3.2

Adjusted Signal

3.2

Raw Pattern Score

100%

Time Factor

2026-11-01

Last Push

5.9K

Stars

TypeScript

Language

1.7M

Lines of Code

4.5K

Files

5.1K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 14.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 4948 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 34 finding(s).

Agent Over-Engineering Ratio 13.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 4667 finding(s).

PR Review Velocity Impact 14.7/100 · LOW

Which changes need focused human review? 5062 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 8HIGH 10MEDIUM 84LOW 4960

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 5062 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers4587 hits · 4684 pts

Severity	File	Line	Snippet	Context
LOW	docs/archive/2026-06-24-runtime-ledger-backfill.md	411	export function backfillRuntimeEventsFromStoredMessages(input: RuntimeEventBackfillInput): RuntimeEventBackfillResult {	CODE
LOW	packages/ui/stories/toast.stories.tsx	162	function DestructiveConfirmExample() {	CODE
LOW	packages/ui/src/listed-selection.ts	66	export function listedSelectionMasterState(	CODE
LOW	packages/ui/src/composer-helpers.ts	56	export function deriveComposerModelSwitchAvailability(input: {	CODE
LOW	packages/ui/src/composer-helpers.ts	139	export function rememberComposerHistoryEntry(entries: string[], text: string): string[] {	CODE
LOW	packages/ui/src/composer-message-queue.tsx	59	export function projectComposerMessageQueue(	CODE
LOW	packages/ui/src/chat-turn.tsx	915	function splitTimelineAtUserMessages(	CODE
LOW	packages/ui/src/chat-turn.tsx	1248	export function ModelProviderRetryIndicator(props: { retry: LiveProviderRetry }) {	CODE
LOW	packages/ui/src/form-interaction-prompt.tsx	54	function ActiveFormInteractionPrompt(props: {	CODE
LOW	packages/ui/src/sidebar-update-projection-context.ts	41	export function useSidebarUpdateProjection(): SidebarUpdateProjection {	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	131	export function compareScheduledTaskBySort(a: ScheduledTask, b: ScheduledTask, sort: 'created-desc' \| 'next-run-asc' \| '	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	141	function scheduledTaskStatusDisplayRank(task: ScheduledTask): number {	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	148	function scheduledTaskNextRunSortValue(task: ScheduledTask): number {	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	152	function scheduledTaskLastRunSortValue(task: ScheduledTask): number {	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	156	export function normalizeScheduledTaskSearchQuery(query: string): string {	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	160	export function scheduledTaskMatchesSearch(task: ScheduledTask, query: string, locale: UiLocale): boolean {	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	176	export function scheduledTaskStatusGroupLabel(status: ScheduledTaskStatus, locale: UiLocale): string {	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	184	export function scheduledTaskRunRangeStart(range: 'day' \| 'week' \| 'month' \| 'all', now: number): number \| null {	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	194	export function scheduledTaskEditableRunAt(task: ScheduledTask, now: number = Date.now()): number {	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	204	export function scheduledTaskRecurrenceValue(task: ScheduledTask): ScheduledTaskRecurrence {	CODE
LOW⚡	packages/ui/src/scheduled-task-helpers.ts	212	export function duplicateScheduledTaskTitle(title: string, locale: UiLocale): string {	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	62	export function toScheduledTaskLocalDateTimeValue(ts: number): string {	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	68	export function scheduledTaskTemplateNextRunAt(template: ScheduledTaskExampleTemplate, now: number = Date.now()): number	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	84	export function scheduledTaskFormValidation(input: {	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	115	export function formatScheduledTaskDeliveryProviderList(): string {	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	119	export function compareScheduledTaskForDisplay(a: ScheduledTask, b: ScheduledTask, locale: UiLocale): number {	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	