Repository Analysis

claude-code-best/claude-code

原汁原昧 Claude Code 可运行,可构建, 可调试版; 生产级工程化, 企业级可靠性; 安全无毒, 内存泄露修复

6.4 Low AI signal View on GitHub
6.4
Adjusted Score
6.4
Raw Score
100%
Time Factor
2026-05-29
Last Push
19,210
Stars
TypeScript
Language
717,992
Lines of Code
3257
Files
3151
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 1HIGH 7MEDIUM 693LOW 2450

Pattern Findings

3151 matches across 14 categories. Click a row to expand file-level details.

Decorative Section Separators687 hits · 2098 pts
SeverityFileLineSnippet
MEDIUMtests/integration/context-build.test.ts14// ─── CLAUDE.md Integration with System Prompt ─────────────────────────
MEDIUMtests/integration/context-build.test.ts67// ─── CLAUDE.md Discovery with Real File System ───────────────────────
MEDIUMtests/integration/context-build.test.ts95// ─── Large Memory File Filtering ──────────────────────────────────────
MEDIUMtests/integration/message-pipeline.test.ts9// ─── Message Structure ────────────────────────────────────────────────
MEDIUMtests/integration/message-pipeline.test.ts34// ─── Tag Extraction ───────────────────────────────────────────────────
MEDIUMtests/integration/message-pipeline.test.ts51// ─── Normalization ────────────────────────────────────────────────────
MEDIUMtests/integration/tool-chain.test.ts9// ─── Tool Registration & Discovery ──────────────────────────────────────
MEDIUMtests/integration/tool-chain.test.ts68// ─── Tool Presets ──────────────────────────────────────────────────────
MEDIUMtests/integration/tool-chain.test.ts85// ─── getTools (with permission context) ────────────────────────────────
MEDIUMtests/integration/tool-chain.test.ts106// ─── buildTool + findToolByName end-to-end ─────────────────────────────
MEDIUMscripts/probe-local-wiring.ts40 // ── Probe 1: tool registration in getAllBaseTools ──────────────────────
MEDIUMscripts/probe-local-wiring.ts56 // ── Probe 2: ALL_AGENT_DISALLOWED_TOOLS layer 1 ────────────────────────
MEDIUMscripts/probe-local-wiring.ts72 // ── Probe 3: filterParentToolsForFork strips both ──────────────────────
MEDIUMscripts/probe-local-wiring.ts89 // ── Probe 4: validateKey adversarial inputs ────────────────────────────
MEDIUMscripts/probe-local-wiring.ts124 // ── Probe 5: validatePermissionRule + filter ──────────────────────────
MEDIUMscripts/probe-local-wiring.ts183 // ── Probe 6: VaultHttpFetch scrub functions ────────────────────────────
MEDIUMscripts/probe-local-wiring.ts232 // ── Probe 7: stripUntrustedControl + XML escape (H4) ──────────────────
MEDIUMscripts/probe-local-wiring.ts371 // ── Probe 11: VaultHttpFetch URL/scheme validation ──────────────────────
MEDIUMscripts/probe-local-wiring.ts438 // ── Probe 12 (F2-F5): Round-6 Codex follow-up checks ────────────────────
MEDIUMscripts/probe-local-wiring.ts493 // ── Summary ─────────────────────────────────────────────────────────────
MEDIUMscripts/check-bundle-integrity.ts19// ─── 从 package.json 读取 dependencies 作为白名单 ────────────────
MEDIUMscripts/check-bundle-integrity.ts26// ─── Node.js 内置模块白名单 ────────────────────────────────────────
MEDIUMscripts/check-bundle-integrity.ts86// ─── 模式 ──────────────────────────────────────────────────────────
MEDIUMpackages/@ant/ink/src/theme/Divider.tsx37 * // ─────────── Title ───────────
MEDIUM…vider/src/shared/__tests__/openaiStreamAdapter.test.ts720 // ── cache_read_input_tokens in message_delta (the core bug fix) ──────────
