Enterprise AI Platform with guardrails, MCP registry, gateway & orchestrator
This report summarizes scanner evidence for archestra-ai/archestra, a TypeScript project with 4,368 GitHub stars. SynthScan examined 2,021,099 lines of code across 7277 source files, recording 5007 pattern matches distributed across 25 syntactic categories. The legacy adjusted pattern signal is 4.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 4333 finding(s).
Are imports declared and package/API names verified? 578 finding(s).
Are wrappers, guards, and repeated structures necessary? 2892 finding(s).
Which changes need focused human review? 5007 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 5007 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | migration-kit/tests/test_contracts.py | 39 | def test_parse_item_rejects_unknown_kind() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 44 | def test_parse_item_rejects_missing_required_field() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 49 | def test_parse_bundled_file_rejects_bad_encoding() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 54 | def test_parse_plan_roundtrips_and_validates() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 64 | def test_parse_plan_rejects_bad_enums() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 74 | def test_parse_plan_rejects_removed_tool_policy_kind() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 80 | def test_parse_bundled_file_allows_empty_content() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 94 | def test_parse_bundled_file_still_requires_string_content() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 99 | def test_non_migrate_decision_may_omit_target_kind() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 108 | def test_migrate_decision_requires_target_kind() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 113 | def test_user_answer_validators_reject_bad_values() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 118 | def test_user_answer_validators_accept_good_values() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 122 | def test_archestra_hook_event_maps_supported_events_only() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 130 | def test_archestra_file_name_validates_basename_and_extension() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 138 | def test_validate_requirements_trims_and_bounds() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 151 | def test_require_requirements_is_none_when_absent() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 156 | def test_optional_agent_id_requires_uuid_shape() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 164 | def test_optional_file_name_validates_when_present() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 171 | def test_require_hook_content_enforces_length() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 179 | def test_require_dict_and_list_raise_on_wrong_shape() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 186 | def test_secret_key_regex_matches_real_keys_not_innocent_words() -> None: | CODE |
| LOW | migration-kit/tests/test_contracts.py | 13 | def test_inventory_roundtrips_through_json() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 59 | def test_finds_claude_md_as_primary(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 65 | def test_subagent_carries_tool_allowlist(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 71 | def test_skill_bundles_sibling_files(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 130 | def test_inline_hook_has_no_bundled_script(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 138 | def test_env_prefix_hook_is_flagged_in_summary(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 146 | def test_unsupported_event_hook_noted_for_manual(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 152 | def test_unresolved_hook_when_script_missing(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 228 | def test_script_position_only_matches_executable_or_interpreter_arg(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 235 | def test_script_path_in_echo_argument_is_inline_not_bundled(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 240 | def test_interpreter_flags_before_script_count_as_extra_args(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 353 | def test_dangling_refs_flags_only_existing_unbundled_files(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 361 | def test_dangling_refs_skips_bundled_files(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 369 | def test_dangling_refs_resolves_against_multiple_bases(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 32 | def test_redact_value_catches_embedded_token() -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 39 | def test_redact_catches_embedded_token_under_innocuous_key() -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 83 | def test_local_tool_bundles_script(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 91 | def test_mcp_stdio_and_remote(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 102 | def test_mcp_secret_env_is_redacted(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 167 | def test_same_hook_slot_in_two_config_files_gets_distinct_ids(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 178 | def test_empty_or_env_only_command_is_unresolved(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 193 | def test_bundled_hook_resolves_with_relative_root(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 251 | def test_bundled_script_through_symlinked_root_alias_does_not_crash(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 272 | def test_inline_env_prefix_is_not_flagged(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 286 | def test_hook_command_inline_secret_redacted(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 293 | def test_body_secret_warned_but_left_intact(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 308 | def test_no_structured_secret_leaks_in_serialized_inventory(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 315 | def test_symlink_escaping_source_is_not_bundled(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 332 | def test_symlinked_skill_dir_is_skipped(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 382 | def test_dangling_refs_ignores_root_escaping_ref(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 387 | def test_discover_warns_on_dangling_command_reference(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 399 | def test_discover_flags_ref_captured_as_separate_item(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 413 | def test_fixture_skill_flags_repo_root_tool_reference(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_installer.py | 18 | def test_writes_allowlist_as_siblings(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 37 | def test_unsafe_paths_are_rejected(tmp_path: Path, rel: str) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 42 | def test_path_outside_allowlist_is_rejected(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 47 | def test_destination_symlink_is_rejected(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 56 | def test_file_destination_is_rejected(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 63 | def test_nonempty_destination_requires_force(tmp_path: Path) -> None: | CODE |
| 2735 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | platform/backend/src/services/mcp-reinstall.test.ts | 988 | default: "your-api-key", | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/dataeval__dingo.json | 44 | "readme": "<div align=\"center\" xmlns=\"http://www.w3.org/1999/html\">\n<!-- logo -->\n<p align=\"center\">\n <img s | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 35 | "readme": "# Video Editor MCP server\n\n[](https://www.video-jungl | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 35 | "readme": "# Video Editor MCP server\n\n[](https://www.video-jungl | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 41 | "args": ["run", "video-editor-mcp", "YOURAPIKEY"], | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 46 | "args": ["run", "video-editor-mcp", "YOURAPIKEY"], | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 53 | "args": ["video-editor-mcp", "YOURAPIKEY"], | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 58 | "args": ["--directory", "/Users/YOURDIRECTORY/video-editor-mcp", "run", "video-editor-mcp", "YOURAPIKEY"], | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 63 | "args": ["--directory", "/Users/<PATH_TO>/video-jungle-mcp", "run", "video-editor-mcp", "<YOURAPIKEY>"], | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 63 | "args": ["--directory", "/Users/<PATH_TO>/video-jungle-mcp", "run", "video-editor-mcp", "<YOURAPIKEY>"], | CODE |
| HIGH | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 77 | "YOURAPIKEY" | CODE |
| HIGH⚡ | …a/mcp-evaluations/conechoai__openai-websearch-mcp.json | 28 | "readme": "# OpenAI WebSearch MCP Server\n\nThis MCP server provides access to OpenAI's websearch functionality throug | CODE |
| HIGH⚡ | …a/mcp-evaluations/conechoai__openai-websearch-mcp.json | 36 | "OPENAI_API_KEY": "your-api-key-here" | CODE |
| HIGH⚡ | …a/mcp-evaluations/conechoai__openai-websearch-mcp.json | 43 | "OPENAI_API_KEY": "your-api-key-here" | CODE |
| HIGH⚡ | …p-evaluations/alchemyplatform__alchemy-mcp-server.json | 29 | "readme": "# Alchemy MCP Server\n\nA Model Context Protocol (MCP) server that enables AI agents to interact with Alche | CODE |
| HIGH⚡ | …p-evaluations/alchemyplatform__alchemy-mcp-server.json | 37 | "ALCHEMY_API_KEY": "YOUR_API_KEY" | CODE |
| HIGH⚡ | …aluations/devflowinc__trieve__clients__mcp-server.json | 45 | "readme": "# trieve-mcp-server\n\n[](https://smithery.ai | CODE |
| HIGH | …aluations/devflowinc__trieve__clients__mcp-server.json | 63 | "<your-api-key>", | CODE |
| HIGH⚡ | …ons/ycloud-developers__ycloud-whatsapp-mcp-server.json | 44 | "readme": "# YCloud WhatsApp API MCP 服务器\n\n[English](README-en.md) | 中文\n\n这是一个基于[Model Context Protocol (MCP)](https | CODE |
| HIGH⚡ | …ons/ycloud-developers__ycloud-whatsapp-mcp-server.json | 53 | "API_HEADERS": "X-API-Key:your-api-key-here" | CODE |
| HIGH⚡ | …ons/ycloud-developers__ycloud-whatsapp-mcp-server.json | 61 | "API_HEADERS": "X-API-Key:your-api-key-here" | CODE |
| HIGH | …log/data/mcp-evaluations/burtthecoder__mcp-shodan.json | 28 | "readme": "# Shodan MCP Server\n\n[](https://smit | CODE |
| HIGH | …/data/mcp-evaluations/integromat__make-mcp-server.json | 42 | "readme": "# Make MCP Server (legacy)\n\n**A modern, cloud-based version of the Make MCP Server is now available. For | CODE |
| HIGH | …/data/mcp-evaluations/integromat__make-mcp-server.json | 50 | "MAKE_API_KEY": "<your-api-key>", | CODE |
| HIGH⚡ | …log/data/mcp-evaluations/tacticlaunch__mcp-linear.json | 28 | "readme": "<p align=\"center\">\n <img src=\"https://github.com/tacticlaunch/mcp-linear/blob/main/docs/linear-app-ico | CODE |
| HIGH⚡ | …log/data/mcp-evaluations/tacticlaunch__mcp-linear.json | 36 | "LINEAR_API_TOKEN": "<YOUR_TOKEN>" | CODE |
| HIGH | …og/data/mcp-evaluations/intruder-io__intruder-mcp.json | 28 | "readme": "# Intruder MCP\n\nLet MCP clients like Claude and Cursor control [Intruder](https://www.intruder.io/). For | CODE |
| HIGH | …og/data/mcp-evaluations/intruder-io__intruder-mcp.json | 36 | "INTRUDER_API_KEY": "your-api-key" | CODE |
| HIGH | …og/data/mcp-evaluations/intruder-io__intruder-mcp.json | 48 | "INTRUDER_API_KEY=<your-api-key>", | CODE |
| HIGH | …og/data/mcp-evaluations/intruder-io__intruder-mcp.json | 52 | "INTRUDER_API_KEY": "<your-api-key>" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/doggybee__mcp-server-ccxt.json | 108 | "readme": "# CCXT MCP Server\n\n<img src=\"assets/ccxt-logo.png\" alt=\"CCXT Logo\" width=\"100\" height=\"100\"/>\n\n | CODE |
| HIGH⚡ | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 20 | "readme": "# Unified Context Layer (UCL) MCP Server\n\nUnified Context Layer (UCL) is a multi-tenant Model Context Pro | CODE |
| HIGH | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 76 | "args": ["--api_key", "YOUR_API_KEY", "--space_id", "YOUR_WORKSPACE_ID"] | CODE |
| HIGH | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 90 | "YOUR_API_KEY", | CODE |
| HIGH | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 114 | "API_KEY": "YOUR_API_KEY", | CODE |