251	export function formatScheduledTaskRecurrence(task: ScheduledTask, locale: UiLocale): string {	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	263	export function formatScheduledTaskDeliveryTargetLabel(effect: ScheduledTaskEffect, locale: UiLocale): string {	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	295	export function scheduledTaskScheduleFromForm(seed: ScheduledTaskFormSeed, input: {	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	346	export function createScheduledTaskFormSeed(now: number = Date.now()): ScheduledTaskFormSeed {	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	361	export function scheduledTaskTemplateSeed(template: ScheduledTaskExampleTemplate, now: number = Date.now()): ScheduledTa	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	372	function scheduledTaskFormSeedFromTask(task: ScheduledTask): ScheduledTaskFormSeed {	CODE
LOW	packages/ui/src/scheduled-task-helpers.ts	396	export function scheduledTaskDuplicateSeed(task: ScheduledTask, locale: UiLocale): ScheduledTaskFormSeed {	CODE
LOW	packages/ui/src/executor-model-presentation.ts	28	export function highestExecutorModelVariant(group: ExecutorModelGroup): string \| undefined {	CODE
LOW	packages/ui/src/markdown-image-source.ts	30	export function createMarkdownImageSourceResolver(text: string): (source: string) => string {	CODE
LOW⚡	packages/ui/src/user-question-prompt-state.ts	42	export function createUserQuestionWizardState(questions: readonly UserQuestion[]): UserQuestionWizardState {	CODE
LOW⚡	packages/ui/src/user-question-prompt-state.ts	50	export function readUserQuestionWizardState(requestId: string): UserQuestionWizardState \| undefined {	CODE
LOW⚡	packages/ui/src/user-question-prompt-state.ts	60	export function rememberUserQuestionWizardState(requestId: string, state: UserQuestionWizardState): void {	CODE
LOW	packages/ui/src/user-question-prompt-state.ts	75	export function clearUserQuestionWizardState(requestId: string): void {	CODE
LOW	packages/ui/src/user-question-prompt-state.ts	79	export function buildUserQuestionResponse(	CODE
LOW	packages/ui/src/streaming-display-redaction.ts	75	export function createStreamingDisplayRedactionState(	CODE
LOW	packages/ui/src/streaming-display-redaction.ts	98	export function appendStreamingDisplayRedaction(	CODE
LOW	packages/ui/src/streaming-display-redaction.ts	206	export function copyStreamingDisplayRedactionState(	CODE
LOW	packages/ui/src/streaming-display-redaction.ts	226	export function truncateStreamingDisplayTail(	CODE
LOW	packages/ui/src/titlebar-session-identity.tsx	207	export function deriveTitlebarProjectName(options: {	CODE
LOW	packages/ui/src/message-summary.tsx	32	function CollapsibleMessageSummary({ summary, children }: { summary: string; children: ReactNode }) {	CODE
LOW	packages/ui/src/attachment-image.tsx	46	export function SessionAttachmentProvider(props: {	CODE
LOW	packages/ui/src/chat-view.tsx	1226	function useTurnsHoldingInteraction(scrollRef: RefObject<HTMLElement \| null>): {	CODE
LOW	packages/ui/src/use-message-selection-quote.ts	62	export function preservesNativeSelectionScroll(	CODE
LOW	packages/ui/src/markdown-image.tsx	35	export function createMarkdownImagePlugins(	CODE
LOW	packages/ui/src/live-turn-projection.ts	129	function projectToolActivityIdentity(event: {	CODE
LOW	packages/ui/src/live-turn-projection.ts	593	export function reconcileTerminalLiveTurn(	CODE
LOW	packages/ui/src/utils.ts	38	export function preferredShortcutPlatform(	CODE
LOW	packages/ui/src/skill-status.ts	42	function hasManagedUpdateAttention(skill: SkillEntry): boolean {	CODE
LOW	packages/ui/src/skill-status.ts	76	export function skillExceptionalStateLabel(skill: SkillEntry, copy: SkillsCopy): string \| null {	CODE
LOW	packages/ui/src/skill-status.ts	102	export function formatSkillLibraryDescription(skill: SkillEntry, copy: SkillsCopy): string \| undefined {	CODE
LOW	packages/ui/src/chat-input-behavior.ts	89	export function fileTransferContainsFiles(types: Iterable<string>, fileCount: number): boolean {	CODE
LOW	packages/ui/src/materialize.ts	236	function materializeToolResultStatus(	CODE
LOW	packages/ui/src/materialize.ts	659	export function applyShellRunOverlayEntry(	CODE
LOW	packages/ui/src/materialize.ts	680	export function toolActivityPresentationStatus(item: ToolActivityItem): ToolActivityStatus {	CODE
4527 more matches not shown…

