OmO: Just type "mass ulw" keyword with your prompt. Now you are the master of graph engineering.
This report summarizes scanner evidence for code-yeongyu/oh-my-openagent, a TypeScript project with 70,516 GitHub stars. SynthScan examined 1,615,189 lines of code across 11265 source files, recording 3670 pattern matches distributed across 23 syntactic categories. The legacy adjusted pattern signal is 2.9 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 3410 finding(s).
Are imports declared and package/API names verified? 138 finding(s).
Are wrappers, guards, and repeated structures necessary? 2911 finding(s).
Which changes need focused human review? 3670 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 3670 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test-hermetic-home.ts | 307 | function failOnShardsInRealAgentDir(): void { | CODE |
| LOW | test-setup.ts | 66 | function cleanupRulesInjectorStorage(): void { | CODE |
| LOW | postinstall.test.ts | 25 | function runPostinstallInFixtureEnv(options: { readonly pathPrefix?: string; readonly timeoutMs?: number } = {}): Postin | CODE |
| LOW | test-temp-root.ts | 91 | export function markTestInfrastructureDir(path: string): void { | CODE |
| LOW | bin/oh-my-opencode.js | 111 | function maybeRunLazyCodexNodeInstaller(invocationName) { | CODE |
| LOW | bin/oh-my-opencode.test.ts | 231 | async function writeNodeInstallerFixture(root: string): Promise<void> { | CODE |
| LOW | bin/oh-my-opencode.test.ts | 247 | async function canonicalizePackageRootCapture(fixture: { readonly captureDir: string }): Promise<string> { | CODE |
| LOW | bin/platform.d.ts | 8 | export declare function getPlatformPackageCandidates(options: { | CODE |
| LOW | bin/platform.d.ts | 20 | export declare function resolvePlatformPackageBaseName(wrapperPackageName: string): string; | CODE |
| LOW | bin/version-mismatch.js | 37 | export function detectPlatformBinaryMismatch({ mainVersion, platformVersion, platformPackage }) { | CODE |
| LOW | bin/platform.js | 19 | export function resolvePlatformPackageBaseName(wrapperPackageName) { | CODE |
| LOW | bin/platform.js | 50 | export function getPlatformPackageCandidates({ platform, arch, libcFamily, preferBaseline = false, packageBaseName = "oh | CODE |
| LOW | bin/platform.js | 67 | function getBaselinePlatformPackage({ platform, arch, libcFamily, packageBaseName = "oh-my-opencode" }) { | CODE |
| LOW | tests/hashline/test-environment.ts | 21 | export function parseHashlineTestEnvironment( | CODE |
| LOW | docs/reference/prompt-async-gate-rfc.md | 147 | export function releasePromptAsyncReservation( | CODE |
| LOW | script/remove-stale-self-package-tests.ts | 6 | export async function removeStaleSelfPackageTests(root = process.cwd()): Promise<string[]> { | CODE |
| LOW | script/publish.ts | 204 | async function checkPackageVersionExists(pkgName: string, version: string): Promise<boolean> { | CODE |
| LOW | script/lazycodex-runtime-dists.ts | 49 | export async function copyLazycodexRuntimeDists(input: CopyLazycodexRuntimeDistsInput): Promise<void> { | CODE |
| LOW | script/build-binaries.ts | 36 | export function createPlatformLauncherSource(): string { | CODE |
| LOW | script/build-binaries.ts | 65 | function shouldRunLazyCodexInstaller() { | CODE |
| LOW | script/build-schema-document.ts | 5 | export function createOhMyOpenCodeJsonSchema(): Record<string, unknown> { | CODE |
| LOW | script/engine-build-defines.ts | 32 | export function compileDefinesForOmoBinary(input: { | CODE |
| LOW | script/ci-job-summary-workflow.test.ts | 61 | function sliceWorkflowSectionToEnd(workflow: string, startMarker: string): string { | CODE |
| LOW | script/sync-lazycodex-marketplace.ts | 128 | async function copyLazycodexRepositoryWorkflow(sourceRoot: string, lazycodexRoot: string): Promise<void> { | CODE |
| LOW | script/sync-lazycodex-marketplace.ts | 171 | async function collectHookManifestPathsInto(root: string, paths: string[]): Promise<void> { | CODE |
| LOW | script/stats.ts | 77 | function readGitHubReleaseDownloadStat(releasesJson: unknown): DownloadStat { | CODE |
| LOW | script/stats.ts | 98 | export function createPostHogDownloadEvents( | CODE |
| LOW | script/desktop-engine-release.ts | 11 | export function stageDesktopEngineReleaseAsset( | CODE |
| LOW | script/desktop-engine-release.ts | 39 | export function writeDesktopEngineChecksums(outDir: string): string { | CODE |
| LOW | script/no-raw-tls-client-scan.ts | 135 | export function evaluateBuiltRuntimeProbe(input: { | CODE |
| LOW | script/no-raw-tls-client-scan.ts | 170 | export function discoverPluginBuiltRuntimes(): string[] { | CODE |
| LOW | script/no-raw-tls-client-scan.ts | 244 | export function collectShippedSourceFiles(): string[] { | CODE |
| LOW | script/changelog-audit.ts | 18 | export function auditFixtureMissingReleases(fixture: Release[]): { | CODE |
| LOW | script/generate-changelog.ts | 17 | export function isExcludedReleaseNoteSubject(subject: string): boolean { | CODE |
| LOW | script/latest-model-ids-audit.test.ts | 35 | function latestModelLiteralPattern(ids: readonly string[]): RegExp { | CODE |
| LOW | script/build-omo-binary.test.ts | 112 | function packedPrebuildDependencies(packageDir: string, archiveRoot: string, packageSpec: string) { | CODE |
| LOW | script/release-desktop-engine-target.ts | 139 | export function stageCompiledDesktopEngine( | CODE |
| LOW | script/release-desktop-engine-target.ts | 148 | export function stageCompiledEngineTrustHelper( | CODE |
| LOW | script/ci-root-test-partition.test.ts | 45 | function assertWindowsTelemetryContract(script: string): void { | CODE |
| LOW | script/build-codex-install.ts | 59 | export async function digestCodexInstallerSources(bundledSources: readonly string[] = []): Promise<string> { | CODE |
| LOW | script/build-codex-install.ts | 70 | export function parseCodexInstallerArtifact( | CODE |
| LOW | script/build-codex-install.ts | 126 | function rewriteBareBuiltinSpecifiers(source: string): string { | CODE |
| LOW | script/build-omo-binary.ts | 295 | export function runtimeManifestFileContent(manifest: RuntimeManifest, releaseTarget: string): string { | CODE |
| LOW | script/build-omo-binary.ts | 397 | export function resolveExpectedSidecarRelPaths(target: ReleaseBinaryTarget): string[] { | CODE |
| LOW⚡ | script/package-registration-audit.test.ts | 158 | function isManagedWorkspacePackage(path: string): boolean { | CODE |
| LOW⚡ | script/package-registration-audit.test.ts | 167 | function unclassifiedRootPackageWorkspaces(workspaces: readonly string[]): readonly string[] { | CODE |
| LOW⚡ | script/package-registration-audit.test.ts | 171 | function isNestedCodexPluginPackage(path: string): boolean { | CODE |
| LOW⚡ | script/package-registration-audit.test.ts | 175 | function isRootManagedTypecheckPackage(path: string): boolean { | CODE |
| LOW | script/package-registration-audit.test.ts | 187 | function extractTypecheckPackagePaths(command: string): readonly string[] { | CODE |
| LOW | script/json-schema-defaulted-optional.ts | 12 | export function optionalizeDefaultedProperties(node: unknown): void { | CODE |
| LOW | script/check-copy.ts | 62 | export function findUnexplainedSuppressions(content: string, path: string): { line: number; column: number }[] { | CODE |
| LOW | script/omob-senpi-workspace-reset.ts | 71 | export function resolveSenpiWorkspaceDirs(senpiRoot: string): readonly string[] { | CODE |
| LOW | script/omob-senpi-workspace-reset.ts | 87 | export function resetSenpiWorkspaceInstalls(senpiRoot: string): readonly string[] { | CODE |
| LOW | script/lazycodex-marketplace-validation.ts | 9 | export async function validateLazycodexPluginBundle( | CODE |
| LOW | script/lazycodex-marketplace-validation.ts | 38 | async function validatePluginMcpManifests(pluginRoot: string, issues: string[]): Promise<void> { | CODE |
| LOW | script/lazycodex-marketplace-validation.ts | 44 | async function validatePluginMcpManifest(pluginRoot: string, manifestPath: string, issues: string[]): Promise<void> { | CODE |
| LOW | script/lazycodex-marketplace-validation.ts | 68 | async function validatePluginHookCommands(pluginRoot: string, issues: string[]): Promise<void> { | CODE |
| LOW | script/lazycodex-marketplace-validation.ts | 89 | async function validatePluginManagedBins(pluginRoot: string, issues: string[]): Promise<void> { | CODE |
| LOW | script/gpt-mini-reference-audit.test.ts | 69 | function repositoryRootFromMetaUrl(metaUrl: string): string { | CODE |
| LOW | script/build-omo-native.ts | 112 | export function ensurePrebuiltNativeInputs( | CODE |
