omo/lazycodex: The coding agent for tokenmaxxers;the one and only agent harness for complex codebases. For your Codex, for your OpenCode
This report presents the forensic synthetic code analysis of code-yeongyu/oh-my-openagent, a TypeScript project with 68,473 GitHub stars. SynthScan v2.0 examined 1,168,868 lines of code across 8431 source files, recording 3418 pattern matches distributed across 22 syntactic categories. The overall adjusted score of 4.0 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 3418 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test-setup.ts | 77 | function cleanupRulesInjectorStorage(): void { | CODE |
| LOW | postinstall.test.ts | 20 | function runPostinstallInFixtureEnv(): PostinstallRun { | CODE |
| LOW | .omo/evidence/20260810-omo-native-telemetry/f4.md | 593 | 77:export function createOmoNativeProductConfig(): TelemetryProductConfig & { readonly disableGeoip: true } { | CODE |
| LOW | …/evidence/20260809-omo-agent-toolkit-rename/task-4.txt | 321 | @@ -90 +90 @@ function buildCompletedLegacyGoalRemediation(goal: UlwLoopItem): string { | CODE |
| LOW | …/evidence/20260809-omo-agent-toolkit-rename/task-4.txt | 333 | @@ -98 +98 @@ function hasSteeringDirectiveMarker(prompt: string): boolean { | CODE |
| LOW | …/evidence/20260809-omo-agent-toolkit-rename/task-4.txt | 339 | @@ -179 +179 @@ export function parseUlwLoopSteeringDirective(text: string): UlwLoopSteeringProp | CODE |
| LOW | .omo/evidence/20260727-fix-6141/green-6141.txt | 28 | export function isHephaestusSupportedModel(model: string | undefined): boolean { | CODE |
| LOW | .omo/evidence/20260727-fix-6141/red-6141.txt | 52 | 53 | function assertHephaestusSupportedModel(model: string | undefined): void { | CODE |
| LOW | …o/evidence/20260727-fix-6141/negative-control-6141.txt | 53 | 53 | function assertHephaestusSupportedModel(model: string | undefined): void { | CODE |
| LOW | …-remove-prompt-contract-tests/classification_bundle.py | 103 | def _parse_classification_text(text: str, source: Path) -> ClassificationDocument: | CODE |
| LOW | …-remove-prompt-contract-tests/classification_bundle.py | 132 | def dispositions_from_document( | CODE |
| LOW | …-remove-prompt-contract-tests/classification_bundle.py | 158 | def load_direct_classification(path: Path) -> dict[str, BundleDisposition]: | CODE |
| LOW | …-remove-prompt-contract-tests/classification_bundle.py | 166 | def load_classification_bundle( | CODE |
| LOW | …move-prompt-contract-tests/test_node_assert_scanner.py | 14 | def test_node_assert_assertions_are_detected_in_javascript_tests(tmp_path: Path) -> None: | CODE |
| LOW | …move-prompt-contract-tests/test_node_assert_scanner.py | 91 | def test_sync_skills_codex_compatibility_node_assertions_yield_candidates() -> None: | STRING |
| LOW | …move-prompt-contract-tests/test_node_assert_scanner.py | 104 | def test_callable_node_assert_aliases_only_emit_instruction_assertions(tmp_path: Path) -> None: | STRING |
| LOW | …remove-prompt-contract-tests/audit_prompt_contracts.py | 73 | def load_indexed_classification(path: Path) -> dict[str, Disposition]: | CODE |
| LOW | …remove-prompt-contract-tests/audit_prompt_contracts.py | 87 | def load_requested_classification(path: Path) -> dict[str, Disposition]: | CODE |
| LOW | …-remove-prompt-contract-tests/test_snapshot_scanner.py | 14 | def test_builtin_category_snapshot_with_prompt_payload_yields_candidate(tmp_path: Path) -> None: | CODE |
| LOW | …-remove-prompt-contract-tests/test_snapshot_scanner.py | 44 | def test_opaque_snapshot_subjects_always_yield_candidates(tmp_path: Path) -> None: | CODE |
| LOW | …e-prompt-contract-tests/test_audit_prompt_contracts.py | 59 | def test_project_skill_includes_and_negative_assertion_are_detected( | CODE |
| LOW | …e-prompt-contract-tests/test_audit_prompt_contracts.py | 74 | def test_team_mode_headings_resolve_through_for_of_loop( | CODE |
| LOW | …e-prompt-contract-tests/test_audit_prompt_contracts.py | 87 | def test_playwright_marker_array_is_detected_through_order_helper( | CODE |
| LOW | …e-prompt-contract-tests/test_audit_prompt_contracts.py | 102 | def test_memory_assets_and_seeds_derived_contracts_are_detected( | CODE |
| LOW | …e-prompt-contract-tests/test_audit_prompt_contracts.py | 121 | def test_category_resolver_direct_prompt_and_prompt_assertions_are_detected( | CODE |
| LOW | …e-prompt-contract-tests/test_audit_prompt_contracts.py | 155 | def test_tracked_tests_enumerates_only_tracked_test_files(tmp_path: Path) -> None: | CODE |
| LOW | …e-prompt-contract-tests/test_audit_prompt_contracts.py | 174 | def test_allowed_entry_requires_non_empty_rationale_and_category( | CODE |
| LOW | …e-prompt-contract-tests/test_audit_prompt_contracts.py | 198 | def test_indexed_classification_rejects_hash_mismatch(tmp_path: Path) -> None: | CODE |
| LOW | …e-prompt-contract-tests/test_audit_prompt_contracts.py | 217 | def test_indexed_classification_loads_only_active_fingerprints(tmp_path: Path) -> None: | CODE |
| LOW | bin/oh-my-opencode.js | 111 | function maybeRunLazyCodexNodeInstaller(invocationName) { | CODE |
| LOW | bin/oh-my-opencode.test.ts | 231 | async function writeNodeInstallerFixture(root: string): Promise<void> { | CODE |
| LOW | bin/oh-my-opencode.test.ts | 247 | async function canonicalizePackageRootCapture(fixture: { readonly captureDir: string }): Promise<string> { | CODE |
| LOW | bin/platform.d.ts | 8 | export declare function getPlatformPackageCandidates(options: { | CODE |
| LOW | bin/platform.d.ts | 20 | export declare function resolvePlatformPackageBaseName(wrapperPackageName: string): string; | CODE |
| LOW | bin/version-mismatch.js | 37 | export function detectPlatformBinaryMismatch({ mainVersion, platformVersion, platformPackage }) { | CODE |
| LOW | bin/platform.js | 19 | export function resolvePlatformPackageBaseName(wrapperPackageName) { | CODE |
| LOW | bin/platform.js | 50 | export function getPlatformPackageCandidates({ platform, arch, libcFamily, preferBaseline = false, packageBaseName = "oh | CODE |
| LOW | bin/platform.js | 67 | function getBaselinePlatformPackage({ platform, arch, libcFamily, packageBaseName = "oh-my-opencode" }) { | CODE |
| LOW⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| LOW | …eration-1/eval-5/without_skill/outputs/code-changes.md | 207 | export async function processApplyPatchEditsWithCli( | CODE |
| LOW | …/iteration-1/eval-5/with_skill/outputs/code-changes.md | 118 | export async function processApplyPatchEditsWithCli( | CODE |
| LOW | …/iteration-1/eval-5/with_skill/outputs/code-changes.md | 132 | export async function processApplyPatchEditsWithCli( | CODE |
| LOW | …eration-1/eval-3/without_skill/outputs/code-changes.md | 116 | function renderPlanAgentCategoryRows(categories: AvailableCategory[]): string[] { | CODE |
| LOW | …eration-1/eval-3/without_skill/outputs/code-changes.md | 133 | export function buildPlanAgentSkillsSection( | CODE |
| LOW | …eration-1/eval-3/without_skill/outputs/code-changes.md | 156 | export function buildPlanAgentSystemPrepend( | CODE |
| LOW | …/iteration-1/eval-3/with_skill/outputs/code-changes.md | 113 | function renderPlanAgentCategoryRows(categories: AvailableCategory[]): string[] { | CODE |
| LOW | …/iteration-1/eval-3/with_skill/outputs/code-changes.md | 130 | export function buildPlanAgentSkillsSection( | CODE |
| LOW | …/iteration-1/eval-3/with_skill/outputs/code-changes.md | 153 | export function buildPlanAgentSystemPrepend( | CODE |
| LOW | tests/hashline/test-environment.ts | 21 | export function parseHashlineTestEnvironment( | CODE |
| LOW⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| LOW | …eration-1/eval-5/without_skill/outputs/code-changes.md | 207 | export async function processApplyPatchEditsWithCli( | CODE |
| LOW | …/iteration-1/eval-5/with_skill/outputs/code-changes.md | 118 | export async function processApplyPatchEditsWithCli( | CODE |
| LOW | …/iteration-1/eval-5/with_skill/outputs/code-changes.md | 132 | export async function processApplyPatchEditsWithCli( | CODE |
| LOW | …eration-1/eval-3/without_skill/outputs/code-changes.md | 116 | function renderPlanAgentCategoryRows(categories: AvailableCategory[]): string[] { | CODE |
| LOW | …eration-1/eval-3/without_skill/outputs/code-changes.md | 133 | export function buildPlanAgentSkillsSection( | CODE |
| LOW | …eration-1/eval-3/without_skill/outputs/code-changes.md | 156 | export function buildPlanAgentSystemPrepend( | CODE |
| LOW | …/iteration-1/eval-3/with_skill/outputs/code-changes.md | 113 | function renderPlanAgentCategoryRows(categories: AvailableCategory[]): string[] { | CODE |
| LOW | …/iteration-1/eval-3/with_skill/outputs/code-changes.md | 130 | export function buildPlanAgentSkillsSection( | CODE |
| LOW | …/iteration-1/eval-3/with_skill/outputs/code-changes.md | 153 | export function buildPlanAgentSystemPrepend( | CODE |
| LOW | docs/reference/prompt-async-gate-rfc.md | 147 | export function releasePromptAsyncReservation( | CODE |
| 2309 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | changes.md | 154 | ### Tool orchestration and observability | COMMENT |
| MEDIUM | AGENTS.md | 68 | OpenCode plugin (npm: `oh-my-opencode`, dual-published as `oh-my-openagent` during the rename transition) extending Open | CODE |
| MEDIUM | CLAUDE.md | 68 | OpenCode plugin (npm: `oh-my-opencode`, dual-published as `oh-my-openagent` during the rename transition) extending Open | CODE |
| MEDIUM | …vidence/20260818-mass-ulw-usage-patterns/qa-output.txt | 7 | (pass) OMO Senpi scoped skill sync > #given codex-derived and native skill roots #when scanned #then no Codex or multi-a | CODE |
