CC Workflow Studio
This report summarizes scanner evidence for breaking-brake/cc-wf-studio, a TypeScript project with 5,443 GitHub stars. SynthScan examined 167,797 lines of code across 591 source files, recording 414 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 4.0 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 389 finding(s).
Are imports declared and package/API names verified? 8 finding(s).
Are wrappers, guards, and repeated structures necessary? 180 finding(s).
Which changes need focused human review? 414 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 414 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .claude/skills/pr-review-analysis/SKILL.md | 12 | ### Step 1: レビューコメントの取得 | COMMENT |
| LOW | .claude/skills/pr-review-analysis/SKILL.md | 22 | ### Step 2: 各指摘の検証 | COMMENT |
| LOW | .claude/skills/pr-review-analysis/SKILL.md | 33 | ### Step 3: 影響範囲の確認 | COMMENT |
| LOW | .claude/skills/pr-review-analysis/SKILL.md | 38 | ### Step 4: レポート出力 | COMMENT |
| LOW | .claude/skills/pr-review-analysis/SKILL.md | 69 | ### Step 5: レビューコメントへの返信 | COMMENT |
| LOW | packages/core/src/utils/workflow-validator.ts | 38 | // Step 1: Parse JSON | COMMENT |
| LOW⚡ | packages/core/src/utils/workflow-validator.ts | 49 | // Step 2: Type check | COMMENT |
| LOW⚡ | packages/core/src/utils/workflow-validator.ts | 59 | // Step 3: Required field validation | COMMENT |
| LOW⚡ | packages/core/src/utils/workflow-validator.ts | 68 | // Step 4: Field type validation | COMMENT |
| LOW | packages/core/src/utils/workflow-validator.ts | 89 | // Step 5: Return validation result | COMMENT |
| LOW | …/vscode/specs/001-ai-workflow-refinement/quickstart.md | 187 | // Step 1: Construct prompt | COMMENT |
| LOW | …/vscode/specs/001-ai-workflow-refinement/quickstart.md | 190 | // Step 2: Execute Claude Code CLI | COMMENT |
| LOW | …/vscode/specs/001-ai-workflow-refinement/quickstart.md | 201 | // Step 3: Parse workflow | COMMENT |
| LOW | …/vscode/specs/001-ai-workflow-refinement/quickstart.md | 215 | // Step 4: Validate workflow | COMMENT |
| LOW | …es/vscode/specs/001-slack-workflow-sharing/research.md | 128 | // Step 3: トークン交換 | COMMENT |
| LOW | …es/vscode/specs/001-slack-workflow-sharing/research.md | 142 | // Step 4: トークン保存 (VSCode Secret Storage) | COMMENT |
| LOW | …es/vscode/specs/001-slack-workflow-sharing/research.md | 145 | // Step 5: 成功レスポンス | COMMENT |
| LOW | packages/vscode/specs/001-mcp-node/quickstart.md | 277 | ### Step 1: Extend workflow-definition.ts | COMMENT |
| LOW | packages/vscode/specs/001-mcp-node/quickstart.md | 359 | ### Step 2: Create mcp-service.ts | COMMENT |
| LOW | packages/vscode/specs/001-mcp-node/quickstart.md | 579 | ### Step 3: Extend validate-workflow.ts | COMMENT |
| LOW | …de/resources/samples/github-issue-planning-sample.json | 417 | "prompt": "Verify the fix by following the steps below.\n\n## Step 1: Review the changes\nRun `git diff` to re | CODE |
| LOW⚡ | …vscode/src/extension/commands/slack-import-workflow.ts | 49 | // Step 1: Download workflow file from Slack | COMMENT |
| LOW⚡ | …vscode/src/extension/commands/slack-import-workflow.ts | 58 | // Step 2: Validate workflow file | COMMENT |
| LOW | …vscode/src/extension/commands/slack-import-workflow.ts | 91 | // Step 3: Select workspace for saving | COMMENT |
| LOW | …vscode/src/extension/commands/slack-import-workflow.ts | 141 | // Step 4: Determine file path | COMMENT |
| LOW | …vscode/src/extension/commands/slack-import-workflow.ts | 155 | // Step 4: Check if file exists (unless overwriting) | COMMENT |
| LOW⚡ | …vscode/src/extension/commands/slack-import-workflow.ts | 189 | // Step 5: Save workflow file | COMMENT |