| 2729 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 3 | # Serve-topology wake runner-split QA harness. | COMMENT |
| MEDIUM | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 29 | # 1 expectation NOT met, or internal harness error | COMMENT |
| MEDIUM | .agents/skills/opencode-qa/scripts/tui-smoke.sh | 5 | # This is a feasibility/smoke check, NOT a functional assertion harness. The | COMMENT |
| MEDIUM | script/agent-harness-wiring.test.ts | 94 | test("#given a containerized harness #when reading .devcontainer/devcontainer.json #then host provider creds pass thro | CODE |
| MEDIUM | script/shared-core-extraction-guard.test.ts | 52 | test("#given core package production sources #when scanned #then they stay harness-neutral", async () => { | CODE |
| MEDIUM | script/shared-core-extraction-guard.test.ts | 81 | test("#given core package manifests #when scanned #then they do not depend on harness adapters", async () => { | CODE |
| MEDIUM | script/build-codex-install.ts | 46 | // alone left omo-config-core outside the digest, and omo#8620's harness rename went undetected | COMMENT |
| MEDIUM | script/codex-install-bundle-inputs.test.ts | 23 | // packages/omo-codex/src/install. omo#8620 renamed the harness ids in omo-config-core, the | COMMENT |
| MEDIUM | script/codex-install-bundle-inputs.test.ts | 27 | test("#given the tracked bundle #when its inlined harness ids are read #then they match the current config source", as | CODE |
| MEDIUM | script/agents-md-dev-env.test.ts | 12 | test("#given root AGENTS.md #when scanned #then it documents the shared setup/cleanup scripts and every harness wiring | CODE |
| MEDIUM | script/agent/setup.sh | 2 | # Cross-harness dev-environment bootstrap for oh-my-openagent. | COMMENT |
| MEDIUM | script/agent/cleanup.sh | 2 | # Cross-harness teardown for oh-my-openagent dev environments. | COMMENT |
| MEDIUM | script/agent/cleanup.sh | 40 | # before traversal so short-lived harness shutdown hooks do not get cancelled | COMMENT |
| MEDIUM | .codex/setup.sh | 4 | # delegates to the shared cross-harness bootstrap so every harness stays in sync. | COMMENT |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{fileURLToPath as e}from"node:url";import{dirname as t,join as n,sep as a}from"node:path";import{accessSync as o,r | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{fileURLToPath as e}from"node:url";import{dirname as t,join as n,sep as a}from"node:path";import{accessSync as o,r | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{fileURLToPath as e}from"node:url";import{dirname as t,join as n,sep as a}from"node:path";import{accessSync as o,r | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{fileURLToPath as e}from"node:url";import{dirname as t,join as n,sep as a}from"node:path";import{accessSync as o,r | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{fileURLToPath as e}from"node:url";import{dirname as t,join as n,sep as a}from"node:path";import{accessSync as o,r | CODE |
| MEDIUM | …ges/omo-senpi/plugin/extensions/omo-memory-commands.js | 11 | `,Li=e=>`'${e.replaceAll("'","'\\''")}'`;function Ui(e,t,n){if(void 0===n)return e;let r="commit-msg"===t?e.indexOf("\n" | CODE |
| MEDIUM | …ges/omo-senpi/plugin/extensions/omo-onboarding-scan.js | 2 | import{homedir as e}from"node:os";import{resolve as t}from"node:path";import{createHash as r}from"node:crypto";import{ex | CODE |
| MEDIUM⚡ | …kages/omo-senpi/plugin/extensions/omo-memory-palace.js | 11 | `,Oi=e=>`'${e.replaceAll("'","'\\''")}'`;function Mi(e,t,n){if(void 0===n)return e;let i="commit-msg"===t?e.indexOf("\n" | CODE |
| MEDIUM⚡ | …kages/omo-senpi/plugin/extensions/omo-memory-palace.js | 11 | `,Oi=e=>`'${e.replaceAll("'","'\\''")}'`;function Mi(e,t,n){if(void 0===n)return e;let i="commit-msg"===t?e.indexOf("\n" | CODE |
| MEDIUM⚡ | …kages/omo-senpi/plugin/extensions/omo-memory-palace.js | 11 | `,Oi=e=>`'${e.replaceAll("'","'\\''")}'`;function Mi(e,t,n){if(void 0===n)return e;let i="commit-msg"===t?e.indexOf("\n" | CODE |
| MEDIUM⚡ | …kages/omo-senpi/plugin/extensions/omo-memory-palace.js | 11 | `,Oi=e=>`'${e.replaceAll("'","'\\''")}'`;function Mi(e,t,n){if(void 0===n)return e;let i="commit-msg"===t?e.indexOf("\n" | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-side-panel.js | 11 | `;var Sl='[],<>})"]*$',Ol='(process\\.env\\.[A-Za-z_][A-Za-z0-9_]*|os\\.environ(\\.get\\(|\\[)?("[A-Za-z0-9_]*")?[])]*|e | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-side-panel.js | 11 | `;var Sl='[],<>})"]*$',Ol='(process\\.env\\.[A-Za-z_][A-Za-z0-9_]*|os\\.environ(\\.get\\(|\\[)?("[A-Za-z0-9_]*")?[])]*|e | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-side-panel.js | 11 | `;var Sl='[],<>})"]*$',Ol='(process\\.env\\.[A-Za-z_][A-Za-z0-9_]*|os\\.environ(\\.get\\(|\\[)?("[A-Za-z0-9_]*")?[])]*|e | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-side-panel.js | 11 | `;var Sl='[],<>})"]*$',Ol='(process\\.env\\.[A-Za-z_][A-Za-z0-9_]*|os\\.environ(\\.get\\(|\\[)?("[A-Za-z0-9_]*")?[])]*|e | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-side-panel.js | 11 | `;var Sl='[],<>})"]*$',Ol='(process\\.env\\.[A-Za-z_][A-Za-z0-9_]*|os\\.environ(\\.get\\(|\\[)?("[A-Za-z0-9_]*")?[])]*|e | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-feedback.js | 2 | import{randomUUID as e}from"node:crypto";import{AsyncLocalStorage as t}from"node:async_hooks";import{createHash as n}fro | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-feedback.js | 2 | import{randomUUID as e}from"node:crypto";import{AsyncLocalStorage as t}from"node:async_hooks";import{createHash as n}fro | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-feedback.js | 2 | import{randomUUID as e}from"node:crypto";import{AsyncLocalStorage as t}from"node:async_hooks";import{createHash as n}fro | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-feedback.js | 2 | import{randomUUID as e}from"node:crypto";import{AsyncLocalStorage as t}from"node:async_hooks";import{createHash as n}fro | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-feedback.js | 2 | import{randomUUID as e}from"node:crypto";import{AsyncLocalStorage as t}from"node:async_hooks";import{createHash as n}fro | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-feedback.js | 2 | import{randomUUID as e}from"node:crypto";import{AsyncLocalStorage as t}from"node:async_hooks";import{createHash as n}fro | CODE |
| MEDIUM | packages/omo-senpi/scripts/qa/team-e2e-runtime.test.ts | 270 | it("#given a Windows shim with no package CLI #when resolved #then the harness fails loudly instead of direct-spawning | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 2881 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E23.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E23.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E22.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM | …ipts/qa/fused-equivalence-golden/darwin-arm64/E22.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E22.json | 2773 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E21.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E21.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 1875 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E23.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E23.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E22.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM | …scripts/qa/fused-equivalence-golden/linux-x64/E22.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E22.json | 1767 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E21.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E21.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM | packages/omo-senpi/src/plugin-manifest.test.ts | 60 | it("#given the plugin is the harness itself #when the engine resolves it from the command line #then the manifest decl | CODE |
| MEDIUM | packages/omo-senpi/src/skills-sync.test.ts | 173 | test("#given codex-derived and native skill roots #when scanned #then no Codex or multi-agent harness guidance survive | CODE |
| MEDIUM | packages/omo-senpi/src/skills-sync.test.ts | 255 | test("#given ported orchestration skills #when scanned #then no foreign-harness delegation guidance survives", () => { | CODE |