MEDIUMpackages/@ant/computer-use-mcp/src/executor.ts117 // ── Window management (Windows only, optional) ──────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/executor.ts131 // ── Element-targeted actions (Windows UIA, optional) ────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/mcpServer.ts143 // ─── Async lock gate ─────────────────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/mcpServer.ts186 // ─── Build overrides fresh ───────────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/mcpServer.ts237 // ─── Dispatch ────────────────────────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/deniedApps.ts53// ─── Bundle-ID deny sets (macOS) ─────────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/deniedApps.ts205// ─── Policy-deny (not a tier — cannot be granted at all) ─────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/deniedApps.ts316// ─── Display-name fallback (cross-platform) ──────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/types.ts298 // ── Read state fresh per call ──────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/types.ts313 // ── Write-back callbacks ───────────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/types.ts345 // ── Lock (async) ───────────────────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/types.ts531 // ── Teach mode ───────────────────────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/toolCalls.ts4048 // ── Bound-window auto-routing ──────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/toolCalls.ts4153 // ── Standard dispatch (unbound or tools not rerouted above) ────────
MEDIUMpackages/@ant/computer-use-mcp/src/toolCalls.ts4310 // ─── Gate 1: kill switch ─────────────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/toolCalls.ts4318 // ─── Gate 2: TCC ─────────────────────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/toolCalls.ts4353 // ─── Gate 3: global CU lock ──────────────────────────────────────────
MEDIUMpackages/@ant/computer-use-mcp/src/toolCalls.ts4422 // ─── Fail-closed dispatch ────────────────────────────────────────────
MEDIUM…ols/src/tools/VaultHttpFetchTool/VaultHttpFetchTool.ts29// ── Schemas ──────────────────────────────────────────────────────────────────
MEDIUM…ols/src/tools/VaultHttpFetchTool/VaultHttpFetchTool.ts101// ── Helpers ──────────────────────────────────────────────────────────────────
MEDIUM…ols/src/tools/VaultHttpFetchTool/VaultHttpFetchTool.ts124// ── Tool ─────────────────────────────────────────────────────────────────────
MEDIUM…aultHttpFetchTool/__tests__/VaultHttpFetchTool.test.ts78// ── Helpers ─────────────────────────────────────────────────────────────────
MEDIUM…aultHttpFetchTool/__tests__/VaultHttpFetchTool.test.ts98// ── Tests ────────────────────────────────────────────────────────────────────
MEDIUM…c/tools/LocalMemoryRecallTool/LocalMemoryRecallTool.ts25// ── Per-turn fetch budget tracking ───────────────────────────────────────────
MEDIUM…c/tools/LocalMemoryRecallTool/LocalMemoryRecallTool.ts177// ── Schemas ──────────────────────────────────────────────────────────────────
MEDIUM…c/tools/LocalMemoryRecallTool/LocalMemoryRecallTool.ts243// ── Output truncation helpers ────────────────────────────────────────────────
MEDIUM…c/tools/LocalMemoryRecallTool/LocalMemoryRecallTool.ts296// ── Tool ─────────────────────────────────────────────────────────────────────
MEDIUM…n-tools/src/tools/FileEditTool/__tests__/utils.test.ts10// ─── stripTrailingWhitespace ────────────────────────────────────────────
MEDIUM…n-tools/src/tools/FileEditTool/__tests__/utils.test.ts50// ─── findActualString ───────────────────────────────────────────────────
MEDIUM…n-tools/src/tools/FileEditTool/__tests__/utils.test.ts76// ─── applyEditToFile ────────────────────────────────────────────────────
MEDIUM…iltin-tools/src/tools/PowerShellTool/pathValidation.ts122 // ─── Write/create operations ──────────────────────────────────────────────
MEDIUM…iltin-tools/src/tools/PowerShellTool/pathValidation.ts372 // ─── Read operations ──────────────────────────────────────────────────────