| LOW⚡ | …vscode/src/extension/commands/slack-import-workflow.ts | 194 | // Step 6: Send success response with workflow data | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-connect-manual.ts | 40 | // Step 1: Get User Token (from parameter or Input Box) | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-connect-manual.ts | 71 | // Step 2: Validate User token and retrieve workspace info from Slack API (auth.test) | COMMENT |
| LOW⚡ | …/vscode/src/extension/commands/slack-connect-manual.ts | 90 | // Step 3: Clear existing connections before storing new one (same as delete → create flow) | COMMENT |
| LOW⚡ | …/vscode/src/extension/commands/slack-connect-manual.ts | 93 | // Step 4: Store connection in VSCode Secret Storage (User Token only, no Bot Token) | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-connect-manual.ts | 108 | // Step 5: Show success message (only when called from VSCode command) | COMMENT |
| LOW | …ges/vscode/src/extension/commands/roo-code-handlers.ts | 205 | // Step 1: Check if MCP servers need to be synced to .roo/mcp.json | COMMENT |
| LOW | …ges/vscode/src/extension/commands/roo-code-handlers.ts | 224 | // Step 2: Check for existing skill and ask for confirmation | COMMENT |
| LOW | …ges/vscode/src/extension/commands/roo-code-handlers.ts | 241 | // Step 3: Export workflow as skill to .roo/skills/{name}/SKILL.md | COMMENT |
| LOW⚡ | …ges/vscode/src/extension/commands/roo-code-handlers.ts | 260 | // Step 4: Sync MCP servers to .roo/mcp.json if confirmed | COMMENT |
| LOW⚡ | …ges/vscode/src/extension/commands/roo-code-handlers.ts | 266 | // Step 5: Start Zoo Code (or legacy Roo Code) with the skill launch command via Extension API | COMMENT |
| LOW | …ckages/vscode/src/extension/commands/codex-handlers.ts | 212 | // Step 1: Check if MCP servers need to be synced to $HOME/.codex/config.toml | COMMENT |
| LOW | …ckages/vscode/src/extension/commands/codex-handlers.ts | 231 | // Step 2: Check for existing skill and ask for confirmation | COMMENT |
| LOW | …ckages/vscode/src/extension/commands/codex-handlers.ts | 248 | // Step 3: Export workflow as skill to .codex/skills/{name}/SKILL.md | COMMENT |
| LOW⚡ | …ckages/vscode/src/extension/commands/codex-handlers.ts | 267 | // Step 4: Sync MCP servers to $HOME/.codex/config.toml if confirmed | COMMENT |
| LOW⚡ | …ckages/vscode/src/extension/commands/codex-handlers.ts | 273 | // Step 5: Keep the native interactive terminal UX and observe its local session transcript. | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 47 | // Step 1: Initialize OAuth flow (registers session with OAuth server) | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 50 | // Step 2: Open browser for user authentication | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 53 | // Step 3: Show progress message | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 61 | // Step 4: Poll for authorization code | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 73 | // Step 5: Exchange code for token | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 81 | // Step 6: Clear existing connections and store new one | COMMENT |
| LOW | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 99 | // Step 7: Invalidate Slack API client cache | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 53 | // Step 1: Detect sensitive data (if not overriding warning) | COMMENT |
| LOW⚡ | …/vscode/src/extension/commands/slack-share-workflow.ts | 85 | // Step 2: Extract workflow metadata | COMMENT |
| LOW⚡ | …/vscode/src/extension/commands/slack-share-workflow.ts | 88 | // Step 3: Get workspace name for deep link | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 99 | // Step 4: Post rich message card to channel (main message) | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 126 | // Step 5: Upload workflow file to thread as reply | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 144 | // Step 6: Update message with complete deep links | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 162 | // Step 7: Send success response | COMMENT |