| HIGH | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 129 | "API_KEY=YOUR_API_KEY", | CODE |
| HIGH | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 141 | "API_KEY": "YOUR_API_KEY", | CODE |
| HIGH⚡ | …a/mcp-evaluations/chanmeng666__server-google-news.json | 28 | "readme": "[](http | CODE |
| HIGH⚡ | …a/mcp-evaluations/chanmeng666__server-google-news.json | 36 | "SERP_API_KEY": "your-api-key" | CODE |
| HIGH⚡ | …a/mcp-evaluations/chanmeng666__server-google-news.json | 43 | "SERP_API_KEY": "your-api-key" | CODE |
| HIGH | …log/data/mcp-evaluations/kukapay__blocknative-mcp.json | 28 | "readme": "# Blocknative MCP Server\n\nAn MCP server that provides real-time gas price predictions across multiple blo | CODE |
| HIGH | mcp-catalog/data/mcp-evaluations/apecloud__aperag.json | 24 | "description": "A valid API key from your ApeRAG settings. Important: Replace 'your-api-key-here' with a valid API | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/apecloud__aperag.json | 36 | "readme": "# ApeRAG\n[](https://arch | CODE |
| HIGH | …/data/mcp-evaluations/bright8192__esxi-mcp-server.json | 103 | "readme": "# ESXi MCP Server\n\nA VMware ESXi/vCenter management server based on MCP (Model Control Protocol), providi | CODE |
| HIGH | mcp-catalog/data/mcp-evaluations/tumf__web3-mcp.json | 24 | "description": "Your Ankr RPC endpoint (e.g., https://rpc.ankr.com/your_api_key)", | CODE |
| HIGH⚡ | …data/mcp-evaluations/khan2a__telephony-mcp-server.json | 87 | "readme": "\n![Ruff]( | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 49 | "readme": "\n\n\n# Ragie Mode | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 57 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 64 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 71 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 84 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 91 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 98 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/panther-labs__mcp-panther.json | 35 | "readme": "# Panther MCP Server\n\n[![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astr | CODE |
| HIGH | …alog/data/mcp-evaluations/effytech__freshdesk_mcp.json | 36 | "readme": "# Freshdesk MCP Server\n[](https://smit | CODE |
| HIGH | …alog/data/mcp-evaluations/effytech__freshdesk_mcp.json | 53 | "FRESHDESK_API_KEY=<your_api_key>", | CODE |
| HIGH | …alog/data/mcp-evaluations/effytech__freshdesk_mcp.json | 58 | "FRESHDESK_API_KEY": "<your_api_key>", | CODE |
| HIGH⚡ | …/data/mcp-evaluations/offorte__offorte-mcp-server.json | 44 | "readme": "# Offorte MCP Server <!-- omit in toc -->\n\nMCP server for Offorte - Create & send proposals using AI.\n\n | CODE |
| HIGH⚡ | …/data/mcp-evaluations/offorte__offorte-mcp-server.json | 53 | "OFFORTE_API_KEY": "<YOUR_TOKEN>" | CODE |
| HIGH⚡ | …/data/mcp-evaluations/offorte__offorte-mcp-server.json | 61 | "OFFORTE_API_KEY": "<YOUR_TOKEN>" | CODE |
| 152 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …omponents/app-session-recording/app-session-player.tsx | 3257 | // One seamless field-in-a-card: the textarea carries no chrome of its | COMMENT |
| MEDIUM | …atform/backend/src/skills/skill-catalog.generated.json | 544 | [17,"plugins/dotnet-maui/skills/maui-data-binding","maui-data-binding","Guidance for .NET MAUI XAML and C# data bindings | CODE |
| MEDIUM | …atform/backend/src/skills/skill-catalog.generated.json | 805 | [25,"skills/csharp-docs","csharp-docs","Ensure that C# types are documented with XML comments and follow best practices | CODE |
| MEDIUM | …atform/backend/src/skills/skill-catalog.generated.json | 823 | [25,"skills/dotnet-best-practices","dotnet-best-practices","Ensure .NET/C# code meets best practices for the solution/pr | CODE |
| MEDIUM | …form/backend/src/routes/chat/model-fetchers/bedrock.ts | 288 | // Authoritative underlying model for pricing — more robust than parsing | COMMENT |
| MEDIUM | …rm/backend/src/services/apps/app-sdk-injection.test.ts | 25 | // brace-matched depth scan over the comment-stripped body (robust to reformatting, | COMMENT |
| MEDIUM | platform/e2e-tests/tests/mcp-install.spec.ts | 339 | // and rename" — match any to keep the test robust. | COMMENT |
| MEDIUM | platform/scripts/e2e-lite.sh | 2 | # Lite e2e harness: the platform as one quickstart-mode container plus | COMMENT |
| MEDIUM | platform/scripts/e2e-lite.sh | 113 | # The harness owns these host ports. A dev stack (tilt up / pnpm dev) uses | COMMENT |
| MEDIUM | platform/helm/e2e-tests/values.yaml | 71 | # shared with the lite e2e harness which docker-mounts the same file. | COMMENT |
| MEDIUM | platform/helm/e2e-tests/templates/keycloak.yaml | 126 | # inline document: the lite e2e harness docker-mounts the same file, so the | COMMENT |
| MEDIUM | mcp-catalog/data/mcp-evaluations/joelio__stocky.json | 36 | "readme": "# <div align=\"center\"><br/>Stocky<br/>*Find beautiful royalty-free stock images | CODE |
| MEDIUM | …ta/mcp-evaluations/takashiishida__arxiv-latex-mcp.json | 18 | "readme": "# arxiv-latex MCP Server\n[](https://op | CODE |
| MEDIUM | …ta/mcp-evaluations/takashiishida__arxiv-latex-mcp.json | 18 | "readme": "# arxiv-latex MCP Server\n[](https://op | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/dataeval__dingo.json | 44 | "readme": "<div align=\"center\" xmlns=\"http://www.w3.org/1999/html\">\n<!-- logo -->\n<p align=\"center\">\n <img s | CODE |
| MEDIUM | …/data/mcp-evaluations/fosdickio__binary_ninja_mcp.json | 18 | "readme": "# Binary Ninja MCP <img src=\"images/binja.png\" height=\"24\" style=\"margin-left: 5px; vertical-align: mi | CODE |
| MEDIUM | …data/mcp-evaluations/haris-musa__excel-mcp-server.json | 38 | "readme": "<p align=\"center\">\n <img src=\"https://raw.githubusercontent.com/haris-musa/excel-mcp-server/main/asset | CODE |
| MEDIUM | …talog/data/mcp-evaluations/vivekvells__mcp-pandoc.json | 18 | "readme": "[](https://pypi.python.org/pypi/mcp-pandoc)\n[](https://github.com | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/r-huijts__strava-mcp.json | 59 | "readme": "[](https://mseep.a | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/r-huijts__strava-mcp.json | 59 | "readme": "[](https://mseep.a | CODE |
| LOW | …talog/data/mcp-evaluations/patrickpalmer__mayamcp.json | 18 | "readme": "# Maya MCP\r\nModel Context Protocol (MCP) server implementation for Autodesk Maya\r\n\r\nTested with Maya | CODE |
| MEDIUM | …p-evaluations/jagan-shanmugam__open-streetmap-mcp.json | 18 | "readme": "# OpenStreetMap (OSM) MCP Server\n\nAn OpenStreetMap MCP server implementation that enhances LLM capabiliti | CODE |
| MEDIUM⚡ | …mcp-evaluations/samuelgursky__davinci-resolve-mcp.json | 41 | "readme": "# DaVinci Resolve MCP Server\n\n[](https://g | CODE |
| MEDIUM⚡ | …mcp-evaluations/samuelgursky__davinci-resolve-mcp.json | 41 | "readme": "# DaVinci Resolve MCP Server\n\n[](https://g | CODE |
| MEDIUM⚡ | …mcp-evaluations/samuelgursky__davinci-resolve-mcp.json | 41 | "readme": "# DaVinci Resolve MCP Server\n\n[](https://g | CODE |
| MEDIUM | …p-catalog/data/mcp-evaluations/jen6__ticktick-mcp.json | 60 | "readme": "# TickTick MCP Server\n\n<!-- Add relevant badges here -->\n[![License: MIT](https://img.shields.io/badge/L | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/stass__exif-mcp.json | 18 | "readme": "# exif-mcp\n\nAn MCP server that allows LLMs (or humans) to read image metadata on-demand, entirely offline | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/stass__exif-mcp.json | 18 | "readme": "# exif-mcp\n\nAn MCP server that allows LLMs (or humans) to read image metadata on-demand, entirely offline | CODE |
| MEDIUM⚡ | …uations/couchbase-ecosystem__mcp-server-couchbase.json | 81 | "readme": "# Couchbase MCP Server\n\nAn [MCP](https://modelcontextprotocol.io/) server implementation of Couchbase tha | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/altinoren__utopia.json | 18 | "readme": "# Utopia MCP Server\n\nUtopia is a simulation MCP Server designed to test and experiment with common househ | CODE |
| MEDIUM⚡ | …ta/mcp-evaluations/vitorpavinato__ncbi-mcp-server.json | 36 | "readme": "# NCBI Literature Search MCP Server\n\nA Model Context Protocol (MCP) server for searching NCBI databases, | CODE |
| MEDIUM⚡ | …ta/mcp-evaluations/vitorpavinato__ncbi-mcp-server.json | 36 | "readme": "# NCBI Literature Search MCP Server\n\nA Model Context Protocol (MCP) server for searching NCBI databases, | CODE |
| MEDIUM | …g/data/mcp-evaluations/davidlin2k__pox-mcp-server.json | 28 | "readme": "# POX MCP Server\n\n## Overview\nA Model Context Protocol (MCP) server implementation that provides network | CODE |
| MEDIUM | …uations/chargebee__agentkit__modelcontextprotocol.json | 19 | "readme": "# Chargebee Model Context Protocol (MCP) Server\n\n![MCP Chargebee](https://img.shields.io/badge/MCP-Charge | CODE |
| MEDIUM | …uations/chargebee__agentkit__modelcontextprotocol.json | 19 | "readme": "# Chargebee Model Context Protocol (MCP) Server\n\n![MCP Chargebee](https://img.shields.io/badge/MCP-Charge | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| MEDIUM⚡ | …cp-evaluations/sapientpants__sonarqube-mcp-server.json | 67 | "readme": "# SonarQube MCP Server\n\n[![CI](https://github.com/sapientpants/sonarqube-mcp-server/actions/workflows/ci. | CODE |
| MEDIUM⚡ | …cp-evaluations/sapientpants__sonarqube-mcp-server.json | 67 | "readme": "# SonarQube MCP Server\n\n[![CI](https://github.com/sapientpants/sonarqube-mcp-server/actions/workflows/ci. | CODE |
| LOW⚡ | …cp-evaluations/sapientpants__sonarqube-mcp-server.json | 67 | "readme": "# SonarQube MCP Server\n\n[![CI](https://github.com/sapientpants/sonarqube-mcp-server/actions/workflows/ci. | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/romthpt__mcp-xrpl.json | 36 | "readme": "# XRP Ledger Model Context Protocol Server\n\n[![MCP Server](https://glama.ai/mcp/servers/%40RomThpt/mcp-xr | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/mahdin75__gis-mcp.json | 18 | "readme": "# GIS MCP Server\n\n<div align=\"center\">\n <h3>✨ Want to perform accurate geospatial analysis in your ch | CODE |
| MEDIUM | …mcp-evaluations/mcpdotdirect__starknet-mcp-server.json | 18 | "readme": "# Starknet MCP Server\n\n[](h | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/lfnovo__content-core.json | 18 | "readme": "# Content Core\n\n[](https://opensource | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/lfnovo__content-core.json | 18 | "readme": "# Content Core\n\n[](https://opensource | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/lfnovo__content-core.json | 18 | "readme": "# Content Core\n\n[](https://opensource | CODE |
| MEDIUM | …g/data/mcp-evaluations/r-huijts__firstcycling-mcp.json | 18 | "readme": "[](https://m | CODE |
| MEDIUM | …/hannesrudolph__imessage-query-fastmcp-mcp-server.json | 28 | "readme": "[![MseeP.ai Security Assessment Badge](https://mseep.net/pr/hannesrudolph-imessage-query-fastmcp-mcp-server | CODE |
| MEDIUM | …-catalog/data/mcp-evaluations/hustcc__mcp-mermaid.json | 51 | "readme": "# <img src=\"https://mermaid.js.org/favicon.svg\" height=\"24\"/> MCP Mermaid ![](https://badge.mcpx.dev?ty | CODE |
| MEDIUM | …/mcp-evaluations/stefan-xyz__mcp-server-runescape.json | 18 | "readme": "# mcp-server-runescape\n[](https://badge.f | CODE |
| MEDIUM | …alog/data/mcp-evaluations/sdglbl__mcp-claude-code.json | 18 | "readme": "# MCP Claude Code\n\nAn implementation of Claude Code capabilities using the Model Context Protocol (MCP).\ | CODE |
| MEDIUM | …alog/data/mcp-evaluations/sdglbl__mcp-claude-code.json | 18 | "readme": "# MCP Claude Code\n\nAn implementation of Claude Code capabilities using the Model Context Protocol (MCP).\ | CODE |
| MEDIUM | …log/data/mcp-evaluations/burtthecoder__mcp-shodan.json | 28 | "readme": "# Shodan MCP Server\n\n[](https://smit | CODE |
| 488 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | README.md | 64 | - 🛡️ **Deterministic guardrails** for [tool calls](https://archestra.ai/docs/agents/guardrails) and | CODE |
| MEDIUM | README.md | 65 | [Lethal Trifecta](https://archestra.ai/docs/agents/guardrails#the-lethal-trifecta) protections. | CODE |
| MEDIUM | migration-kit/SKILL.md | 7 | # Migrate an agentic PoC to Archestra | COMMENT |