MEDIUM…ges/builtin-tools/src/tools/BashTool/pathValidation.ts1152// ───────────────────────────────────────────────────────────────────────────
MEDIUM…ges/builtin-tools/src/tools/BashTool/pathValidation.ts1172// ───────────────────────────────────────────────────────────────────────────
MEDIUM…s/BashTool/__tests__/destructiveCommandWarning.test.ts5 // ─── Git data loss ─────────────────────────────────────────────────
627 more matches not shown…
Hyper-Verbose Identifiers1947 hits · 1935 pts
SeverityFileLineSnippet
LOWvite.config.ts25function isAcknowledgedBuildWarning(warning: {
LOWspec/feature_20260508_F001_tool-search/spec-plan-2.md221 function buildToolDiscoveryAttachment(
LOWspec/feature_20260508_F001_tool-search/spec-plan-2.md266 export async function getTurnZeroToolSearchPrefetch(
LOWspec/feature_20260508_F001_tool-search/spec-plan-2.md287 export async function collectToolSearchPrefetch(
LOWdocs/memory-leak-audit.md490function coerceToolContentToString(value: unknown): string {
LOWpackages/@ant/ink/docs/09-hooks-reference.md252function useExitOnCtrlCDWithKeybindings(
LOWpackages/@ant/ink/src/core/squash-text-nodes.ts18export function squashTextNodesToSegments(
LOWpackages/@ant/ink/src/core/output.ts555function styledCharsWithGraphemeClustering(
LOWpackages/@ant/ink/src/core/render-node-to-output.ts1337function blitEscapingAbsoluteDescendants(
LOWpackages/@ant/ink/src/core/colorize.ts20function boostChalkLevelForXtermJs(): boolean {
LOWpackages/@ant/ink/src/core/node-cache.ts50export function consumeAbsoluteRemovedFlag(): boolean {
LOWpackages/@ant/ink/src/core/terminal.ts23export function isProgressReportingAvailable(): boolean {
LOWpackages/@ant/ink/src/core/terminal.ts68export function isSynchronizedOutputSupported(): boolean {
LOWpackages/@ant/ink/src/core/terminal.ts175export function hasCursorUpViewportYankBug(): boolean {
LOWpackages/@ant/ink/src/core/screen.ts1138export function extractHyperlinkFromStyles(
LOWpackages/@ant/ink/src/keybindings/KeybindingContext.tsx159export function useOptionalKeybindingContext(): KeybindingContextValue | null {
LOWpackages/@ant/ink/src/keybindings/KeybindingContext.tsx178export function useRegisterKeybindingContext(context: KeybindingContextName, isActive: boolean = true): void {
LOWpackages/@ant/ink/src/hooks/useExitOnCtrlCD.ts58export function useExitOnCtrlCDWithKeybindings(
LOWpackages/@ant/model-provider/src/errorUtils.ts42export function extractConnectionErrorDetails(
LOWpackages/@ant/model-provider/src/errorUtils.ts150function extractNestedErrorMessage(error: APIError): string | null {
LOW…model-provider/src/providers/gemini/convertMessages.ts24export function anthropicMessagesToGemini(
LOW…model-provider/src/providers/gemini/convertMessages.ts76function convertInternalUserMessage(
LOW…model-provider/src/providers/gemini/convertMessages.ts104function convertUserContentBlockToGeminiParts(
LOW…model-provider/src/providers/gemini/convertMessages.ts152function convertInternalAssistantMessage(msg: AssistantMessage): GeminiContent {
LOW…model-provider/src/providers/gemini/convertMessages.ts264function toolResultToResponseObject(
LOW…model-provider/src/providers/gemini/convertMessages.ts280function normalizeToolResultContent(content: unknown): unknown {
LOW…model-provider/src/providers/gemini/convertMessages.ts310function getGeminiThoughtSignature(
LOW…nt/model-provider/src/providers/gemini/convertTools.ts14function normalizeGeminiJsonSchemaType(
LOW…nt/model-provider/src/providers/gemini/convertTools.ts34function inferGeminiJsonSchemaTypeFromValue(
LOW…nt/model-provider/src/providers/gemini/convertTools.ts48function inferGeminiJsonSchemaTypeFromEnum(