Over-Commented Block330 hits · 325 pts

Severity	File	Line	Snippet	Context
LOW	.asf.yaml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	.asf.yaml	61	required_approving_review_count: 1	COMMENT
LOW	deny.toml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	.pr_agent.toml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	.coderabbit.yaml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	native/runtime-host-windows-task-launcher/Cargo.toml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	native/runtime-host-peer/Cargo.toml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	native/runtime-host-peer/rust-toolchain.toml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	native/gitoxide-helper/Cargo.toml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	native/gitoxide-helper/rust-toolchain.toml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	experiments/windows-sandbox/launcher/Cargo.toml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	181	std::mem::forget(profile);	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	201	/// AppContainer-confined and Job-accounted, and that exits cleanly, fails	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	221	// the lifecycle never runs unlocked.	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	261	// returns an error, so availability fails closed for this cycle. The	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	461	// descendant may still hold this AppContainer identity), so it is surfaced	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	581	}	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	621	}	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	681	\| DESKTOP_ENUMERATE;	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	701	/// plus any hidden windows/menus the child creates, so 512 KiB (a sixth of the	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	761	/// off the interactive desktop, so code that never re-attaches cannot	COMMENT
LOW	…ments/windows-sandbox/launcher/src/windows_launcher.rs	1641	result.push('"');	COMMENT
LOW	experiments/windows-sandbox/launcher/src/acl_ledger.rs	61	/// all shared across every session of the user, so the locks that arbitrate	COMMENT
LOW	experiments/windows-sandbox/launcher/src/acl_ledger.rs	81	/// cross-session reason and fails closed against a squatted name.	COMMENT
LOW	experiments/windows-sandbox/launcher/src/acl_ledger.rs	261	// Machine-wide named objects are creatable by any local user, so the	COMMENT
LOW	experiments/windows-sandbox/launcher/src/acl_ledger.rs	321	}	COMMENT
LOW	scripts/release-eval-smoke-sitecustomize.py	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	scripts/generate-app-icons.py	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	scripts/generate-app-icons.py	81		COMMENT
LOW	…plugins/codex-app-server-executor/maka.composition.yml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	packages/ui/stories/capability-audit-strip.stories.tsx	21	import type { CapabilityAuditReport } from '@maka/core/capability-audit';	COMMENT
LOW	packages/ui/src/chat-empty-hero.tsx	61	// renders suggestions.	COMMENT
LOW	packages/ui/src/scheduled-task-form-dialog.tsx	221		COMMENT
LOW	packages/ui/src/chat-view.tsx	381	sessionId: props.activeSession?.id,	COMMENT
LOW	packages/ui/src/chat-view.tsx	401	// prop is also stable is the projection's tested contract, not a property	COMMENT
LOW	packages/ui/src/skill-status.ts	21	//	COMMENT
LOW	packages/ui/src/composer.tsx	1241	: mentionCopy.noSkills,	COMMENT
LOW	packages/ui/src/composer.tsx	2361	<DropdownMenuItem	COMMENT
LOW	packages/ui/src/composer.tsx	2381	\|\| (props.mentionSkillsUnavailable	COMMENT
LOW	packages/ui/src/composer.tsx	2461	}	COMMENT
LOW	packages/ui/src/skills-panel.tsx	21	//	COMMENT
LOW	packages/ui/src/index.ts	81	// Maka-owned product assets and compositions remain public only where they do	COMMENT
LOW	packages/ui/src/index.ts	101	export { MarkdownBody } from './markdown-body.js';	COMMENT
LOW	packages/ui/src/session-history-list.tsx	381	if (event.key !== 'Escape') return;	COMMENT
LOW	packages/ui/src/session-history-list.tsx	1721	tooltip: blockedDetail ? `${label} · ${blockedDetail}` : label,	COMMENT
LOW	packages/ui/src/session-sidebar-nav.tsx	41	(task) => task.status === 'active',	COMMENT
LOW	packages/ui/src/session-sidebar-nav.tsx	141	// reaches a screen reader without saying restart what, or why now.	COMMENT
LOW	packages/ui/src/toast.tsx	21	//	COMMENT
LOW	packages/ui/src/session-list-panel.tsx	61	// teach, and it never had anywhere to teach them — 按时间 / 按项目 is the	COMMENT
LOW	packages/ui/src/markdown-body.tsx	181	// contract harness a stable declared subtree without adding a layout	COMMENT
LOW	packages/ui/src/use-roving-row-focus.ts	21	//	COMMENT
LOW	packages/ui/src/use-roving-row-focus.ts	61	[containerRef],	COMMENT
LOW	packages/core/src/bot-chat-settings.ts	201	...channel,	COMMENT
LOW	packages/core/src/computer-use.ts	41	'no_active_frame',	COMMENT
LOW	packages/core/src/settings.ts	1041	// PR-UI-D1 (@kenji msg 68bf2b13): closed-enum fail-closed for	COMMENT
LOW	packages/core/src/settings.ts	1061	// Same fail-closed rule as `palette` above, for the same reason: an	COMMENT
LOW	packages/core/src/tool-args-identity.ts	221	// Unchanged values are returned as they came, so the common case — nothing	COMMENT
LOW	packages/core/src/display-redaction.ts	21	//	COMMENT
LOW	packages/core/src/display-redaction.ts	61	// Structural — any authority that contains `@` is credential-bearing, so	COMMENT
LOW	packages/core/src/mcp-secrets.ts	21	//	COMMENT
270 more matches not shown…