| MEDIUM | migration-kit/references/entity-mapping.md | 114 | [guardrails policy](https://archestra.ai/docs/agents/guardrails), which this kit does not write — if | CODE |
| MEDIUM | migration-kit/references/report-template.md | 43 | OpenAPPA [guardrails policy](https://archestra.ai/docs/agents/guardrails); this kit does not write it. | CODE |
| MEDIUM | platform/frontend/src/app/connection/connect-page.tsx | 11 | // guardrails). A future capability (budgets, audit...) is one more entry in | COMMENT |
| MEDIUM | platform/frontend/src/app/connection/connect-page.tsx | 1033 | // Three states: Enforced, Not enforced (requests bypass the guardrails and | COMMENT |
| MEDIUM | …tform/frontend/src/app/connection/connect-page-data.ts | 426 | // No setting to read, or guardrails are unavailable: no chip at all. | COMMENT |
| MEDIUM | …form/frontend/src/app/mcp/registry/new/page.client.tsx | 89 | // review tools, configure guardrails. | COMMENT |
| MEDIUM | …/openappa/_parts/guardrails-deployment-toggle.test.tsx | 21 | const url = "http://localhost:9000/api/guardrails-deployment"; | CODE |
| MEDIUM | …orm/frontend/src/app/apps/_parts/app-create-dialog.tsx | 22 | // Seeded as the new app's description so the blank scaffold has a get-started | COMMENT |
| MEDIUM | …rm/frontend/src/components/chat/chat-messages.utils.ts | 493 | // Owned-app management result (scaffold/edit/render_app): mount the | COMMENT |
| MEDIUM | …rm/frontend/src/components/chat/chat-messages.utils.ts | 965 | // scaffold/edit/render_app is covered too (its raw name is run_tool, which | COMMENT |
| MEDIUM | …orm/frontend/src/components/chat/compact-tool-call.tsx | 404 | // still-streaming scaffold/edit call) degrades to a plain tool circle. | COMMENT |
| MEDIUM | …orm/frontend/src/lib/chat/use-chat-preferences.test.ts | 679 | // agentic use. | COMMENT |
| MEDIUM | platform/backend/src/tokenizers/base.ts | 42 | // The same conversation history is re-sent on every agentic turn, so counting | COMMENT |
| MEDIUM | platform/backend/src/types/app.ts | 365 | // template (no html), so the staged authoring flow is scaffold → edit_app. | COMMENT |
| MEDIUM | platform/backend/src/types/app.ts | 391 | // Input for the `refine_app` MCP tool: the step between scaffold and edit. It | COMMENT |
| MEDIUM | platform/backend/src/task-queue/periodic-tasks.ts | 74 | // Recomposes every organization's effective guardrails policy from its root | COMMENT |
| MEDIUM | platform/backend/src/test/openappa-coverage.ts | 197 | url = "http://127.0.0.1:9000/api/guardrails-policy/annotators/noop" | CODE |
| MEDIUM | …s/browser-stream/websocket/browser-stream.websocket.ts | 195 | // as the chat agentic loop. Closing it here would kill in-flight tool calls | COMMENT |
| MEDIUM | …s/browser-stream/websocket/browser-stream.websocket.ts | 196 | // from the agentic loop, causing AI_MissingToolResultsError. | COMMENT |
| MEDIUM | platform/backend/src/models/tool.ts | 3726 | // Can be explicitly included for guardrails configuration. | COMMENT |
| MEDIUM | …atform/backend/src/models/interaction.rollback.test.ts | 3052 | // Gemini request with function response (common in agentic workflows) | COMMENT |
| MEDIUM | platform/backend/src/observability/metrics/llm.ts | 316 | // byte it writes, so preflight (auth, agent resolution, guardrails) counts. | COMMENT |
| MEDIUM | platform/backend/src/openappa/batteries.test.ts | 771 | url = "http://127.0.0.1:9000/api/guardrails-policy/annotators/noop" | CODE |
| MEDIUM | …end/src/archestra-mcp-server/app-authoring-guidance.ts | 40 | // archestra.storage.get). Delivered once at scaffold time rather than repeated | COMMENT |
| MEDIUM | platform/backend/src/archestra-mcp-server/apps.test.ts | 335 | // Member may scaffold a personal app... | COMMENT |
| MEDIUM | platform/backend/src/archestra-mcp-server/apps.test.ts | 859 | // trace is the reserved name: a same-name scaffold is told the name is | COMMENT |
| MEDIUM | platform/backend/src/archestra-mcp-server/apps.test.ts | 4157 | // Forked off the scaffold rather than editing version 1 in place. | COMMENT |
| MEDIUM | …estra-mcp-server/apps.progressive-tool-loading.test.ts | 305 | // scaffold bare, then assign the discovered tool after the fact. | COMMENT |
| MEDIUM | …/backend/src/archestra-mcp-server/search-tools.test.ts | 679 | // "guardrails policy" matches only the guardrails policy tools, all of | COMMENT |
| MEDIUM | platform/backend/src/skills/appa-guide.test.ts | 179 | '\n[externals.annotators.noop]\nurl = "http://127.0.0.1:9000/api/guardrails-policy/annotators/noop"\n'; | CODE |
| MEDIUM | …atform/backend/src/skills/skill-catalog.generated.json | 512 | [17,"plugins/dotnet-ai/skills/mcp-csharp-create","mcp-csharp-create","Create MCP servers using the C# SDK and .NET proje | CODE |
| MEDIUM | …atform/backend/src/skills/skill-catalog.generated.json | 544 | [17,"plugins/dotnet-maui/skills/maui-data-binding","maui-data-binding","Guidance for .NET MAUI XAML and C# data bindings | CODE |
| MEDIUM | …ckend/src/routes/proxy/responses-refusal-order.test.ts | 149 | // wins, and that snapshot is what the agentic loop dispatches from. | COMMENT |
| MEDIUM | platform/backend/src/routes/proxy/llm-proxy-handler.ts | 1585 | // trajectory; the existing guardrails still evaluate the child | COMMENT |
| MEDIUM | platform/backend/src/routes/proxy/utils/tools.ts | 130 | // the guardrails page can filter observed tools by user and client. Gateway | COMMENT |
| MEDIUM | …ackend/src/routes/proxy/adapters/ollama-native.test.ts | 693 | // The guardrails key updates by the id `getMessages` handed out, so the | COMMENT |
| MEDIUM | platform/backend/src/routes/mcp-gateway/utils.test.ts | 3402 | // The rest of the authoring surface (scaffold/read/edit/validate) works | COMMENT |
| MEDIUM | platform/backend/src/routes/mcp-gateway/utils.ts | 967 | // the same guardrails — and it keeps an MCP Apps host working when it | COMMENT |
| MEDIUM | …thub-sync/configure.openappa-github-sync.route.test.ts | 101 | "https://api.github.com/repos/example/policies/contents/guardrails/appa.toml", | CODE |
| MEDIUM | …thub-sync/configure.openappa-github-sync.route.test.ts | 710 | "https://api.github.com/repos/example/policies/contents/guardrails/appa.toml", | CODE |
| MEDIUM | …thub-sync/configure.openappa-github-sync.route.test.ts | 726 | "https://api.github.com/repos/example/policies/contents/guardrails/appa.toml", | CODE |
| MEDIUM | …thub-sync/configure.openappa-github-sync.route.test.ts | 746 | "https://api.github.com/repos/example/policies/contents/guardrails/appa.toml", | CODE |
| MEDIUM | …thub-sync/configure.openappa-github-sync.route.test.ts | 874 | "https://api.github.com/repos/example/policies/contents/guardrails/appa.toml", | CODE |
| MEDIUM | …thub-sync/configure.openappa-github-sync.route.test.ts | 937 | "https://api.github.com/repos/example/policies/contents/guardrails/appa.toml", | CODE |
| MEDIUM | …thub-sync/configure.openappa-github-sync.route.test.ts | 1267 | "https://api.github.com/repos/example/policies/contents/guardrails/appa.toml", | CODE |
| MEDIUM | …orm/backend/src/services/scheduled-run-conversation.ts | 346 | // agentic loop); its request holds the full history and its response the final | COMMENT |
| MEDIUM | platform/backend/src/services/apps/app-run-link.ts | 3 | // Kept in one place so scaffold/edit/render/publish surface an identical, | COMMENT |
| MEDIUM | platform/backend/src/services/apps/app-mcp-backing.ts | 71 | // (APP_LAUNCH_TOOL_NAME) so it shows up in the guardrails UI and is | COMMENT |
| MEDIUM | platform/backend/src/services/apps/app-mcp-backing.ts | 166 | // non-model readers (the guardrails UI) current too. | COMMENT |
| MEDIUM | platform/shared/access-control.ts | 1655 | // Any member: the Connect page shows whether guardrails apply to their | COMMENT |
| MEDIUM | platform/archestra-rs/openappa-rs/src/replay.rs | 635 | const NOOP_URL: &str = "http://127.0.0.1:9/api/guardrails-policy/annotators/noop"; | CODE |
| MEDIUM | …tform/archestra-rs/sandbox-core/src/backends/dagger.rs | 605 | /// warm-base user-setup command: scaffold the uv project, create the venv at | COMMENT |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/dataeval__dingo.json | 44 | "readme": "<div align=\"center\" xmlns=\"http://www.w3.org/1999/html\">\n<!-- logo -->\n<p align=\"center\">\n <img s | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/dataeval__dingo.json | 44 | "readme": "<div align=\"center\" xmlns=\"http://www.w3.org/1999/html\">\n<!-- logo -->\n<p align=\"center\">\n <img s | CODE |
| MEDIUM⚡ | …a/mcp-evaluations/conechoai__openai-websearch-mcp.json | 28 | "readme": "# OpenAI WebSearch MCP Server\n\nThis MCP server provides access to OpenAI's websearch functionality throug | CODE |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| 132 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ackend/src/utils/structured-output-repair.unit.test.ts | 33 | '{"scores": [{"index": 0, "score": 9}]}\n```\nLet me know if you need more.', | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/joelio__stocky.json | 36 | "readme": "# <div align=\"center\"><br/>Stocky<br/>*Find beautiful royalty-free stock images | CODE |
| MEDIUM | …alog/data/mcp-evaluations/mahdin75__geoserver-mcp.json | 45 | "readme": "# GeoServer MCP Server\n\n<p align=\"center\">\n <img src=\"https://badge.mcpx.dev?type=server\" title=\"M | CODE |
| MEDIUM | …uations/automata-labs-team__mcp-server-playwright.json | 19 | "readme": "<h1 align=\"center\">MCP Server Playwright</h1>\n<p align=\"center\">\n <a href=\"https://www.automatalabs | CODE |
| MEDIUM | …talog/data/mcp-evaluations/vivekvells__mcp-pandoc.json | 18 | "readme": "[](https://pypi.python.org/pypi/mcp-pandoc)\n[](https://www.video-jungl | CODE |
| MEDIUM | …delcontextprotocol__servers-archived__src__sentry.json | 18 | "readme": "# mcp-server-sentry: A Sentry MCP server\n\n## Overview\n\nA Model Context Protocol server for retrieving a | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| MEDIUM | …data/mcp-evaluations/misiektoja__kill-process-mcp.json | 18 | "readme": "# kill-process-mcp 🔫\n\nCross-platform **MCP** (Model Context Protocol) server exposing tools to **list and | CODE |
| LOW⚡ | …catalog/data/mcp-evaluations/r-huijts__strava-mcp.json | 59 | "readme": "[](https://mseep.a | CODE |
| MEDIUM⚡ | …p-evaluations/alchemyplatform__alchemy-mcp-server.json | 29 | "readme": "# Alchemy MCP Server\n\nA Model Context Protocol (MCP) server that enables AI agents to interact with Alche | CODE |
| MEDIUM⚡ | …uations/couchbase-ecosystem__mcp-server-couchbase.json | 81 | "readme": "# Couchbase MCP Server\n\nAn [MCP](https://modelcontextprotocol.io/) server implementation of Couchbase tha | CODE |
| MEDIUM⚡ | …ta/mcp-evaluations/vitorpavinato__ncbi-mcp-server.json | 36 | "readme": "# NCBI Literature Search MCP Server\n\nA Model Context Protocol (MCP) server for searching NCBI databases, | CODE |
| LOW⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/romthpt__mcp-xrpl.json | 36 | "readme": "# XRP Ledger Model Context Protocol Server\n\n[![MCP Server](https://glama.ai/mcp/servers/%40RomThpt/mcp-xr | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/mahdin75__gis-mcp.json | 18 | "readme": "# GIS MCP Server\n\n<div align=\"center\">\n <h3>✨ Want to perform accurate geospatial analysis in your ch | CODE |
| LOW⚡ | mcp-catalog/data/mcp-evaluations/mahdin75__gis-mcp.json | 18 | "readme": "# GIS MCP Server\n\n<div align=\"center\">\n <h3>✨ Want to perform accurate geospatial analysis in your ch | CODE |
| MEDIUM | …mcp-evaluations/mcpdotdirect__starknet-mcp-server.json | 18 | "readme": "# Starknet MCP Server\n\n[](h | CODE |
| MEDIUM | …g/data/mcp-evaluations/r-huijts__firstcycling-mcp.json | 18 | "readme": "[](https://m | CODE |
| MEDIUM | …-catalog/data/mcp-evaluations/hustcc__mcp-mermaid.json | 51 | "readme": "# <img src=\"https://mermaid.js.org/favicon.svg\" height=\"24\"/> MCP Mermaid ![](https://badge.mcpx.dev?ty | CODE |
| MEDIUM⚡ | …mcp-evaluations/wonderwhy-er__desktopcommandermcp.json | 18 | "readme": "# Desktop Commander MCP\n### Search, update, manage files and run terminal commands with AI\n\n[![npm downl | CODE |
| MEDIUM⚡ | …mcp-evaluations/wonderwhy-er__desktopcommandermcp.json | 18 | "readme": "# Desktop Commander MCP\n### Search, update, manage files and run terminal commands with AI\n\n[![npm downl | CODE |