LOW…nt/model-provider/src/providers/gemini/convertTools.ts59function addNullToGeminiJsonSchemaType(
LOW…nt/model-provider/src/providers/gemini/convertTools.ts69function sanitizeGeminiJsonSchemaProperties(
LOW…nt/model-provider/src/providers/gemini/convertTools.ts87function sanitizeGeminiJsonSchemaArray(
LOW…nt/model-provider/src/providers/gemini/convertTools.ts218function sanitizeGeminiFunctionParameters(
LOW…nt/model-provider/src/providers/gemini/convertTools.ts261export function anthropicToolChoiceToGemini(
LOW…s/@ant/model-provider/src/shared/openaiConvertTools.ts129export function anthropicToolChoiceToOpenAI(
LOW…ant/model-provider/src/shared/openaiConvertMessages.ts32export function anthropicMessagesToOpenAI(
LOW…ant/model-provider/src/shared/openaiConvertMessages.ts70function convertInternalUserMessage(
LOW…ant/model-provider/src/shared/openaiConvertMessages.ts163function convertInternalAssistantMessage(
LOW…ant/model-provider/src/shared/openaiConvertMessages.ts241function convertImageBlockToOpenAI(
LOWpackages/@ant/claude-for-chrome-mcp/src/mcpServer.ts30export function createClaudeForChromeMcpServer(
LOWpackages/@ant/claude-for-chrome-mcp/src/toolCalls.ts181function handleToolCallDisconnected(
LOWpackages/@ant/computer-use-mcp/src/mcpServer.ts255export function createComputerUseMcpServer(
LOWpackages/@ant/computer-use-mcp/src/deniedApps.ts491export function getDeniedCategoryByDisplayName(
LOWpackages/@ant/computer-use-mcp/src/toolCalls.ts311function coordToPercentageForPixelCompare(
LOWpackages/@ant/computer-use-mcp/src/toolCalls.ts1373function buildPolicyDeniedGuidance(
LOWpackages/@ant/computer-use-mcp/src/toolCalls.ts3539function handleListGrantedApplications(
LOWpackages/weixin/src/permissions.ts31function pruneExpiredPendingPermissions(now = Date.now()): void {
LOWpackages/weixin/src/permissions.ts80export function clearPermissionStateForTests(): void {
LOWpackages/weixin/src/server.ts37function formatPermissionRequestMessage(
LOWpackages/builtin-tools/src/tools/utils.ts30export function getToolUseIDFromParentMessage(
LOW…ckages/builtin-tools/src/tools/NotebookEditTool/UI.tsx49export function renderToolUseRejectedMessage(
LOW…ckages/builtin-tools/src/tools/NotebookEditTool/UI.tsx74export function renderToolUseErrorMessage(
LOW…/src/tools/AskUserQuestionTool/AskUserQuestionTool.tsx153function AskUserQuestionResultMessage({ answers }: { answers: Output['answers'] }): React.ReactNode {
LOW…ckages/builtin-tools/src/tools/ExitPlanModeTool/UI.tsx75export function renderToolUseRejectedMessage(
LOW…src/tools/SearchExtraToolsTool/SearchExtraToolsTool.ts120export function clearSearchExtraToolsDescriptionCache(): void {
LOW…s/builtin-tools/src/tools/WebFetchTool/WebFetchTool.ts50function webFetchToolInputToPermissionRuleContent(input: {
LOWpackages/builtin-tools/src/tools/WebFetchTool/utils.ts290export async function getWithPermittedRedirects(
LOWpackages/builtin-tools/src/tools/WebFetchTool/UI.tsx23export function renderToolUseProgressMessage(): React.ReactNode {
LOW…builtin-tools/src/tools/MCPTool/classifyForCollapse.ts595export function classifyMcpToolForCollapse(
1887 more matches not shown…
Over-Commented Block430 hits · 413 pts
SeverityFileLineSnippet
LOWtests/integration/autonomy-lifecycle-user-flow.test.ts1// Why we use the BUILT bundle instead of src/entrypoints/cli.tsx:
LOWdocs/features/voice-mode.md201## 五、使用方式
LOWscripts/defines.ts61 'WORKFLOW_SCRIPTS', // 工作流脚本(.claude/workflows/ 中的 YAML/MD)
LOWscripts/defines.ts81 // defaults to OFF (see featureCheck.ts). Operators turn on via the
LOWpackages/@ant/ink/src/core/dom.ts41 onImmediateRender?: () => void
LOWpackages/@ant/ink/src/core/dom.ts61 // naturally cancels (pure accumulator, no target tracking).