Decorative Section Separators70 hits · 220 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/ui/src/skills-panel.tsx	226	// ── Derived views ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/ui/src/__tests__/materialize.test.ts	451	// ── #1307: the timeline model stays flat (fold is a render concern) ──────────	COMMENT
MEDIUM	packages/ui/src/__tests__/materialize.test.ts	451	// ── #1307: the timeline model stays flat (fold is a render concern) ──────────	COMMENT
MEDIUM	packages/core/src/tool-quiet-preview.ts	38	// ── Locale ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/tool-quiet-preview.ts	99	// ── Tool command extraction ──────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/tool-quiet-preview.ts	113	// ── Key priority tables ──────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/tool-quiet-preview.ts	165	// ── Secret masking ───────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/tool-quiet-preview.ts	184	// ── Helpers ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/tool-quiet-preview.ts	237	// ── Public API: invocation line ─────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/tool-quiet-preview.ts	329	// ── Public API: args preview (live wire) ────────────────────────────────	COMMENT
MEDIUM	packages/core/src/tool-quiet-preview.ts	507	// ── Public API: quiet JSON value ─────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/tool-quiet-preview.ts	638	// ── Internal: headline / remainder ──────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/session-event-runtime-mapper.ts	200	// ── Model text ────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/session-event-runtime-mapper.ts	227	// ── Model thinking ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/session-event-runtime-mapper.ts	254	// ── Tool calls / results ──────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/session-event-runtime-mapper.ts	406	// ── Session sandbox boundary ──────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/session-event-runtime-mapper.ts	501	// ── Steering: a user message injected mid-turn at a step boundary ─────	COMMENT
MEDIUM	packages/runtime/src/session-event-runtime-mapper.ts	532	// ── Transient provider retry progress ────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/session-event-runtime-mapper.ts	552	// ── Plan handoff (placeholder; Phase 5/7 refines) ─────────────────────	COMMENT
MEDIUM	packages/runtime/src/session-event-runtime-mapper.ts	572	// ── Token usage ───────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/session-event-runtime-mapper.ts	627	// ── Error ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/session-event-runtime-mapper.ts	650	// ── Terminal: abort + complete ────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/path-containment.ts	186	// ── Contained file I/O ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/path-containment.ts	271	// ── Generic type guard ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/path-containment.ts	278	// ── Crypto helper ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/runtime/src/skills-context.ts	213	// ── Public API: budget ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-context.ts	43	// ── Limits ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-context.ts	58	// ── Types ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-context.ts	181	// ── Prompt rendering ──────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-context.ts	227	// ── Public API: gating ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-context.ts	249	// ── Public API: context selection ────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-context.ts	378	// ── Public API: prompt fragment ───────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-context.ts	420	// ── Public API: load instructions ──────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-context.ts	514	// ── Public API: search ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-context.ts	526	// ── Internal: search ──────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-context.ts	626	// ── Internal: decision helper ────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-discovery.ts	49	// ── Types ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-discovery.ts	174	// ── Public API ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-discovery.ts	327	// ── Internal helpers ─────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/runtime/src/skills-agent-tools.ts	52	// ── Constants ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/runtime/src/skills-agent-tools.ts	61	// ── Types ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/runtime/src/skills-agent-tools.ts	71	// ── Shadow selection tracker ──────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-agent-tools.ts	111	// ── Public API ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-state.ts	38	// ── Types ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-state.ts	73	// ── Internal types ────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-state.ts	81	// ── Public API ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-state.ts	319	// ── Internal helpers ─────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/ai-sdk-backend.ts	121	// ── Session context ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/ai-sdk-backend.ts	133	// ── Process-singleton deps ─────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/ai-sdk-backend.ts	154	// ── Optional knobs (defaults shown) ────────────────────────────────────	COMMENT
MEDIUM⚡	packages/runtime/src/skills.ts	37	// ── From path-containment (contained I/O moved in #1408) ──────────────────	COMMENT
MEDIUM⚡	packages/runtime/src/skills.ts	37	// ── From path-containment (contained I/O moved in #1408) ──────────────────	COMMENT
MEDIUM⚡	packages/runtime/src/skills.ts	45	// ── From skills-metadata ──────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills.ts	62	// ── From skills-state ──────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills.ts	124	// ── From skills-discovery ──────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills.ts	146	// ── From skills-context ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills.ts	182	// ── From skills-agent-tools ────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills.ts	197	// ── From skills-starter ───────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-metadata.ts	32	// ── Limits ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/runtime/src/skills-metadata.ts	37	// ── Types ─────────────────────────────────────────────────────────────────	COMMENT
10 more matches not shown…