| MEDIUM | …vidence/20260818-mass-ulw-usage-patterns/qa-output.txt | 12 | (pass) OMO Senpi scoped skill sync > #given ported orchestration skills #when scanned #then no foreign-harness delegatio | CODE |
| MEDIUM | …825-dag-tui-paused-status-honesty/green-test-senpi.txt | 124 | (pass) OMO Senpi scoped skill sync > #given codex-derived and native skill roots #when scanned #then no Codex or multi-a | CODE |
| MEDIUM | …825-dag-tui-paused-status-honesty/green-test-senpi.txt | 129 | (pass) OMO Senpi scoped skill sync > #given ported orchestration skills #when scanned #then no foreign-harness delegatio | CODE |
| MEDIUM | …825-dag-tui-paused-status-honesty/green-test-senpi.txt | 315 | (pass) insertSenpiCompatibilityGuidance > #given content with no opencode orchestration calls #when processed #then it i | CODE |
| MEDIUM | …825-dag-tui-paused-status-honesty/green-test-senpi.txt | 1450 | (pass) omo-senpi lsp post-edit diagnostics > #given many mutated files #when post-edit diagnostics run #then shared orch | CODE |
| MEDIUM | …825-dag-tui-paused-status-honesty/green-test-senpi.txt | 1801 | (pass) omo-senpi skill-pointers component > #given a matching interactive prompt > #when the mass-ulw pointer is injecte | CODE |
| MEDIUM | …825-dag-tui-paused-status-honesty/green-test-senpi.txt | 3396 | (pass) selectRegistryFallbackModels > #given priced chat models > #when two models share a price #then the larger contex | CODE |
| MEDIUM | …825-dag-tui-paused-status-honesty/green-test-senpi.txt | 3398 | (pass) selectRegistryFallbackModels > #given models reflection cannot use > #when the context window is below the reflec | CODE |
| MEDIUM⚡ | …ce/omo-senpi-adapter/memory-v2/task-9/package-gate.txt | 134 | (pass) OMO Senpi scoped skill sync > #given codex-derived and native skill roots #when scanned #then no Codex or multi-a | CODE |
| MEDIUM⚡ | …ce/omo-senpi-adapter/memory-v2/task-9/package-gate.txt | 136 | (pass) OMO Senpi scoped skill sync > #given shared skill roots with opencode orchestration #when inspected #then a Senpi | CODE |
| MEDIUM⚡ | …ce/omo-senpi-adapter/memory-v2/task-9/package-gate.txt | 140 | (pass) OMO Senpi scoped skill sync > #given ported orchestration skills #when scanned #then no foreign-harness delegatio | CODE |
| MEDIUM | …ce/omo-senpi-adapter/memory-v2/task-9/package-gate.txt | 958 | (pass) omo-senpi lsp post-edit diagnostics > #given many mutated files #when post-edit diagnostics run #then shared orch | CODE |
| MEDIUM⚡ | …e/omo-senpi-adapter/memory-v2/task-24/package-gate.txt | 134 | (pass) OMO Senpi scoped skill sync > #given codex-derived and native skill roots #when scanned #then no Codex or multi-a | CODE |
| MEDIUM⚡ | …e/omo-senpi-adapter/memory-v2/task-24/package-gate.txt | 136 | (pass) OMO Senpi scoped skill sync > #given shared skill roots with opencode orchestration #when inspected #then a Senpi | CODE |
| MEDIUM⚡ | …e/omo-senpi-adapter/memory-v2/task-24/package-gate.txt | 140 | (pass) OMO Senpi scoped skill sync > #given ported orchestration skills #when scanned #then no foreign-harness delegatio | CODE |
| MEDIUM | …e/omo-senpi-adapter/memory-v2/task-24/package-gate.txt | 896 | (pass) omo-senpi lsp post-edit diagnostics > #given many mutated files #when post-edit diagnostics run #then shared orch | CODE |
| MEDIUM⚡ | …e/omo-senpi-adapter/memory-v2/task-13/package-gate.txt | 134 | (pass) OMO Senpi scoped skill sync > #given codex-derived and native skill roots #when scanned #then no Codex or multi-a | CODE |
| MEDIUM⚡ | …e/omo-senpi-adapter/memory-v2/task-13/package-gate.txt | 136 | (pass) OMO Senpi scoped skill sync > #given shared skill roots with opencode orchestration #when inspected #then a Senpi | CODE |
| MEDIUM⚡ | …e/omo-senpi-adapter/memory-v2/task-13/package-gate.txt | 140 | (pass) OMO Senpi scoped skill sync > #given ported orchestration skills #when scanned #then no foreign-harness delegatio | CODE |
| MEDIUM | …e/omo-senpi-adapter/memory-v2/task-13/package-gate.txt | 958 | (pass) omo-senpi lsp post-edit diagnostics > #given many mutated files #when post-edit diagnostics run #then shared orch | CODE |
| MEDIUM⚡ | …/evidence/omo-senpi-adapter/memory-v2/task-25/test.txt | 464 | (pass) OMO Senpi scoped skill sync > #given codex-derived and native skill roots #when scanned #then no Codex or multi-a | CODE |
| MEDIUM⚡ | …/evidence/omo-senpi-adapter/memory-v2/task-25/test.txt | 466 | (pass) OMO Senpi scoped skill sync > #given shared skill roots with opencode orchestration #when inspected #then a Senpi | CODE |
| MEDIUM⚡ | …/evidence/omo-senpi-adapter/memory-v2/task-25/test.txt | 470 | (pass) OMO Senpi scoped skill sync > #given ported orchestration skills #when scanned #then no foreign-harness delegatio | CODE |
| MEDIUM | …/evidence/omo-senpi-adapter/memory-v2/task-25/test.txt | 1269 | (pass) omo-senpi lsp post-edit diagnostics > #given many mutated files #when post-edit diagnostics run #then shared orch | CODE |
| MEDIUM | …/20260820-dag-completion-directive/gate-test-senpi.txt | 124 | (pass) OMO Senpi scoped skill sync > #given codex-derived and native skill roots #when scanned #then no Codex or multi-a | CODE |
| MEDIUM | …/20260820-dag-completion-directive/gate-test-senpi.txt | 129 | (pass) OMO Senpi scoped skill sync > #given ported orchestration skills #when scanned #then no foreign-harness delegatio | CODE |
| MEDIUM | …/20260820-dag-completion-directive/gate-test-senpi.txt | 315 | (pass) insertSenpiCompatibilityGuidance > #given content with no opencode orchestration calls #when processed #then it i | CODE |
| MEDIUM | …/20260820-dag-completion-directive/gate-test-senpi.txt | 1425 | (pass) omo-senpi lsp post-edit diagnostics > #given many mutated files #when post-edit diagnostics run #then shared orch | CODE |
| MEDIUM | …/20260820-dag-completion-directive/gate-test-senpi.txt | 3245 | (pass) selectRegistryFallbackModels > #given priced chat models > #when two models share a price #then the larger contex | CODE |
| MEDIUM | …/20260820-dag-completion-directive/gate-test-senpi.txt | 3247 | (pass) selectRegistryFallbackModels > #given models reflection cannot use > #when the context window is below the reflec | CODE |
| MEDIUM | …0-dag-completion-directive/gate-baseline-omo-senpi.txt | 125 | (pass) OMO Senpi scoped skill sync > #given codex-derived and native skill roots #when scanned #then no Codex or multi-a | CODE |
| MEDIUM | …0-dag-completion-directive/gate-baseline-omo-senpi.txt | 157 | (pass) OMO Senpi scoped skill sync > #given ported orchestration skills #when scanned #then no foreign-harness delegatio | CODE |
| MEDIUM | …0-dag-completion-directive/gate-baseline-omo-senpi.txt | 356 | (pass) insertSenpiCompatibilityGuidance > #given content with no opencode orchestration calls #when processed #then it i | CODE |
| MEDIUM | …0-dag-completion-directive/gate-baseline-omo-senpi.txt | 1517 | (pass) omo-senpi lsp post-edit diagnostics > #given many mutated files #when post-edit diagnostics run #then shared orch | CODE |
| MEDIUM | …0-dag-completion-directive/gate-baseline-omo-senpi.txt | 3356 | (pass) selectRegistryFallbackModels > #given priced chat models > #when two models share a price #then the larger contex | CODE |
| MEDIUM | …0-dag-completion-directive/gate-baseline-omo-senpi.txt | 3358 | (pass) selectRegistryFallbackModels > #given models reflection cannot use > #when the context window is below the reflec | CODE |
| MEDIUM | …ence/20260827-dag-fallback-waiter-guard/full-suite.txt | 1372 | (pass) DAG child in-process tool policy > #given a DAG node child #when its session options are built #then no orchestra | CODE |
| MEDIUM | …ence/20260827-dag-fallback-waiter-guard/full-suite.txt | 1373 | (pass) DAG child in-process tool policy > #given a persisted DAG node child #when resumed #then the shared orchestration | CODE |
| MEDIUM | …ence/20260827-dag-fallback-waiter-guard/full-suite.txt | 2129 | (pass) shared parent tool family filter > #given task, team, and dag orchestration names #when classified #then only orc | CODE |
| MEDIUM | …blocker-harness-scope/red-control-section-restored.txt | 4 | Received: "<skill-instruction>\nBase directory for this skill: C:\\Users\\pss\\.omo-contrib\\work\\omo\\packages\\shared | CODE |
| MEDIUM⚡ | …ence/20260801-plan-gate-hardening/e2e-read-unlock.json | 1 | {"result":"PASS","scenario":"read-unlock","expect":"gated","checks":{"read_does_not_unlock":true,"no_child_spawned":true | CODE |
| MEDIUM⚡ | …ence/20260801-plan-gate-hardening/e2e-read-unlock.json | 1 | {"result":"PASS","scenario":"read-unlock","expect":"gated","checks":{"read_does_not_unlock":true,"no_child_spawned":true | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 657 | (pass) codex-config-toml > #given empty Codex config #when updating config #then creates MultiAgentV2 section without ro | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 658 | (pass) codex-config-toml > #given stale queue multi-agent mode #when updating config #then removes unsupported root key | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 660 | (pass) codex-config-toml > #given stale proactive multi-agent mode #when updating config #then removes unsupported root | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1077 | ✔ #given Codex-facing orchestration surfaces #when inspected #then retired ChatGPT-account model names are not recommend | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1080 | ✔ #given long-running orchestration prompts #when waiting on child agents #then parent liveness is surfaced (2.111541ms) | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1087 | ✔ #given SessionStart migration removes unsupported root multi-agent mode #when startup check runs #then emits cleanup n | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1280 | ✔ #given the scaffold script and the workflow reference #when compared #then every plan header the script emits is docum | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1284 | ✔ #given scaffold #when .omo/plans is a symlink outside the workspace #then it refuses before the plan write escapes (28 | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1285 | ✔ #given scaffold #when .omo/drafts is a symlink outside the workspace #then it refuses before the draft write escapes ( | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1287 | ✔ #given an explicit review modifier at startup #when draft-only scaffold runs #then the first durable write contains th | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1288 | ✔ #given automatic review for non-Trivial UNCLEAR intent #when draft-only scaffold runs #then the first durable write co | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1289 | ✔ #given Trivial UNCLEAR pre-approval planning #when draft-only scaffold runs #then it creates a review-optional draft w | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1311 | ✔ #given synced aggregate Codex skills #when they contain OpenCode orchestration examples #then Codex tool compatibility | CODE |