| LOW | …ata/mcp-evaluations/makenotion__notion-mcp-server.json | 18 | "readme": "# Notion MCP Server\n\n> [!NOTE] \n> \n> We’ve introduced **Notion MCP**, a remote MCP server with the foll | CODE |
| MEDIUM | …ata/mcp-evaluations/makenotion__notion-mcp-server.json | 18 | "readme": "# Notion MCP Server\n\n> [!NOTE] \n> \n> We’ve introduced **Notion MCP**, a remote MCP server with the foll | CODE |
| MEDIUM | …a/mcp-evaluations/yuchenssr__multi-ai-advisor-mcp.json | 84 | "readme": "# Multi-Model Advisor\n## (锵锵四人行)\n\n[![smithery badge](https://smithery.ai/badge/@YuChenSSR/multi-ai-advis | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/awslabs__mcp.json | 18 | "readme": "# AWS MCP Servers\n\nA suite of specialized MCP servers that help you get the most out of AWS, wherever you | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/ezyang__codemcp.json | 33 | "readme": "# codemcp\n\nMake Claude Desktop a pair programming assistant by installing codemcp. With\nit, you can dir | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/tacticlaunch__mcp-linear.json | 28 | "readme": "<p align=\"center\">\n <img src=\"https://github.com/tacticlaunch/mcp-linear/blob/main/docs/linear-app-ico | CODE |
| MEDIUM | …log/data/mcp-evaluations/gwbischof__outsource-mcp.json | 181 | "readme": "# Outsource MCP\n\nAn MCP (Model Context Protocol) server that enables AI applications to outsource tasks t | CODE |
| MEDIUM | …ations/modelcontextprotocol__servers__src__memory.json | 28 | "readme": "# Knowledge Graph Memory Server\n\nA basic implementation of persistent memory using a local knowledge grap | CODE |
| MEDIUM | …g/data/mcp-evaluations/willvelida__mcp-afl-server.json | 18 | "readme": "# 🏈 AFL (Australian Football League) MCP Server\n\nThis is a Model Context Protocol (MCP) server that provi | CODE |
| MEDIUM | …log/data/mcp-evaluations/zinja-coder__jadx-ai-mcp.json | 18 | "readme": "<div align=\"center\">\n\n# JADX-AI-MCP (Part of Zin MCP Suite)\n\n⚡ Fully automated MCP server + JADX plug | CODE |
| MEDIUM⚡ | …og/data/mcp-evaluations/doggybee__mcp-server-ccxt.json | 108 | "readme": "# CCXT MCP Server\n\n<img src=\"assets/ccxt-logo.png\" alt=\"CCXT Logo\" width=\"100\" height=\"100\"/>\n\n | CODE |
| MEDIUM | …alog/data/mcp-evaluations/dealexpress__mcp-server.json | 44 | "readme": "# @dealx/mcp-server\n\nThis is a Model Context Protocol (MCP) server for the [DealX platform](https://dealx | CODE |
| MEDIUM⚡ | …-evaluations/circleci-public__mcp-server-circleci.json | 36 | "readme": "# CircleCI MCP Server\n\n[![GitHub](https://img.shields.io/github/license/CircleCI-Public/mcp-server-circle | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/iunera__druid-mcp-server.json | 40 | "readme": "# Druid MCP Server\n[![Trust Score](https://archestra.ai/mcp-catalog/api/badge/quality/iunera/druid-mcp-ser | CODE |
| MEDIUM⚡ | …p-catalog/data/mcp-evaluations/mmntm__weblate-mcp.json | 64 | "readme": "# Weblate MCP Server\n\nA [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that prov | CODE |
| LOW | …alog/data/mcp-evaluations/chemiguel23__memorymesh.json | 18 | "readme": "# MemoryMesh\n[](./CHANGELOG.md)\n[](./LICENSE)\n[](https://pypi.org/project/ma | CODE |
| MEDIUM | …delcontextprotocol__servers-archived__src__sqlite.json | 18 | "readme": "# SQLite MCP Server\n\n## Overview\nA Model Context Protocol (MCP) server implementation that provides data | CODE |
| MEDIUM⚡ | …ta/mcp-evaluations/amineelkouhen__mcp-cockroachdb.json | 89 | "readme": "# CockroachDB MCP Server\n[](https://op | CODE |
| MEDIUM⚡ | …a/mcp-evaluations/lamemind__mcp-server-multiverse.json | 25 | "readme": "# Multiverse MCP Server\n\nA middleware server that enables multiple isolated instances of the same MCP ser | CODE |
| MEDIUM | …g/data/mcp-evaluations/clickhouse__mcp-clickhouse.json | 117 | "readme": "# ClickHouse MCP Server\n\n[](https://pypi.o | CODE |
| LOW | …/mcp-evaluations/lucygoodchild__mcp-national-rail.json | 36 | "readme": "[](https://smithery.ai/server/ | CODE |
| MEDIUM⚡ | …tions/victoriametrics-community__mcp-victorialogs.json | 58 | "readme": "# VictoriaLogs MCP Server\n\n[![Latest Release](https://img.shields.io/github/v/release/VictoriaMetrics-Com | CODE |
| MEDIUM | …-catalog/data/mcp-evaluations/hustcc__mcp-echarts.json | 68 | "readme": "# <img src=\"https://echarts.apache.org/zh/images/favicon.png\" height=\"24\"/> MCP ECharts ![](https://bad | CODE |
| LOW | …og/data/mcp-evaluations/ttommyth__interactive-mcp.json | 40 | "readme": "# interactive-mcp\n\n[](https://www.npmjs.com/p | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/apify__actors-mcp-server.json | 28 | "readme": "<h1 align=\"center\">\n <a href=\"https://mcp.apify.com\">\n <picture>\n <source media | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/apify__actors-mcp-server.json | 28 | "readme": "<h1 align=\"center\">\n <a href=\"https://mcp.apify.com\">\n <picture>\n <source media | CODE |
| MEDIUM⚡ | …data/mcp-evaluations/khan2a__telephony-mcp-server.json | 87 | "readme": "\n![Ruff]( | CODE |
| MEDIUM⚡ | …og/data/mcp-evaluations/panther-labs__mcp-panther.json | 35 | "readme": "# Panther MCP Server\n\n[![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astr | CODE |
| MEDIUM | …/mcp-evaluations/nickclyde__duckduckgo-mcp-server.json | 27 | "readme": "# DuckDuckGo Search MCP Server\n\n[![smithery badge](https://smithery.ai/badge/@nickclyde/duckduckgo-mcp-se | CODE |
| MEDIUM⚡ | …ntextprotocol__servers-archived__src__google-maps.json | 28 | "readme": "# Google Maps MCP Server\n\nMCP Server for the Google Maps API.\n\n## Tools\n\n1. `maps_geocode`\n\n - Co | CODE |
| MEDIUM | …cp-evaluations/vectorize-io__vectorize-mcp-server.json | 44 | "readme": "# Vectorize MCP Server\n\nA Model Context Protocol (MCP) server implementation that integrates with [Vector | CODE |
| MEDIUM⚡ | …alog/data/mcp-evaluations/zoomeye-ai__mcp_zoomeye.json | 28 | "readme": "# 🚀 ZoomEye MCP Server\n\nA Model Context Protocol (MCP) server that provides network asset information bas | CODE |
| MEDIUM | …data/mcp-evaluations/mcpdotdirect__evm-mcp-server.json | 18 | "readme": "# EVM MCP Server\n\n\n![EVM Networks](htt | CODE |
| MEDIUM | …-catalog/data/mcp-evaluations/hmk__box-mcp-server.json | 60 | "readme": "# box-mcp-server\n\n![CI](https://github.com/hmk/box-mcp-server/actions/workflows/jest.yml/badge.svg?branch | CODE |
| LOW | …-catalog/data/mcp-evaluations/hmk__box-mcp-server.json | 60 | "readme": "# box-mcp-server\n\n![CI](https://github.com/hmk/box-mcp-server/actions/workflows/jest.yml/badge.svg?branch | CODE |
| MEDIUM⚡ | …g/data/mcp-evaluations/octomind-dev__octomind-mcp.json | 72 | "readme": "# octomind mcp server: let agents create and manage e2e tests\n\n<img src=\"images/light.png\" alt=\"Octomi | CODE |
| 133 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | platform/pnpm-workspace.yaml | 21 | "@better-auth/sso": 1.6.22 | COMMENT |
| LOW | platform/pnpm-workspace.yaml | 101 | # CVE-2026-101898, CVE-2026-101901, CVE-2026-101903, CVE-2026-101905, | COMMENT |
| LOW | platform/pnpm-workspace.yaml | 121 | picomatch@<4: '>=2.3.2' | COMMENT |
| LOW | platform/pnpm-workspace.yaml | 141 | # fix) keeps its own resolution. | COMMENT |
| LOW | platform/pnpm-workspace.yaml | 161 | '@grpc/grpc-js': '>=1.14.5 <2' | COMMENT |
| LOW | platform/pnpm-workspace.yaml | 181 | # Also resolve private GitHub emails through its verified-email API. | COMMENT |
| LOW | platform/pnpm-workspace.yaml | 201 | # Turbopack cannot resolve the shim's intentionally dynamic import. We use only | COMMENT |
| LOW | platform/mcp_server_docker_image/pyproject.toml | 21 | # python-multipart < 0.0.30: CVE-2026-53539 (uncontrolled resource consumption) | COMMENT |
| LOW | platform/docker/dagger-engine.quickstart.yaml | 1 | # Dagger Engine for the quickstart image's embedded KinD cluster. | COMMENT |
| LOW | platform/docker/scripts/docker-entrypoint.sh | 1 | #!/bin/sh | COMMENT |
| LOW | platform/frontend/playwright.config.ts | 81 | // (dev/Tiltfile.dev). Without it, a self-started server would share | COMMENT |
| LOW | platform/frontend/next.config.ts | 21 | // alongside the main one without colliding on `.next/dev/lock`. | COMMENT |
| LOW | platform/frontend/next.config.ts | 141 | destination: `${MCP_CATALOG_API_BASE_URL}/:path*`, | COMMENT |
| LOW | platform/frontend/src/app/chat/page.client.tsx | 581 | // Carried into createInitialConversation's onSuccess so a new conversation | COMMENT |
| LOW | platform/frontend/src/app/chat/page.client.tsx | 3021 | // This is a one-shot nudge, intentionally NOT a persistent gate: it fires only | COMMENT |
| LOW | platform/frontend/src/app/chat/page.client.tsx | 3081 | ); | COMMENT |
| LOW | platform/frontend/src/app/chat/page.client.tsx | 3101 | COMMENT | |
| LOW | platform/frontend/src/app/chat/prompt-input.tsx | 801 | const isQueueingSubmit = | COMMENT |
| LOW | platform/frontend/src/app/connection/connect-page.tsx | 1 | "use client"; | COMMENT |
| LOW | …/frontend/src/app/connection/connect-command-panel.tsx | 221 | const requestedPlatform = searchParams.get("platform"); | COMMENT |
| LOW | …tend/src/app/mcp/registry/_parts/deployment-status.tsx | 361 | // Determine overall state. Hibernated deployments are healthy (idle-scaled, | COMMENT |
| LOW | …end/src/app/mcp/registry/_parts/InternalMCPCatalog.tsx | 341 | COMMENT | |
| LOW | …ntend/src/app/mcp/registry/_parts/mcp-catalog-form.tsx | 521 | ); | COMMENT |
| LOW | …_parts/select-mcp-server-credential-type-and-teams.tsx | 101 | { mcpRegistry: ["update"] }, | COMMENT |
| LOW | …ontend/src/app/mcp/registry/_parts/cascade-decision.ts | 121 | // Hoisted above the serverType branches: remote catalogs rename their | COMMENT |
| LOW | …m/frontend/src/app/internal-test/msw-handlers/route.ts | 1 | // Control endpoint for per-test MSW handler overrides used by Playwright | COMMENT |
| LOW | …/frontend/src/app/internal-test/api/[...path]/route.ts | 1 | // The mock backend for server-side rendering. | COMMENT |
| LOW | platform/frontend/src/app/skills/[id]/page.client.tsx | 181 | // been removed) silently resolves to the first. `?tab=usage` is the shape | COMMENT |
| LOW | platform/frontend/src/app/_parts/app-shell.tsx | 81 | const isAppRuntime = pathname.startsWith("/a/"); | COMMENT |
| LOW | platform/frontend/src/app/_parts/app-shell.tsx | 141 | <> | COMMENT |
| LOW | platform/frontend/src/app/_parts/with-auth-check.tsx | 121 | // it is a sink for a bundle pushed in over automation, not something a | COMMENT |
| LOW | platform/frontend/src/app/_parts/with-auth-check.tsx | 181 | // screen is meant to be rid of — so hold the background steady and say | COMMENT |
| LOW | …ontend/src/components/agent-version-history-dialog.tsx | 241 | // A handled failure resolves to null and a transport failure rejects. | COMMENT |
| LOW | platform/frontend/src/components/agent-form.tsx | 1021 | // result into every `tools/list` it answers — so narrowing this to `agent` | COMMENT |
| LOW | platform/frontend/src/components/agent-form.tsx | 1321 | // existing agent starts from its stored value. Seeded here rather than only | COMMENT |
| LOW | platform/frontend/src/components/agent-form.tsx | 1541 | // The environment comes from the form rather than the stored agent: the | COMMENT |
| LOW | platform/frontend/src/components/ui/dialog.tsx | 81 | // without a `DialogTrigger`, so Radix has no trigger ref to restore focus to | COMMENT |
| LOW | platform/frontend/src/components/ui/dialog.tsx | 221 | // ::before the opaque backdrop. It lives here rather than on the | COMMENT |
| LOW | platform/frontend/src/components/ui/sidebar.tsx | 361 | className={cn( | COMMENT |
| LOW | …tform/frontend/src/components/ui/secret-input.utils.ts | 1 | // Attributes that keep browser and extension password managers away from | COMMENT |
| LOW | …nts/app-session-recording/app-gallery-share-dialog.tsx | 101 | const [state, setState] = useState<ShareState>({ step: "idle" }); | COMMENT |
| LOW | …nts/app-session-recording/app-gallery-share-dialog.tsx | 181 | if (!validation.ok) { | COMMENT |