| LOW⚡ | …ages/vscode/src/extension/commands/copilot-handlers.ts | 245 | // Step 1: Create a new chat session | COMMENT |
| LOW⚡ | …ages/vscode/src/extension/commands/copilot-handlers.ts | 247 | // Step 2: Send the query to the new session | COMMENT |
| LOW | …ages/vscode/src/extension/commands/copilot-handlers.ts | 355 | // Step 1: Check if MCP servers need to be synced to $HOME/.copilot/mcp-config.json | COMMENT |
| 45 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/core/src/utils/validate-workflow.ts | 53 | export function validateAIGeneratedWorkflow( | CODE |
| LOW | packages/core/src/utils/validate-workflow.ts | 191 | function validateSubAgentFlowReferences(workflow: Workflow): ValidationError[] { | CODE |
| LOW | packages/core/src/schema/queries.ts | 75 | export function clearFieldsNotAppliedToTarget( | CODE |
| LOW | packages/core/src/schema/claude-code-only.ts | 22 | export function workflowContainsClaudeCodeOnlyNodes(workflow: Workflow): boolean { | CODE |
| LOW | packages/core/src/schema/warnings.ts | 23 | export function collectIgnoredFieldWarnings(workflow: Workflow, target: ExportTarget): string[] { | CODE |
| LOW | packages/core/src/schema/warnings.ts | 43 | export function collectIgnoredSubAgentWarnings(workflow: Workflow, target: ExportTarget): string[] { | CODE |
| LOW | packages/core/src/schema/targets.ts | 51 | export function agentSkillProviderToTarget(provider: AgentSkillProvider): ExportTarget { | CODE |
| LOW | …ages/core/src/schema/nodes/ask-user-question-schema.ts | 70 | export function deriveAskUserQuestionUpdate( | CODE |
| LOW | packages/core/src/services/workflow-export.ts | 121 | export function generateSubAgentFlowAgentFile( | CODE |
| LOW | packages/core/src/services/workflow-prompt-generator.ts | 335 | function formatManualParameterConfigMode(node: McpNode): string[] { | CODE |
| LOW | packages/core/src/services/workflow-prompt-generator.ts | 388 | function formatAiParameterConfigMode(node: McpNode, provider: ExportProvider): string[] { | CODE |
| LOW | packages/core/src/services/workflow-prompt-generator.ts | 480 | function formatAiToolSelectionMode(node: McpNode, provider: ExportProvider): string[] { | CODE |
| LOW | packages/core/src/services/workflow-prompt-generator.ts | 565 | function getAskUserQuestionDescription(provider: ExportProvider): string { | CODE |
| LOW | packages/core/src/services/workflow-prompt-generator.ts | 663 | export function generateExecutionInstructions( | CODE |
| LOW | packages/core/src/services/agent-skill-export.ts | 92 | export function generateAgentSkillContent( | CODE |
| LOW | packages/mcp/src/tools.ts | 50 | function registerGetCurrentWorkflow(server: McpServer, adapter: WorkflowIoAdapter): void { | CODE |
| LOW | packages/mcp/src/tools.ts | 81 | function registerGetWorkflowSchema(server: McpServer, adapter: WorkflowIoAdapter): void { | CODE |
| LOW | packages/mcp/src/tools.ts | 169 | function registerListAvailableAgents( | CODE |
| LOW | packages/mcp/src/tools.ts | 367 | function registerHighlightGroupNode( | CODE |
| LOW | packages/mcp/src/file-adapter.ts | 197 | function extractFrontmatterDescription(content: string): string | undefined { | CODE |
| LOW | packages/cli/src/commands/install-skills.ts | 71 | export function registerInstallSkillsCommand(program: Command): void { | CODE |
| LOW | packages/cli/src/commands/uninstall-skills.ts | 55 | export function registerUninstallSkillsCommand(program: Command): void { | CODE |
| LOW | …/vscode/specs/001-ai-workflow-refinement/quickstart.md | 140 | export function constructRefinementPrompt( | CODE |
| LOW | …es/vscode/specs/001-ai-workflow-refinement/research.md | 184 | function constructRefinementPrompt( | CODE |
| LOW | …/vscode/specs/001-ai-workflow-refinement/data-model.md | 177 | function validateConversationHistory(history: ConversationHistory): ValidationResult { | CODE |