LOWpackages/@ant/ink/src/core/render-node-to-output.ts721 // padding) begins. Exposed via ScrollBoxHandle.getViewportTop() so
LOWpackages/@ant/ink/src/core/render-node-to-output.ts741 node.pendingScrollDelta = undefined
LOWpackages/@ant/ink/src/core/render-node-to-output.ts761 // transiently SHRINK scrollHeight (tail unmount + stale heightCache
LOWpackages/@ant/ink/src/core/render-node-to-output.ts801 // startup) the probe has resolved — same timing guarantee the
LOWpackages/@ant/ink/src/core/render-node-to-output.ts881 } else {
LOWpackages/@ant/ink/src/core/render-node-to-output.ts961 // 1. Dirty children — their content changed, blitted pixels are
LOWpackages/@ant/ink/src/core/render-node-to-output.ts981 // check cached.y−delta === screenY reduces to delta === delta
LOWpackages/@ant/ink/src/core/render-node-to-output.ts1101 boxBackgroundColor,
LOWpackages/@ant/ink/src/core/render-node-to-output.ts1221 nodeCache.set(node, rect)
LOWpackages/@ant/ink/src/core/render-node-to-output.ts1241// Without this, a spinner inside a ScrollBox dirties the wrapper on every
LOWpackages/@ant/ink/src/core/searchHighlight.ts41 const rowOff = row * w
LOWpackages/@ant/ink/src/core/ink.tsx181 // Search highlight query (alt-screen only). Setter below triggers
LOWpackages/@ant/ink/src/core/ink.tsx201 // against this set and mutates it in place.
LOWpackages/@ant/ink/src/core/ink.tsx401 // Terminals often emit 2+ resize events for one user action (window
LOWpackages/@ant/ink/src/core/ink.tsx541 // TEXT (native terminal behavior — the selection walks up the screen
LOWpackages/@ant/ink/src/core/ink.tsx561 this.selection.anchor.row <= follow.viewportBottom
LOWpackages/@ant/ink/src/core/ink.tsx581 // teleporting the highlight from static footer into the scrollbox.
LOWpackages/@ant/ink/src/core/ink.tsx601 if (cleared) for (const cb of this.selectionListeners) cb();
LOWpackages/@ant/ink/src/core/ink.tsx721 }
LOWpackages/@ant/ink/src/core/ink.tsx741 // that changed; cells where new=blank and prev-buffer=blank get skipped
LOWpackages/@ant/ink/src/core/ink.tsx821 }
LOWpackages/@ant/ink/src/core/ink.tsx1601 // only render last frame of non-static output
LOWpackages/@ant/ink/src/core/parse-keypress.ts21// biome-ignore lint/suspicious/noControlCharactersInRegex: terminal escape sequence parsing
LOWpackages/@ant/ink/src/core/parse-keypress.ts41const DA2_RE = /^\x1b\[>([\d;]*)c$/
LOWpackages/@ant/ink/src/core/parse-keypress.ts261 } else if (
LOWpackages/@ant/ink/src/core/log-update.ts141 // _after_ the viewport change which means calcuating text wrapping.
LOWpackages/@ant/ink/src/core/log-update.ts181 RESET_SCROLL_REGION +
LOWpackages/@ant/ink/src/core/renderer.ts81 cursor: { x: 0, y: 0, visible: true },
LOWpackages/@ant/ink/src/core/renderer.ts141 // root blit would skip the subtree. markDirty walks ancestors so the
LOWpackages/@ant/ink/src/core/yoga-layout/index.ts421 // per child per layout pass — ~11k calls for the 1000-node bench, nearly
LOWpackages/@ant/ink/src/core/yoga-layout/index.ts481 // generation have stale cache (subtree changed), but within the SAME
LOWpackages/@ant/ink/src/core/events/input-event.ts81
LOWpackages/@ant/ink/src/core/events/input-event.ts101 // that converted input to the key name (CSI u or application keypad mode).
LOWpackages/@ant/ink/src/core/termio/tokenize.ts201 }
LOWpackages/@ant/ink/src/components/App.tsx81 readonly onExit: (error?: Error) => void;
LOWpackages/@ant/ink/src/components/App.tsx101 // MULTI_CLICK_TIMEOUT_MS so double-click can cancel it.
LOWpackages/@ant/ink/src/components/App.tsx321 // Enable terminal focus reporting (DECSET 1004)
LOWpackages/@ant/ink/src/components/App.tsx381 // Helper to flush incomplete escape sequences
LOWpackages/@ant/ink/src/components/App.tsx721 // (so an unrelated middle/right click-release doesn't touch selection).