| LOW | …nts/app-session-recording/app-gallery-share-dialog.tsx | 241 | // click (the token is cached, so the next run proceeds to the | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 521 | [validBundle], | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 741 | // app cards' explicit widths are the only intrinsic contribution (the | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 1241 | setPlayState((state) => (state === "playing" ? "paused" : state)); | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 2501 | [sandboxResult.baseUrl], | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 2641 | // Recomputed only when the shown version (or the sandbox origin) changes — | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 2841 | }} | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 5461 | toPlaybackMs: (rawMs: number) => number; | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 5501 | /** Whether a gap falls inside a stretch the author spent using the app. */ | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 5581 | // instant because a burst stamped at one timestamp cascades in | COMMENT |
| LOW | …/frontend/src/components/mcp-app/app-settings-form.tsx | 61 | ]; | COMMENT |
| LOW | …rm/frontend/src/components/chat/chat-messages.utils.ts | 881 | // swallow, a chip for a hook run, and the MCP App panel for an early | COMMENT |
| LOW | …m/frontend/src/components/chat/conversation-header.tsx | 121 | // Radix won't fire onValueChange when the clicked tab already equals the | COMMENT |
| LOW | …form/frontend/src/components/chat/right-side-panel.tsx | 101 | // page or when the recorder feature is off. | COMMENT |
| LOW | …frontend/src/components/chat/resizable-right-panel.tsx | 201 | // clamped to the same bounds as a hand resize. Re-runs whenever the ideal | COMMENT |
| LOW | …tform/frontend/src/components/ai-elements/response.tsx | 141 | "[&_h3]:text-lg [&_h3]:font-semibold [&_h3]:my-2", | COMMENT |
| LOW | …tform/frontend/src/components/ai-elements/response.tsx | 161 | // Fix streamdown code blocks - remove padding from code elements inside them | COMMENT |
| LOW | …ntend/src/components/agent-pages/agent-detail-page.tsx | 121 | COMMENT | |
| 350 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | platform/docs-screenshots/src/dataset.ts | 298 | print(f"Action '{tool_name}' blocked: requires supervisor approval.", file=sys.stderr) | CODE |
| HIGH | …/src/k8s/agent-runtime/sandbox-supervisor.unit.test.ts | 97 | print('\\x1b[2J\\x1b[Hframe:%dx%d' % (width, height), flush=True) | CODE |
| HIGH | …/src/k8s/agent-runtime/sandbox-supervisor.unit.test.ts | 140 | print('First answer', flush=True) | CODE |
| HIGH | …/src/k8s/agent-runtime/sandbox-supervisor.unit.test.ts | 144 | print('Follow-up: ' + message, flush=True) | CODE |
| HIGH | …d/src/services/agent-connection-setup/agents/cursor.ts | 32 | print(f"Updated {path}")`; | CODE |
| HIGH | …d/src/services/agent-connection-setup/agents/cursor.ts | 87 | elif [ ! -e "$CURSOR_SKILLS_DIR" ]; then | CODE |
| HIGH | …/services/agent-connection-setup/agents/copilot-cli.ts | 155 | print("\\n".join(seen)) | CODE |
| HIGH⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 616 | print("unknown") | CODE |
| HIGH⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 621 | print("add") | CODE |
| HIGH⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 627 | return None | CODE |
| HIGH⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 737 | print("unavailable") | CODE |
| HIGH⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 741 | print("unavailable") | CODE |
| HIGH⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 744 | print("kept") | CODE |
| HIGH⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 756 | print("unavailable") | CODE |
| HIGH⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 758 | print("enabled") | CODE |
| HIGH | …/services/agent-connection-setup/agents/claude-code.ts | 156 | print(f"Updated {path}")`; | CODE |
| HIGH | …/services/agent-connection-setup/agents/claude-code.ts | 373 | print(f"Updated {path}")`; | CODE |
| HIGH | …/services/agent-connection-setup/agents/claude-code.ts | 638 | return None | CODE |
| HIGH | …/services/agent-connection-setup/agents/claude-code.ts | 672 | print("matching") | CODE |
| HIGH | …/services/agent-connection-setup/agents/claude-code.ts | 674 | print("replace") | CODE |
| HIGH | …src/services/agent-connection-setup/agents/opencode.ts | 186 | print(f"Updated {path}")`; | CODE |
| HIGH⚡ | …src/services/agent-connection-setup/agents/opencode.ts | 198 | print(f"{provider_id}={actual or 'unset'}") | CODE |
| HIGH⚡ | …src/services/agent-connection-setup/agents/opencode.ts | 200 | print(str(error))`; | CODE |
| HIGH | …src/services/agent-connection-setup/agents/opencode.ts | 213 | elif command -v python3 >/dev/null 2>&1; then | CODE |
| HIGH | …src/services/agent-connection-setup/agents/opencode.ts | 261 | elif command -v python3 >/dev/null 2>&1; then | CODE |
| HIGH | …src/services/agent-connection-setup/agents/opencode.ts | 378 | elif [ -d "$SKILLS_DIR/.git" ]; then | CODE |
| HIGH | …rvices/agent-connection-setup/agents/claude-desktop.ts | 95 | return True | CODE |
| HIGH | …rvices/agent-connection-setup/agents/claude-desktop.ts | 98 | return False | CODE |
| HIGH | …rvices/agent-connection-setup/agents/claude-desktop.ts | 109 | print('Complete Claude subscription sign-in in the browser. Your token stays on this computer.', flush=True) | CODE |
| HIGH | …rvices/agent-connection-setup/agents/claude-desktop.ts | 138 | elif executable.is_file(): | CODE |
| HIGH | …rvices/agent-connection-setup/agents/claude-desktop.ts | 155 | print('Quit Claude Desktop from its app menu to finish setup. Waiting up to two minutes...', flush=True) | CODE |
| HIGH | …rvices/agent-connection-setup/agents/claude-desktop.ts | 160 | elif sys.platform == 'win32': | CODE |
| HIGH | …rvices/agent-connection-setup/agents/claude-desktop.ts | 252 | print('Applying Desktop setup. Finish any active tasks before continuing.', flush=True) | CODE |
| HIGH⚡ | …rvices/agent-connection-setup/agents/claude-desktop.ts | 277 | print('Desktop is configured. Send a message and check LLM Proxy Logs.') | CODE |
| HIGH⚡ | …rvices/agent-connection-setup/agents/claude-desktop.ts | 279 | print('In Desktop Settings > Connectors, connect the gateway and finish its browser sign-in.') | CODE |
| HIGH⚡ | …rvices/agent-connection-setup/agents/claude-desktop.ts | 281 | print('In Desktop Settings > Plugins, install your shared marketplace.') | CODE |
| HIGH⚡ | …rvices/agent-connection-setup/agents/claude-desktop.ts | 283 | print('In Desktop Settings > Import, bring over your Claude.ai conversations. Rerun the import later to add newe | CODE |
| HIGH⚡ | …rvices/agent-connection-setup/agents/claude-desktop.ts | 285 | print('The subscription token lasts up to one year. Rerun setup after expiration or revocation.') | CODE |
| HIGH⚡ | …rvices/agent-connection-setup/agents/claude-desktop.ts | 286 | print('To switch back, rerun the previous deployment installer or select a manually created inference profile.') | CODE |
| HIGH⚡ | …rvices/agent-connection-setup/agents/claude-desktop.ts | 292 | print('Desktop setup failed: ' + str(error), file=sys.stderr) | CODE |
| HIGH | …services/agent-connection-setup/guard/startup-guard.ts | 1089 | elif [ "$elapsed" -ge "$NOTICE_AFTER_SECONDS" ]; then | CODE |
| HIGH | …services/agent-connection-setup/guard/startup-guard.ts | 1193 | elif [ "$OPEN_MENU" = "1" ]; then | CODE |
| HIGH⚡ | …services/agent-connection-setup/guard/startup-guard.ts | 1391 | elif [ -f "$HOME/.bash_login" ]; then | CODE |
| HIGH⚡ | …services/agent-connection-setup/guard/startup-guard.ts | 1393 | elif [ -f "$HOME/.profile" ]; then | CODE |
| HIGH | …-connection-setup/guard/startup-guard.zsh.unit.test.ts | 87 | print(r.stdout) | STRING |
| HIGH | …-connection-setup/guard/startup-guard.zsh.unit.test.ts | 88 | print(r.stderr) | STRING |
| HIGH | …es/agent-connection-setup/guard/clients/claude-code.ts | 48 | return None | CODE |
| HIGH | …es/agent-connection-setup/guard/clients/claude-code.ts | 50 | return None | CODE |
| HIGH | …es/agent-connection-setup/guard/clients/claude-code.ts | 115 | elif settings_status not in ("missing", "empty"): | CODE |
| HIGH⚡ | …vices/agent-connection-setup/guard/clients/opencode.ts | 248 | elif command -v python3 >/dev/null 2>&1; then | CODE |
| HIGH | …vices/agent-connection-setup/guard/clients/opencode.ts | 277 | elif command -v python3 >/dev/null 2>&1; then | CODE |
| HIGH | …vices/agent-connection-setup/guard/clients/opencode.ts | 294 | elif command -v python3 >/dev/null 2>&1; then | CODE |
| HIGH | …vices/agent-connection-setup/guard/clients/opencode.ts | 511 | elif command -v python3 >/dev/null 2>&1; then | CODE |
| HIGH | …vices/agent-connection-setup/guard/clients/opencode.ts | 522 | elif command -v python3 >/dev/null 2>&1; then | CODE |
| HIGH | …services/agent-connection-setup/guard/clients/codex.ts | 149 | elif [ -f "$CONFIG" ] && grep -q 'archestra:codex-direct:root' "$CONFIG"; then | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | migration-kit/references/install.md | 51 | c.sign_in("admin@example.com", "password") | CODE |
| LOW⚡ | platform/docs-screenshots/src/dataset.ts | 383 | workspaceName: "Acme Corp", | CODE |
| LOW⚡ | platform/docs-screenshots/src/dataset.ts | 393 | workspaceName: "Acme Corp", | CODE |
| LOW⚡ | platform/docs-screenshots/src/dataset.ts | 403 | workspaceName: "Acme Corp", | CODE |
| LOW | platform/docs-screenshots/src/env.ts | 16 | process.env.ARCHESTRA_AUTH_ADMIN_EMAIL ?? "admin@example.com"; | CODE |
| LOW | platform/frontend/tests-integration/mcp-install.spec.ts | 182 | .fill("fake-token"); | CODE |
| LOW | …dentity-providers/_parts/role-mapping-form.ee.test.tsx | 50 | email: "admin@example.com", | CODE |
| LOW | …form/frontend/src/app/chat/prompt-input-tools.test.tsx | 94 | placeholder: "placeholder", | CODE |
| LOW | platform/frontend/src/app/chat/prompt-input.test.tsx | 513 | "placeholder", | CODE |
| LOW | platform/frontend/src/app/chat/prompt-input.test.tsx | 941 | "placeholder", | CODE |
| LOW | …uth/_components/auth-view-with-error-handling.test.tsx | 179 | await user.type(screen.getByLabelText("Email"), "user@example.com"); | CODE |
| LOW | …app/mcp/registry/_parts/mcp-catalog-form.auth.test.tsx | 183 | user: { id: "test-user", email: "admin@example.com" }, | CODE |
| LOW | …mcp/registry/_parts/mcp-server-attention-list.test.tsx | 252 | ownerEmail: "admin@example.com", | CODE |
| LOW | …rontend/src/app/mcp/registry/[id]/page.client.test.tsx | 521 | ownerEmail: "admin@example.com", | CODE |
| LOW | …rontend/src/app/mcp/registry/[id]/page.client.test.tsx | 569 | within(installationRow).getByText("admin@example.com"), | CODE |
| LOW | …connectors/_parts/connector-user-groups-table.test.tsx | 311 | name: "Acme Inc", | CODE |
| LOW | …connectors/_parts/connector-user-groups-table.test.tsx | 331 | expect(screen.getByText("Acme Inc")).toBeInTheDocument(); | CODE |
| LOW | …rc/app/knowledge/connectors/_parts/acl-badges.test.tsx | 84 | new Map([["group:notion_workspace-members-ws-1", "Acme Inc"]]) | CODE |
| LOW | …nowledge-bases/_parts/create-connector-dialog.test.tsx | 382 | await user.type(screen.getByLabelText(/^Email$/), "user@example.com"); | CODE |
| LOW | …nowledge-bases/_parts/create-connector-dialog.test.tsx | 406 | target: { value: "user@example.com" }, | CODE |
| LOW | …nowledge-bases/_parts/create-connector-dialog.test.tsx | 423 | email: "user@example.com", | CODE |
| LOW | …nowledge-bases/_parts/create-connector-dialog.test.tsx | 692 | target: { value: "admin@example.com" }, | CODE |
| LOW | …nowledge-bases/_parts/create-connector-dialog.test.tsx | 719 | email: "admin@example.com", | CODE |
| LOW | …dge/knowledge-bases/_parts/connector-dialog-config.tsx | 1195 | ? "user@example.com" | CODE |
| LOW | …dge/knowledge-bases/_parts/connector-dialog-config.tsx | 1268 | ? "user@example.com" | CODE |
| LOW | …dge/knowledge-bases/_parts/connector-dialog-config.tsx | 1540 | ? "user@example.com" | CODE |
| LOW | …/knowledge-bases/_parts/edit-connector-dialog.test.tsx | 411 | "placeholder", | CODE |
| LOW | platform/frontend/src/app/skills/new/page.test.tsx | 157 | "placeholder", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 119 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 144 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 187 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 210 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 231 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 249 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 284 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 312 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 341 | email: "user@example.com", | CODE |