| LOW | …/vscode/specs/001-ai-workflow-refinement/data-model.md | 219 | function validateConversationMessage(message: ConversationMessage): string[] { | CODE |
| LOW | …/vscode/specs/001-ai-workflow-refinement/data-model.md | 303 | function migrateConversationHistory(history: any): ConversationHistory { | CODE |
| LOW | …es/vscode/specs/001-slack-workflow-sharing/research.md | 457 | export function buildWorkflowMessageBlocks(workflow: Workflow, author: string): any[] { | CODE |
| LOW | …vscode/specs/001-mcp-natural-language-mode/research.md | 204 | function validateNaturalLanguageDescription( | CODE |
| LOW | …pecs/001-mcp-natural-language-mode/extension-points.md | 439 | function formatDetailedModeMcpNode(node: McpNode): string[] { | CODE |
| LOW | …pecs/001-mcp-natural-language-mode/extension-points.md | 456 | function formatNaturalLanguageParamModeMcpNode(node: McpNode): string[] { | CODE |
| LOW | …pecs/001-mcp-natural-language-mode/extension-points.md | 484 | function formatFullNaturalLanguageModeMcpNode(node: McpNode): string[] { | CODE |
| LOW | …pecs/001-mcp-natural-language-mode/extension-points.md | 606 | export async function getAvailableToolsFromServer( | CODE |
| LOW | …es/vscode/specs/001-ai-workflow-generation/research.md | 126 | function validateAiGeneratedWorkflow(workflow: unknown): { valid: boolean; errors: string[] } { | CODE |
| LOW | packages/vscode/specs/001-cc-wf-studio/quickstart.md | 297 | export function registerDuplicateWorkflowCommand(context: vscode.ExtensionContext) { | CODE |
| LOW | packages/vscode/scripts/generate-editing-flow.ts | 105 | function extractTopLevelBulletList(content: string, heading: string): string[] { | CODE |
| LOW | …es/vscode/src/extension/utils/slack-message-builder.ts | 89 | export function buildWorkflowMessageBlocks( | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 176 | export function getGeminiProjectSkillsDir(): string | null { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 193 | export function getAntigravityUserSkillsDir(): string { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 206 | export function getAntigravityProjectSkillsDir(): string | null { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 236 | export function getCursorProjectSkillsDir(): string | null { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 286 | export function getCopilotUserMcpConfigPath(): string { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 316 | export function getCodexUserMcpConfigPath(): string { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 329 | export function getGeminiUserMcpConfigPath(): string { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 342 | export function getGeminiProjectMcpConfigPath(): string | null { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 359 | export function getAntigravityUserMcpConfigPath(): string { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 374 | export function getCursorUserMcpConfigPath(): string { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 387 | export function getRooProjectMcpConfigPath(): string | null { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 404 | export function getInstalledPluginsJsonPath(): string { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 417 | export function getClaudeSettingsJsonPath(): string { | CODE |
| LOW | packages/vscode/src/extension/utils/path-utils.ts | 430 | export function getKnownMarketplacesJsonPath(): string { | CODE |
| LOW | packages/vscode/src/extension/commands/mcp-handlers.ts | 564 | export async function handleDeleteMcpBearerToken( | CODE |
| LOW | packages/vscode/src/extension/commands/mcp-handlers.ts | 599 | export async function handleCheckMcpBearerToken( | CODE |