LOWpackages/@ant/ink/src/components/App.tsx741 if (!hasSelection(sel) && sel.anchor) {
LOWpackages/@ant/ink/src/components/ScrollBox.tsx201 [],
LOWpackages/@ant/ink/src/hooks/use-terminal-viewport.ts41 // Runs on every render because yoga layout values can change
LOWpackages/@ant/ink/src/hooks/use-declared-cursor.ts41 // When active, set unconditionally. When inactive, clear conditionally
LOWpackages/@ant/model-provider/src/index.ts1// @ant/model-provider
LOWpackages/@ant/computer-use-mcp/src/deniedApps.ts201 // Robinhood, NinjaTrader, Coinbase, Kraken, Bloomberg. thinkorswim
LOWpackages/@ant/computer-use-mcp/src/toolCalls.ts381//
LOWpackages/@ant/computer-use-mcp/src/toolCalls.ts2221 // — if a non-allowlisted app is on top, SCContentFilter would composite it
LOWpackages/@ant/computer-use-mcp/src/toolCalls.ts4261
LOWpackages/@ant/computer-use-mcp/src/toolCalls.ts4361 // cuLockChanged, and showing "Claude is using your computer" while the
LOW…ols/src/tools/VaultHttpFetchTool/VaultHttpFetchTool.ts201 // M2 fix (codecov-100 audit #5): the `host` property of `URL` includes
LOW…es/builtin-tools/src/tools/WebFetchTool/preapproved.ts1// For legal and security concerns, we typically only allow Web Fetch to access
LOWpackages/builtin-tools/src/tools/WebFetchTool/utils.ts121 return (turndownServicePromise ??= import('turndown').then(m => {
LOW…c/tools/LocalMemoryRecallTool/LocalMemoryRecallTool.ts21import { DESCRIPTION, PROMPT } from './prompt.js'
LOW…c/tools/LocalMemoryRecallTool/LocalMemoryRecallTool.ts41// The Map is module-level. `consumeBudget` evicts oldest entries when the
370 more matches not shown…
Verbosity Indicators50 hits · 83 pts
SeverityFileLineSnippet
LOWbuild.ts8// Step 1: Clean output directory
LOWbuild.ts18// Step 2: Bundle with splitting
LOWbuild.ts43// Step 3: Post-process — replace Bun-only `import.meta.require` with Node.js compatible version
LOWbuild.ts86// Step 4: Copy native .node addon files (audio-capture) and vendored binaries (ripgrep)
LOWbuild.ts95// Step 5: Generate cli-bun and cli-node executable entry points
LOWscripts/post-build.ts16 // Step 1: Patch globalThis.Bun destructuring in ALL output files
LOWscripts/post-build.ts60 // Step 2: Copy native addon files
LOWscripts/post-build.ts71 // Step 3: Generate dual entry points
LOW…ages/builtin-tools/src/tools/BashTool/sedEditParser.ts277 // Step 1: Protect literal backslashes (\\) first - in both BRE and ERE, \\ is literal backslash
LOW…ages/builtin-tools/src/tools/BashTool/sedEditParser.ts279 // Step 2: Replace escaped metacharacters with placeholders (these should become unescaped in JS)
LOW…ages/builtin-tools/src/tools/BashTool/sedEditParser.ts285 // Step 3: Escape unescaped metacharacters (these are literal in BRE)
LOW…ages/builtin-tools/src/tools/BashTool/sedEditParser.ts291 // Step 4: Replace placeholders with their JS equivalents
LOWpackages/acp-link/src/rcs-upstream.ts120 // Step 1: REST registration
LOWpackages/acp-link/src/rcs-upstream.ts131 // Step 2: WebSocket connection with identify
LOWsrc/tasks/LocalShellTask/LocalShellTask.tsx335 // Step 1: Get the task and shell command from current state
LOWsrc/utils/plugins/installedPluginsManager.ts715 // Step 1: Migrate to single file format (consolidates V1/V2 files, cleans up legacy cache)
LOWsrc/utils/plugins/installedPluginsManager.ts718 // Step 2: Sync enabledPlugins from settings.json to installed_plugins.json
LOWsrc/utils/plugins/installedPluginsManager.ts726 // Step 3: Initialize in-memory session state
LOWsrc/utils/plugins/installedPluginsManager.ts1096 // Step 1: Build a map of pluginId -> scope from all settings.json files
LOWsrc/utils/plugins/installedPluginsManager.ts1131 // Step 2: Start with existing data (or start empty if no file exists)