| LOW⚡ | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 357 | email: "user@example.com", | CODE |
| LOW⚡ | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 358 | name: "user@example.com", | CODE |
| LOW⚡ | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 367 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 416 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 453 | email: "user@example.com", | CODE |
| LOW | …atform/frontend/src/app/_parts/rum-tracker.ee.test.tsx | 53 | email: "user@example.com", | CODE |
| LOW | …end/src/app/account/_components/sessions-card.test.tsx | 45 | user: { id: "user-1", email: "user@example.com" }, | CODE |
| LOW | …nd/src/app/account/_components/two-factor-row.test.tsx | 41 | user: { id: "user-1", email: "user@example.com", twoFactorEnabled }, | CODE |
| LOW | …d/src/app/account/_components/profile-section.test.tsx | 27 | email: "admin@example.com", | CODE |
| LOW | …d/src/app/account/_components/profile-section.test.tsx | 53 | expect(screen.getByText("admin@example.com")).toBeVisible(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 8 | { userId: "user-1", name: "John Doe", email: "john@example.com" }, | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 38 | expect(screen.queryByText("John Doe")).not.toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 69 | expect(screen.getByText("John Doe")).toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 152 | expect(screen.getByText("John Doe")).toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 193 | expect(screen.queryByText("John Doe")).not.toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 215 | expect(screen.queryByText("John Doe")).not.toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 312 | expect(screen.getByText("John Doe")).toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 329 | expect(screen.queryByText("John Doe")).not.toBeInTheDocument(); | CODE |
| LOW | …tend/src/components/llm-provider-api-key-form.test.tsx | 607 | screen.getByLabelText(/Base URL/).getAttribute("placeholder"), | CODE |
| LOW | …end/src/components/sidebar-warnings-accordion.test.tsx | 54 | data: { user: { email: "someone@example.org" } }, | CODE |
| LOW | …end/src/components/sidebar-warnings-accordion.test.tsx | 127 | data: { user: { email: "someone@example.org" } }, | CODE |
| LOW | …atform/frontend/src/components/invite-by-link-card.tsx | 94 | placeholder="user@example.com" | CODE |
| LOW | …tform/frontend/src/components/agent-chat-apps.test.tsx | 850 | dmOwnerEmail: "admin@example.com", | CODE |
| 226 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | platform/backend/src/routes/proxy/adapters/gemini.ts | 741 | // Handle inline data (images generated by Gemini) | COMMENT |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| HIGH⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| HIGH⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| HIGH | …atalog/data/mcp-evaluations/ahujasid__blender-mcp.json | 18 | "readme": "\n\n# BlenderMCP - Blender Model Context Protocol Integration\n\nBlenderMCP connects Blender to Claude AI t | CODE |
| HIGH | …atalog/data/mcp-evaluations/ahujasid__blender-mcp.json | 18 | "readme": "\n\n# BlenderMCP - Blender Model Context Protocol Integration\n\nBlenderMCP connects Blender to Claude AI t | CODE |
| HIGH | …og/data/mcp-evaluations/abrinsmead__mindpilot-mcp.json | 44 | "readme": "# Mindpilot MCP\n[](https | CODE |
| HIGH | …og/data/mcp-evaluations/abrinsmead__mindpilot-mcp.json | 44 | "readme": "# Mindpilot MCP\n[](https | CODE |
| HIGH⚡ | …log/data/mcp-evaluations/hyperb1iss__lucidity-mcp.json | 18 | "readme": "# ✨ Lucidity MCP 🔍\n\n<div align=\"center\">\n\n[![Python 3.13+](https://img.shields.io/badge/python-3.13+- | CODE |
| HIGH⚡ | …log/data/mcp-evaluations/hyperb1iss__lucidity-mcp.json | 18 | "readme": "# ✨ Lucidity MCP 🔍\n\n<div align=\"center\">\n\n[![Python 3.13+](https://img.shields.io/badge/python-3.13+- | CODE |
| HIGH⚡ | …ions/modelcontextprotocol__servers__src__postgres.json | 18 | "readme": "# Model Context Protocol servers\n\nThis repository is a collection of *reference implementations* for the | CODE |
| HIGH⚡ | …ions/modelcontextprotocol__servers__src__postgres.json | 18 | "readme": "# Model Context Protocol servers\n\nThis repository is a collection of *reference implementations* for the | CODE |
| HIGH | …catalog/data/mcp-evaluations/admica__filescopemcp.json | 25 | "readme": "# FileScopeMCP (Model Context Protocol) Server\n\n**✨ Instantly understand and visualize your codebase stru | CODE |
| HIGH | …catalog/data/mcp-evaluations/admica__filescopemcp.json | 25 | "readme": "# FileScopeMCP (Model Context Protocol) Server\n\n**✨ Instantly understand and visualize your codebase stru | CODE |
| HIGH | …atalog/data/mcp-evaluations/kukapay__thegraph-mcp.json | 28 | "readme": "# TheGraph MCP Server\n\nAn MCP server that powers AI agents with indexed blockchain data from [The Graph]( | CODE |
| HIGH⚡ | …__agentic_longterm_memory__src__notion_mcp_server.json | 106 | "readme": "# Notion MCP Server V2 🚀\n\nA comprehensive **Model Context Protocol (MCP) server** for Notion integration | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/sitbon__magg.json | 28 | "readme": "# 🧲 **Magg** - *The MCP Aggregator*\n\n[//]: # ([![Tests](https://img.shields.io/github/actions/workflo | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/sitbon__magg.json | 28 | "readme": "# 🧲 **Magg** - *The MCP Aggregator*\n\n[//]: # ([![Tests](https://img.shields.io/github/actions/workflo | CODE |
| HIGH⚡ | …log/data/mcp-evaluations/crystaldba__postgres-mcp.json | 35 | "readme": "<div align=\"center\">\n\n<img src=\"assets/postgres-mcp-pro.png\" alt=\"Postgres MCP Pro Logo\" width=\"60 | CODE |
| HIGH⚡ | …log/data/mcp-evaluations/crystaldba__postgres-mcp.json | 35 | "readme": "<div align=\"center\">\n\n<img src=\"assets/postgres-mcp-pro.png\" alt=\"Postgres MCP Pro Logo\" width=\"60 | CODE |
| HIGH⚡ | …talog/data/mcp-evaluations/jeannier__homebrew-mcp.json | 28 | "readme": "# Homebrew MCP Python Server\n\nA Model Context Protocol (MCP) server for Homebrew package management **on | CODE |
| HIGH⚡ | …talog/data/mcp-evaluations/jeannier__homebrew-mcp.json | 28 | "readme": "# Homebrew MCP Python Server\n\nA Model Context Protocol (MCP) server for Homebrew package management **on | CODE |
| HIGH⚡ | …g/data/mcp-evaluations/delano__postman-mcp-server.json | 28 | "readme": "# Postman MCP Server\n[](https://smithery.ai | CODE |
| HIGH⚡ | …atalog/data/mcp-evaluations/genomoncology__biomcp.json | 18 | "readme": "# BioMCP: Biomedical Model Context Protocol\n\nBioMCP is an open source (MIT License) toolkit that empowers | CODE |
| HIGH⚡ | …atalog/data/mcp-evaluations/genomoncology__biomcp.json | 18 | "readme": "# BioMCP: Biomedical Model Context Protocol\n\nBioMCP is an open source (MIT License) toolkit that empowers | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/adawalli__nexus.json | 70 | "readme": "<!-- markdownlint-disable MD033 MD041 -->\n\n<div align=\"center\">\n\n# 🔍 Nexus MCP Server\n\n**AI integra | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/adawalli__nexus.json | 70 | "readme": "<!-- markdownlint-disable MD033 MD041 -->\n\n<div align=\"center\">\n\n# 🔍 Nexus MCP Server\n\n**AI integra | CODE |
| HIGH⚡ | …ations/modelcontextprotocol__servers__src__sqlite.json | 18 | "readme": "# Model Context Protocol servers\n\nThis repository is a collection of *reference implementations* for the | CODE |
| HIGH⚡ | …ations/modelcontextprotocol__servers__src__sqlite.json | 18 | "readme": "# Model Context Protocol servers\n\nThis repository is a collection of *reference implementations* for the | CODE |
| HIGH⚡ | …ons/modelcontextprotocol__servers__src__puppeteer.json | 18 | "readme": "# Model Context Protocol servers\n\nThis repository is a collection of *reference implementations* for the | CODE |
| HIGH⚡ | …ons/modelcontextprotocol__servers__src__puppeteer.json | 18 | "readme": "# Model Context Protocol servers\n\nThis repository is a collection of *reference implementations* for the | CODE |
| HIGH⚡ | …/mcp-evaluations/4everland__4everland-hosting-mcp.json | 28 | "readme": "# 4EVERLAND Hosting MCP Server\n\n[](https:/ | CODE |
| HIGH⚡ | …/mcp-evaluations/4everland__4everland-hosting-mcp.json | 28 | "readme": "# 4EVERLAND Hosting MCP Server\n\n[](https:/ | CODE |
| HIGH | …ata/mcp-evaluations/spacecode-ai__spacebridge-mcp.json | 75 | "readme": "# SpaceBridge-MCP\n\nA Model Context Protocol (MCP) server that integrates with the SpaceBridge REST API (h | CODE |
| HIGH | …ata/mcp-evaluations/spacecode-ai__spacebridge-mcp.json | 75 | "readme": "# SpaceBridge-MCP\n\nA Model Context Protocol (MCP) server that integrates with the SpaceBridge REST API (h | CODE |
| HIGH | …g/data/mcp-evaluations/mckinsey__vizro__vizro-mcp.json | 18 | "readme": "<!-- <a href=\"https://glama.ai/mcp/servers/@mckinsey/vizro\">\n <img width=\"380\" height=\"200\" src=\"h | CODE |
| HIGH | …g/data/mcp-evaluations/mckinsey__vizro__vizro-mcp.json | 18 | "readme": "<!-- <a href=\"https://glama.ai/mcp/servers/@mckinsey/vizro\">\n <img width=\"380\" height=\"200\" src=\"h | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ontend/src/app/mcp/registry/_parts/mcp-server-card.tsx | 264 | // ── Shareable edit deep-link (`?edit=<catalogId>`) ────────────────────── | COMMENT |
| MEDIUM⚡ | …ontend/src/app/mcp/registry/_parts/cascade-decision.ts | 127 | // ── Manual ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ontend/src/app/mcp/registry/_parts/cascade-decision.ts | 134 | // ── Multitenant shared-pod rollout ─────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ontend/src/app/mcp/registry/_parts/cascade-decision.ts | 144 | // ── Skip / rename via forward-compat ───────────────────────────── | COMMENT |
| MEDIUM | …ontend/src/app/mcp/registry/_parts/cascade-decision.ts | 165 | // ── Auto ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …tform/frontend/src/components/mcp-app/mcp-app-view.tsx | 1427 | // ── Host-theme bridging helpers ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …rontend/src/components/chat/mcp-app-container.test.tsx | 10 | // ── Mock heavy dependencies before module import ───────────────────────────── | COMMENT |
| MEDIUM | …rontend/src/components/chat/mcp-app-container.test.tsx | 121 | // ── Import component under test after mocks ─────────────────────────────────── | COMMENT |
| MEDIUM | …rontend/src/components/chat/mcp-app-container.test.tsx | 150 | // ── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …rontend/src/components/chat/mcp-app-container.test.tsx | 164 | // ── Tests ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/frontend/src/lib/auth/oauth-session.ts | 15 | // ─── Key constants ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/frontend/src/lib/auth/oauth-session.ts | 34 | // ─── Helpers ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/frontend/src/lib/auth/oauth-session.ts | 160 | // ─── Processing guard (prevents duplicate callback processing) ─────── | COMMENT |
| MEDIUM | platform/frontend/src/lib/auth/oauth-session.ts | 178 | // ─── Getters ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/frontend/src/lib/auth/oauth-session.ts | 293 | // ─── Cleanup ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/models/statistics.ts | 1770 | // ─── Private helpers ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/models/statistics.ts | 2434 | // ─── Billing-mode-aware cost aggregates ───────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/models/statistics.ts | 2509 | // ─── App / skill cost assembly ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …form/backend/src/static/archestra-app-recording-sdk.js | 5 | // ── Session recorder + replay driver ────────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/routes/internal-mcp-catalog.ts | 1075 | // ── Rename ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/routes/mcp-proxy.test.ts | 15 | // ── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/routes/mcp-proxy.test.ts | 58 | // ── Tests ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/shared/cascade-scenarios.ts | 118 | // ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/shared/cascade-scenarios.ts | 120 | // ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | platform/shared/cascade-scenarios.ts | 263 | // ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | platform/shared/cascade-scenarios.ts | 265 | // ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | platform/shared/cascade-scenarios.ts | 268 | // ── description-only across all shapes (the headline path) ───────── | COMMENT |