| LOW | …vscode/src/extension/commands/slack-import-workflow.ts | 32 | export async function handleImportWorkflowFromSlack( | CODE |
| LOW | …src/extension/commands/slack-description-generation.ts | 32 | export async function handleGenerateSlackDescription( | CODE |
| LOW | …src/extension/commands/slack-description-generation.ts | 119 | function constructDescriptionPrompt(workflowJson: string, targetLanguage: string): string { | CODE |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 33 | export async function handleShareWorkflowToSlack( | CODE |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 219 | export async function handleListSlackWorkspaces( | CODE |
| LOW | packages/vscode/src/extension/commands/open-editor.ts | 191 | export function registerOpenEditorCommand( | CODE |
| LOW | …ages/vscode/src/extension/commands/copilot-handlers.ts | 467 | export async function handleExportForCopilotCli( | CODE |
| 103 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/core/src/utils/workflow-validator.ts | 38 | // Step 1: Parse JSON | COMMENT |
| LOW⚡ | packages/core/src/utils/workflow-validator.ts | 49 | // Step 2: Type check | COMMENT |
| LOW⚡ | packages/core/src/utils/workflow-validator.ts | 59 | // Step 3: Required field validation | COMMENT |
| LOW⚡ | packages/core/src/utils/workflow-validator.ts | 68 | // Step 4: Field type validation | COMMENT |
| LOW | packages/core/src/utils/workflow-validator.ts | 89 | // Step 5: Return validation result | COMMENT |
| LOW | …de/resources/samples/github-issue-planning-sample.json | 417 | "prompt": "Verify the fix by following the steps below.\n\n## Step 1: Review the changes\nRun `git diff` to re | CODE |
| LOW⚡ | …vscode/src/extension/commands/slack-import-workflow.ts | 49 | // Step 1: Download workflow file from Slack | COMMENT |
| LOW⚡ | …vscode/src/extension/commands/slack-import-workflow.ts | 58 | // Step 2: Validate workflow file | COMMENT |
| LOW | …vscode/src/extension/commands/slack-import-workflow.ts | 91 | // Step 3: Select workspace for saving | COMMENT |
| LOW | …vscode/src/extension/commands/slack-import-workflow.ts | 141 | // Step 4: Determine file path | COMMENT |
| LOW | …vscode/src/extension/commands/slack-import-workflow.ts | 155 | // Step 4: Check if file exists (unless overwriting) | COMMENT |
| LOW⚡ | …vscode/src/extension/commands/slack-import-workflow.ts | 189 | // Step 5: Save workflow file | COMMENT |
| LOW⚡ | …vscode/src/extension/commands/slack-import-workflow.ts | 194 | // Step 6: Send success response with workflow data | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-connect-manual.ts | 40 | // Step 1: Get User Token (from parameter or Input Box) | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-connect-manual.ts | 71 | // Step 2: Validate User token and retrieve workspace info from Slack API (auth.test) | COMMENT |
| LOW⚡ | …/vscode/src/extension/commands/slack-connect-manual.ts | 90 | // Step 3: Clear existing connections before storing new one (same as delete → create flow) | COMMENT |
| LOW⚡ | …/vscode/src/extension/commands/slack-connect-manual.ts | 93 | // Step 4: Store connection in VSCode Secret Storage (User Token only, no Bot Token) | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-connect-manual.ts | 108 | // Step 5: Show success message (only when called from VSCode command) | COMMENT |
| LOW | …ges/vscode/src/extension/commands/roo-code-handlers.ts | 205 | // Step 1: Check if MCP servers need to be synced to .roo/mcp.json | COMMENT |
| LOW | …ges/vscode/src/extension/commands/roo-code-handlers.ts | 224 | // Step 2: Check for existing skill and ask for confirmation | COMMENT |
| LOW | …ges/vscode/src/extension/commands/roo-code-handlers.ts | 241 | // Step 3: Export workflow as skill to .roo/skills/{name}/SKILL.md | COMMENT |
| LOW⚡ | …ges/vscode/src/extension/commands/roo-code-handlers.ts | 260 | // Step 4: Sync MCP servers to .roo/mcp.json if confirmed | COMMENT |