| MEDIUM⚡ | …nce/20260812-define-goal-reference/test-codex-gate.txt | 1315 | ✔ #given generated Codex compatibility guidance #when adapting a skill #then multi-agent role and load_skills guidance a | CODE |
| 200 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …/evidence/20260809-omo-agent-toolkit-rename/task-3.txt | 2634 | Received: "# Installation\n\noh-my-openagent ships in **two editions** of the same product:\n\n- **Ultimate Edition (omo | CODE |
| LOW⚡ | …260816-grok-sisyphus-prompt/sisyphus-agent-before.json | 132 | "prompt": "<agent-identity>\nYour designated identity for this session is \"Sisyphus\". This identity supersedes any p | CODE |
| LOW | .opencode/skills/github-triage/SKILL.md | 89 | # Step 1: Fetch basic metadata (without body/comments to avoid JSON parsing issues) | COMMENT |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 50 | ### Step 1: Create feature branch | COMMENT |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 57 | ### Step 2: Extend CommentCheckerConfigSchema | COMMENT |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 62 | ### Step 3: Add a post-processing filter in cli-runner.ts | COMMENT |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 78 | ### Step 4: Create dedicated filter module | COMMENT |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 83 | ### Step 5: Pass allowed_comment_prefixes through the hook chain | COMMENT |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 88 | ### Step 6: Add test cases | COMMENT |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 105 | ### Step 7: Verify | COMMENT |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 111 | ### Step 8: Commit and push | COMMENT |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 118 | ### Step 9: Create PR | COMMENT |
| LOW⚡ | …ation-1/eval-2/without_skill/outputs/execution-plan.md | 52 | ### Step 1: Harden `readBoulderState()` validation | COMMENT |
| LOW⚡ | …ation-1/eval-2/without_skill/outputs/execution-plan.md | 59 | ### Step 2: Add try/catch in setTimeout callback | COMMENT |
| LOW⚡ | …ation-1/eval-2/without_skill/outputs/execution-plan.md | 65 | ### Step 3: Add defensive guard in `getPlanProgress` | COMMENT |
| LOW⚡ | …ation-1/eval-2/without_skill/outputs/execution-plan.md | 70 | ### Step 4: Add tests | COMMENT |
| LOW⚡ | …ation-1/eval-2/without_skill/outputs/execution-plan.md | 75 | ### Step 5: Run CI checks | COMMENT |
| LOW⚡ | …ation-1/eval-2/without_skill/outputs/execution-plan.md | 83 | ### Step 6: Create PR | COMMENT |
| LOW⚡ | …teration-1/eval-2/with_skill/outputs/execution-plan.md | 18 | ### Step 1: Fix `readBoulderState()` in `src/features/boulder-state/storage.ts` | COMMENT |
| LOW⚡ | …teration-1/eval-2/with_skill/outputs/execution-plan.md | 23 | ### Step 2: Add defensive guard in `src/hooks/atlas/idle-event.ts` | COMMENT |
| LOW⚡ | …teration-1/eval-2/with_skill/outputs/execution-plan.md | 28 | ### Step 3: Add test coverage in `src/hooks/atlas/index.test.ts` | COMMENT |
| LOW⚡ | …teration-1/eval-2/with_skill/outputs/execution-plan.md | 34 | ### Step 4: Local validation | COMMENT |
| LOW⚡ | …teration-1/eval-2/with_skill/outputs/execution-plan.md | 42 | ### Step 5: Atomic commit | COMMENT |
| LOW | …ation-1/eval-3/without_skill/outputs/execution-plan.md | 53 | ### Step 1: Create branch | COMMENT |
| LOW | …ation-1/eval-3/without_skill/outputs/execution-plan.md | 58 | ### Step 2: Split `constants.ts` into 5 focused files | COMMENT |
| LOW | …ation-1/eval-3/without_skill/outputs/execution-plan.md | 90 | ### Step 3: Convert `constants.ts` to barrel re-export file | COMMENT |
| LOW | …ation-1/eval-3/without_skill/outputs/execution-plan.md | 93 | ### Step 4: Split `model-requirements.ts` | COMMENT |
| LOW⚡ | …ation-1/eval-3/without_skill/outputs/execution-plan.md | 106 | ### Step 5: Verify no import breakage | COMMENT |
| LOW⚡ | …ation-1/eval-3/without_skill/outputs/execution-plan.md | 111 | ### Step 6: Verify LSP diagnostics clean | COMMENT |
| LOW⚡ | …ation-1/eval-3/without_skill/outputs/execution-plan.md | 114 | ### Step 7: Commit and create PR | COMMENT |
| LOW⚡ | …ation-1/eval-4/without_skill/outputs/execution-plan.md | 20 | ### Step 1: Create `src/mcp/arxiv.ts` | COMMENT |
| LOW⚡ | …ation-1/eval-4/without_skill/outputs/execution-plan.md | 25 | ### Step 2: Update `src/mcp/types.ts` | COMMENT |
| LOW⚡ | …ation-1/eval-4/without_skill/outputs/execution-plan.md | 29 | ### Step 3: Update `src/mcp/index.ts` | COMMENT |
| LOW⚡ | …ation-1/eval-4/without_skill/outputs/execution-plan.md | 34 | ### Step 4: Update `src/mcp/index.test.ts` | COMMENT |
| LOW⚡ | …ation-1/eval-4/without_skill/outputs/execution-plan.md | 41 | ### Step 5: Create `src/mcp/arxiv.test.ts` (optional, only if factory pattern used) | COMMENT |
| LOW⚡ | …ation-1/eval-4/without_skill/outputs/execution-plan.md | 45 | ### Step 6: Update `src/mcp/AGENTS.md` | COMMENT |
| LOW⚡ | …teration-1/eval-4/with_skill/outputs/execution-plan.md | 12 | ### Step 1: Create `src/mcp/arxiv.ts` | COMMENT |
| LOW⚡ | …teration-1/eval-4/with_skill/outputs/execution-plan.md | 18 | ### Step 2: Update `src/mcp/types.ts` | COMMENT |
| LOW⚡ | …teration-1/eval-4/with_skill/outputs/execution-plan.md | 21 | ### Step 3: Update `src/mcp/index.ts` | COMMENT |
| LOW⚡ | …teration-1/eval-4/with_skill/outputs/execution-plan.md | 30 | ### Step 4: Create `src/mcp/arxiv.test.ts` | COMMENT |
| LOW⚡ | …teration-1/eval-4/with_skill/outputs/execution-plan.md | 34 | ### Step 5: Update `src/mcp/index.test.ts` | COMMENT |
| LOW⚡ | …teration-1/eval-4/with_skill/outputs/execution-plan.md | 39 | ### Step 6: Update `src/mcp/AGENTS.md` | COMMENT |
| LOW⚡ | …teration-1/eval-4/with_skill/outputs/execution-plan.md | 42 | ### Step 7: Local validation | COMMENT |
| LOW⚡ | …ation-1/eval-1/without_skill/outputs/execution-plan.md | 9 | ### Step 1: Create feature branch | COMMENT |
| LOW⚡ | …ation-1/eval-1/without_skill/outputs/execution-plan.md | 15 | ### Step 2: Add `max_background_agents` to BackgroundTaskConfigSchema | COMMENT |
| LOW⚡ | …ation-1/eval-1/without_skill/outputs/execution-plan.md | 24 | ### Step 3: Modify `ConcurrencyManager` to enforce global limit | COMMENT |
| LOW⚡ | …ation-1/eval-1/without_skill/outputs/execution-plan.md | 36 | ### Step 4: Add tests for the new config schema field | COMMENT |
| LOW⚡ | …ation-1/eval-1/without_skill/outputs/execution-plan.md | 43 | ### Step 5: Add tests for ConcurrencyManager global limit | COMMENT |
| LOW⚡ | …ation-1/eval-1/without_skill/outputs/execution-plan.md | 53 | ### Step 6: Run typecheck and tests | COMMENT |
| LOW⚡ | …ation-1/eval-1/without_skill/outputs/execution-plan.md | 61 | ### Step 7: Verify LSP diagnostics clean | COMMENT |
| LOW⚡ | …ation-1/eval-1/without_skill/outputs/execution-plan.md | 65 | ### Step 8: Create PR | COMMENT |
| LOW | .agents/skills/github-triage/SKILL.md | 89 | # Step 1: Fetch basic metadata (without body/comments to avoid JSON parsing issues) | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 748 | # Step 2: Start fake-openai server | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 758 | # Step 3: Create isolated sandbox and write opencode.jsonc | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 768 | # Step 4: Start opencode serve (using oqa_start_server internals but with our config) | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 860 | # Step 8: Plugin-init count | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 867 | # Step 9: Route provenance | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 727 | # Step 1: Record real-DB session count (read-only) | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 798 | # Step 5: Create a session | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 817 | # Step 6: Send the split probe prompt | COMMENT |
| 158 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …260819-btw-codex-side-ui/visual-side/terminal-ansi.txt | 1 | [?2031h]10;?]11;?[>0q[?25l[s[6nP+q4d73\[?1016$p[?2027$p[?2031$p[?1004$p[?2004$p[?2026$p[?u]99;i=opent | CODE |