| MEDIUM | platform/shared/cascade-scenarios.ts | 372 | // ── runtime field changes (cascade SHOULD fire) ──────────────────── | COMMENT |
| MEDIUM | platform/shared/cascade-scenarios.ts | 625 | // ── identity / nothing-changed sanity ───────────────────────────── | COMMENT |
| MEDIUM | platform/shared/statistics.ts | 139 | // ─── Internal ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …tform/e2e-tests/tests/mcp-hibernation-topology.spec.ts | 162 | // ── Multitenant fixture: two installs, one physical Deployment ────────── | COMMENT |
| MEDIUM | platform/dev/vault-k8s-manual-test.yaml | 1 | # ============================================================ | COMMENT |
| MEDIUM⚡ | platform/dev/vault-k8s-manual-test.yaml | 73 | # ============================================================ | COMMENT |
| MEDIUM⚡ | platform/dev/vault-k8s-manual-test.yaml | 75 | # ============================================================ | COMMENT |
| MEDIUM⚡ | platform/dev/vault-k8s-manual-test.yaml | 77 | # ============================================================ | COMMENT |
| MEDIUM | platform/dev/vault-k8s-manual-test.yaml | 95 | # ============================================================ | COMMENT |
| MEDIUM | platform/dev/vault-k8s-manual-test.yaml | 97 | # ============================================================ | COMMENT |
| MEDIUM | platform/dev/grafana/generate-pg-dashboard-variants.py | 24 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | platform/dev/grafana/generate-pg-dashboard-variants.py | 26 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | platform/dev/grafana/generate-pg-dashboard-variants.py | 39 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 7 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 9 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 58 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 60 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 123 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 125 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | platform/dev/grafana/install-dashboards.sh | 141 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | platform/dev/grafana/install-dashboards.sh | 143 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 169 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 171 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 192 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 194 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| MEDIUM⚡ | …cp-evaluations/sapientpants__sonarqube-mcp-server.json | 67 | "readme": "# SonarQube MCP Server\n\n[![CI](https://github.com/sapientpants/sonarqube-mcp-server/actions/workflows/ci. | CODE |
| MEDIUM⚡ | …cp-evaluations/sapientpants__sonarqube-mcp-server.json | 67 | "readme": "# SonarQube MCP Server\n\n[![CI](https://github.com/sapientpants/sonarqube-mcp-server/actions/workflows/ci. | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/nyxn-ai__nyxdocs.json | 70 | "readme": "# NyxDocs - Cryptocurrency Documentation MCP Server\n\n[![Python](https://img.shields.io/badge/python-3.11+ | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/nyxn-ai__nyxdocs.json | 70 | "readme": "# NyxDocs - Cryptocurrency Documentation MCP Server\n\n[![Python](https://img.shields.io/badge/python-3.11+ | CODE |
| MEDIUM⚡ | …p-catalog/data/mcp-evaluations/mmntm__weblate-mcp.json | 64 | "readme": "# Weblate MCP Server\n\nA [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that prov | CODE |
| MEDIUM⚡ | …p-catalog/data/mcp-evaluations/mmntm__weblate-mcp.json | 64 | "readme": "# Weblate MCP Server\n\nA [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that prov | CODE |
| 9 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 35 | "readme": "# Video Editor MCP server\n\n[](https://www.video-jungl | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 35 | "readme": "# Video Editor MCP server\n\n[](https://www.video-jungl | CODE |
| HIGH | …og/data/mcp-evaluations/ekkyarmandi__ticktick-mcp.json | 28 | "readme": "# TickTick MCP\n\nA Model Context Protocol (MCP) server that provides tools for integrating TickTick task m | CODE |
| HIGH | …g/data/mcp-evaluations/carsol__monarch-mcp-server.json | 43 | "readme": "# Monarch Money MCP Server\n\nA Model Context Protocol (MCP) server that provides read-only access to Monar | CODE |
| HIGH⚡ | …alog/data/mcp-evaluations/chunkydotdev__bldbl-mcp.json | 54 | "readme": "# @bldbl/mcp\n\n**Official MCP client for Buildable - AI-powered development platform that makes any projec | CODE |
| HIGH⚡ | …alog/data/mcp-evaluations/chunkydotdev__bldbl-mcp.json | 54 | "readme": "# @bldbl/mcp\n\n**Official MCP client for Buildable - AI-powered development platform that makes any projec | CODE |
| HIGH⚡ | …alog/data/mcp-evaluations/chunkydotdev__bldbl-mcp.json | 54 | "readme": "# @bldbl/mcp\n\n**Official MCP client for Buildable - AI-powered development platform that makes any projec | CODE |
| HIGH | …/data/mcp-evaluations/mrexodia__user-feedback-mcp.json | 18 | "readme": "# User Feedback MCP\r\n\r\nSimple [MCP Server](https://modelcontextprotocol.io/introduction) to enable a hu | CODE |
| HIGH | …/data/mcp-evaluations/mrexodia__user-feedback-mcp.json | 18 | "readme": "# User Feedback MCP\r\n\r\nSimple [MCP Server](https://modelcontextprotocol.io/introduction) to enable a hu | CODE |
| HIGH⚡ | …ns/victoriametrics-community__mcp-victoriametrics.json | 44 | "readme": "# VictoriaMetrics MCP Server\n\n[![Latest Release](https://img.shields.io/github/v/release/VictoriaMetrics- | CODE |
| HIGH⚡ | …/mcp-evaluations/jjsantos01__jupyter-notebook-mcp.json | 26 | "readme": "# JupyterMCP - Jupyter Notebook Model Context Protocol Integration\n\nJupyterMCP connects [Jupyter Notebook | CODE |
| HIGH⚡ | …/mcp-evaluations/jjsantos01__jupyter-notebook-mcp.json | 26 | "readme": "# JupyterMCP - Jupyter Notebook Model Context Protocol Integration\n\nJupyterMCP connects [Jupyter Notebook | CODE |
| HIGH⚡ | …catalog/data/mcp-evaluations/rinadelph__agent-mcp.json | 34 | "readme": "# Agent-MCP\r\n\r\n[](https://deepwiki.com/rinadelph/Agent-M | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | platform/scripts/e2e-local.sh | 60 | # Create a patched kind config with our cluster name | COMMENT |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/r-huijts__strava-mcp.json | 59 | "readme": "[](https://mseep.a | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/iunera__druid-mcp-server.json | 40 | "readme": "# Druid MCP Server\n[![Trust Score](https://archestra.ai/mcp-catalog/api/badge/quality/iunera/druid-mcp-ser | CODE |
| MEDIUM⚡ | …a/mcp-evaluations/lamemind__mcp-server-multiverse.json | 25 | "readme": "# Multiverse MCP Server\n\nA middleware server that enables multiple isolated instances of the same MCP ser | CODE |
| MEDIUM⚡ | …ata/mcp-evaluations/gbrigandi__mcp-server-thehive.json | 52 | "readme": "# MCP Server for TheHive\n\nAn MCP (Model Context Protocol) server that provides AI models and automation t | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/gitkraken__gk-cli.json | 18 | "readme": "# 🚀 GitKraken CLI\n\n`gk` is GitKraken on the command line. The core functionality is focused on \"Work Ite | CODE |
| MEDIUM⚡ | …-catalog/data/mcp-evaluations/jwaxman19__qlik-mcp.json | 89 | "readme": "[](https://mseep.ai | CODE |
| MEDIUM | …g/data/mcp-evaluations/entanglr__zettelkasten-mcp.json | 36 | "readme": "# Zettelkasten MCP Server\n\nA Model Context Protocol (MCP) server that implements the Zettelkasten knowled | CODE |
| MEDIUM | …a/mcp-evaluations/bright-l01__networkx-mcp-server.json | 18 | "readme": "# NetworkX MCP Server\n\nA comprehensive Model Context Protocol (MCP) server providing advanced graph analy | CODE |
| MEDIUM⚡ | …-catalog/data/mcp-evaluations/bivex__kanboard-mcp.json | 56 | "readme": "# 🚀 Kanboard MCP Server\n\n> **Model Context Protocol (MCP) Server for Kanboard Integration**\n\nA powerful | CODE |
| MEDIUM⚡ | …cp-evaluations/co-browser__browser-use-mcp-server.json | 43 | "readme": "# browser-use-mcp-server\n\n<div align=\"center\">\n\n[![Twitter URL](https://img.shields.io/twitter/url/ht | CODE |
| MEDIUM⚡ | …a/mcp-evaluations/firstorderai__authenticator_mcp.json | 28 | "readme": "[](http | CODE |
| MEDIUM⚡ | …__agentic_longterm_memory__src__notion_mcp_server.json | 106 | "readme": "# Notion MCP Server V2 🚀\n\nA comprehensive **Model Context Protocol (MCP) server** for Notion integration | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/sitbon__magg.json | 28 | "readme": "# 🧲 **Magg** - *The MCP Aggregator*\n\n[//]: # ([![Tests](https://img.shields.io/github/actions/workflo | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/docker__hub-mcp.json | 35 | "readme": "# Docker Hub MCP Server\n[ | CODE |
| MEDIUM | …g/data/mcp-evaluations/ihor-sokoliuk__mcp-searxng.json | 44 | "readme": "# SearXNG MCP Server\n\nAn [MCP server](https://modelcontextprotocol.io/introduction) implementation that i | CODE |
| MEDIUM | …/mcp-evaluations/marcelmarais__spotify-mcp-server.json | 60 | "readme": "<div align=\"center\" style=\"display: flex; align-items: center; justify-content: center; gap: 10px;\">\n< | CODE |
| MEDIUM | …-evaluations/jagan-shanmugam__climatiq-mcp-server.json | 28 | "readme": "# Climatiq MCP Server\n[](https://opens | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/ukkit__memcord.json | 28 | "readme": "<table>\n <tr>\n <td>\n <img src=\"assets/image/memcord_1024.png\" width=\"256\">\n </td>\n | CODE |
| MEDIUM | …valuations/esignaturescom__mcp-server-esignatures.json | 28 | "readme": "# mcp-server-esignatures MCP server\n\nMCP server for eSignatures (https://esignatures.com)\n\n<a href=\"ht | CODE |
| MEDIUM | …log/data/mcp-evaluations/xeroapi__xero-mcp-server.json | 44 | "readme": "# Xero MCP Server\n\nThis is a Model Context Protocol (MCP) server implementation for Xero. It provides a b | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/prisma__mcp.json | 18 | "readme": "## Overview\n\nThe [Model-Context-Protocol](https://modelcontextprotocol.io/introduction) (MCP) gives LLMs | CODE |
| MEDIUM | …atalog/data/mcp-evaluations/duaraghav8__mcpjungle.json | 28 | "readme": "<h1 align=\"center\">\n :deciduous_tree: MCPJungle :deciduous_tree:\n</h1>\n<p align=\"center\">\n Self-h | CODE |
| MEDIUM | …g/data/mcp-evaluations/mikechao__brave-search-mcp.json | 28 | "readme": "# Brave Search MCP Server\n\nAn MCP Server implementation that integrates the [Brave Search API](https://br | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/jlowin__fastmcp.json | 18 | "readme": "<div align=\"center\">\n\n<!-- omit in toc -->\n# FastMCP v2 🚀\n\n<strong>The fast, Pythonic way to build M | CODE |
| MEDIUM | …-catalog/data/mcp-evaluations/yuna0x0__hackmd-mcp.json | 36 | "readme": "# HackMD MCP Server\n\nA Model Context Protocol (MCP) server that interfaces with the [HackMD API](https:// | CODE |
| MEDIUM | …-catalog/data/mcp-evaluations/wegotdocs__open-mcp.json | 28 | "readme": "# OpenMCP\n\nhttps://www.open-mcp.org\n\nOpenMCP is both:\n\n1. a standard for converting web APIs into MCP | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/rinadelph__agent-mcp.json | 34 | "readme": "# Agent-MCP\r\n\r\n[](https://deepwiki.com/rinadelph/Agent-M | CODE |
| MEDIUM⚡ | …/mcp-evaluations/cbcoutinho__nextcloud-mcp-server.json | 15 | "readme": "# Nextcloud MCP Server\n\n[![Docker Image](https://img.shields.io/badge/docker-ghcr.io/cbcoutinho/nextcloud | CODE |
| MEDIUM⚡ | …ns/bucketco__bucket-javascript-sdk__packages__cli.json | 23 | "readme": "# Reflag CLI\n\nCommand-line interface for interacting with Reflag services. The CLI allows you to manage a | CODE |
| MEDIUM | …log/data/mcp-evaluations/sooperset__mcp-atlassian.json | 218 | "readme": "# MCP Atlassian\n\n\n | COMMENT |