| LOW⚡ | …ges/vscode/src/extension/commands/roo-code-handlers.ts | 266 | // Step 5: Start Zoo Code (or legacy Roo Code) with the skill launch command via Extension API | COMMENT |
| LOW | …ckages/vscode/src/extension/commands/codex-handlers.ts | 212 | // Step 1: Check if MCP servers need to be synced to $HOME/.codex/config.toml | COMMENT |
| LOW | …ckages/vscode/src/extension/commands/codex-handlers.ts | 231 | // Step 2: Check for existing skill and ask for confirmation | COMMENT |
| LOW | …ckages/vscode/src/extension/commands/codex-handlers.ts | 248 | // Step 3: Export workflow as skill to .codex/skills/{name}/SKILL.md | COMMENT |
| LOW⚡ | …ckages/vscode/src/extension/commands/codex-handlers.ts | 267 | // Step 4: Sync MCP servers to $HOME/.codex/config.toml if confirmed | COMMENT |
| LOW⚡ | …ckages/vscode/src/extension/commands/codex-handlers.ts | 273 | // Step 5: Keep the native interactive terminal UX and observe its local session transcript. | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 47 | // Step 1: Initialize OAuth flow (registers session with OAuth server) | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 50 | // Step 2: Open browser for user authentication | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 53 | // Step 3: Show progress message | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 61 | // Step 4: Poll for authorization code | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 73 | // Step 5: Exchange code for token | COMMENT |
| LOW⚡ | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 81 | // Step 6: Clear existing connections and store new one | COMMENT |
| LOW | …s/vscode/src/extension/commands/slack-connect-oauth.ts | 99 | // Step 7: Invalidate Slack API client cache | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 53 | // Step 1: Detect sensitive data (if not overriding warning) | COMMENT |
| LOW⚡ | …/vscode/src/extension/commands/slack-share-workflow.ts | 85 | // Step 2: Extract workflow metadata | COMMENT |
| LOW⚡ | …/vscode/src/extension/commands/slack-share-workflow.ts | 88 | // Step 3: Get workspace name for deep link | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 99 | // Step 4: Post rich message card to channel (main message) | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 126 | // Step 5: Upload workflow file to thread as reply | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 144 | // Step 6: Update message with complete deep links | COMMENT |
| LOW | …/vscode/src/extension/commands/slack-share-workflow.ts | 162 | // Step 7: Send success response | COMMENT |
| LOW⚡ | …ages/vscode/src/extension/commands/copilot-handlers.ts | 245 | // Step 1: Create a new chat session | COMMENT |
| LOW⚡ | …ages/vscode/src/extension/commands/copilot-handlers.ts | 247 | // Step 2: Send the query to the new session | COMMENT |
| LOW | …ages/vscode/src/extension/commands/copilot-handlers.ts | 355 | // Step 1: Check if MCP servers need to be synced to $HOME/.copilot/mcp-config.json | COMMENT |
| LOW | …ages/vscode/src/extension/commands/copilot-handlers.ts | 374 | // Step 2: Check for existing skill and ask for confirmation | COMMENT |
| LOW | …ages/vscode/src/extension/commands/copilot-handlers.ts | 391 | // Step 3: Export workflow as skill to .github/skills/{name}/SKILL.md | COMMENT |
| LOW⚡ | …ages/vscode/src/extension/commands/copilot-handlers.ts | 410 | // Step 4: Sync MCP servers to $HOME/.copilot/mcp-config.json if confirmed | COMMENT |
| LOW⚡ | …ages/vscode/src/extension/commands/copilot-handlers.ts | 416 | // Step 5: Execute in terminal | COMMENT |
| LOW | …kages/vscode/src/extension/commands/gemini-handlers.ts | 209 | // Step 1: Check if MCP servers need to be synced to ~/.gemini/settings.json | COMMENT |
