Home / community-scripts / ProxmoxVE
AI Slop Code RIsk Monitor

community-scripts/ProxmoxVE

Proxmox VE Helper-Scripts (Community Edition)

10.0 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for community-scripts/ProxmoxVE, a Shell project with 29,772 GitHub stars. SynthScan examined 147,221 lines of code across 1428 source files, recording 473 pattern matches distributed across 6 syntactic categories. The legacy adjusted pattern signal is 10.0 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

10.0
Adjusted Signal
10.0
Raw Pattern Score
100%
Time Factor
2026-10-10
Last Push
29.8K
Stars
Shell
Language
147.2K
Lines of Code
1.4K
Files
473
Pattern Hits
2026-10-12
Scan Date
0.00
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 4.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 90 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 8 finding(s).

Agent Over-Engineering Ratio 36.5/100 · MEDIUM

Are wrappers, guards, and repeated structures necessary? 377 finding(s).

PR Review Velocity Impact 34.2/100 · MEDIUM

Which changes need focused human review? 473 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 380LOW 93

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 473 distinct pattern matches across 6 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators375 hits · 1334 pts
SeverityFileLineSnippetContext
MEDIUMturnkey/turnkey.sh131# ==============================================================================COMMENT
MEDIUMturnkey/turnkey.sh133# ==============================================================================COMMENT
MEDIUM⚡tools/addon/nextcloud-exporter.sh30# ==============================================================================COMMENT
MEDIUM⚡tools/addon/nextcloud-exporter.sh32# ==============================================================================COMMENT
MEDIUM⚡tools/addon/nextcloud-exporter.sh40# ==============================================================================COMMENT
MEDIUM⚡tools/addon/nextcloud-exporter.sh42# ==============================================================================COMMENT
MEDIUMtools/addon/nextcloud-exporter.sh58# ==============================================================================COMMENT
MEDIUMtools/addon/nextcloud-exporter.sh60# ==============================================================================COMMENT
MEDIUMtools/addon/nextcloud-exporter.sh77# ==============================================================================COMMENT
MEDIUMtools/addon/nextcloud-exporter.sh79# ==============================================================================COMMENT
MEDIUMtools/addon/nextcloud-exporter.sh158# ==============================================================================COMMENT
MEDIUMtools/addon/nextcloud-exporter.sh160# ==============================================================================COMMENT
MEDIUM⚡tools/addon/komodo.sh27# ==============================================================================COMMENT
MEDIUM⚡tools/addon/komodo.sh29# ==============================================================================COMMENT
MEDIUM⚡tools/addon/komodo.sh39# ==============================================================================COMMENT
MEDIUM⚡tools/addon/komodo.sh41# ==============================================================================COMMENT
MEDIUMtools/addon/komodo.sh61# ==============================================================================COMMENT
MEDIUMtools/addon/komodo.sh63# ==============================================================================COMMENT
MEDIUMtools/addon/komodo.sh77# ==============================================================================COMMENT
MEDIUMtools/addon/komodo.sh79# ==============================================================================COMMENT
MEDIUMtools/addon/komodo.sh138# ==============================================================================COMMENT
MEDIUMtools/addon/komodo.sh140# ==============================================================================COMMENT
MEDIUMtools/addon/komodo.sh158# ==============================================================================COMMENT
MEDIUMtools/addon/komodo.sh160# ==============================================================================COMMENT
MEDIUMtools/addon/komodo.sh237# ==============================================================================COMMENT
MEDIUMtools/addon/komodo.sh239# ==============================================================================COMMENT
MEDIUMtools/addon/arcane.sh27# ==============================================================================COMMENT
