AI Slop Code Risk Monitor

clash-verge-rev/clash-verge-rev

SlopCodeMonitor badge for clash-verge-rev/clash-verge-rev Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

A modern GUI client based on Tauri, designed to run in Windows, macOS and Linux for tailored proxy experience

0.7 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for clash-verge-rev/clash-verge-rev, a Rust project with 155,235 GitHub stars. SynthScan examined 135,534 lines of code across 658 source files, recording 53 pattern matches distributed across 6 syntactic categories. The legacy adjusted pattern signal is 0.7 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

0.7
Adjusted Signal
0.7
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
155.2K
Stars
Rust
Language
135.5K
Lines of Code
658
Files
53
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 38 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.6/100 · LOW

Are imports declared and package/API names verified? 15 finding(s).

Agent Over-Engineering Ratio 0.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 8 finding(s).

PR Review Velocity Impact 3.0/100 · LOW

Which changes need focused human review? 53 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 1MEDIUM 13LOW 39

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 53 distinct pattern matches across 6 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Modern AI Meta-Vocabulary9 hits · 24 pts
SeverityFileLineSnippetContext
MEDIUM.github/workflows/pr-ai-slop-review.md19# Cost guardrails sized from measured runs (median 22 credits, max 41; medianCOMMENT
MEDIUM.github/agents/agentic-workflows.md45- Configuration: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/github-agentic-workflows.md`CODE
MEDIUM⚡.github/agents/agentic-workflows.md69**Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/create-agentic-workflow.md`CODE
MEDIUM⚡.github/agents/agentic-workflows.md79**Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/update-agentic-workflow.md`CODE
MEDIUM⚡.github/agents/agentic-workflows.md89**Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/debug-agentic-workflow.md`CODE
MEDIUM⚡.github/agents/agentic-workflows.md99**Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/upgrade-agentic-workflows.md`CODE
MEDIUM.github/agents/agentic-workflows.md119**Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/create-shared-agentic-workflow.md`CODE
MEDIUM.github/agents/agentic-workflows.md193# Initialize repository for agentic workflowsCOMMENT
MEDIUM.github/agents/agentic-workflows.md225- Always reference the instructions file at `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/github-agentCODE
AI Slop Vocabulary4 hits · 18 pts
SeverityFileLineSnippetContext
MEDIUM⚡src-tauri/src/main.rs4#[cfg(not(all(feature = "perf-harness", target_os = "macos")))]COMMENT
MEDIUM⚡src-tauri/src/main.rs7#[cfg(all(feature = "perf-harness", target_os = "macos"))]COMMENT
MEDIUM⚡src-tauri/src/main.rs11#[cfg(all(feature = "perf-harness", target_os = "macos"))]COMMENT
MEDIUM⚡src-tauri/src/main.rs16#[cfg(not(all(feature = "perf-harness", target_os = "macos")))]COMMENT
Over-Commented Block16 hits · 16 pts
SeverityFileLineSnippetContext
LOWdeny.toml1# This template contains all of the possible sections and their default valuesCOMMENT
LOWdeny.toml21# `target_family = "unix"` configuration, that only having windows targets inCOMMENT
LOWdeny.toml41#exclude = []COMMENT
LOWdeny.toml61COMMENT
LOWdeny.toml81# Setting this to true can be helpful if you have special authentication requirements that cargo-deny does not support.COMMENT
LOWdeny.toml101confidence-threshold = 0.85COMMENT
LOWdeny.toml121# and the crate will be checked normally, which may produce warnings or errorsCOMMENT
LOWdeny.toml141# This section is considered when running `cargo deny check bans`.COMMENT
LOWdeny.toml161# on a crate-by-crate basis if desired.COMMENT
LOWdeny.toml181#crate = "reqwest"COMMENT
LOWdeny.toml201skip = [COMMENT
LOWscripts-workflow/group_platforms.sh1#!/usr/bin/env bashCOMMENT
LOW.github/workflows/pr-ai-slop-review.lock.yml1# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"8296ef86aad04ad225d29c7fe51dd18dfa50f258c46e8bd24e443193cc6COMMENT
LOW.github/workflows/pr-ai-slop-review.lock.yml21# gh aw compileCOMMENT
LOW.github/workflows/pr-ai-slop-review.lock.yml41# - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0COMMENT
LOWsrc-tauri/src/core/manager/state.rs401 let _ = self.take_child_sidecar();COMMENT
Fake / Example Data15 hits · 15 pts
SeverityFileLineSnippetContext
LOWsrc/locales/ru/profiles.json23 "placeholder": "URL профиля",CODE
LOWsrc/locales/pt/profiles.json23 "placeholder": "URL do perfil",CODE
LOWsrc/locales/zh/profiles.json23 "placeholder": "订阅文件链接",CODE
LOWsrc/locales/ar/profiles.json23 "placeholder": "رابط الملف الشخصي",CODE
LOWsrc/locales/de/profiles.json23 "placeholder": "Abonnement-Datei-Link",CODE
LOWsrc/locales/ko/profiles.json23 "placeholder": "프로필 URL",CODE
LOWsrc/locales/id/profiles.json23 "placeholder": "URL Profil",CODE
LOWsrc/locales/es/profiles.json23 "placeholder": "Enlace del archivo de suscripción",CODE
LOWsrc/locales/jp/profiles.json23 "placeholder": "プロファイルファイルのURL",CODE
LOWsrc/locales/en/profiles.json23 "placeholder": "Profile URL",CODE
LOWsrc/locales/fa/profiles.json23 "placeholder": "آدرس پروفایل",CODE
LOWsrc/locales/zhtw/profiles.json23 "placeholder": "訂閱檔網址",CODE
LOWsrc/locales/tt/profiles.json23 "placeholder": "Профиль URL-ы",CODE
LOWsrc/locales/tr/profiles.json23 "placeholder": "Profil URL'si",CODE
LOWsrc/components/setting/mods/web-ui-item.tsx104 <span key={key} className={isPlaceholder ? 'placeholder' : undefined}>CODE
Hyper-Verbose Identifiers8 hits · 8 pts
SeverityFileLineSnippetContext
LOWsrc/types/proxy-view.ts176export function toMemberOccurrenceBinding(CODE
LOWsrc/utils/uri-parser/vmess.ts17function parseVmessShadowrocketParams(raw: string): Record<string, any> {CODE
LOWsrc/utils/uri-parser/helpers.ts104export function parseQueryStringNormalized(CODE
LOWsrc/components/home/enhanced-canvas-traffic-graph.tsx95 function EnhancedCanvasTrafficGraph({CODE
LOWsrc/services/cmds.ts130export async function getRuntimeProxyChainConfig(proxyChainExitNode: string) {CODE
LOWsrc/services/cmds.ts134export async function updateProxyChainConfigInRuntime(CODE
LOWsrc/services/cmds.ts235export async function takeServiceFallbackNotice() {CODE
LOWsrc/services/notice-service.ts216function isMaybeTranslationDescriptor(CODE
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGH.github/workflows/pr-ai-slop-review.lock.yml27# signs of one-shot AI-generated changes, then posts a maintainer-focusedCOMMENT