| 67 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/hashline/test-edit-ops.ts | 18 | // ── CLI arg passthrough ─────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 37 | // ── Colors ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 49 | // ── Test case definition ───────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 251 | // ── Creative cases (6-15) ──────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 447 | // ── Whitespace cases (16-21) ────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 575 | // ── JSONL event types ───────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 619 | // ── Run single test case ───────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 741 | // ── Main ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 18 | // ── CLI arg passthrough ─────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 37 | // ── Colors ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 51 | // ── Test case definition ───────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 881 | // ── JSONL event types ───────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 925 | // ── Run single test case ───────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 1049 | // ── Main ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 15 | // ── Models ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 20 | // ── CLI args ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 35 | // ── Colors ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 44 | // ── Types ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 61 | // ── Parse test-headless-edit-ops stdout ─────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 120 | // ── Run one model ──────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 192 | // ── Main ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 227 | // ── Summary Table ────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/headless.ts | 22 | // ── CLI ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/headless.ts | 44 | // ── Tools ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/headless.ts | 117 | // ── Agent Loop ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/headless.ts | 189 | // ── Signal + Startup ───────────────────────────────────────── | COMMENT |
| MEDIUM | packages/omo-senpi/plugin/extensions/CaseFolding.txt | 31 | # ================================================================================ | COMMENT |
| MEDIUM | packages/omo-senpi/plugin/extensions/CaseFolding.txt | 33 | # ================================================================================ | COMMENT |
| MEDIUM | packages/omo-senpi/plugin/extensions/CaseFolding.txt | 55 | # ================================================================= | COMMENT |
| MEDIUM | packages/omo-senpi/plugin/extensions/CaseFolding.txt | 62 | # ================================================================= | COMMENT |
| MEDIUM | …ages/omo-opencode/src/tools/delegate-task/constants.ts | 51 | # ╚═╝ ╚═╝╚══════╝ ╚══▀▀═╝ ╚═════╝ ╚═╝╚═╝ ╚═╝╚══════╝╚═════╝ # | COMMENT |
| MEDIUM | …skills/frontend/scripts/perfection/lighthouse-audit.py | 20 | # ────────────────── | COMMENT |
| MEDIUM | …ills/skills/ultimate-browsing/engine/waf_profiles.yaml | 140 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ills/skills/ultimate-browsing/engine/waf_profiles.yaml | 142 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ls/skills/programming/references/go/golangci-strict.md | 20 | # ── Correctness — bug catchers ─────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ls/skills/programming/references/go/golangci-strict.md | 47 | # ── Architecture — file size, complexity, dead code ───────── | COMMENT |
| MEDIUM⚡ | …ls/skills/programming/references/go/golangci-strict.md | 57 | # ── Exhaustiveness — Go's weakest spot ────────────────────── | COMMENT |
| MEDIUM⚡ | …ls/skills/programming/references/go/golangci-strict.md | 60 | # ── Security ──────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ls/skills/programming/references/go/golangci-strict.md | 63 | # ── Logging ───────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ls/skills/programming/references/go/golangci-strict.md | 66 | # ── Performance ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 41 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 44 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 64 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 68 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 132 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 134 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 145 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 147 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …lls/skills/programming/references/python/one-liners.md | 42 | # ────────────────── | COMMENT |
| MEDIUM | …lls/skills/programming/references/python/one-liners.md | 81 | # ────────────────── | COMMENT |
| MEDIUM | …lls/skills/programming/references/python/one-liners.md | 132 | # ────────────────── | COMMENT |
| MEDIUM | …lls/skills/programming/references/python/one-liners.md | 170 | # ────────────────── | COMMENT |
| MEDIUM | …lls/skills/programming/references/python/one-liners.md | 209 | # ────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/typescript/backend-hono.md | 56 | // ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/typescript/backend-hono.md | 58 | // ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/typescript/backend-hono.md | 73 | // ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/typescript/backend-hono.md | 75 | // ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/typescript/backend-hono.md | 131 | // ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/typescript/backend-hono.md | 133 | // ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/typescript/backend-hono.md | 151 | // ─────────────────────────────────────────────────────────────── | COMMENT |
| 31 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CHANGELOG.md | 1998 | **The `programming` skill's Rust guidance compiles and no longer contradicts itself.** ([#8739](https://github.com/code- | CODE |
| MEDIUM | CHANGELOG.md | 1998 | **The `programming` skill's Rust guidance compiles and no longer contradicts itself.** ([#8739](https://github.com/code- | CODE |
| MEDIUM | CHANGELOG.md | 3429 | - 9e86f635a Merge pull request #6865 from code-yeongyu/feat/mass-ulw-dag-orchestration | CODE |
| MEDIUM | CHANGELOG.md | 4154 | - **Parent-side verification directive (#7080).** DAG completion payloads now tell the orchestrating parent to treat the | CODE |
| MEDIUM | CHANGELOG.md | 4479 | #### Reliability and orchestration | COMMENT |
| MEDIUM | CHANGELOG.md | 5055 | This is a hotfix release. Steering a message into a running turn while the shared interactive host socket dropped used t | CODE |
| MEDIUM | changes.md | 773 | Every `@code-yeongyu/senpi` pin moves from 2026.10.1-2 to 2026.10.1-3: the root devDependency, `omo-native`, the `omo-se | CODE |
| MEDIUM | changes.md | 1799 | Scripts: `scripts/rust/check-no-excuse-rules.sh` (the entry SKILL.md names; the unreferenced `.py` duplicate is deleted, | CODE |
| MEDIUM | changes.md | 1799 | Scripts: `scripts/rust/check-no-excuse-rules.sh` (the entry SKILL.md names; the unreferenced `.py` duplicate is deleted, | CODE |
| MEDIUM | changes.md | 2468 | ### Tool orchestration and observability | COMMENT |
| MEDIUM | AGENTS.md | 68 | OpenCode plugin (npm: `oh-my-opencode`, dual-published as `oh-my-openagent` during the rename transition) extending Open | CODE |
| MEDIUM | CLAUDE.md | 68 | OpenCode plugin (npm: `oh-my-opencode`, dual-published as `oh-my-openagent` during the rename transition) extending Open | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{fileURLToPath as e}from"node:url";import{dirname as t,join as n,sep as a}from"node:path";import{accessSync as o,r | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{fileURLToPath as e}from"node:url";import{dirname as t,join as n,sep as a}from"node:path";import{accessSync as o,r | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-side-panel.js | 11 | `;var Sl='[],<>})"]*$',Ol='(process\\.env\\.[A-Za-z_][A-Za-z0-9_]*|os\\.environ(\\.get\\(|\\[)?("[A-Za-z0-9_]*")?[])]*|e | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-side-panel.js | 11 | `;var Sl='[],<>})"]*$',Ol='(process\\.env\\.[A-Za-z_][A-Za-z0-9_]*|os\\.environ(\\.get\\(|\\[)?("[A-Za-z0-9_]*")?[])]*|e | CODE |
| MEDIUM | …kages/omo-senpi/plugin/extensions/omo-memory-doctor.js | 11 | `;var bi='[],<>})"]*$',_i='(process\\.env\\.[A-Za-z_][A-Za-z0-9_]*|os\\.environ(\\.get\\(|\\[)?("[A-Za-z0-9_]*")?[])]*|e | CODE |