| MEDIUM⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| MEDIUM⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| MEDIUM | tests/hashline/test-edit-ops.ts | 18 | // ── CLI arg passthrough ─────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 37 | // ── Colors ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 49 | // ── Test case definition ───────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 251 | // ── Creative cases (6-15) ──────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 447 | // ── Whitespace cases (16-21) ────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 575 | // ── JSONL event types ───────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 619 | // ── Run single test case ───────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edit-ops.ts | 741 | // ── Main ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 18 | // ── CLI arg passthrough ─────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 37 | // ── Colors ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 51 | // ── Test case definition ───────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 881 | // ── JSONL event types ───────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 925 | // ── Run single test case ───────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-edge-cases.ts | 1049 | // ── Main ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 15 | // ── Models ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 20 | // ── CLI args ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 35 | // ── Colors ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 44 | // ── Types ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 61 | // ── Parse test-headless-edit-ops stdout ─────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 120 | // ── Run one model ──────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 192 | // ── Main ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/test-multi-model.ts | 227 | // ── Summary Table ────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/headless.ts | 22 | // ── CLI ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/headless.ts | 44 | // ── Tools ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/headless.ts | 117 | // ── Agent Loop ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/hashline/headless.ts | 189 | // ── Signal + Startup ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| MEDIUM⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| MEDIUM | …ages/omo-opencode/src/tools/delegate-task/constants.ts | 50 | # ╚═╝ ╚═╝╚══════╝ ╚══▀▀═╝ ╚═════╝ ╚═╝╚═╝ ╚═╝╚══════╝╚═════╝ # | COMMENT |
| MEDIUM | …x/plugin/components/codegraph/NODE-RUNTIME-LICENSES.md | 686 | # ---------------------------------------------------------------------- | STRING |
| MEDIUM | …x/plugin/components/codegraph/NODE-RUNTIME-LICENSES.md | 711 | # -------------------------------------------------------------------------- | STRING |
| MEDIUM | …x/plugin/components/codegraph/NODE-RUNTIME-LICENSES.md | 723 | # -------------------------------------------------------------------------- | STRING |
| MEDIUM | …x/plugin/components/codegraph/NODE-RUNTIME-LICENSES.md | 753 | # -------------------------------------------------------------------------- | STRING |
| MEDIUM | …skills/frontend/scripts/perfection/lighthouse-audit.py | 20 | # ────────────────── | COMMENT |
| MEDIUM | …ills/skills/ultimate-browsing/engine/waf_profiles.yaml | 140 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ills/skills/ultimate-browsing/engine/waf_profiles.yaml | 142 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ls/skills/programming/references/go/golangci-strict.md | 20 | # ── Correctness — bug catchers ─────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ls/skills/programming/references/go/golangci-strict.md | 47 | # ── Architecture — file size, complexity, dead code ───────── | COMMENT |
| MEDIUM⚡ | …ls/skills/programming/references/go/golangci-strict.md | 57 | # ── Exhaustiveness — Go's weakest spot ────────────────────── | COMMENT |
| MEDIUM⚡ | …ls/skills/programming/references/go/golangci-strict.md | 60 | # ── Security ──────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ls/skills/programming/references/go/golangci-strict.md | 63 | # ── Logging ───────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ls/skills/programming/references/go/golangci-strict.md | 66 | # ── Performance ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 41 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 44 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 64 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 68 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 132 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 134 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 145 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/python/pyproject-strict.md | 147 | # ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …lls/skills/programming/references/python/one-liners.md | 42 | # ────────────────── | COMMENT |
| MEDIUM | …lls/skills/programming/references/python/one-liners.md | 81 | # ────────────────── | COMMENT |
| MEDIUM | …lls/skills/programming/references/python/one-liners.md | 132 | # ────────────────── | COMMENT |
| MEDIUM | …lls/skills/programming/references/python/one-liners.md | 170 | # ────────────────── | COMMENT |
| MEDIUM | …lls/skills/programming/references/python/one-liners.md | 209 | # ────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/typescript/backend-hono.md | 56 | // ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ills/programming/references/typescript/backend-hono.md | 58 | // ─────────────────────────────────────────────────────────────── | COMMENT |
| 52 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | …ence/20260801-plan-gate-hardening/e2e-read-unlock.json | 1 | {"result":"PASS","scenario":"read-unlock","expect":"gated","checks":{"read_does_not_unlock":true,"no_child_spawned":true | CODE |
| MEDIUM | …vidence/20260818-fix-6990-permission-task/qa-driver.sh | 6 | # `[opencode]` harness block that sets agents.<main-agent>.permission.task | COMMENT |
| MEDIUM | …260804-fix-6569-review-hardening/live-bindir-driver.sh | 10 | # The real ~/.codex is never read or written; the harness asserts that. | COMMENT |
| MEDIUM⚡ | …30-fix-6338-oracle-temperature/diag-temp-forwarding.sh | 2 | # Discriminating experiment: does the harness forward an agent's `temperature` into the | COMMENT |
| MEDIUM⚡ | …30-fix-6338-oracle-temperature/diag-temp-forwarding.sh | 5 | # If YES -> the harness can observe temperature, and the absence for claude-opus-4-8 is a | COMMENT |
| MEDIUM⚡ | …30-fix-6338-oracle-temperature/diag-temp-forwarding.sh | 7 | # If NO -> the harness cannot observe agent temperature, so the live-request proof is | COMMENT |
| MEDIUM | …/20260821-dag-revive-terminalization/incident-run.json | 1 | {"schemaVersion":1,"checkpointSeq":19,"runId":"dag_2d12c2f7-38f3-487e-bead-2ceafd0ab87e","runKey":"dag-sdk-error-surfaci | CODE |
| MEDIUM⚡ | …260816-grok-sisyphus-prompt/sisyphus-agent-before.json | 132 | "prompt": "<agent-identity>\nYour designated identity for this session is \"Sisyphus\". This identity supersedes any p | CODE |
| MEDIUM⚡ | …260816-grok-sisyphus-prompt/sisyphus-agent-before.json | 132 | "prompt": "<agent-identity>\nYour designated identity for this session is \"Sisyphus\". This identity supersedes any p | CODE |
| LOW⚡ | …260816-grok-sisyphus-prompt/sisyphus-agent-before.json | 132 | "prompt": "<agent-identity>\nYour designated identity for this session is \"Sisyphus\". This identity supersedes any p | CODE |
| MEDIUM⚡ | …260816-grok-sisyphus-prompt/sisyphus-agent-before.json | 132 | "prompt": "<agent-identity>\nYour designated identity for this session is \"Sisyphus\". This identity supersedes any p | CODE |
| MEDIUM | …0260816-grok-sisyphus-prompt/sisyphus-agent-after.json | 132 | "prompt": "<agent-identity>\nYour designated identity for this session is \"Sisyphus\". This identity supersedes any p | CODE |
| MEDIUM | …0260816-grok-sisyphus-prompt/sisyphus-agent-after.json | 132 | "prompt": "<agent-identity>\nYour designated identity for this session is \"Sisyphus\". This identity supersedes any p | CODE |
| MEDIUM | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 3 | # Serve-topology wake runner-split QA harness. | COMMENT |
| MEDIUM | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 29 | # 1 expectation NOT met, or internal harness error | COMMENT |
| MEDIUM | .agents/skills/opencode-qa/scripts/tui-smoke.sh | 5 | # This is a feasibility/smoke check, NOT a functional assertion harness. The | COMMENT |
| MEDIUM | script/agent-harness-wiring.test.ts | 94 | test("#given a containerized harness #when reading .devcontainer/devcontainer.json #then host provider creds pass thro | CODE |
| MEDIUM | script/shared-core-extraction-guard.test.ts | 74 | test("#given core package production sources #when scanned #then they stay harness-neutral", async () => { | CODE |
| MEDIUM | script/shared-core-extraction-guard.test.ts | 103 | test("#given core package manifests #when scanned #then they do not depend on harness adapters", async () => { | CODE |
| MEDIUM | script/contributing-accuracy.test.ts | 62 | test("#given the contributor guide #when scanned for the dev-environment sections #then cross-harness setup, credentia | CODE |
| MEDIUM | script/agents-md-dev-env.test.ts | 12 | test("#given root AGENTS.md #when scanned #then it documents the shared setup/cleanup scripts and every harness wiring | CODE |
| MEDIUM | script/agent/setup.sh | 2 | # Cross-harness dev-environment bootstrap for oh-my-openagent. | COMMENT |
| MEDIUM | script/agent/cleanup.sh | 2 | # Cross-harness teardown for oh-my-openagent dev environments. | COMMENT |
| MEDIUM | script/agent/cleanup.sh | 40 | # before traversal so short-lived harness shutdown hooks do not get cancelled | COMMENT |