LOWsrc/utils/plugins/installedPluginsManager.ts1140 // Step 3: Update V2 scopes based on settings.json (settings is source of truth)
LOWsrc/utils/plugins/installedPluginsManager.ts1260 // Step 4: Save to single file (V2 format)
LOWsrc/utils/plugins/pluginLoader.ts1358 // Step 1: Load or create the plugin manifest
LOWsrc/utils/plugins/pluginLoader.ts1363 // Step 2: Create the base plugin object
LOWsrc/utils/plugins/pluginLoader.ts1374 // Step 3: Auto-detect optional directories in parallel
LOWsrc/utils/plugins/pluginLoader.ts1530 // Step 4: Register agents directory if detected
LOWsrc/utils/plugins/pluginLoader.ts1614 // Step 5: Load hooks configuration
LOWsrc/utils/plugins/pluginLoader.ts1762 // Step 6: Load plugin settings
LOWsrc/utils/permissions/permissionSetup.ts901 // We need to check if base tools were explicitly provided (not just empty default)
LOWsrc/components/MarkdownTable.tsx118 // Step 1: Get minimum (longest word) and ideal (full content) widths
LOWsrc/components/MarkdownTable.tsx135 // Step 2: Calculate available space
LOWsrc/components/MarkdownTable.tsx142 // Step 3: Calculate column widths that fit available space
LOWsrc/components/MarkdownTable.tsx172 // Step 4: Single-pass cell preparation — wraps each cell once, caches results
LOWsrc/components/MarkdownTable.tsx187 // Step 5: Calculate max row lines using cached wrapped results
LOWsrc/components/StructuredDiff/Fallback.tsx346 // Step 1: Transform lines to line objects with type information
LOWsrc/components/StructuredDiff/Fallback.tsx349 // Step 2: Group adjacent add/remove lines for word-level diffing
LOWsrc/components/StructuredDiff/Fallback.tsx352 // Step 3: Number the diff lines
LOWsrc/components/StructuredDiff/Fallback.tsx359 // Step 4: Render formatting
LOWsrc/hooks/usePipeMuteSync.ts84 // Step 1: Update master-side muted set FIRST (before sending control packets)
LOWsrc/hooks/usePipeMuteSync.ts89 // Step 2: For newly muted slaves — abort pending permissions, then send relay_mute
LOWsrc/hooks/usePipeMuteSync.ts121 // Step 3: For newly unmuted slaves — send relay_unmute
LOWsrc/skills/bundled/skillify.ts41### Step 1: Analyze the Session
LOWsrc/skills/bundled/skillify.ts53### Step 2: Interview the User
LOWsrc/skills/bundled/skillify.ts91### Step 3: Write the SKILL.md
LOWsrc/skills/bundled/skillify.ts149### Step 4: Confirm and Save
LOWsrc/services/compact/sessionMemoryCompact.ts244 // Step 1: Handle tool_use/tool_result pairs
LOWsrc/services/compact/sessionMemoryCompact.ts290 // Step 2: Handle thinking blocks that share message.id with kept assistant messages
LOWsrc/services/api/__tests__/betaHeaders.test.ts210 // Step 1: 基础 betas(来自 getAllModelBetas)
LOWsrc/services/api/__tests__/betaHeaders.test.ts217 // Step 2: paramsFromContext 中的动态添加
LOWsrc/services/api/__tests__/betaHeaders.test.ts242 // Step 3: 最终过滤(我们的防御层)
Synthetic Comment Markers3 hits · 18 pts
SeverityFileLineSnippet
HIGHsrc/utils/settings/__tests__/config.test.ts80 commit: 'Generated by AI',
HIGHsrc/utils/claudeInChrome/setup.ts318REM Generated by Claude Code - do not edit manually
HIGHsrc/utils/claudeInChrome/setup.ts323# Generated by Claude Code - do not edit manually
AI Slop Vocabulary5 hits · 15 pts
SeverityFileLineSnippet
MEDIUM…tin-tools/src/tools/PowerShellTool/commandSemantics.ts71 // robocopy.exe: Windows native robust file copy
MEDIUMsrc/utils/swarm/backends/PaneBackendExecutor.ts394 // A more robust check would query the backend for pane existence
MEDIUMsrc/utils/powershell/parser.ts1068 // and extracting .Redirections) is both simpler and more robust: it catches
MEDIUMsrc/hooks/useVoiceIntegration.tsx168 // the gap is seamless once transcript text arrives.