| MEDIUM | …kages/omo-senpi/plugin/extensions/omo-memory-doctor.js | 11 | `;var bi='[],<>})"]*$',_i='(process\\.env\\.[A-Za-z_][A-Za-z0-9_]*|os\\.environ(\\.get\\(|\\[)?("[A-Za-z0-9_]*")?[])]*|e | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-feedback.js | 2 | import{randomUUID as e}from"node:crypto";import{AsyncLocalStorage as t}from"node:async_hooks";import{createHash as n}fro | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-feedback.js | 2 | import{randomUUID as e}from"node:crypto";import{AsyncLocalStorage as t}from"node:async_hooks";import{createHash as n}fro | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 2881 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 2881 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E23.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E23.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E23.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E23.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E22.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E22.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM | …ipts/qa/fused-equivalence-golden/darwin-arm64/E22.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E22.json | 2773 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E22.json | 2773 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E21.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E21.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E21.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E21.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 1875 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 1875 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E23.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E23.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E23.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E23.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E22.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E22.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM | …scripts/qa/fused-equivalence-golden/linux-x64/E22.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E22.json | 1767 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E22.json | 1767 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E21.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E21.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E21.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E21.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| MEDIUM | …o-senpi/skills/ulw-research/references/latex-report.md | 50 | ## Preamble scaffold | COMMENT |
| MEDIUM | …kages/omo-senpi/skills/mass-ulw/references/planning.md | 68 | ## Eval orchestration patterns | COMMENT |
| 47 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test-env.ts | 1 | /// <reference types="bun-types" /> | COMMENT |
| LOW | test-setup.ts | 21 | // out-of-band before `bun test`; mirror that here so fresh clones/worktrees pass too. | COMMENT |
| LOW | test-temp-root.ts | 1 | /// <reference types="bun-types" /> | COMMENT |
| LOW | crates/senpi-desktop-session/src/grant.rs | 1 | //! The human-confirmed foreground control grant. | COMMENT |
| LOW | crates/senpi-desktop-session/src/intervention/record.rs | 1 | //! The per-app record of the user's own keys and clicks (ported from oh-my-pi | COMMENT |
| LOW | crates/senpi-desktop-backend-win32/src/lib.rs | 1 | //! Windows desktop backend: xcap (GDI) capture and display/window | COMMENT |
| LOW | crates/senpi-desktop-backend-win32/src/capture/dpi.rs | 1 | //! Per-monitor-v2 DPI awareness. The engine is a plain binary without an | COMMENT |
| LOW | …ates/senpi-desktop-backend-win32/src/input/dispatch.rs | 1 | //! `Win32Input`: routes every input by target and delivery mode, and keeps | COMMENT |
| LOW | crates/senpi-desktop-backend-win32/src/input/barrier.rs | 1 | //! The delivery barrier of foreground input. `SendInput` only appends to | COMMENT |
| LOW | …es/senpi-desktop-backend-win32/src/input/compositor.rs | 1 | //! The compositor half of the foreground focus guard (#9095). Raising the | COMMENT |
| LOW | crates/senpi-desktop-backend-win32/src/input/mod.rs | 1 | //! Win32 input. The key vocabulary ([`keys`]), the message packing | COMMENT |
| LOW | …pi-desktop-backend-win32/src/input/cursor_placement.rs | 1 | //! Cursor placement before any `SendInput` button, drag step or wheel. A | COMMENT |
| LOW | …ates/senpi-desktop-backend-win32/src/stop_path/hook.rs | 1 | //! The `WH_KEYBOARD_LL` hook of the kill switch. It runs on the listener | COMMENT |
| LOW | crates/senpi-desktop-backend-win32/src/stop_path/mod.rs | 1 | //! The Windows `Global` stop path: on the dedicated | COMMENT |
| LOW | …es/senpi-desktop-backend-wayland/src/capture/layout.rs | 1 | //! Logical geometry for capture pixels that arrived without it: the | COMMENT |
| LOW | crates/senpi-desktop-backend-wayland/src/capture/mod.rs | 1 | //! Wayland capture. Where libpipewire loads at runtime, the ScreenCast | COMMENT |
| LOW | crates/senpi-desktop-backend-x11/src/stop_path/mod.rs | 1 | //! The X11 `Global` stop path: on the dedicated `senpi-desktop-killswitch` | COMMENT |
| LOW | crates/senpi-desktop-core/src/error.rs | 41 | ControlRequired, | COMMENT |
| LOW | crates/senpi-desktop-core/src/protocol_results.rs | 41 | /// RFC 3339 UTC with milliseconds, matching the audit timestamps. | COMMENT |
| LOW | crates/senpi-desktop-core/src/user_input.rs | 1 | //! The user's own key presses and clicks, as a backend's watch records them: | COMMENT |
| LOW | crates/senpi-desktop-core/src/protocol_params.rs | 121 | #[serde(default)] | COMMENT |
| LOW | crates/senpi-desktop-core/src/text_range.rs | 1 | //! Locating text inside an element's value for AX text selection. | COMMENT |
| LOW | crates/senpi-desktop-core/src/types/display.rs | 121 | /// Windows mandatory integrity level of the engine process. | COMMENT |
| LOW | crates/senpi-desktop-core/src/types/window.rs | 1 | use schemars::JsonSchema; | COMMENT |
| LOW | …mo-engine-trust-helper/examples/trust_facts_fixture.rs | 1 | //! Test fixture for `packages/omo-native/test/macos-trust-helper.macos.test.ts` (design 9.3). | COMMENT |
| LOW | crates/senpi-desktop-backend-atspi/src/owner.rs | 1 | //! The native window that owns an element's frame on a host whose window | COMMENT |
| LOW | crates/senpi-desktop-safety/src/supervisor.rs | 1 | //! Fail-closed kill-switch supervisor, ported from gajae-code | COMMENT |
| LOW | crates/senpi-desktop-safety/src/authority_reset.rs | 1 | //! The local half of an authority activation, not a user resume token. | COMMENT |
| LOW | crates/senpi-desktop-backend-macos/build.rs | 1 | //! Builds the persistent ScreenCaptureKit capture helper beside the Rust | COMMENT |
| LOW | …op-backend-macos/native/senpi-desktop-capture-helper.m | 1 | // Persistent capture-only worker: one JSON request per line on stdin, one | COMMENT |
| LOW | crates/senpi-desktop-backend-macos/src/launch_gate.rs | 1 | //! Refuses an engine that macOS made its own responsible process (#10207). | COMMENT |
| LOW | crates/senpi-desktop-backend-macos/src/capture/route.rs | 81 | } | COMMENT |
| LOW | …tes/senpi-desktop-backend-macos/src/capture/sck/mod.rs | 61 | } | COMMENT |
| LOW | …tes/senpi-desktop-backend-macos/src/capture/sck/mod.rs | 101 | // Tests default to a 30 s warm-up so a fake helper's interpreter start on a | COMMENT |
| LOW | …senpi-desktop-backend-macos/src/release_helper/wire.rs | 1 | //! The engine-to-helper stream: what an input request presses, how each press | COMMENT |
| LOW | …senpi-desktop-backend-macos/src/input/live/observer.rs | 1 | //! Independent observers: spawned `osascript` (JXA) processes read the | COMMENT |
| LOW | crates/senpi-desktop-backend-macos/src/stop_path/mod.rs | 1 | //! The macOS `Global` stop path, ported from gajae-code | COMMENT |
| LOW | crates/senpi-desktop-backend-macos/src/skylight/mod.rs | 141 | return Err(DesktopError::background_unavailable(format!( | COMMENT |
| LOW | crates/senpi-desktop-engine/src/cli.rs | 21 | stdio: bool, | COMMENT |
| LOW | crates/senpi-desktop-engine/src/cli.rs | 41 | /// Daemon endpoint for --oneshot / --mcp / --resume (default: the per-user socket). | COMMENT |
| LOW | crates/senpi-desktop-xpc/scripts/signed-fixtures.sh | 1 | #!/bin/bash | COMMENT |
| LOW | crates/senpi-desktop-xpc/src/policy.rs | 41 | } | COMMENT |
| LOW | crates/senpi-desktop-xpc/src/lib.rs | 1 | //! macOS peer identity foundation. Eligibility is not a user operation grant. | COMMENT |