Hallucination Indicators8 hits · 80 pts

Severity	File	Line	Snippet	Context
CRITICAL	packages/runtime/src/bots/feishu-bridge.ts	241	const result = await channel.rawClient.im.v1.message.create({	CODE
CRITICAL	packages/runtime/src/bots/feishu-bridge.ts	314	const result = await this.channel.rawClient.im.v1.message.readUsers({	CODE
CRITICAL	…desktop/src/renderer/settings/bot-onboarding-modal.tsx	69	void window.maka.settings.bots.onboarding.cancel(sessionId).catch(() => undefined);	CODE
CRITICAL	…desktop/src/renderer/settings/bot-onboarding-modal.tsx	82	const result = await window.maka.settings.bots.onboarding.start({	CODE
CRITICAL	…desktop/src/renderer/settings/bot-onboarding-modal.tsx	114	const result = await window.maka.settings.bots.onboarding.poll(sessionId);	CODE
CRITICAL	…desktop/src/renderer/settings/bot-onboarding-modal.tsx	141	const result = await window.maka.settings.bots.onboarding.openInBrowser(snapshot.sessionId);	CODE
CRITICAL	…/desktop/src/main/__tests__/conversation-owner.test.ts	342	assert.equal(h.owner.workspace.ui.reads.load('A').getSnapshot().messageLoadError, fallback);	CODE
CRITICAL	…/desktop/src/main/__tests__/conversation-owner.test.ts	431	assert.equal(h.owner.workspace.ui.reads.load('C').getSnapshot().messageLoadError, undefined);	CODE