| LOW | …kages/vscode/src/extension/commands/gemini-handlers.ts | 228 | // Step 2: Check for existing skill and ask for confirmation | COMMENT |
| LOW | …kages/vscode/src/extension/commands/gemini-handlers.ts | 245 | // Step 3: Export workflow as skill to .gemini/skills/{name}/SKILL.md | COMMENT |
| LOW⚡ | …kages/vscode/src/extension/commands/gemini-handlers.ts | 264 | // Step 4: Sync MCP servers to ~/.gemini/settings.json if confirmed | COMMENT |
| LOW⚡ | …kages/vscode/src/extension/commands/gemini-handlers.ts | 270 | // Step 5: Execute in terminal | COMMENT |
| LOW | …/vscode/src/extension/commands/antigravity-handlers.ts | 160 | // Step 1: Check for existing skill and ask for confirmation | COMMENT |
| LOW | …/vscode/src/extension/commands/antigravity-handlers.ts | 177 | // Step 2: Export workflow as skill to .claude/skills/{name}/SKILL.md | COMMENT |
| LOW | …/vscode/src/extension/commands/antigravity-handlers.ts | 211 | // Step 3: Check if Antigravity is installed | COMMENT |
| LOW | …/vscode/src/extension/commands/antigravity-handlers.ts | 226 | // Step 4: Launch Cascade with the skill | COMMENT |
| LOW | …kages/vscode/src/extension/commands/cursor-handlers.ts | 153 | // Step 1: Check for existing skill and ask for confirmation | COMMENT |
| LOW | …kages/vscode/src/extension/commands/cursor-handlers.ts | 170 | // Step 2: Export workflow as skill to .cursor/skills/{name}/SKILL.md | COMMENT |
| 30 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …__tests__/services/workflow-overview-formatter.test.ts | 73 | // └────────────→ merge | COMMENT |
| MEDIUM⚡ | .specify/scripts/bash/update-agent-context.sh | 116 | #============================================================================== | COMMENT |
| MEDIUM⚡ | .specify/scripts/bash/update-agent-context.sh | 118 | #============================================================================== | COMMENT |
| MEDIUM⚡ | .specify/scripts/bash/update-agent-context.sh | 149 | #============================================================================== | COMMENT |
| MEDIUM⚡ | .specify/scripts/bash/update-agent-context.sh | 151 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 47 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 49 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 85 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 87 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 229 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 231 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 500 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 502 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 574 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 576 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 723 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 725 | #============================================================================== | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/vscode/specs/001-slack-workflow-sharing/quickstart.md | 68 | 2. トークンは `xoxb-` で始まる文字列 (例: `xoxb-YOUR-TOKEN-HERE`) | CODE |
| HIGH | …lack-workflow-sharing/contracts/slack-api-contracts.md | 52 | Authorization: Bearer xoxb-YOUR-TOKEN-HERE | CODE |
| HIGH | …lack-workflow-sharing/contracts/slack-api-contracts.md | 107 | Authorization: Bearer xoxb-YOUR-TOKEN-HERE | CODE |
| HIGH | …lack-workflow-sharing/contracts/slack-api-contracts.md | 191 | Authorization: Bearer xoxb-YOUR-TOKEN-HERE | CODE |
| HIGH | …lack-workflow-sharing/contracts/slack-api-contracts.md | 313 | Authorization: Bearer xoxb-YOUR-TOKEN-HERE | CODE |
| HIGH | …lack-workflow-sharing/contracts/slack-api-contracts.md | 402 | Authorization: Bearer xoxb-YOUR-TOKEN-HERE | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/core/src/utils/validate-workflow.ts | 47 | * Validate a workflow generated by AI | COMMENT |
| HIGH | …es/vscode/specs/001-ai-workflow-generation/research.md | 106 | ### Q3: How to validate AI-generated workflows before adding to canvas? | COMMENT |