| LOW | .agents/skills/codex-qa/scripts/app-server-drive.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/codex-qa/scripts/hook-unit-probe.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/codex-qa/scripts/lsp-e2e.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/codex-qa/scripts/lib/common.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/sse-hook-probe.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/sse-hook-probe.sh | 21 | # then watch for e.g. message.part.updated. | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 21 | # $XDG_CONFIG_HOME/opencode/oh-my-openagent.json | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/tui-smoke.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …gents/skills/opencode-qa/scripts/db-session-by-name.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …gents/skills/opencode-qa/scripts/db-session-by-text.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/lsp-e2e.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/export-roundtrip.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/server-smoke.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/lib/common.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | script/derive-temp-leak-report-only.ts | 1 | #!/usr/bin/env bun | COMMENT |
| LOW | script/knip-coverage.test.ts | 1 | import { describe, expect, test } from "bun:test"; | COMMENT |
| 150 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .opencode/skills/github-triage/SKILL.md | 89 | # Step 1: Fetch basic metadata (without body/comments to avoid JSON parsing issues) | COMMENT |
| LOW | .agents/skills/github-triage/SKILL.md | 89 | # Step 1: Fetch basic metadata (without body/comments to avoid JSON parsing issues) | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 748 | # Step 2: Start fake-openai server | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 758 | # Step 3: Create isolated sandbox and write opencode.jsonc | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 768 | # Step 4: Start opencode serve (using oqa_start_server internals but with our config) | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 860 | # Step 8: Plugin-init count | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 867 | # Step 9: Route provenance | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 727 | # Step 1: Record real-DB session count (read-only) | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 798 | # Step 5: Create a session | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 817 | # Step 6: Send the split probe prompt | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 899 | # Step 10: Branch-count guard | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 914 | # Step 11: Determine verdict | COMMENT |
| LOW | docs/guide/installation.md | 234 | ### Step 0: Ask user which platform(s) and subscriptions | COMMENT |
| LOW | docs/guide/installation.md | 319 | ### Step 1: Prerequisites | COMMENT |
| LOW | docs/guide/installation.md | 370 | ### Step 2: Run the installer | COMMENT |
| LOW | docs/guide/installation.md | 430 | ### Step 3: Verify | COMMENT |
| LOW | docs/guide/installation.md | 470 | ### Step 4: Configure authentication | COMMENT |
| LOW | docs/guide/installation.md | 611 | ### Step 5: Understand your model setup | COMMENT |
| LOW | docs/guide/installation.md | 732 | ### Step 6: First use — modes, commands, agents, skills | COMMENT |
| LOW | docs/guide/installation.md | 800 | ### Step 7: Light Edition deep dive (Codex CLI) | COMMENT |
| LOW | docs/guide/installation.md | 848 | ### Step 8: Team Mode (optional, opt-in) | COMMENT |
| LOW | docs/guide/installation.md | 889 | ### Step 9: Advanced configuration | COMMENT |
| LOW | docs/guide/installation.md | 957 | ### Step 10: Maintenance | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi-k2-7.md | 142 | ## Step 0: Register Tracking | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi-k2-7.md | 151 | ## Step 1: Analyze Plan | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi-k2-7.md | 165 | ## Step 2: Notepad (auto-scaffolded) | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi-k2-7.md | 175 | ## Step 3: Execute Tasks | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi-k2-7.md | 239 | ## Step 4: Final Verification Wave | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi.md | 227 | ## Step 0: Register Tracking | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi.md | 236 | ## Step 1: Analyze Plan | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi.md | 253 | ## Step 2: Notepad (auto-scaffolded) | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi.md | 263 | ## Step 3: Execute Tasks | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi.md | 339 | ## Step 4: Final Verification Wave | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/default.md | 204 | ## Step 0: Register Tracking | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/default.md | 213 | ## Step 1: Analyze Plan | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/default.md | 230 | ## Step 2: Notepad (auto-scaffolded) | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/default.md | 240 | ## Step 3: Execute Tasks | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/default.md | 354 | ## Step 4: Final Verification Wave | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi-k3.md | 142 | ## Step 0: Register Tracking | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi-k3.md | 151 | ## Step 1: Analyze Plan | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi-k3.md | 165 | ## Step 2: Notepad (auto-scaffolded) | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi-k3.md | 175 | ## Step 3: Execute Tasks | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/kimi-k3.md | 239 | ## Step 4: Final Verification Wave | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/gpt.md | 214 | ## Step 0: Register Tracking | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/gpt.md | 223 | ## Step 1: Analyze Plan | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/gpt.md | 239 | ## Step 2: Notepad (auto-scaffolded) | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/gpt.md | 249 | ## Step 3: Execute Tasks | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/gpt.md | 329 | ## Step 4: Final Verification Wave | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/glm.md | 187 | ## Step 0: Register Tracking | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/glm.md | 198 | ## Step 1: Analyze the Plan | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/glm.md | 214 | ## Step 2: Notepad (auto-scaffolded) | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/glm.md | 224 | ## Step 3: Execute Implementation Tasks | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/glm.md | 283 | ## Step 4: Final Verification Wave | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/gemini.md | 239 | ## Step 0: Register Tracking | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/gemini.md | 248 | ## Step 1: Analyze Plan | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/gemini.md | 263 | ## Step 2: Notepad (auto-scaffolded) | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/gemini.md | 273 | ## Step 3: Execute Tasks | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/gemini.md | 376 | ## Step 4: Final Verification Wave | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/opus-4-7.md | 220 | ## Step 0: Register Tracking | COMMENT |
| LOW | packages/prompts-core/prompts/atlas/opus-4-7.md | 229 | ## Step 1: Analyze Plan | COMMENT |
| 38 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | crates/senpi-desktop-engine/tests/launch_gate.rs | 31 | /// the responsibility disclaim attribute set as requested. | COMMENT |
| HIGH⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E24.json | 2881 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E23.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E23.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E22.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E22.json | 2773 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E21.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …ipts/qa/fused-equivalence-golden/darwin-arm64/E21.json | 1441 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E24.json | 1875 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E23.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E23.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E22.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E22.json | 1767 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E21.json | 14 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH⚡ | …scripts/qa/fused-equivalence-golden/linux-x64/E21.json | 938 | "content": "You are senpi, a coding agent. Your work should be indistinguishable from a careful senior engineer's | CODE |