Modern AI Meta-Vocabulary10 hits · 27 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/code-origin-audit.md	95	\| 1 \| `apps/desktop/src/main/__tests__/renderer-core-barrel-node-boundary.test.ts:30-52` \| [`muratgur/ordinus`](https://	CODE
MEDIUM	docs/grok-assisted-contribution-review.md	435	\| #3544 \| Queue mutations use one Host protocol/executor/state path, Desktop actions, and UI controller; drag-start revi	CODE
MEDIUM	…cs/architecture/local-runtime-execution-persistence.md	24	This is the first local-runtime integration slice of [#2370](https://github.com/apache/maka/issues/2370), following [dis	CODE
MEDIUM	packages/ui/README.md	58	## Contracts & guardrails	COMMENT
MEDIUM	packages/runtime/src/history-compact-summarizer.ts	77	// (system role): agentic coding models such as kimi k3-256k ignore a system	COMMENT
MEDIUM	packages/runtime/src/history-compact-summarizer.ts	167	// system-role prompt may precede the conversation, which agentic	COMMENT
MEDIUM	…ntime/src/__tests__/history-compact-summarizer.test.ts	673	// A system-role instruction never reaches the wire: agentic models such	COMMENT
MEDIUM	apps/desktop/stories/app-shell.stories.tsx	2178	// one screen on purpose, as the canonical visual-acceptance scaffold for the	COMMENT
MEDIUM	apps/desktop/src/renderer/README.md	355	## Contracts & guardrails	COMMENT
MEDIUM	…derer/features/conversation/controller/chat-actions.ts	286	// #4695: the Composer shows a Plan (or model, permission, orchestration)	COMMENT

Empty Error Handlers4 hits · 20 pts

Severity	File	Line	Snippet	Context
HIGH	packages/eval/harbor/relay_agent.py	616	except TimeoutError:	CODE
HIGH	packages/eval/harbor/relay_agent.py	643	except Exception:	CODE
HIGH	packages/eval/harbor/test_egress_filter_live.py	535	except ssl.SSLWantReadError:	CODE
HIGH	packages/eval/harbor/egress_filter.py	245	except Exception:	CODE

AI Slop Vocabulary4 hits · 16 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/cli/src/__tests__/acp-child-process-harness.ts	153	if (!this.#host) throw new Error('ACP harness has no in-process Runtime Host');	CODE
MEDIUM⚡	…/eval/harbor/deepseek-harness-profile/cordis.patch.yml	12	# `package.json` declares no bundles, so the harness composes this tree over an	COMMENT
MEDIUM⚡	…/eval/harbor/deepseek-harness-profile/cordis.patch.yml	17	# Derived from the harness's own examples/jsonrpc-agent/minimal.cordis.yml —	COMMENT
MEDIUM⚡	…/eval/harbor/deepseek-harness-profile/cordis.patch.yml	24	# Source: https://github.com/deepseek-ai/deepseek-harness	COMMENT

Fake / Example Data15 hits · 15 pts

Severity	File	Line	Snippet	Context
LOW	…s/core/src/__tests__/provider-catalog-contract.test.ts	107	const resolved = def.baseUrlTemplate.replace(/\$\{[^}]+\}/g, 'placeholder');	CODE
LOW	packages/core/src/__tests__/interaction.test.ts	454	script: 'review note\npassword=dummy-value\nrun visible',	CODE
LOW	packages/core/src/__tests__/interaction.test.ts	464	assert.doesNotMatch(projected.prompt.review.arguments.text, /dummy-value/);	CODE
LOW	packages/core/src/__tests__/redaction.test.ts	177	assignment: 'review note\npassword=dummy-value\nrun visible',	CODE
LOW	packages/core/src/__tests__/redaction.test.ts	245	redactSecrets('# " review note\npassword=dummy-value\npython deploy.py --target production'),	CODE
LOW	…cli/src/__tests__/runtime-host-service-manager.test.ts	1193	await writeFile(join(base, 'placeholder'), '', 'utf8');	CODE
LOW	…ges/cli/src/__tests__/acp-session-interactions.test.ts	320	email: 'user@example.com',	CODE
LOW	…ges/cli/src/__tests__/acp-session-interactions.test.ts	375	email: 'user@example.com',	CODE
LOW	…st/src/__tests__/client-capability-coordinator.test.ts	2464	replacementInput('owner-without-service', 'placeholder'),	CODE
LOW	packages/eval/harbor/test_egress_filter.py	240	("user@example.com", 443),	CODE
LOW	apps/desktop/src/renderer/astryx-theme/maka.css	593	.astryx-text[data-color="placeholder"] { color: var(--color-text-secondary); }	CODE
LOW	apps/desktop/src/renderer/astryx-theme/maka.css	595	.astryx-heading[data-color="placeholder"] { color: var(--color-text-secondary); }	CODE
LOW	apps/desktop/src/main/workhub-surface.ts	53	const label = e.getAttribute('aria-label') \|\| e.labels?.[0]?.textContent \|\| e.getAttribute('placeholder') \|\| e.g	CODE
LOW	apps/desktop/src/overlay/pip.html	330	<div id="placeholder" data-visible="1" aria-hidden="true"><div id="sweep"></div></div>	CODE
LOW	apps/desktop/src/overlay/pip.ts	38	const placeholder = document.getElementById('placeholder') as HTMLDivElement;	CODE