MEDIUMtools/addon/arcane.sh29# ==============================================================================COMMENT
MEDIUMtools/addon/arcane.sh40# ==============================================================================COMMENT
MEDIUMtools/addon/arcane.sh42# ==============================================================================COMMENT
MEDIUMtools/addon/arcane.sh58# ==============================================================================COMMENT
MEDIUMtools/addon/arcane.sh60# ==============================================================================COMMENT
MEDIUMtools/addon/arcane.sh77# ==============================================================================COMMENT
MEDIUMtools/addon/arcane.sh79# ==============================================================================COMMENT
MEDIUMtools/addon/arcane.sh152# ==============================================================================COMMENT
MEDIUMtools/addon/arcane.sh154# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh29# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh31# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh43# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh45# ==============================================================================COMMENT
MEDIUM⚡tools/addon/copyparty.sh59# ==============================================================================COMMENT
MEDIUM⚡tools/addon/copyparty.sh61# ==============================================================================COMMENT
MEDIUM⚡tools/addon/copyparty.sh63# ==============================================================================COMMENT
MEDIUM⚡tools/addon/copyparty.sh65# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh82# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh84# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh104# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh106# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh132# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh134# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh299# ==============================================================================COMMENT
MEDIUMtools/addon/copyparty.sh301# ==============================================================================COMMENT
MEDIUM⚡tools/addon/coder-code-server.sh42# ==============================================================================COMMENT
MEDIUM⚡tools/addon/coder-code-server.sh44# ==============================================================================COMMENT
MEDIUM⚡tools/addon/coder-code-server.sh53# ==============================================================================COMMENT
MEDIUM⚡tools/addon/coder-code-server.sh55# ==============================================================================COMMENT
MEDIUMtools/addon/coder-code-server.sh66# ==============================================================================COMMENT
MEDIUMtools/addon/coder-code-server.sh68# ==============================================================================COMMENT
MEDIUMtools/addon/coder-code-server.sh117# ==============================================================================COMMENT
MEDIUMtools/addon/coder-code-server.sh119# ==============================================================================COMMENT
315 more matches not shown…
Redundant / Tautological Comments48 hits · 80 pts
SeverityFileLineSnippetContext
LOWtools/addon/nextcloud-exporter.sh176# Check if already installedCOMMENT
LOWtools/addon/komodo.sh263# Check if already installedCOMMENT
LOWtools/addon/arcane.sh172# Check if already installedCOMMENT
LOWtools/addon/copyparty.sh317# Check if already installedCOMMENT
LOW⚡tools/addon/all-templates.sh40 # Check if ID is numericCOMMENT
LOW⚡tools/addon/all-templates.sh44 # Check if config file exists for VM or LXCCOMMENT
LOW⚡tools/addon/all-templates.sh48 # Check if ID is used in LVM logical volumesCOMMENT
LOWtools/addon/adguardhome-sync.sh297# Check if already installedCOMMENT
LOWtools/addon/immich-public-proxy.sh214# Check if already installedCOMMENT
LOWtools/addon/actual-budget-prometheus-exporter.sh184# Check if already installedCOMMENT
LOWtools/addon/portainer.sh311# Check if already installedCOMMENT
LOWtools/addon/sparkyfitness-garmin.sh136# Check if already installedCOMMENT
LOWtools/addon/cronmaster.sh170# Check if already installedCOMMENT
LOWtools/addon/dockge.sh118# Check if already installedCOMMENT
LOWtools/addon/dokploy.sh121# Check if already installedCOMMENT