| HIGH | …ills/skills/programming/references/go/data-modeling.md | 311 | ## Common AI-generated antipatterns this rejects | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | …es/omo-senpi/src/components/builtin-mcps/index.test.ts | 97 | { label: "angle-bracketed", value: "<YOUR_API_KEY>" }, | CODE |
| HIGH⚡ | …es/omo-senpi/src/components/builtin-mcps/index.test.ts | 97 | { label: "angle-bracketed", value: "<YOUR_API_KEY>" }, | CODE |
| HIGH⚡ | …es/omo-senpi/src/components/builtin-mcps/index.test.ts | 98 | { label: "hyphenated", value: "your-api-key" }, | CODE |
| HIGH | packages/omo-senpi/src/components/builtin-mcps/index.ts | 59 | // copied `.env` templates carry `<YOUR_API_KEY>`-style values, and sending one as a bearer token turns | COMMENT |
| HIGH | packages/omo-senpi/src/components/builtin-mcps/index.ts | 59 | // copied `.env` templates carry `<YOUR_API_KEY>`-style values, and sending one as a bearer token turns | COMMENT |
| HIGH⚡ | …ckages/omo-senpi/src/components/builtin-mcps/AGENTS.md | 15 | - `CONTEXT7_API_KEY` is normalized exactly like the OpenCode edition (`packages/omo-opencode/src/mcp/context7.ts`): blan | CODE |
| HIGH⚡ | …ckages/omo-senpi/src/components/builtin-mcps/AGENTS.md | 15 | - `CONTEXT7_API_KEY` is normalized exactly like the OpenCode edition (`packages/omo-opencode/src/mcp/context7.ts`): blan | CODE |
| HIGH⚡ | …ckages/omo-senpi/src/components/builtin-mcps/AGENTS.md | 15 | - `CONTEXT7_API_KEY` is normalized exactly like the OpenCode edition (`packages/omo-opencode/src/mcp/context7.ts`): blan | CODE |
| HIGH | …/src/install/codex-cache-mcp-manifest.context7.test.ts | 22 | env: { CONTEXT7_API_KEY: "<YOUR_API_KEY>", SAFE_FLAG: "1" }, | CODE |
| HIGH | …/src/install/codex-cache-mcp-manifest.context7.test.ts | 22 | env: { CONTEXT7_API_KEY: "<YOUR_API_KEY>", SAFE_FLAG: "1" }, | CODE |
| HIGH | …/src/install/codex-cache-mcp-manifest.context7.test.ts | 40 | expect(raw).not.toContain("YOUR_API_KEY") | CODE |
| HIGH | …/src/install/codex-cache-mcp-manifest.context7.test.ts | 88 | env: { CONTEXT7_API_KEY: "YOUR_API_KEY", SAFE_FLAG: "1" }, | CODE |
| HIGH | …/src/install/codex-cache-mcp-manifest.context7.test.ts | 103 | expect(raw).not.toContain("YOUR_API_KEY") | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 231 | expect(content).not.toContain("YOUR_API_KEY") | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 254 | expect(content).not.toContain("YOUR_API_KEY") | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 287 | expect(content).not.toContain("YOUR_API_KEY") | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 299 | 'args = ["-y", "@upstash/context7-mcp", "--api-key", "ctx7sk_live_example"] # replace YOUR_API_KEY in docs only' | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 318 | expect(content).toContain("replace YOUR_API_KEY in docs only") | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 331 | 'args = ["-y", "@upstash/context7-mcp", "--api-key", "YOUR_API_KEY"]', | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 351 | expect(content).not.toContain("YOUR_API_KEY") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ared-skills/skills/ast-grep/scripts/ast_grep_helper.py | 51 | CODE | |
| LOW | …skills/frontend/scripts/perfection/lighthouse-audit.py | 32 | CODE | |
| LOW | …skills/frontend/scripts/perfection/lighthouse-audit.py | 36 | CODE | |
| LOW | …s/coding-agent-sessions/scripts/find-agent-sessions.py | 9 | CODE | |
| LOW | …coding-agent-sessions/scripts/agent_sessions/jsonio.py | 1 | CODE | |
| LOW | …ons/scripts/agent_sessions/sqlite_optional_scanners.py | 1 | CODE | |
| LOW | …ng-agent-sessions/scripts/agent_sessions/transcript.py | 1 | CODE | |
| LOW | …/coding-agent-sessions/scripts/agent_sessions/codex.py | 1 | CODE | |
| LOW | …agent-sessions/scripts/agent_sessions/file_scanners.py | 1 | CODE | |
| LOW | …coding-agent-sessions/scripts/agent_sessions/claude.py | 1 | CODE | |
| LOW | …ding-agent-sessions/scripts/agent_sessions/__init__.py | 1 | CODE | |
| LOW | …/coding-agent-sessions/scripts/agent_sessions/types.py | 1 | CODE | |
| LOW | …ding-agent-sessions/scripts/agent_sessions/opencode.py | 1 | CODE | |
| LOW | …ing-agent-sessions/scripts/agent_sessions/pi_family.py | 1 | CODE | |
| LOW | …-agent-sessions/scripts/agent_sessions/kiro_scanner.py | 1 | CODE | |
| LOW | …ls/coding-agent-sessions/scripts/agent_sessions/cli.py | 1 | CODE | |
| LOW | …ent-sessions/scripts/agent_sessions/sqlite_scanners.py | 1 | CODE | |
| LOW | …ing-agent-sessions/scripts/agent_sessions/timeparse.py | 1 | CODE | |
| LOW | …agent-sessions/scripts/agent_sessions/aside_scanner.py | 1 | CODE | |
| LOW | …ding-agent-sessions/scripts/agent_sessions/scanners.py | 1 | CODE | |
| LOW | …gent-sessions/scripts/tests/test_pi_family_scanners.py | 8 | CODE | |
| LOW | …essions/scripts/tests/test_optional_sqlite_scanners.py | 8 | CODE | |
| LOW | …ng-agent-sessions/scripts/tests/test_agent_sessions.py | 8 | CODE | |
| LOW | …ding-agent-sessions/scripts/tests/test_cli_contract.py | 8 | CODE | |
| LOW | …agent-sessions/scripts/tests/test_extended_scanners.py | 8 | CODE | |
| LOW | …ing-agent-sessions/scripts/tests/test_aside_scanner.py | 8 | CODE | |
| LOW | …ills/skills/ultimate-browsing/scripts/cookie_crypto.py | 2 | CODE | |
| LOW | …lls/skills/ultimate-browsing/scripts/cookie_domains.py | 1 | CODE | |
| LOW | …kills/skills/ultimate-browsing/scripts/cookie_paths.py | 2 | CODE | |
| LOW | …ls/skills/ultimate-browsing/scripts/extract_cookies.py | 13 | CODE | |
| LOW | …ltimate-browsing/scripts/tests/test_extract_cookies.py | 3 | CODE | |
| LOW | …te-browsing/scripts/tests/test_cookie_domain_filter.py | 2 | CODE | |
| LOW | …d-skills/skills/ultimate-browsing/engine/bias_check.py | 12 | CODE | |
| LOW | …skills/skills/ultimate-browsing/engine/waf_detector.py | 11 | CODE | |
| LOW | …skills/skills/ultimate-browsing/engine/waf_detector.py | 15 | CODE | |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 12 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 7 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 7 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 7 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 7 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 8 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 9 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 9 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 10 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 11 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 11 | CODE | |
| LOW | …d-skills/skills/ultimate-browsing/engine/curl_probe.py | 1 | CODE | |
| LOW | …kills/skills/ultimate-browsing/engine/result_schema.py | 1 | CODE | |
| LOW | …ared-skills/skills/ultimate-browsing/engine/summary.py | 1 | CODE | |
| LOW | …ed-skills/skills/ultimate-browsing/engine/surrogate.py | 18 | CODE | |
| LOW | …ills/skills/ultimate-browsing/engine/url_transforms.py | 17 | CODE | |
| LOW | …-skills/skills/ultimate-browsing/engine/fetch_chain.py | 18 | CODE | |
| LOW | …-skills/skills/ultimate-browsing/engine/fetch_chain.py | 20 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__main__.py | 21 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/executor.py | 19 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/referers.py | 1 | CODE | |
| LOW | …kills/ultimate-browsing/engine/tests/test_surrogate.py | 2 | CODE | |
| LOW | …ate-browsing/engine/tests/test_surrogate_validators.py | 2 | CODE | |
| LOW | …lls/ultimate-browsing/engine/tests/test_fetch_chain.py | 1 | CODE | |
| LOW | …imate-browsing/engine/tests/test_playwright_stealth.py | 1 | CODE | |
| 3 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 748 | # Step 2: Start fake-openai server | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 758 | # Step 3: Create isolated sandbox and write opencode.jsonc | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 768 | # Step 4: Start opencode serve (using oqa_start_server internals but with our config) | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 860 | # Step 8: Plugin-init count | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 867 | # Step 9: Route provenance | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 727 | # Step 1: Record real-DB session count (read-only) | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 798 | # Step 5: Create a session | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 817 | # Step 6: Send the split probe prompt | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 899 | # Step 10: Branch-count guard | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 914 | # Step 11: Determine verdict | COMMENT |
