOMMENT
LOWplugins/security-guidance/hooks/sg-python.sh1#!/usr/bin/env bashCOMMENT
LOWexamples/gateway/gcp/setup.sh1#!/usr/bin/env bashCOMMENT
LOWexamples/gateway/gcp/setup.sh381 --data-file="${GATEWAY_YAML}" --project="${PROJECT_ID}"COMMENT
LOWexamples/gateway/gcp/setup.sh421 SECRET_MOUNTS="/etc/claude/gateway.yaml=${CONFIG_SECRET}:latest" # file mount (alone in /etc/claude)COMMENT
LOWexamples/gateway/gcp/terraform/main.tf41COMMENT
Cross-Language Confusion7 hits · 21 pts
SeverityFileLineSnippetContext
HIGH…gins/security-guidance/hooks/security_reminder_hook.py525 cross-repo case (`cd ../other && git commit --amend && cd -`) whereSTRING
HIGH…gins/security-guidance/hooks/security_reminder_hook.py649 `git commit -m x && git push` matches both `Bash(git commit:*)` andSTRING
HIGH…gins/security-guidance/hooks/security_reminder_hook.py751 that ran *before* the push, e.g. `git fetch && git push`), and end atSTRING
HIGH…gins/security-guidance/hooks/security_reminder_hook.py753 *after* the push, e.g. `git push && git fetch`).STRING
HIGHplugins/security-guidance/hooks/gitutil.py238 pushed the success line off — `git commit && git push` makes HEAD@{0}STRING
HIGHplugins/security-guidance/hooks/gitutil.py244 - cross-repo (`cd ../other && git commit`): repo_root's own reflog hasSTRING
HIGHplugins/security-guidance/hooks/ensure_agent_sdk.py209 # null). Stay inside the 10-key emit cap.COMMENT
AI Slop Vocabulary4 hits · 16 pts
SeverityFileLineSnippetContext
MEDIUM…gin-dev/skills/hook-development/scripts/hook-linter.sh3# Checks hook scripts for common issues and best practicesCOMMENT
MEDIUMplugins/security-guidance/hooks/ensure_agent_sdk.py190 # Tell the harness this is async — venv create + pip install can takeCOMMENT
MEDIUMplugins/security-guidance/hooks/llm.py1125 # eval harness it's a temp dir with ONLY touched_paths — the agent can'tCOMMENT
MEDIUMplugins/security-guidance/hooks/llm.py1126 # trace cross-file data flow. The harness sets SG_AGENTIC_CONTEXT_DIR to aCOMMENT
Hyper-Verbose Identifiers20 hits · 16 pts
SeverityFileLineSnippetContext
LOW…gins/security-guidance/hooks/security_reminder_hook.py237def atomic_check_and_mark_warning(session_id, warning_key):CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py446def handle_user_prompt_submit(input_data):CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py429def extract_content_from_input(tool_name, tool_input):CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py832def _agentic_review_with_race(CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py901def handle_commit_review_posttooluse(input_data):CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py1378def handle_push_sweep_posttooluse(input_data):CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py1979def _maybe_bootstrap_agent_sdk_async():CODE
LOWplugins/security-guidance/hooks/diffstate.py116def restore_unreviewed_stop_state(session_id, paths, baseline_sha):CODE
LOWplugins/security-guidance/hooks/diffstate.py140def get_baseline_file_content(session_id, file_path, cwd):CODE
LOWplugins/security-guidance/hooks/diffstate.py390 def _unchanged_since_baseline(p):CODE
LOWplugins/security-guidance/hooks/gitutil.py227def _git_reflog_recent_commits(repo_root, max_age_s=120, max_n=5):CODE
LOWplugins/security-guidance/hooks/gitutil.py587def extract_file_paths_from_diff(diff_output):CODE
LOWplugins/security-guidance/hooks/gitutil.py657def filter_preexisting_from_diff(diff_files, cwd, baseline_sha):CODE
LOWplugins/security-guidance/hooks/llm.py113def _strip_anthropic_from_no_proxy() -> None:CODE
LOWplugins/security-guidance/hooks/llm.py122def ensure_anthropic_reachable() -> bool:CODE
LOWplugins/security-guidance/hooks/llm.py226def _model_supports_adaptive_thinking(model: str) -> bool:CODE
LOWplugins/security-guidance/hooks/llm.py982def _agentic_commit_review_enabled() -> bool:CODE
LOWplugins/security-guidance/hooks/llm.py1570def analyze_security_concerns(files: List[Tuple[str, str]], is_diff: bool = False) -> Optional[str]:CODE
LOWscripts/auto-close-duplicates.ts49function extractDuplicateIssueNumber(commentBody: string): number | null {CODE
LOWscripts/backfill-duplicate-comments.ts72async function backfillDuplicateComments(): Promise<void> {CODE
Deep Nesting20 hits · 16 pts
SeverityFileLineSnippetContext
LOW…gins/security-guidance/hooks/security_reminder_hook.py332CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py386CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py429CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py646CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py1378CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py2019CODE
LOW…gins/security-guidance/hooks/security_reminder_hook.py339CODE
LOWplugins/security-guidance/hooks/session_state.py49CODE
LOWplugins/security-guidance/hooks/diffstate.py250CODE
LOWplugins/security-guidance/hooks/diffstate.py267CODE
LOWplugins/security-guidance/hooks/gitutil.py330CODE
LOWplugins/security-guidance/hooks/gitutil.py657CODE
LOWplugins/security-guidance/hooks/ensure_agent_sdk.py57CODE
LOWplugins/security-guidance/hooks/llm.py1059CODE
LOWplugins/security-guidance/hooks/extensibility.py147CODE
LOWplugins/security-guidance/hooks/extensibility.py272CODE
LOWplugins/hookify/core/config_loader.py87CODE
LOWplugins/hookify/core/config_loader.py198CODE
LOWplugins/hookify/core/rule_engine.py144CODE
LOWplugins/hookify/core/rule_engine.py182CODE
Redundant / Tautological Comments7 hits · 10 pts
SeverityFileLineSnippetContext
LOW…n-dev/skills/hook-development/examples/load-context.sh17 # Check if TypeScriptCOMMENT
LOW…kills/hook-development/scripts/validate-hook-schema.sh123 # Check if prompt-based hooks are used on supported eventsCOMMENT
LOWplugins/ralph-wiggum/hooks/stop-hook.sh12# Check if ralph-loop is activeCOMMENT
LOWplugins/ralph-wiggum/hooks/stop-hook.sh50# Check if max iterations reachedCOMMENT
LOWplugins/ralph-wiggum/hooks/stop-hook.sh97# Check if jq succeededCOMMENT
LOWplugins/security-guidance/hooks/diffstate.py177 # Check if HEAD exists (i.e., repo has at least one commit)COMMENT
LOWplugins/hookify/core/config_loader.py163 # Check if this is an inline dict (key: value on same line)COMMENT
AI Response Leakage1 hit · 5 pts
SeverityFileLineSnippetContext
HIGH…gins/pr-review-toolkit/agents/silent-failure-hunter.md3description: Use this agent when reviewing code changes in a pull request to identify silent failures, inadequate error CODE
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOWscripts/gh.sh7# Usage:COMMENT