| MEDIUM | .codex/setup.sh | 4 | # delegates to the shared cross-harness bootstrap so every harness stays in sync. | COMMENT |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{execFileSync as e}from"node:child_process";import{fileURLToPath as n}from"node:url";var t=[{name:"explore",descri | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{execFileSync as e}from"node:child_process";import{fileURLToPath as n}from"node:url";var t=[{name:"explore",descri | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{execFileSync as e}from"node:child_process";import{fileURLToPath as n}from"node:url";var t=[{name:"explore",descri | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{execFileSync as e}from"node:child_process";import{fileURLToPath as n}from"node:url";var t=[{name:"explore",descri | CODE |
| MEDIUM⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{execFileSync as e}from"node:child_process";import{fileURLToPath as n}from"node:url";var t=[{name:"explore",descri | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-memory-mcp.js | 3 | import{dirname as e,resolve as t}from"node:path";import{pathToFileURL as r}from"node:url";function n(e){return"object"== | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-task.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-task.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-task.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-task.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-task.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-task.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM | packages/omo-senpi/scripts/qa/team-e2e-runtime.test.ts | 270 | it("#given a Windows shim with no package CLI #when resolved #then the harness fails loudly instead of direct-spawning | CODE |
| MEDIUM | packages/omo-senpi/src/skills-sync.test.ts | 143 | test("#given codex-derived and native skill roots #when scanned #then no Codex or multi-agent harness guidance survive | CODE |
| MEDIUM | packages/omo-senpi/src/skills-sync.test.ts | 195 | test("#given ported orchestration skills #when scanned #then no foreign-harness delegation guidance survives", () => { | CODE |
| MEDIUM | …-senpi/src/components/ultrawork/generated-directive.ts | 12 | export const SENPI_ULTRAWORK_DIRECTIVE = "<ultrawork-mode>\n\n**MANDATORY**: First user-visible line this turn MUST be e | CODE |
| MEDIUM | …/src/components/ulw-execute-continuation/index.test.ts | 127 | it("#given work owned by another harness #when agent_end fires #then no injection", async () => { | CODE |
| MEDIUM | …src/components/task/resumption-channel-emitter.test.ts | 250 | it("#given the local event contract #when the literal is inspected #then it exactly matches the harness event name", ( | CODE |
| MEDIUM | …o-config-core/src/schema/unified-config-schema.test.ts | 66 | test("#given partial model catalog entries in harness and profile overlays #when parsed #then they remain default-free | CODE |
| MEDIUM | packages/omo-config-core/src/schema/telemetry.test.ts | 6 | test("#given the telemetry enabled setting #when checking harness support #then senpi is explicitly supported", () => | CODE |
| MEDIUM | …ckages/omo-config-core/src/schema/agent-schema.test.ts | 80 | test("#given a harness-native preset in reasoning effort #when parsed #then it passes through as canonical reasoning", | CODE |
| MEDIUM | packages/omo-config-core/src/schema/git-master.test.ts | 39 | test("#given a [senpi] harness override #when parsed #then the git_master layer is accepted", () => { | CODE |
| MEDIUM | …mo-config-core/src/schema/memory-config-wiring.test.ts | 35 | test("#given memory blocks in harness and profile overlays #when parsed #then they stay default-free", () => { | CODE |
| MEDIUM | …mo-config-core/src/schema/memory-config-wiring.test.ts | 66 | test("#given base and senpi memory blocks #when folding the harness view #then memory deep-merges", () => { | CODE |
| MEDIUM | …mo-config-core/src/schema/memory-config-wiring.test.ts | 84 | test("#given base harness and profile memory blocks #when folding the profile view #then later layers win per leaf", ( | CODE |
| MEDIUM | packages/omo-config-core/src/loader/resolution.test.ts | 95 | test("#given base, harness, profile-base, and profile-harness layers #when resolving a harness profile #then later lay | CODE |
| MEDIUM | packages/omo-config-core/src/loader/resolution.test.ts | 143 | test("#given an absent activated profile #when resolving a harness view #then a diagnostic is emitted and the no-profi | CODE |
| MEDIUM | …s/omo-config-core/src/loader/loader-resolution.test.ts | 21 | test("#given base, harness, profile-base, and profile-harness layers #when loading the active senpi profile #then each | CODE |
| MEDIUM | …s/omo-config-core/src/loader/loader-resolution.test.ts | 140 | test("#given an unknown activated profile #when loading a harness view #then a profile diagnostic is emitted and no pr | CODE |
| 20 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …pr-review-findings/artifacts/tui-esc/terminal-ansi.txt | 1 | ^[[D^[[D^[[D[?2031h]10;?]11;?[>0q[?25l[s[6nP+q4d73\[?1016$p[?2027$p[?2031$p[?1004$p[?2004$p[?2026$p[?u | CODE |
| HIGH⚡ | …/evidence/20260809-omo-agent-toolkit-rename/task-3.txt | 2634 | Received: "# Installation\n\noh-my-openagent ships in **two editions** of the same product:\n\n- **Ultimate Edition (omo | CODE |
| HIGH⚡ | …/evidence/20260809-omo-agent-toolkit-rename/task-3.txt | 2634 | Received: "# Installation\n\noh-my-openagent ships in **two editions** of the same product:\n\n- **Ultimate Edition (omo | CODE |
| HIGH⚡ | …ai-beta-release/task-11/04-attempt1-parser-failure.txt | 88 | {"model":"mock-1","messages":[{"role":"system","content":"You are senpi, a coding agent. Your work should be indistingui | CODE |
| HIGH⚡ | …ai-beta-release/task-11/04-attempt1-parser-failure.txt | 89 | {"model":"mock-1","messages":[{"role":"system","content":"You are senpi, a coding agent. Your work should be indistingui | CODE |
| HIGH⚡ | …ai-beta-release/task-11/04-plugin-load-and-toolkit.txt | 162 | {"model":"mock-1","messages":[{"role":"system","content":"You are senpi, a coding agent. Your work should be indistingui | CODE |
| HIGH⚡ | …ai-beta-release/task-11/04-plugin-load-and-toolkit.txt | 163 | {"model":"mock-1","messages":[{"role":"system","content":"You are senpi, a coding agent. Your work should be indistingui | CODE |
| HIGH⚡ | …ta-release/task-11/04-attempt2-cleanup-shell-scope.txt | 162 | {"model":"mock-1","messages":[{"role":"system","content":"You are senpi, a coding agent. Your work should be indistingui | CODE |
| HIGH⚡ | …ta-release/task-11/04-attempt2-cleanup-shell-scope.txt | 163 | {"model":"mock-1","messages":[{"role":"system","content":"You are senpi, a coding agent. Your work should be indistingui | CODE |
| HIGH | …revalidation/web-terminal-side-final/terminal-ansi.txt | 1 | ^[[?2031h]10;?]11;?[>0q[?25l[s[6nP+q4d73\[?1016$p[?2027$p[?2031$p[?1004$p[?2004$p[?2026$p[?u]99;i=ope | CODE |
| HIGH⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| HIGH⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| HIGH | …ation-1/eval-5/without_skill/outputs/pr-description.md | 9 | The comment-checker hook's upstream Go binary (`go-claude-code-comment-checker`) flags ALL non-filtered comments as prob | CODE |
| HIGH⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| HIGH⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| HIGH | …ation-1/eval-5/without_skill/outputs/pr-description.md | 9 | The comment-checker hook's upstream Go binary (`go-claude-code-comment-checker`) flags ALL non-filtered comments as prob | CODE |
| HIGH | …ills/skills/programming/references/go/data-modeling.md | 311 | ## Common AI-generated antipatterns this rejects | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test-env.ts | 1 | /// <reference types="bun-types" /> | COMMENT |
| LOW | test-setup.ts | 21 | }) | COMMENT |
| LOW | test-setup.ts | 41 | // discovery tests pass or fail depending on whose laptop runs them. Point HOME (and | COMMENT |
| LOW | …vidence/20260818-fix-6990-permission-task/qa-driver.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .omo/evidence/20260727-fix-6141/live-driver.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …260804-fix-6569-review-hardening/live-bindir-driver.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .omo/evidence/20260727-fix-6376/live-opencode-run.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .omo/evidence/20260727-fix-6376/live-driver.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/codex-qa/scripts/app-server-drive.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/codex-qa/scripts/hook-unit-probe.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/codex-qa/scripts/lsp-e2e.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/codex-qa/scripts/lib/common.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/sse-hook-probe.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/sse-hook-probe.sh | 21 | # then watch for e.g. message.part.updated. | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 21 | # $XDG_CONFIG_HOME/opencode/oh-my-openagent.json | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/tui-smoke.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …gents/skills/opencode-qa/scripts/db-session-by-name.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …gents/skills/opencode-qa/scripts/db-session-by-text.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/lsp-e2e.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/export-roundtrip.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/server-smoke.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/lib/common.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | script/root-test-serial-quarantine.ts | 1 | // Single source of truth for the root-test files that must run in one serial | COMMENT |
| LOW | script/build.ts | 21 | try { | COMMENT |