| LOW⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{fileURLToPath as e}from"node:url";import{dirname as t,join as n,sep as a}from"node:path";import{accessSync as o,r | CODE |
| LOW⚡ | packages/omo-senpi/plugin/extensions/omo-side-panel.js | 11 | `;var Sl='[],<>})"]*$',Ol='(process\\.env\\.[A-Za-z_][A-Za-z0-9_]*|os\\.environ(\\.get\\(|\\[)?("[A-Za-z0-9_]*")?[])]*|e | CODE |
| LOW⚡ | packages/omo-senpi/plugin/extensions/omo-feedback.js | 2 | import{randomUUID as e}from"node:crypto";import{AsyncLocalStorage as t}from"node:async_hooks";import{createHash as n}fro | CODE |
| LOW⚡ | …kages/senpi-task/src/agents/builtin/plan-consultant.ts | 24 | ### Step 1: Identify Intent Type | COMMENT |
| LOW⚡ | …kages/senpi-task/src/agents/builtin/plan-consultant.ts | 33 | ### Step 2: Validate Classification | COMMENT |
| LOW | …features/builtin-commands/templates/remove-ai-slops.ts | 24 | ## Step 0: Task Planning | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/metis.ts | 39 | ### Step 1: Identify Intent Type | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/metis.ts | 48 | ### Step 2: Validate Classification | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/librarian.ts | 71 | ### Step 1: Find Official Documentation | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/librarian.ts | 78 | ### Step 2: Version Check (if version specified) | COMMENT |
| LOW | packages/omo-opencode/src/agents/librarian.ts | 90 | ### Step 3: Sitemap Discovery (understand doc structure) | COMMENT |
| LOW | packages/omo-opencode/src/agents/librarian.ts | 101 | ### Step 4: Targeted Investigation | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/hephaestus/gpt.ts | 130 | ### Step 1: Classify Task Type | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/hephaestus/gpt.ts | 138 | ### Step 2: Ambiguity Protocol (EXPLORE FIRST - NEVER ask before exploring) | COMMENT |
| LOW | packages/omo-opencode/src/agents/hephaestus/gpt.ts | 154 | ### Step 3: Validate Before Acting | COMMENT |
| LOW | packages/omo-opencode/src/agents/sisyphus/default.ts | 194 | ### Step 0: Verbalize Intent (BEFORE Classification) | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/sisyphus/default.ts | 216 | ### Step 1: Classify Request Type | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/sisyphus/default.ts | 224 | ### Step 2: Check for Ambiguity | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/sisyphus/default.ts | 232 | ### Step 3: Validate Before Acting | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/senpi-desktop-backend-x11/src/input/tests.rs | 37 | pub(super) const fn fake_key(code: u8, press: bool) -> Call { | CODE |
| LOW | crates/senpi-desktop-backend-x11/src/input/tests.rs | 154 | assert!(input.server.calls().contains(&fake_key(KEY_A, true))); | CODE |
| LOW | crates/senpi-desktop-backend-x11/src/input/tests.rs | 175 | fake_key(KEY_A, true), | CODE |
| LOW | crates/senpi-desktop-backend-x11/src/input/tests.rs | 176 | fake_key(KEY_A, false), | CODE |
| LOW⚡ | crates/senpi-desktop-backend-x11/src/input/tests.rs | 210 | fake_key(KEY_SHIFT_L, true), | CODE |
| LOW⚡ | crates/senpi-desktop-backend-x11/src/input/tests.rs | 211 | fake_key(KEY_A, true), | CODE |
| LOW⚡ | crates/senpi-desktop-backend-x11/src/input/tests.rs | 212 | fake_key(KEY_A, false), | CODE |
| LOW⚡ | crates/senpi-desktop-backend-x11/src/input/tests.rs | 213 | fake_key(KEY_SHIFT_L, false), | CODE |
| LOW | …s/senpi-desktop-backend-x11/src/input/release_tests.rs | 9 | use super::tests::{fake_button, fake_key, input}; | CODE |
| LOW | …s/senpi-desktop-backend-x11/src/input/release_tests.rs | 25 | [fake_key(KEY_CONTROL_L, true), fake_key(KEY_CONTROL_L, false)] | CODE |
| LOW | …s/senpi-desktop-backend-x11/src/input/release_tests.rs | 48 | assert_eq!(input.server.calls(), [fake_key(KEY_C, false)]); | CODE |
| LOW | tests/hashline/test-edge-cases.ts | 707 | fileContent: ["placeholder", "tail"].join("\n"), | CODE |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 207 | "apiKey": "fake-key", | CODE |
| LOW | .agents/skills/opencode-qa/scripts/lsp-e2e.sh | 1481 | options: { apiKey: "fake-key", baseURL: `http://127.0.0.1:${port}/v1`, timeout: 30000 }, | CODE |
| LOW | docs/reference/omo-thread.md | 99 | `author="Jane Doe" author_id="U123"` (and `author_user_id="..."`). Brackets inside a value are | CODE |
| LOW | docs/reference/omo-thread.md | 284 | omo thread send --binding "$id" --idempotency-key evt-1 --author-id U123 --author-name "Jane Doe" "hello from outside" | CODE |
| LOW | docs/reference/omo-thread.md | 292 | omo thread answer --binding "$id" --token "$token" --author-id U123 --author-name "Jane Doe" "yes" | CODE |
| LOW | script/qa/dependency-audit/runtime.ts | 90 | ...provider, apiKey: "audit-fake-key", models: [{ id: "audit-v1", name: "Audit local", reasoning: false, input: ["te | CODE |
| LOW | …e/src/features/builtin-skills/skills/playwright-cli.ts | 45 | playwright-cli fill e5 "user@example.com" | CODE |
| LOW | …e/src/features/builtin-skills/skills/playwright-cli.ts | 220 | playwright-cli fill e1 "user@example.com" | CODE |
| LOW | …-senpi/src/components/memory/facts-record-tool.test.ts | 116 | const result = await tool.execute("placeholder", { scope: "project", person: { name: "", aliases: [] }, text: "The | CODE |
| LOW | …/omo-senpi/src/components/memory/palace/people.test.ts | 40 | expect(jane?.displayName).toBe("Jane Doe") | CODE |
| LOW | …mo-senpi/src/components/memory/kibitzer/events.test.ts | 224 | stream.onPrompt(prompt(`prompt ${index} ${"lorem ipsum ".repeat(400)}`), branchOf(index)) | CODE |
| LOW | …omo-senpi/src/components/memory/kibitzer/nudge-tool.ts | 13 | hint: Type.String({ description: "One factual sentence stating what the stored note records ('the note records that .. | CODE |
| LOW | …enpi/src/components/memory/commands/people-ask.test.ts | 105 | displayName: "Jane Doe", | CODE |
| LOW | packages/omo-senpi/src/components/thread/sdk.test.ts | 123 | const author = { platform_user_id: "U123", display: "Jane Doe" } | CODE |
| LOW | …pi/src/components/thread/tools/extension-tools.test.ts | 166 | const placeholder = { sessionId: "route-placeholder", durableSessionId: UNKNOWN_CALLER, cwd: process.cwd(), name: "place | CODE |
| LOW | …rc/components/thread/gateway/relay-author-mode.test.ts | 45 | const JANE = { platform_user_id: "U123", display: "Jane Doe" } | CODE |
| LOW | …rc/components/thread/gateway/relay-author-mode.test.ts | 56 | expect(header).toContain('author="Jane Doe" author_id="U123" author_user_id="u-jane"') | CODE |
| LOW | …es/senpi-task/src/tools/task/argument-normalization.ts | 6 | const PROVIDER_PADDING_PROMPTS = new Set(["unused", "placeholder", "not used", "n/a"]) | CODE |
| LOW | …ts/ulw-loop/test/quality-gate-aggregate-basics.test.ts | 139 | evidence: "placeholder", | CODE |
| LOW | …ts/ulw-loop/test/quality-gate-aggregate-basics.test.ts | 172 | { field: "manualQa.evidence", message: expect.stringContaining("placeholder") }, | CODE |
| LOW | …/ulw-loop/test/quality-gate-poisoning-cascades.test.ts | 94 | expect(list.some((x) => x.includes("reportPath") && x.includes("placeholder"))).toBe(true); | CODE |
| LOW | …x/plugin/components/ulw-loop/test/quality-gate.test.ts | 249 | expect(error.message).toContain("placeholder"); | CODE |
| LOW | …ents/lazycodex-executor-verify/test/codex-hook.test.ts | 265 | expect(parseBlockOutput(output).reason).toContain("placeholder"); | CODE |
| LOW | …components/lazycodex-executor-verify/src/codex-hook.ts | 11 | type EvidenceReceiptFailure = "invalid" | "placeholder" | "stale" | null; | CODE |
| LOW | …components/lazycodex-executor-verify/src/codex-hook.ts | 90 | if (stat.size <= 0 || fs.readFileSync(filePath, "utf8").trim().length < 40) return "placeholder"; | CODE |
| LOW | …red-skills/skills/frontend/references/design/README.md | 102 | - Loading nothing and freestyling: purple-blue gradients, rounded-2xl everywhere, three feature cards, Inter, lorem ipsu | CODE |
| LOW | …pts/detect/rules/color/support/placeholder-contrast.ts | 9 | const text = (el.attributes["placeholder"] ?? "").trim() | CODE |
| LOW | …rontend/scripts/detect/rules/copy/broken-image.test.ts | 20 | { tag: "img", id: "placeholder", attributes: { src: "#", srcset: " " } }, | CODE |
| LOW | packages/omo-native/test/keychain-helper-verbs.test.ts | 26 | const value = JSON.stringify({ refreshToken: "dummy-token", note: "quote\" newline\n é 😀" }) | CODE |