| HIGH | …ckages/vscode/specs/001-ai-workflow-generation/plan.md | 136 | │ └── workflow-store.ts # UPDATE: Add AI-generated workflows to canvas | CODE |
| HIGH | …01-ai-skill-generation/contracts/skill-scanning-api.md | 358 | // Input (AI-generated Skill node): | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .specify/scripts/bash/common.sh | 60 | # Check if we have git available | COMMENT |
| LOW | .specify/scripts/bash/setup-plan.sh | 33 | # Check if we're on a proper feature branch (only for git repos) | COMMENT |
| LOW | .specify/scripts/bash/setup-plan.sh | 50 | # Output results | COMMENT |
| LOW | .specify/scripts/bash/check-prerequisites.sh | 141 | # Output results | COMMENT |
| LOW⚡ | .specify/scripts/bash/update-agent-context.sh | 121 | # Check if we have a current branch/feature (git or non-git) | COMMENT |
| LOW⚡ | .specify/scripts/bash/update-agent-context.sh | 132 | # Check if plan.md exists | COMMENT |
| LOW⚡ | .specify/scripts/bash/update-agent-context.sh | 142 | # Check if template exists (needed for new files) | COMMENT |
| LOW | .specify/scripts/bash/update-agent-context.sh | 394 | # Check if sections exist in the file | COMMENT |
| LOW | .specify/scripts/bash/create-new-feature.sh | 23 | # Check if the next argument is another option (starts with --) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/core/src/index.ts | 41 | COMMENT | |
| LOW | …c/__tests__/services/sub-agent-flow-agent-file.test.ts | 241 | // (`YAMLParseError: Implicit keys need to be on a single line`). The | COMMENT |
| LOW | …c/__tests__/services/slash-command-frontmatter.test.ts | 261 | }); | COMMENT |
| LOW | …rc/webview/src/__tests__/stores/workflow-store.test.ts | 461 | COMMENT | |
| LOW | …/webview/src/__tests__/utils/agent-frontmatter.test.ts | 181 | // E. CRLF — pinned as observed, tracked by issue #1031 | COMMENT |
| LOW | …src/webview/src/__tests__/utils/template-utils.test.ts | 161 | COMMENT | |
| LOW | …ebview/src/__tests__/services/workflow-service.test.ts | 761 | }); | COMMENT |
| LOW | …ests__/extension/services/skill-file-generator.test.ts | 281 | // `generateSkillFileContent` builds frontmatter by raw interpolation (`:53`, | COMMENT |
| LOW | .github/workflows/release.yml | 1 | name: Release — Publish | COMMENT |
| LOW | .specify/scripts/bash/check-prerequisites.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .specify/scripts/bash/update-agent-context.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .specify/scripts/bash/update-agent-context.sh | 21 | # - Updates existing agent files with new project information | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/quality/02-feature-map.md | 114 | ## Pillar 2 — Design agentic work, not just flowcharts | COMMENT |
| MEDIUM | docs/quality/01-product-value.md | 80 | ### Pillar 2 — Design agentic work, not just flowcharts | COMMENT |
| MEDIUM | …ckages/vscode/docs/ai-coding-tools-config-reference.md | 970 | whenToUse: | # Optional: orchestration guidance | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …c/__tests__/services/workflow-prompt-generator.test.ts | 1111 | // code. Whoever closes #1064 should know the robust form measures the | COMMENT |
| MEDIUM | …c/__tests__/services/workflow-prompt-generator.test.ts | 1111 | // code. Whoever closes #1064 should know the robust form measures the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …bview/src/components/dialogs/ClaudeApiUploadDialog.tsx | 164 | print(response.content[0].text)`; | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .specify/scripts/bash/setup-plan.sh | 46 | # Create a basic plan file if template doesn't exist | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …flow-sharing/contracts/extension-host-api-contracts.md | 596 | "authorName": "John Doe", | CODE |