| LOW | script/qa/codex-marketplace-e2e.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | script/agent/setup.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | script/agent/qa-docker.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | script/agent/qa-sandbox.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | script/agent/cleanup.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .codex/setup.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | packages/mcp-stdio-core/src/server.test.ts | 321 | // stall to outlast its 2s in-loop race. That is a volume bet, not a stronger | COMMENT |
| LOW | packages/omo-senpi/plugin/runtime/dag/sdk.js | 1 | // Dependency-free convenience wrapper around the `dag` tool, loaded by JavaScript eval cells from | COMMENT |
| LOW | packages/omo-senpi/plugin/extensions/omo-memory-mcp.js | 1 | #!/usr/bin/env node | COMMENT |
| LOW | packages/omo-senpi/skills/ulw-research/SKILL.md | 281 | ## Phase 5 — Synthesize | COMMENT |
| LOW | packages/omo-senpi/src/bundle-size.test.ts | 1 | import { describe, expect, it } from "bun:test" | COMMENT |
| LOW | packages/omo-senpi/src/bundle-size.test.ts | 21 | // minified bundle from 678,227 to a measured 706,927 bytes (pinned bun 1.3.12). This is plan-scoped | COMMENT |
| LOW | …-senpi/src/extension/__fixtures__/cold-pi-tui-probe.ts | 1 | // Cold-boot probe for the pi-tui warm-up in composeOmoSenpiExtension. | COMMENT |
| LOW | …ges/omo-senpi/src/components/memory/facts-run-prune.ts | 1 | // Retention pruning for terminal facts run dirs. | COMMENT |
| LOW | …kages/omo-senpi/src/components/memory/dream-trigger.ts | 1 | // Dream trigger wiring (plan todo 12): opportunistic dream launches from idle, shutdown, | COMMENT |
| LOW | …o-senpi/src/components/memory/facts-terminal-writes.ts | 1 | // Ordered terminal writes for a facts run. | COMMENT |
| LOW | packages/omo-senpi/src/components/memory/facts-drain.ts | 1 | // Post-success drain for the byte-capped facts pipeline. | COMMENT |
| LOW | …mo-senpi/src/components/memory/memory-notice-wiring.ts | 1 | // Shared consumer for the MCP memory tool surface (memory.tool_exposure: "search"). | COMMENT |
| LOW | …ages/omo-senpi/src/components/memory/facts-oversize.ts | 1 | // Oversize classification for the byte-capped facts payload. | COMMENT |
| LOW | packages/omo-senpi/src/components/config-watch/index.ts | 141 | // Never emit REGISTER from inside a senpi event dispatch: rebuildWatchers | COMMENT |
| LOW | …-senpi/src/components/task/skill-invocation-tracker.ts | 1 | import type { SkillInvocationState } from "@oh-my-opencode/senpi-task" | COMMENT |
| LOW | …omo-senpi/src/components/telemetry/model-vocabulary.ts | 1 | // Provider -> exportable model ids. The vocabulary must cover every rung a shipped builtin category | COMMENT |
| LOW | packages/omo-senpi/src/components/thread/mailbox.ts | 121 | snapshot = await port.snapshot() | COMMENT |
| LOW | packages/ast-grep-mcp/src/mcp-schema.test.ts | 1 | import { describe, expect, it } from "bun:test"; | COMMENT |
| LOW | packages/senpi-task/test-support/warm-lazy-runtime.ts | 1 | // Test-only warm-up for senpi-task's lazy module boundaries. | COMMENT |
| LOW | packages/senpi-task/src/run-stats.ts | 101 | return true | COMMENT |
| LOW | …s/senpi-task/src/lifecycle/single-writer-audit.test.ts | 1 | import { readdirSync, readFileSync } from "node:fs" | COMMENT |
| LOW | packages/senpi-task/src/manager/manager-outcome.ts | 41 | // Suspension forgets the handle BEFORE its abort settles ("stale outcome tracking loses ownership | COMMENT |
| LOW | …ges/senpi-task/src/__adversarial__/chaos-bench.test.ts | 1 | import { afterAll, beforeAll, describe, expect, test } from "bun:test" | COMMENT |
| LOW | packages/senpi-task/src/lazy/senpi-barrel.ts | 1 | // Lazy boundary for the @code-yeongyu/senpi engine barrel. | COMMENT |
| LOW | packages/senpi-task/src/lazy/pi-tui.ts | 1 | // Lazy boundary for the @earendil-works/pi-tui barrel. | COMMENT |
| LOW | …ages/senpi-task/src/runners/in-process/child-loader.ts | 1 | import type { ResourceLoader } from "@code-yeongyu/senpi" | COMMENT |
| LOW | packages/senpi-task/src/store/types.ts | 61 | // shouldRetain(fresh) is false, atomically rename the record to <taskId>.json.expunging. The | COMMENT |
| LOW | packages/utils/src/file-utils.test.ts | 1 | import { describe, it, expect, beforeAll, afterAll } from "bun:test" | COMMENT |
| LOW | …es/omo-opencode/scripts/generate-opengateway-models.ts | 1 | #!/usr/bin/env bun | COMMENT |
| 54 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …260816-grok-sisyphus-prompt/sisyphus-agent-before.json | 132 | "prompt": "<agent-identity>\nYour designated identity for this session is \"Sisyphus\". This identity supersedes any p | CODE |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 748 | # Step 2: Start fake-openai server | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 758 | # Step 3: Create isolated sandbox and write opencode.jsonc | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 768 | # Step 4: Start opencode serve (using oqa_start_server internals but with our config) | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 860 | # Step 8: Plugin-init count | COMMENT |
| LOW⚡ | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 867 | # Step 9: Route provenance | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 727 | # Step 1: Record real-DB session count (read-only) | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 798 | # Step 5: Create a session | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 817 | # Step 6: Send the split probe prompt | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 899 | # Step 10: Branch-count guard | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 914 | # Step 11: Determine verdict | COMMENT |
| LOW⚡ | packages/omo-senpi/plugin/extensions/omo.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| LOW⚡ | …s/omo-senpi/plugin/extensions/omo-init-deep-advisor.js | 2 | import{execFileSync as e}from"node:child_process";import{fileURLToPath as n}from"node:url";var t=[{name:"explore",descri | CODE |
| LOW⚡ | packages/omo-senpi/plugin/extensions/omo-task.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| LOW⚡ | packages/senpi-task/src/agents/builtin/metis.ts | 26 | ### Step 1: Identify Intent Type | COMMENT |
| LOW⚡ | packages/senpi-task/src/agents/builtin/metis.ts | 35 | ### Step 2: Validate Classification | COMMENT |
| LOW | …features/builtin-commands/templates/remove-ai-slops.ts | 24 | ## Step 0: Task Planning | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/metis.ts | 38 | ### Step 1: Identify Intent Type | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/metis.ts | 47 | ### Step 2: Validate Classification | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/librarian.ts | 71 | ### Step 1: Find Official Documentation | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/librarian.ts | 78 | ### Step 2: Version Check (if version specified) | COMMENT |
| LOW | packages/omo-opencode/src/agents/librarian.ts | 90 | ### Step 3: Sitemap Discovery (understand doc structure) | COMMENT |
| LOW | packages/omo-opencode/src/agents/librarian.ts | 101 | ### Step 4: Targeted Investigation | COMMENT |
| LOW | …mo-opencode/src/agents/sisyphus-dynamic-prompt-role.ts | 30 | ### Step 0: Verbalize Intent (BEFORE Classification) | COMMENT |
| LOW | …mo-opencode/src/agents/sisyphus-dynamic-prompt-role.ts | 52 | ### Step 1: Classify Request Type | COMMENT |
| LOW | …mo-opencode/src/agents/sisyphus-dynamic-prompt-role.ts | 66 | ### Step 2: Check for Ambiguity | COMMENT |
| LOW | …mo-opencode/src/agents/sisyphus-dynamic-prompt-role.ts | 83 | ### Step 3: Validate Before Acting | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/hephaestus/gpt.ts | 130 | ### Step 1: Classify Task Type | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/hephaestus/gpt.ts | 138 | ### Step 2: Ambiguity Protocol (EXPLORE FIRST - NEVER ask before exploring) | COMMENT |
| LOW | packages/omo-opencode/src/agents/hephaestus/gpt.ts | 154 | ### Step 3: Validate Before Acting | COMMENT |
| LOW | …ages/omo-opencode/src/agents/sisyphus/claude-opus-5.ts | 197 | ### Step 0: Verbalize Intent (before classification) | COMMENT |
| LOW | …ages/omo-opencode/src/agents/sisyphus/claude-opus-5.ts | 219 | ### Step 1: Classify Request Type | COMMENT |
| LOW | …ages/omo-opencode/src/agents/sisyphus/claude-opus-5.ts | 237 | ### Step 2: Check for Ambiguity | COMMENT |
| LOW | …ages/omo-opencode/src/agents/sisyphus/claude-opus-5.ts | 255 | ### Step 3: Validate Before Acting | COMMENT |
| LOW | packages/omo-opencode/src/agents/sisyphus/default.ts | 194 | ### Step 0: Verbalize Intent (BEFORE Classification) | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/sisyphus/default.ts | 216 | ### Step 1: Classify Request Type | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/sisyphus/default.ts | 224 | ### Step 2: Check for Ambiguity | COMMENT |
| LOW⚡ | packages/omo-opencode/src/agents/sisyphus/default.ts | 232 | ### Step 3: Validate Before Acting | COMMENT |
| LOW | …es/omo-opencode/src/agents/sisyphus/claude-opus-4-7.ts | 183 | ### Step 0: Verbalize Intent (before classification) | COMMENT |
| LOW | …es/omo-opencode/src/agents/sisyphus/claude-opus-4-7.ts | 205 | ### Step 1: Classify Request Type | COMMENT |
| LOW | …es/omo-opencode/src/agents/sisyphus/claude-opus-4-7.ts | 223 | ### Step 2: Check for Ambiguity | COMMENT |
| LOW | …es/omo-opencode/src/agents/sisyphus/claude-opus-4-7.ts | 241 | ### Step 3: Validate Before Acting | COMMENT |
| LOW | …ges/omo-opencode/src/agents/sisyphus/claude-fable-5.ts | 183 | ### Step 0: Verbalize Intent (before classification) | COMMENT |
| LOW | …ges/omo-opencode/src/agents/sisyphus/claude-fable-5.ts | 205 | ### Step 1: Classify Request Type | COMMENT |