MEDIUM…llLearning/__tests__/throttleAndCircuitBreaker.test.ts291 // In the test environment, queryHaiku will fail (no API key). We leverage
Magic Placeholder Names3 hits · 15 pts
SeverityFileLineSnippet
HIGHpackages/remote-control-server/README.md21 -e RCS_API_KEYS=your-api-key-here \
HIGHpackages/remote-control-server/README.md58export CLAUDE_BRIDGE_OAUTH_TOKEN="your-api-key-here"
HIGHsrc/services/providerRegistry/switcher.ts84 `Set it before starting Claude Code: export ${found.apiKeyEnv}=<your-api-key>`,
Hallucination Indicators1 hit · 10 pts
SeverityFileLineSnippet
CRITICALpackages/builtin-tools/src/tools/AgentTool/UI.tsx966 const toolResultBlock = lastToolResult.data.message.message.content.find(
Fake / Example Data8 hits · 10 pts
SeverityFileLineSnippet
LOWsrc/utils/plugins/pluginLoader.ts1115 * "name": "John Doe",
LOWsrc/utils/plugins/marketplaceManager.ts1238 * "owner": { "name": "John Doe", "email": "john@example.com" },
LOWsrc/utils/mcp/elicitationValidation.ts24 example: 'user@example.com',
LOWsrc/utils/git/__tests__/gitConfigParser.test.ts39 const config = '[user]\n\tname = "John Doe"'
LOWsrc/utils/git/__tests__/gitConfigParser.test.ts40 expect(parseConfigString(config, 'user', null, 'name')).toBe('John Doe')
LOWsrc/skills/bundled/loremIpsum.ts273 // Just dump the lorem ipsum text into the conversation
LOWsrc/services/langfuse/__tests__/langfuse.test.ts782 username: 'user@example.com',
LOWsrc/services/langfuse/__tests__/langfuse.test.ts787 'user@example.com',
Excessive Try-Catch Wrapping8 hits · 6 pts
SeverityFileLineSnippet
LOWsrc/utils/computerUse/win32/bridge.py392 except Exception:
LOWsrc/utils/computerUse/win32/bridge.py398 except Exception as e:
LOWsrc/utils/computerUse/win32/bridge.py418 except Exception:
LOWsrc/utils/computerUse/win32/bridge.py421 except Exception:
LOWsrc/utils/computerUse/win32/bridge.py329 except Exception:
LOWsrc/utils/computerUse/win32/bridge.py362 except Exception:
LOWsrc/utils/computerUse/win32/bridge.py378 except Exception:
LOWsrc/utils/computerUse/win32/bridge.py515 except Exception as e:
Cross-Language Confusion (JS/TS)1 hit · 5 pts
SeverityFileLineSnippet
HIGH…ckages/builtin-tools/src/tools/TodoWriteTool/prompt.ts100print("Hello World")
Deep Nesting6 hits · 3 pts
SeverityFileLineSnippet
LOWsrc/utils/computerUse/win32/bridge.py207
LOWsrc/utils/computerUse/win32/bridge.py267
LOWsrc/utils/computerUse/win32/bridge.py334
LOWsrc/utils/computerUse/win32/bridge.py404
LOWsrc/utils/computerUse/win32/bridge.py497
LOWsrc/utils/computerUse/win32/bridge.py356
Slop Phrases1 hit · 2 pts
SeverityFileLineSnippet
MEDIUMsrc/constants/prompts.ts395When the task is done, report the result. Do not append "Is there anything else?" or "Let me know if you need anything e
Unused Imports1 hit · 0 pts
SeverityFileLineSnippet
LOWsrc/utils/computerUse/win32/bridge.py338