| LOW | platform/e2e-tests/tests/oauth-self-hosted.spec.ts | 97 | // Step 3: Extract code and state from the redirect URL | COMMENT |
| LOW⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| LOW⚡ | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 20 | "readme": "# Unified Context Layer (UCL) MCP Server\n\nUnified Context Layer (UCL) is a multi-tenant Model Context Pro | CODE |
| LOW⚡ | mcp-catalog/data/mcp-evaluations/apecloud__aperag.json | 36 | "readme": "# ApeRAG\n[](https://arch | CODE |
| LOW⚡ | …/data/mcp-evaluations/rashidazarang__airtable-mcp.json | 36 | "readme": "# Airtable MCP Server\n\n[![Trust Score](https://archestra.ai/mcp-catalog/api/badge/quality/rashidazarang/a | CODE |
| LOW⚡ | …g/data/mcp-evaluations/isnow890__naver-search-mcp.json | 36 | "readme": "# Naver Search MCP Server\n\n[](README-ko.md)\n\n[![T | CODE |
| LOW⚡ | mcp-catalog/data/mcp-evaluations/idosal__git-mcp.json | 31 | "readme": "# GitMCP\n\n<p align=\"center\">\n <img width=\"884\" alt=\"image\" src=\"https://github.com/user-attachme | CODE |
| LOW | …ations/quentincody__shopify-storefront-mcp-server.json | 51 | "readme": "# Shopify Storefront MCP Server\n\nThis server provides access to the Shopify Storefront API via MCP, allow | CODE |
| LOW⚡ | …ata/mcp-evaluations/langfuse__mcp-server-langfuse.json | 44 | "readme": "# Langfuse Prompt Management MCP Server\n\n[Model Context Protocol](https://github.com/modelcontextprotocol | CODE |
| LOW | …-catalog/data/mcp-evaluations/teddyzxcv__ntfy-mcp.json | 28 | "readme": "# ntfy-mcp: Your Friendly Task Completion Notifier\n\nWelcome to ntfy-mcp, the MCP server that keeps you ca | CODE |
| LOW⚡ | …talog/data/mcp-evaluations/coding-solo__godot-mcp.json | 36 | "readme": "\n# Godot MCP\n\n[![Github-sponsors](https://img.shields.io/badge/sponsor-30363D?style=for-the-badge&logo=G | CODE |
| LOW⚡ | …og/data/mcp-evaluations/line__line-bot-mcp-server.json | 36 | "readme": "[日本語版 READMEはこちら](README.ja.md)\n\n# LINE Bot MCP Server\n\n[ | COMMENT |
| LOW | platform/e2e-tests/tests/oauth-self-hosted.spec.ts | 97 | // Step 3: Extract code and state from the redirect URL | COMMENT |
| LOW⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| LOW⚡ | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 20 | "readme": "# Unified Context Layer (UCL) MCP Server\n\nUnified Context Layer (UCL) is a multi-tenant Model Context Pro | CODE |
| LOW⚡ | mcp-catalog/data/mcp-evaluations/apecloud__aperag.json | 36 | "readme": "# ApeRAG\n[](https://arch | CODE |
| LOW⚡ | …/data/mcp-evaluations/rashidazarang__airtable-mcp.json | 36 | "readme": "# Airtable MCP Server\n\n[![Trust Score](https://archestra.ai/mcp-catalog/api/badge/quality/rashidazarang/a | CODE |
| LOW⚡ | …g/data/mcp-evaluations/isnow890__naver-search-mcp.json | 36 | "readme": "# Naver Search MCP Server\n\n[](README-ko.md)\n\n[![T | CODE |
| LOW⚡ | mcp-catalog/data/mcp-evaluations/idosal__git-mcp.json | 31 | "readme": "# GitMCP\n\n<p align=\"center\">\n <img width=\"884\" alt=\"image\" src=\"https://github.com/user-attachme | CODE |
| LOW | …ations/quentincody__shopify-storefront-mcp-server.json | 51 | "readme": "# Shopify Storefront MCP Server\n\nThis server provides access to the Shopify Storefront API via MCP, allow | CODE |
| LOW⚡ | …ata/mcp-evaluations/langfuse__mcp-server-langfuse.json | 44 | "readme": "# Langfuse Prompt Management MCP Server\n\n[Model Context Protocol](https://github.com/modelcontextprotocol | CODE |
| LOW | …-catalog/data/mcp-evaluations/teddyzxcv__ntfy-mcp.json | 28 | "readme": "# ntfy-mcp: Your Friendly Task Completion Notifier\n\nWelcome to ntfy-mcp, the MCP server that keeps you ca | CODE |
| LOW⚡ | …talog/data/mcp-evaluations/coding-solo__godot-mcp.json | 36 | "readme": "\n# Godot MCP\n\n[![Github-sponsors](https://img.shields.io/badge/sponsor-30363D?style=for-the-badge&logo=G | CODE |
| LOW⚡ | …og/data/mcp-evaluations/line__line-bot-mcp-server.json | 36 | "readme": "[日本語版 READMEはこちら](README.ja.md)\n\n# LINE Bot MCP Server\n\n[: | CODE |
| HIGH | platform/agent_images/tests/mcp-startup.py | 387 | except ProcessLookupError: | CODE |
| HIGH | platform/agent_images/tests/mcp-startup.py | 380 | except ProcessLookupError: | CODE |
| HIGH | platform/agent_images/tests/hermes-startup.py | 124 | except ProcessLookupError: | CODE |
| HIGH | platform/backend/src/static/workspace-files.py | 135 | except FileExistsError: | CODE |
| HIGH | platform/backend/src/static/workspace-files.py | 321 | except FileNotFoundError: | CODE |
| HIGH | platform/backend/src/static/workspace-files.py | 90 | except FileNotFoundError: | CODE |
| HIGH | platform/backend/src/static/workspace-files.py | 116 | except FileNotFoundError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | migration-kit/install.py | 12 | CODE | |
| LOW | migration-kit/scripts/frontmatter.py | 26 | CODE | |
| LOW | migration-kit/scripts/discover.py | 18 | CODE | |
| LOW | migration-kit/scripts/contracts.py | 18 | CODE | |
| LOW | migration-kit/scripts/archestra_client.py | 20 | CODE | |
| LOW | migration-kit/scripts/apply.py | 22 | CODE | |
| LOW | platform/agent_images/tests/codex-failure.py | 14 | CODE | |
| LOW | .github/scripts/check-docs-mcp-tool-links.py | 13 | CODE | |
| LOW | .github/scripts/check-supply-chain-policy.py | 3 | CODE | |
| LOW | .github/scripts/check-docs-api-links.py | 16 | CODE | |
| LOW | .github/scripts/check-docs-permission-links.py | 13 | CODE | |
| LOW | .github/scripts/check-docs-links.py | 19 | CODE | |
| LOW | .github/scripts/check-docs-navigation.py | 12 | CODE | |
| LOW | .github/scripts/check-docs-image-policy.py | 3 | CODE | |
| LOW | .github/scripts/test_check_supply_chain_policy.py | 3 | CODE | |
| LOW | .github/scripts/check-docs-metric-links.py | 17 | CODE | |
| LOW | .github/scripts/check-docs-env-var-links.py | 18 | CODE | |
| LOW | ai-labs/tasks/median-salary/expected/generate.py | 19 | CODE | |
| LOW | …labs/tasks/ai-sre-cache-treadmill/expected/generate.py | 41 | CODE | |
| LOW | ai-labs/tasks/pcap-soc-triage/generate.py | 30 | CODE | |
| LOW | ai-labs/tasks/renewal-churn-risk/generate.py | 17 | CODE | |
| LOW | ai-labs/tasks/sqlite-orders/expected/generate.py | 25 | CODE | |
| LOW | ai-labs/tasks/ai-sre-fk-drain/expected/generate.py | 32 | CODE | |
| LOW | ai-labs/scripts/build_review_snapshot.py | 19 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | migration-kit/scripts/discover.py | 559 | CODE | |
| LOW | migration-kit/scripts/apply.py | 714 | CODE | |
| LOW | platform/agent_images/tests/mcp-startup.py | 53 | CODE | |
| LOW | platform/agent_images/tests/mcp-startup.py | 72 | CODE | |
| LOW | platform/agent_images/tests/mcp-startup.py | 224 | CODE | |
| LOW | platform/agent_images/tests/mcp-startup.py | 274 | CODE | |
| LOW | platform/agent_images/tests/codex-failure.py | 83 | CODE | |
| LOW | platform/agent_images/tests/hermes-startup.py | 29 | CODE | |
| LOW | platform/agent_images/tests/claude-auth.py | 18 | CODE | |
| LOW | platform/agent_images/tests/claude-auth.py | 64 | CODE | |
| LOW | platform/backend/src/static/workspace-files.py | 60 | CODE | |
| LOW | platform/backend/src/static/workspace-files.py | 220 | CODE | |
| LOW | platform/dev/grafana/generate-pg-dashboard-variants.py | 489 | CODE | |
| LOW | .github/scripts/check-docs-api-links.py | 37 | CODE | |
| LOW | .github/scripts/check-migration-upgrades.py | 68 | CODE | |
| LOW | .github/scripts/backport.py | 115 | CODE | |
| LOW | .github/scripts/test_ci_image_rollout.py | 162 | CODE | |
| LOW | ai-labs/tasks/expense-report-continue/verifier.py | 74 | CODE | |
| LOW | ai-labs/tasks/aec-material-json-takeoff/verifier.py | 139 | CODE | |
| LOW | …labs/tasks/ai-sre-cache-treadmill/expected/generate.py | 102 | CODE | |
| LOW | ai-labs/tasks/xlsx-live-formulas/verifier.py | 70 | CODE | |
| LOW | ai-labs/tasks/ai-sre-fk-drain/expected/generate.py | 85 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …vices/agent-connection-setup/setup-script.unit.test.ts | 706 | except Exception: pass | CODE |
| LOW | …nection-setup/payloads/managed-instructions-refresh.ts | 64 | except Exception: | CODE |
| LOW | …/services/agent-connection-setup/agents/copilot-cli.ts | 146 | except Exception: | CODE |
| LOW⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 615 | except Exception: | CODE |
| LOW⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 736 | except Exception: | CODE |
| LOW⚡ | …/services/agent-connection-setup/agents/claude-code.ts | 755 | except Exception: | CODE |
| LOW⚡ | …src/services/agent-connection-setup/agents/opencode.ts | 199 | except Exception as error: | CODE |
| LOW⚡ | …rvices/agent-connection-setup/agents/claude-desktop.ts | 291 | except Exception as error: | CODE |
| LOW | …ervices/agent-connection-setup/guard/clients/verify.ts | 41 | except Exception: | CODE |
| LOW | …es/agent-connection-setup/guard/clients/claude-code.ts | 66 | except Exception: | CODE |
| LOW | …es/agent-connection-setup/guard/clients/claude-code.ts | 121 | except Exception: | CODE |
| MEDIUM | …es/agent-connection-setup/guard/clients/claude-code.ts | 29 | def load_json(path): | CODE |
| LOW⚡ | …vices/agent-connection-setup/guard/clients/opencode.ts | 237 | except Exception: | CODE |
| LOW⚡ | ai-labs/tasks/aec-material-json-takeoff/verifier.py | 171 | except Exception as exc: # noqa: BLE001 -- any load failure means it is not a real workbook | CODE |
| LOW | ai-labs/scripts/publish_run.py | 158 | except Exception: | CODE |
| LOW | ai-labs/scripts/publish_run.py | 201 | except Exception: | CODE |
| LOW | ai-labs/scripts/publish_run.py | 229 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | platform/docker/scripts/docker-entrypoint.sh | 154 | # Check if cluster already exists | COMMENT |
| LOW | platform/docker/scripts/docker-entrypoint.sh | 370 | # Check if using external database (ARCHESTRA_DATABASE_URL or DATABASE_URL is set) | COMMENT |
| LOW | platform/benchmarks/setup-gcp-benchmark.sh | 54 | # Check if gcloud is installed | COMMENT |
| LOW⚡ | platform/dev/grafana/install-dashboards.sh | 146 | # Check if folder already exists | COMMENT |
| LOW | platform/helm/archestra/values.yaml | 548 | # Set useInClusterConfig to false and configure the secret below | COMMENT |
| LOW | …-catalog/data/mcp-evaluations/areweai__tsgram-mcp.json | 52 | "readme": "# TSGram MCP 🚀\n\n**Get Claude Code in your local project talking to Telegram in 3 minutes!**\n\n<img src=\ | CODE |
| LOW | …aluations/sanyambassi__thales-cdsp-csm-mcp-server.json | 19 | "readme": "# Thales CSM MCP Server\n\nSimple MCP server for Thales CipherTrust Secrets Management, powered by Akeyless | CODE |
| LOW⚡ | …-catalog/data/mcp-evaluations/bivex__kanboard-mcp.json | 56 | "readme": "# 🚀 Kanboard MCP Server\n\n> **Model Context Protocol (MCP) Server for Kanboard Integration**\n\nA powerful | CODE |
| LOW | mcp-catalog/data/mcp-evaluations/docker__hub-mcp.json | 35 | "readme": "# Docker Hub MCP Server\n[ | CODE |
| LOW | …-catalog/data/mcp-evaluations/tigranbs__mcgravity.json | 73 | "readme": "# McGravity\n\n<div align=\"center\">\n <img src=\"./assets/thumbnail.png\" alt=\"McGravity Thumbnail\" wi | CODE |
| LOW⚡ | …catalog/data/mcp-evaluations/rinadelph__agent-mcp.json | 34 | "readme": "# Agent-MCP\r\n\r\n[](https://deepwiki.com/rinadelph/Agent-M | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | ai-labs/tasks/invoice-approval/verifier.py | 72 | errors.append(f"{inv_id}: flagged invoice must have amount_cents=null, got {got_amount!r}") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | platform/scripts/e2e-lite.sh | 13 | # Usage: | COMMENT |
| LOW | platform/scripts/dev-stack.sh | 16 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | platform/frontend/public/mockServiceWorker.js | 124 | async function handleRequest(event, requestId, requestInterceptedAt) { | CODE |
| LOW | platform/agent_images/tests/hermes-startup.py | 29 | def run_task(self, root, mode): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ai-labs/scripts/publish_run.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | ai-labs/scripts/export_tensorboard.py | 24 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | platform/backend/src/routes/proxy/llm-proxy-handler.ts | 3897 | // TODO: Add test for metrics reported by the LLM proxy. It's not obvious since | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/scripts/test_release_publication.py | 49 | CODE |