| LOW | …ges/omo-opencode/src/agents/sisyphus/claude-fable-5.ts | 223 | ### Step 2: Check for Ambiguity | COMMENT |
| LOW | …ges/omo-opencode/src/agents/sisyphus/claude-fable-5.ts | 241 | ### Step 3: Validate Before Acting | COMMENT |
| LOW | …es/omo-opencode/src/agents/sisyphus/claude-opus-4-8.ts | 183 | ### Step 0: Verbalize Intent (before classification) | COMMENT |
| LOW | …es/omo-opencode/src/agents/sisyphus/claude-opus-4-8.ts | 205 | ### Step 1: Classify Request Type | COMMENT |
| LOW | …es/omo-opencode/src/agents/sisyphus/claude-opus-4-8.ts | 223 | ### Step 2: Check for Ambiguity | COMMENT |
| LOW | …es/omo-opencode/src/agents/sisyphus/claude-opus-4-8.ts | 241 | ### Step 3: Validate Before Acting | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …-remove-prompt-contract-tests/classification_bundle.py | 1 | CODE | |
| LOW | …move-prompt-contract-tests/test_node_assert_scanner.py | 5 | CODE | |
| LOW | …remove-prompt-contract-tests/audit_prompt_contracts.py | 8 | CODE | |
| LOW | …17-remove-prompt-contract-tests/audit_agents_policy.py | 8 | CODE | |
| LOW | …7-remove-prompt-contract-tests/scanner_test_support.py | 1 | CODE | |
| LOW | …-remove-prompt-contract-tests/test_snapshot_scanner.py | 5 | CODE | |
| LOW | …0817-remove-prompt-contract-tests/scanner_bootstrap.py | 3 | CODE | |
| LOW | …0260817-remove-prompt-contract-tests/scanner_models.py | 3 | CODE | |
| LOW | …e-prompt-contract-tests/test_audit_prompt_contracts.py | 5 | CODE | |
| LOW | …ared-skills/skills/ast-grep/scripts/ast_grep_helper.py | 51 | CODE | |
| LOW | …skills/frontend/scripts/perfection/lighthouse-audit.py | 32 | CODE | |
| LOW | …skills/frontend/scripts/perfection/lighthouse-audit.py | 36 | CODE | |
| LOW | …s/coding-agent-sessions/scripts/find-agent-sessions.py | 9 | CODE | |
| LOW | …coding-agent-sessions/scripts/agent_sessions/jsonio.py | 1 | CODE | |
| LOW | …ons/scripts/agent_sessions/sqlite_optional_scanners.py | 1 | CODE | |
| LOW | …ng-agent-sessions/scripts/agent_sessions/transcript.py | 1 | CODE | |
| LOW | …/coding-agent-sessions/scripts/agent_sessions/codex.py | 1 | CODE | |
| LOW | …agent-sessions/scripts/agent_sessions/file_scanners.py | 1 | CODE | |
| LOW | …coding-agent-sessions/scripts/agent_sessions/claude.py | 1 | CODE | |
| LOW | …ding-agent-sessions/scripts/agent_sessions/__init__.py | 1 | CODE | |
| LOW | …/coding-agent-sessions/scripts/agent_sessions/types.py | 1 | CODE | |
| LOW | …ding-agent-sessions/scripts/agent_sessions/opencode.py | 1 | CODE | |
| LOW | …ing-agent-sessions/scripts/agent_sessions/pi_family.py | 1 | CODE | |
| LOW | …-agent-sessions/scripts/agent_sessions/kiro_scanner.py | 1 | CODE | |
| LOW | …ls/coding-agent-sessions/scripts/agent_sessions/cli.py | 1 | CODE | |
| LOW | …ent-sessions/scripts/agent_sessions/sqlite_scanners.py | 1 | CODE | |
| LOW | …ing-agent-sessions/scripts/agent_sessions/timeparse.py | 1 | CODE | |
| LOW | …agent-sessions/scripts/agent_sessions/aside_scanner.py | 1 | CODE | |
| LOW | …ding-agent-sessions/scripts/agent_sessions/scanners.py | 1 | CODE | |
| LOW | …gent-sessions/scripts/tests/test_pi_family_scanners.py | 8 | CODE | |
| LOW | …essions/scripts/tests/test_optional_sqlite_scanners.py | 8 | CODE | |
| LOW | …ng-agent-sessions/scripts/tests/test_agent_sessions.py | 8 | CODE | |
| LOW | …ding-agent-sessions/scripts/tests/test_cli_contract.py | 8 | CODE | |
| LOW | …agent-sessions/scripts/tests/test_extended_scanners.py | 8 | CODE | |
| LOW | …ing-agent-sessions/scripts/tests/test_aside_scanner.py | 8 | CODE | |
| LOW | …ills/skills/ultimate-browsing/scripts/cookie_crypto.py | 2 | CODE | |
| LOW | …lls/skills/ultimate-browsing/scripts/cookie_domains.py | 1 | CODE | |
| LOW | …kills/skills/ultimate-browsing/scripts/cookie_paths.py | 2 | CODE | |
| LOW | …ls/skills/ultimate-browsing/scripts/extract_cookies.py | 13 | CODE | |
| LOW | …ltimate-browsing/scripts/tests/test_extract_cookies.py | 3 | CODE | |
| LOW | …te-browsing/scripts/tests/test_cookie_domain_filter.py | 2 | CODE | |
| LOW | …d-skills/skills/ultimate-browsing/engine/bias_check.py | 12 | CODE | |
| LOW | …skills/skills/ultimate-browsing/engine/waf_detector.py | 11 | CODE | |
| LOW | …skills/skills/ultimate-browsing/engine/waf_detector.py | 15 | CODE | |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 12 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 7 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 7 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 7 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 7 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 8 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 9 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 9 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 10 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 11 | CODE | |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 11 | CODE | |
| LOW | …d-skills/skills/ultimate-browsing/engine/curl_probe.py | 1 | CODE | |
| LOW | …kills/skills/ultimate-browsing/engine/result_schema.py | 1 | CODE | |
| LOW | …ared-skills/skills/ultimate-browsing/engine/summary.py | 1 | CODE | |
| LOW | …ed-skills/skills/ultimate-browsing/engine/surrogate.py | 18 | CODE | |
| LOW | …ills/skills/ultimate-browsing/engine/url_transforms.py | 17 | CODE | |
| 18 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/src/install/codex-cache-mcp-manifest.context7.test.ts | 22 | env: { CONTEXT7_API_KEY: "<YOUR_API_KEY>", SAFE_FLAG: "1" }, | CODE |
| HIGH | …/src/install/codex-cache-mcp-manifest.context7.test.ts | 22 | env: { CONTEXT7_API_KEY: "<YOUR_API_KEY>", SAFE_FLAG: "1" }, | CODE |
| HIGH | …/src/install/codex-cache-mcp-manifest.context7.test.ts | 40 | expect(raw).not.toContain("YOUR_API_KEY") | CODE |
| HIGH | …/src/install/codex-cache-mcp-manifest.context7.test.ts | 88 | env: { CONTEXT7_API_KEY: "YOUR_API_KEY", SAFE_FLAG: "1" }, | CODE |
| HIGH | …/src/install/codex-cache-mcp-manifest.context7.test.ts | 103 | expect(raw).not.toContain("YOUR_API_KEY") | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 230 | expect(content).not.toContain("YOUR_API_KEY") | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 253 | expect(content).not.toContain("YOUR_API_KEY") | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 286 | expect(content).not.toContain("YOUR_API_KEY") | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 298 | 'args = ["-y", "@upstash/context7-mcp", "--api-key", "ctx7sk_live_example"] # replace YOUR_API_KEY in docs only' | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 317 | expect(content).toContain("replace YOUR_API_KEY in docs only") | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 330 | 'args = ["-y", "@upstash/context7-mcp", "--api-key", "YOUR_API_KEY"]', | CODE |
| HIGH | …ckages/omo-codex/src/install/codex-config-toml.test.ts | 350 | expect(content).not.toContain("YOUR_API_KEY") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL⚡ | …ges/senpi-task/src/__adversarial__/chaos-invariants.ts | 177 | for (const handle of state.harness.probeEngine.inProcessRunner.allHandles.filter((entry) => entry.handle.task_id === | CODE |
| CRITICAL⚡ | …ges/senpi-task/src/__adversarial__/chaos-invariants.ts | 180 | for (const handle of state.harness.probeEngine.processRunner.allHandles.filter((entry) => entry.handle.task_id === i | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/omo-senpi/plugin/extensions/omo.js | 0 | *** begin patch',"*** update file: system/human/prefs/coding.md","@@","-use broad abstractions","+prefer small focused h | STRING |
| HIGH | packages/omo-senpi/plugin/extensions/omo-memory-mcp.js | 0 | *** begin patch',"*** update file: system/human/prefs/coding.md","@@","-use broad abstractions","+prefer small focused h | STRING |
| HIGH | packages/omo-senpi/plugin/extensions/omo-task.js | 0 | *** begin patch',"*** update file: system/human/prefs/coding.md","@@","-use broad abstractions","+prefer small focused h | STRING |
| HIGH | …mponents/ultrawork/agents/lazycodex-worker-medium.toml | 0 | role: implementation executor. you own the task end to end. make the smallest correct change that satisfies the caller's | STRING |
| HIGH | …/components/ultrawork/agents/lazycodex-worker-low.toml | 0 | role: implementation executor. you own the task end to end. make the smallest correct change that satisfies the caller's | STRING |
| HIGH | …components/ultrawork/agents/lazycodex-worker-high.toml | 0 | role: implementation executor. you own the task end to end. make the smallest correct change that satisfies the caller's | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ared-skills/skills/ast-grep/scripts/ast_grep_helper.py | 185 | except Exception: | CODE |
| LOW | …e-browsing/references/insane-search/tls-impersonate.md | 44 | except Exception: | CODE |
| LOW | …e-browsing/references/insane-search/tls-impersonate.md | 53 | except Exception: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/bias_check.py | 109 | except Exception as e: | CODE |
| LOW | …skills/skills/ultimate-browsing/engine/waf_detector.py | 87 | except Exception as e: | CODE |
| LOW⚡ | …skills/skills/ultimate-browsing/engine/waf_detector.py | 101 | except Exception: | CODE |
| LOW⚡ | …skills/skills/ultimate-browsing/engine/waf_detector.py | 104 | except Exception: | CODE |
| LOW⚡ | …skills/skills/ultimate-browsing/engine/waf_detector.py | 111 | except Exception: | CODE |
| MEDIUM | …skills/skills/ultimate-browsing/engine/waf_detector.py | 98 | def _cookies_dict(resp) -> dict: | CODE |
| MEDIUM | …skills/skills/ultimate-browsing/engine/waf_detector.py | 108 | def _headers_dict(resp) -> dict: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 135 | except Exception: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 142 | except Exception: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 174 | except Exception as e: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 258 | except Exception: | CODE |