| LOW | packages/omo-native/test/thread.test.ts | 83 | const result = await run(["send", "--binding", "b-1", "--author-id", "U123", "--author-name", "Jane Doe", "--author- | CODE |
| LOW | packages/omo-native/test/thread.test.ts | 84 | expect(JSON.parse(result.stdout).request).toEqual({ text: "hi", binding_id: "b-1", idempotency_key: "evt-9", mode: " | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …skills/frontend/scripts/perfection/lighthouse-audit.py | 60 | : undefined, | CODE |
| HIGH | …skills/frontend/scripts/perfection/lighthouse-audit.py | 63 | : undefined, | CODE |
| HIGH | …ls/skills/ultimate-browsing/scripts/extract_cookies.py | 110 | if (result && result.success) ok += 1; | CODE |
| HIGH | …ls/skills/ultimate-browsing/scripts/extract_cookies.py | 115 | process.stderr.write(`${error.name || "Error"}: ${error.message || error}\n`); | CODE |
| HIGH⚡ | …imate-browsing/engine/tests/test_playwright_stealth.py | 43 | events.push(plugin.name); | CODE |
| HIGH⚡ | …imate-browsing/engine/tests/test_playwright_stealth.py | 47 | events.push({ profileDir, channel: options.channel, viewport: options.viewport }); | CODE |
| HIGH⚡ | …imate-browsing/engine/tests/test_playwright_stealth.py | 53 | events.push('close'); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ages/omo-senpi/src/components/thread/contracts.test.ts | 179 | const literals = threadToolParamSchemas.thread_set_reasoning.properties.level.anyOf.map((member) => member.const) | CODE |
| CRITICAL⚡ | …ges/senpi-task/src/__adversarial__/chaos-invariants.ts | 178 | for (const handle of state.harness.probeEngine.inProcessRunner.allHandles.filter((entry) => entry.handle.task_id === | CODE |
| CRITICAL⚡ | …ges/senpi-task/src/__adversarial__/chaos-invariants.ts | 181 | for (const handle of state.harness.probeEngine.processRunner.allHandles.filter((entry) => entry.handle.task_id === i | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/senpi-desktop-prelude/test/harness.ts | 138 | except Exception as caught: | CODE |
| LOW | …ared-skills/skills/ast-grep/scripts/ast_grep_helper.py | 195 | except Exception: | CODE |
| LOW | …e-browsing/references/insane-search/tls-impersonate.md | 44 | except Exception: | CODE |
| LOW | …e-browsing/references/insane-search/tls-impersonate.md | 53 | except Exception: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/bias_check.py | 109 | except Exception as e: | CODE |
| LOW | …skills/skills/ultimate-browsing/engine/waf_detector.py | 87 | except Exception as e: | CODE |
| LOW⚡ | …skills/skills/ultimate-browsing/engine/waf_detector.py | 101 | except Exception: | CODE |
| LOW⚡ | …skills/skills/ultimate-browsing/engine/waf_detector.py | 104 | except Exception: | CODE |
| LOW⚡ | …skills/skills/ultimate-browsing/engine/waf_detector.py | 111 | except Exception: | CODE |
| MEDIUM | …skills/skills/ultimate-browsing/engine/waf_detector.py | 98 | def _cookies_dict(resp) -> dict: | CODE |
| MEDIUM | …skills/skills/ultimate-browsing/engine/waf_detector.py | 108 | def _headers_dict(resp) -> dict: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 135 | except Exception: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 142 | except Exception: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 174 | except Exception as e: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 258 | except Exception: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 261 | except Exception: | CODE |
| MEDIUM | …d-skills/skills/ultimate-browsing/engine/validators.py | 255 | def _extract_cookies(resp) -> dict: | CODE |
| LOW | …ed-skills/skills/ultimate-browsing/engine/surrogate.py | 181 | except Exception as exc: | CODE |
| LOW | …ed-skills/skills/ultimate-browsing/engine/surrogate.py | 189 | except Exception as exc: | CODE |
| LOW | …red-skills/skills/ultimate-browsing/engine/__main__.py | 68 | except Exception as e: | CODE |
| LOW | …red-skills/skills/ultimate-browsing/engine/executor.py | 84 | except Exception as e: | CODE |
| LOW | …-skills/skills/programming/references/python/README.md | 137 | except Exception as e: | CODE |
| LOW | …-skills/skills/programming/references/python/README.md | 144 | except Exception: | CODE |
| LOW | …-skills/skills/programming/references/python/README.md | 160 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/codex-qa/scripts/lsp-e2e.sh | 10 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/sse-hook-probe.sh | 30 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/db-session-by-id.sh | 5 | # Usage: | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 14 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/tui-smoke.sh | 14 | # Usage: | COMMENT |
| LOW | …gents/skills/opencode-qa/scripts/db-session-by-name.sh | 6 | # Usage: | COMMENT |
| LOW | …gents/skills/opencode-qa/scripts/db-session-by-text.sh | 18 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/lsp-e2e.sh | 9 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/export-roundtrip.sh | 9 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/server-smoke.sh | 12 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …mponents/ultrawork/agents/lazycodex-worker-medium.toml | 0 | role: implementation executor. you own the task end to end. make the smallest correct change that satisfies the caller's | STRING |
| HIGH | …/components/ultrawork/agents/lazycodex-worker-low.toml | 0 | role: implementation executor. you own the task end to end. make the smallest correct change that satisfies the caller's | STRING |
| HIGH | …components/ultrawork/agents/lazycodex-worker-high.toml | 0 | role: implementation executor. you own the task end to end. make the smallest correct change that satisfies the caller's | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ared-skills/skills/ast-grep/scripts/ast_grep_helper.py | 171 | CODE | |
| LOW | …ared-skills/skills/ast-grep/scripts/ast_grep_helper.py | 635 | CODE | |
| LOW | …coding-agent-sessions/scripts/agent_sessions/jsonio.py | 43 | CODE | |
| LOW | …ding-agent-sessions/scripts/agent_sessions/opencode.py | 34 | CODE | |
| LOW | …ding-agent-sessions/scripts/agent_sessions/opencode.py | 268 | CODE | |
| LOW | …ls/coding-agent-sessions/scripts/agent_sessions/cli.py | 32 | CODE | |
| LOW | …ls/coding-agent-sessions/scripts/agent_sessions/cli.py | 141 | CODE | |
| LOW | …d-skills/skills/ultimate-browsing/engine/bias_check.py | 139 | CODE | |
| LOW | …skills/skills/ultimate-browsing/engine/waf_detector.py | 115 | CODE | |
| LOW | …-skills/skills/ultimate-browsing/engine/fetch_chain.py | 34 | CODE | |
| LOW | …ls/programming/scripts/python/check-no-excuse-rules.py | 143 | CODE | |
| LOW | …ls/programming/scripts/python/check-no-excuse-rules.py | 199 | CODE | |
| LOW | …ls/programming/scripts/python/check-no-excuse-rules.py | 373 | CODE | |
| LOW | packages/omo-native/test/pty-signal-qa.py | 71 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/senpi-desktop-prelude/test/harness.ts | 140 | print(json.dumps({"calls": calls, "displayed": displayed, "out": ns.get("out"), "error": error})) | CODE |
| HIGH | …ncode/src/cli/service-auth/secret-service-lock.test.ts | 20 | print("READY", flush=True) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .agents/skills/codex-qa/scripts/lib/common.sh | 71 | # Create an isolated CODEX_HOME and project dir, export the env that keeps the | COMMENT |
| MEDIUM | .agents/skills/opencode-qa/scripts/lib/common.sh | 67 | # Create an isolated XDG sandbox so a spawned opencode never touches the real | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/omo-native/test/pty-signal-qa.py | 206 | except ProcessLookupError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ls/programming/scripts/python/check-no-excuse-rules.py | 404 | # Check if body contains assert_never call | COMMENT |
| LOW | …ls/programming/scripts/python/check-no-excuse-rules.py | 447 | # Check if all arguments are string literals or f-strings | COMMENT |
| LOW | .github/workflows/sisyphus-agent.yml | 358 | # Check if PR or Issue and get title | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ing-agent-sessions/scripts/agent_sessions/pi_family.py | 12 | __all__ = ["scan_gajae_code", "scan_oh_my_pi", "scan_senpi"] | CODE |
| LOW | …ding-agent-sessions/scripts/agent_sessions/scanners.py | 78 | __all__ = ["DEFAULT_PLATFORMS", "PLATFORM_SCANNERS", "scan", "scan_claude", "scan_codex", "scan_gajae_code", "scan_oh_my | CODE |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 13 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/src/features/opencode-runtime-skills/source-server.ts | 71 | function handleRequest(request: Request): Response | Promise<Response> { | CODE |