Cross-Language Confusion5 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	packages/eval/harbor/relay_agent.py	365	f"( umask 077 && echo $$ > {shlex.quote(scope_path)} ) 2>/dev/null \|\| "	CODE
HIGH	packages/eval/harbor/relay_agent.py	533	prepared = await environment.exec("mkdir -p /logs/artifacts && chmod 700 /logs/artifacts")	STRING
HIGH	packages/eval/harbor/relay_agent.py	656	f"pgid=$(cat {shlex.quote(scope_path)} 2>/dev/null) \|\| exit 0; "	STRING
HIGH	packages/eval/harbor/relay_agent.py	683	f"pgid=$(cat {shlex.quote(scope_path)} 2>/dev/null) \|\| exit 4; "	STRING
HIGH	packages/eval/harbor/relay_agent.py	685	"kill -0 -- \"-$pgid\" 2>/dev/null; status=$?; "	STRING

Deep Nesting14 hits · 12 pts

Severity	File	Line	Context
LOW	scripts/generate-app-icons.py	358	CODE
LOW	scripts/generate-app-icons.py	424	CODE
LOW	scripts/generate-app-icons.py	559	CODE
LOW	packages/eval/harbor/test_relay_lifecycle.py	598	CODE
LOW	packages/eval/harbor/test_relay_lifecycle.py	701	CODE
LOW	packages/eval/harbor/test_relay_contract.py	483	CODE
LOW	packages/eval/harbor/test_relay_contract.py	553	CODE
LOW	packages/eval/harbor/test_relay_contract.py	634	CODE
LOW	packages/eval/harbor/test_eval_framework.py	58	CODE
LOW	packages/eval/harbor/test_egress_filter.py	108	CODE
LOW	packages/eval/harbor/test_egress_filter.py	160	CODE
LOW	packages/eval/harbor/test_run_trial_policy.py	78	CODE
LOW	packages/eval/harbor/relay_agent.py	600	CODE
LOW	packages/eval/harbor/relay_agent.py	141	CODE

Unused Imports6 hits · 6 pts

Severity	File	Line	Context
LOW	packages/eval/harbor/test_cell_egress_namespace.py	32	CODE
LOW	packages/eval/harbor/test_relay_artifacts.py	18	CODE
LOW	packages/eval/harbor/eval_framework.py	20	CODE
LOW	packages/eval/harbor/relay_agent.py	20	CODE
LOW	packages/eval/harbor/test_egress_filter_live.py	30	CODE
LOW	packages/eval/harbor/egress_filter.py	20	CODE

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	README.md	261	- [DeepWiki](https://deepwiki.com/apache/maka), third-party AI-generated documentation the project does not maintain	CODE

Excessive Try-Catch Wrapping6 hits · 5 pts

Severity	File	Line	Snippet	Context
LOW	packages/eval/harbor/relay_agent.py	639	except Exception:	STRING
LOW	packages/eval/harbor/relay_agent.py	643	except Exception:	STRING
LOW	packages/eval/harbor/egress_filter.py	234	except Exception as error:	CODE
LOW	packages/eval/harbor/egress_filter.py	245	except Exception:	CODE
LOW	packages/eval/harbor/egress_filter.py	349	except Exception:	CODE
LOW	packages/eval/harbor/egress_filter.py	385	except Exception as close_error:	CODE

Slop Phrases2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	packages/eval/harbor/deepseek-codex-models.json	54	"instructions_template": "You are Codex, an agent based on GPT-5. You and the user share one workspace, and your	CODE
LOW	packages/eval/harbor/deepseek-codex-models.json	66	"base_instructions": "You are Codex, an agent based on GPT-5. You and the user share one workspace, and your job i	CODE

apache/maka

Open-Source Code Quality, Security and Technical Debt Review