| LOW | …d-skills/skills/ultimate-browsing/engine/validators.py | 261 | except Exception: | CODE |
| MEDIUM | …d-skills/skills/ultimate-browsing/engine/validators.py | 255 | def _extract_cookies(resp) -> dict: | CODE |
| LOW | …ed-skills/skills/ultimate-browsing/engine/surrogate.py | 181 | except Exception as exc: | CODE |
| LOW | …ed-skills/skills/ultimate-browsing/engine/surrogate.py | 189 | except Exception as exc: | CODE |
| LOW | …red-skills/skills/ultimate-browsing/engine/__main__.py | 65 | except Exception as e: | CODE |
| LOW | …red-skills/skills/ultimate-browsing/engine/executor.py | 84 | except Exception as e: | CODE |
| LOW | …-skills/skills/programming/references/python/README.md | 137 | except Exception as e: | CODE |
| LOW | …-skills/skills/programming/references/python/README.md | 144 | except Exception: | CODE |
| LOW | …-skills/skills/programming/references/python/README.md | 160 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …-remove-prompt-contract-tests/test_snapshot_scanner.py | 28 | expect(JSON.stringify(snapshotSubject, null, 2)).toMatchSnapshot(); | STRING |
| HIGH | …skills/frontend/scripts/perfection/lighthouse-audit.py | 60 | : undefined, | CODE |
| HIGH | …skills/frontend/scripts/perfection/lighthouse-audit.py | 63 | : undefined, | CODE |
| HIGH | …ls/skills/ultimate-browsing/scripts/extract_cookies.py | 108 | if (result && result.success) ok += 1; | CODE |
| HIGH | …ls/skills/ultimate-browsing/scripts/extract_cookies.py | 113 | process.stderr.write(`${error.name || "Error"}: ${error.message || error}\n`); | CODE |
| HIGH | …kills/skills/programming/scripts/python/new-project.py | 168 | rprint(f" cd {name} && uv sync && uv run basedpyright . && uv run ruff check .") | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …idence/omo-senpi-adapter/memory-v2/task-19/palace.html | 284 | <script type="application/json" id="omo-palace-data">{"metadata":{"identity":"palace-agent","headSha":"c6770a6ed566a69a2 | CODE |
| LOW | …overy/opencode-source-qa-reused-internal-fix-debug.txt | 93 | options: {apiKey: "fake-key", baseURL: $base_url, timeout: 30000}, | CODE |
| LOW | …vidence/20260820-pr6611-recovery/opencode-source-qa.sh | 54 | options: {apiKey: "fake-key", baseURL: $base_url, timeout: 30000}, | CODE |
| LOW | …11-recovery/opencode-source-qa-first-key-fix-debug.txt | 93 | options: {apiKey: "fake-key", baseURL: $base_url, timeout: 30000}, | CODE |
| LOW | …r6611-recovery/opencode-source-qa-generation-debug.txt | 98 | options: {apiKey: "fake-key", baseURL: $base_url, timeout: 30000}, | CODE |
| LOW | …e/20260820-pr6611-seven-blockers/opencode-source-qa.sh | 54 | options: {apiKey: "fake-key", baseURL: $base_url, timeout: 30000}, | CODE |
| LOW | …vidence/20260818-fix-6990-permission-task/qa-driver.sh | 48 | "apiKey": "fake-key", | CODE |
| LOW | .omo/evidence/20260724-sisyphus-opus5-prompt/qa-run.sh | 55 | "apiKey": "fake-key", | CODE |
| LOW | tests/hashline/test-edge-cases.ts | 707 | fileContent: ["placeholder", "tail"].join("\n"), | CODE |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 207 | "apiKey": "fake-key", | CODE |
| LOW | .agents/skills/opencode-qa/scripts/lsp-e2e.sh | 1481 | options: { apiKey: "fake-key", baseURL: `http://127.0.0.1:${port}/v1`, timeout: 30000 }, | CODE |
| LOW | …ore/src/features/builtin-skills/agent-browser/SKILL.md | 327 | agent-browser fill @e1 "user@example.com" | CODE |
| LOW | …e/src/features/builtin-skills/skills/playwright-cli.ts | 45 | playwright-cli fill e5 "user@example.com" | CODE |
| LOW | …e/src/features/builtin-skills/skills/playwright-cli.ts | 220 | playwright-cli fill e1 "user@example.com" | CODE |
| LOW⚡ | packages/omo-senpi/plugin/extensions/omo-task.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| LOW | …/omo-senpi/src/components/memory/palace/people.test.ts | 40 | expect(jane?.displayName).toBe("Jane Doe") | CODE |
| LOW | …enpi/src/components/memory/commands/people-ask.test.ts | 104 | displayName: "Jane Doe", | CODE |
| LOW | …es/senpi-task/src/tools/task/argument-normalization.ts | 6 | const PROVIDER_PADDING_PROMPTS = new Set(["unused", "placeholder", "not used", "n/a"]) | CODE |
| LOW | packages/web/DESIGN.md | 299 | - Lorem ipsum or "John Doe" placeholders. | CODE |
| LOW | packages/web/DESIGN.md | 299 | - Lorem ipsum or "John Doe" placeholders. | CODE |
| LOW | …ode/src/features/builtin-skills/agent-browser/SKILL.md | 327 | agent-browser fill @e1 "user@example.com" | CODE |
| LOW | …x/plugin/components/ulw-loop/test/quality-gate.test.ts | 194 | expect(error.message).toContain("placeholder"); | CODE |
| LOW | …red-skills/skills/frontend/references/design/README.md | 197 | - **Don't load nothing and just freestyle.** That produces the exact "generic AI SaaS slop" — purple-blue gradient backg | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| MEDIUM | .agents/skills/codex-qa/scripts/lib/common.sh | 71 | # Create an isolated CODEX_HOME and project dir, export the env that keeps the | COMMENT |
| MEDIUM | .agents/skills/opencode-qa/scripts/lib/common.sh | 67 | # Create an isolated XDG sandbox so a spawned opencode never touches the real | COMMENT |
| MEDIUM⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-memory-mcp.js | 3 | import{dirname as e,resolve as t}from"node:path";import{pathToFileURL as r}from"node:url";function n(e){return"object"== | CODE |
| MEDIUM⚡ | packages/omo-senpi/plugin/extensions/omo-task.js | 2 | import{createRequire as e}from"node:module";var t=Object.defineProperty,n=e=>e;function r(e,t){this[e]=n.bind(null,t)}va | CODE |
| MEDIUM | …kages/omo-senpi/src/components/memory/tool-metadata.ts | 57 | "# Create a block with starting text", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/codex-qa/scripts/lsp-e2e.sh | 10 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/sse-hook-probe.sh | 30 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/db-session-by-id.sh | 5 | # Usage: | COMMENT |
| LOW | …s/skills/opencode-qa/scripts/serve-wake-split-probe.sh | 14 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/tui-smoke.sh | 14 | # Usage: | COMMENT |
| LOW | …gents/skills/opencode-qa/scripts/db-session-by-name.sh | 6 | # Usage: | COMMENT |
| LOW | …gents/skills/opencode-qa/scripts/db-session-by-text.sh | 18 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/lsp-e2e.sh | 9 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/export-roundtrip.sh | 9 | # Usage: | COMMENT |
| LOW | .agents/skills/opencode-qa/scripts/server-smoke.sh | 12 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ared-skills/skills/ast-grep/scripts/ast_grep_helper.py | 161 | CODE | |
| LOW | …ared-skills/skills/ast-grep/scripts/ast_grep_helper.py | 625 | CODE | |
| LOW | …coding-agent-sessions/scripts/agent_sessions/jsonio.py | 43 | CODE | |
| LOW | …ding-agent-sessions/scripts/agent_sessions/opencode.py | 34 | CODE | |
| LOW | …ding-agent-sessions/scripts/agent_sessions/opencode.py | 268 | CODE | |
| LOW | …ls/coding-agent-sessions/scripts/agent_sessions/cli.py | 32 | CODE | |
| LOW | …ls/coding-agent-sessions/scripts/agent_sessions/cli.py | 141 | CODE | |
| LOW | …d-skills/skills/ultimate-browsing/engine/bias_check.py | 139 | CODE | |
| LOW | …skills/skills/ultimate-browsing/engine/waf_detector.py | 115 | CODE | |
| LOW | …-skills/skills/ultimate-browsing/engine/fetch_chain.py | 34 | CODE | |
| LOW | …ls/programming/scripts/python/check-no-excuse-rules.py | 143 | CODE | |
| LOW | …ls/programming/scripts/python/check-no-excuse-rules.py | 199 | CODE | |
| LOW | …ls/programming/scripts/python/check-no-excuse-rules.py | 373 | CODE | |
| LOW | …ills/programming/scripts/rust/check-no-excuse-rules.py | 150 | CODE | |
| LOW | packages/omo-native/test/pty-signal-qa.py | 65 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 95 | - `// TODO: implement caching` - should NOT be flagged | CODE |
| LOW | …eration-1/eval-5/without_skill/outputs/code-changes.md | 331 | { line: 3, text: "// TODO: implement caching" }, | CODE |
| LOW⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| LOW⚡ | …ation-1/eval-5/without_skill/outputs/execution-plan.md | 95 | - `// TODO: implement caching` - should NOT be flagged | CODE |
| LOW | …eration-1/eval-5/without_skill/outputs/code-changes.md | 331 | { line: 3, text: "// TODO: implement caching" }, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| LOW⚡ | …/skills/work-with-pr-workspace/iteration-1/review.html | 717 | const APP_DATA = {"skill_name": "work-with-pr", "workspace_dir": "/Users/yeongyu/local-workspaces/omo/.opencode/skil | CODE |
| LOW | …ls/programming/scripts/python/check-no-excuse-rules.py | 404 | # Check if body contains assert_never call | COMMENT |
| LOW | …ls/programming/scripts/python/check-no-excuse-rules.py | 447 | # Check if all arguments are string literals or f-strings | COMMENT |
| LOW | .github/workflows/sisyphus-agent.yml | 354 | # Check if PR or Issue and get title | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ing-agent-sessions/scripts/agent_sessions/pi_family.py | 12 | __all__ = ["scan_gajae_code", "scan_oh_my_pi", "scan_senpi"] | CODE |
| LOW | …ding-agent-sessions/scripts/agent_sessions/scanners.py | 77 | __all__ = ["DEFAULT_PLATFORMS", "PLATFORM_SCANNERS", "scan", "scan_claude", "scan_codex", "scan_gajae_code", "scan_oh_my | CODE |
| LOW | …red-skills/skills/ultimate-browsing/engine/__init__.py | 13 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/src/features/opencode-runtime-skills/source-server.ts | 71 | function handleRequest(request: Request): Response | Promise<Response> { | CODE |