LOWtools/addon/coolify.sh123# Check if already installedCOMMENT
LOWtools/addon/runtipi.sh133# Check if already installedCOMMENT
LOWtools/addon/prometheus-paperless-ngx-exporter.sh188# Check if already installedCOMMENT
LOWtools/addon/jellystat.sh132 # Check if database already existsCOMMENT
LOWtools/addon/jellystat.sh142 # Check if user exists, create if notCOMMENT
LOWtools/addon/jellystat.sh173 # Check if md5/scram-sha-256 auth is already configured for local connectionsCOMMENT
LOWtools/addon/jellystat.sh311# Check if already installedCOMMENT
LOWtools/addon/pihole-exporter.sh220# Check if already installedCOMMENT
LOWtools/addon/qbittorrent-exporter.sh229# Check if already installedCOMMENT
LOWtools/pve/pbs-microcode.sh40# Check if running on bare metal using systemd-detect-virt.COMMENT
LOWtools/pve/pbs-microcode.sh153# Check if this is a Proxmox Backup Server by verifying the presence of the datastore config.COMMENT
LOWtools/pve/add-iptag.sh474# Check if IP is in CIDRCOMMENT
LOWtools/pve/add-iptag.sh526# Check if IP is in any CIDRsCOMMENT
LOWtools/pve/add-iptag.sh545# Check if IP is validCOMMENT
LOWtools/pve/add-iptag.sh566 # Check if VM is running first (status comes from the cached `qm list`,COMMENT
LOWtools/pve/add-iptag.sh961 # Check if LXC is running (status comes from the cached `pct list`,COMMENT
LOWtools/pve/nic-offloading-fix.sh73 # Check if the interface uses the e1000e or e1000 driverCOMMENT
LOWtools/pve/nic-offloading-fix.sh85# Check if any Intel e1000e/e1000 interfaces were foundCOMMENT
LOWtools/pve/nic-offloading-fix.sh111# Check if any interfaces were selectedCOMMENT
LOWtools/pve/nic-offloading-fix.sh173 # Check if service file was created successfullyCOMMENT
LOWtools/pve/clean-orphaned-lvm.sh40 # Check if the ID exists as a VM or LXC container on any cluster nodeCOMMENT
LOW⚡install/tracktor-install.sh26# Set this to the path of the database file. Default - ./tracktor.dbCOMMENT
LOW⚡install/tracktor-install.sh28# Set this to the path of the uploads directory. Default - ./uploadsCOMMENT
LOW⚡install/tracktor-install.sh30# Set this to the path of the logs directory. Default - ./logsCOMMENT
LOW⚡install/tracktor-install.sh36# Set this to remove upload size limitations. Default - 512 KbCOMMENT
LOWinstall/autocaliweb-install.sh197 # Check if there are any log files to processCOMMENT
LOW⚡ct/tracktor.sh46# Set this to the path of the database file. Default - ./tracktor.dbCOMMENT
LOW⚡ct/tracktor.sh48# Set this to the path of the uploads directory. Default - ./uploadsCOMMENT
LOW⚡ct/tracktor.sh50# Set this to the path of the logs directory. Default - ./logsCOMMENT
LOW⚡ct/tracktor.sh56# Set this to remove upload size limitations. Default - 512 KbCOMMENT
LOW.github/workflows/check-node-versions.yml144 # Check if our_version satisfies an engines.node constraintCOMMENT
LOW.github/workflows/check-node-versions.yml341 # Check if engines.node is a minimum constraint that our version satisfiesCOMMENT
LOW.github/workflows/check-node-versions.yml604 # Check if a matching open issue already existsCOMMENT
Over-Commented Block35 hits · 29 pts
SeverityFileLineSnippetContext
LOWtools/pve/post-install-hook-examples.sh1#!/usr/bin/env bashCOMMENT
LOWtools/pve/post-install-hook-examples.sh21#COMMENT
LOWtools/pve/post-install-hook-examples.sh41# - Use `|| true` on best-effort steps you do not want to abort the hook.COMMENT
LOWtools/pve/post-install-hook-examples.sh161# ▼▼▼ EXAMPLE 3 — BEGIN ▼▼▼COMMENT
LOWtools/pve/post-install-hook-examples.sh241# ▲▲▲ EXAMPLE 3 — END ▲▲▲COMMENT
LOWtools/pve/update-apps.sh1#!/usr/bin/env bashCOMMENT
LOWtools/pve/update-apps.sh21# Options: Storage name from /etc/pve/storage.cfg (e.g., "local", "nas-backup")COMMENT
LOWtools/pve/update-apps.sh41COMMENT
LOWinstall/romm-install.sh101# - excluded_folder_aCOMMENT
LOWinstall/romm-install.sh121filesystem:COMMENT
LOWinstall/tracktor-install.sh21$STD pnpm install --frozen-lockfileCOMMENT
LOWinstall/nextexplorer-install.sh81# OIDC_ISSUER=COMMENT
LOWinstall/nextexplorer-install.sh101COMMENT
LOWinstall/scanopy-install.sh21msg_info "Configuring Scanopy"COMMENT
LOWinstall/opencloud-install.sh121# NOTIFICATIONS_SMTP_AUTHENTICATION=loginCOMMENT
LOWinstall/opencloud-install.sh141## automatically create accountsCOMMENT
LOWinstall/jotty-install.sh21COMMENT
LOWinstall/karakeep-install.sh81# If you're planning to use OpenAI for tagging. Uncomment the following line:COMMENT
LOWinstall/patchmon-install.sh41## OIDC / SSO (when OIDC_ENABLED=true, issuer/client/secret/redirect required)COMMENT
LOWinstall/reactive-resume-install.sh61# S3_SECRET_ACCESS_KEY=COMMENT
LOWinstall/alpine-redlib-install.sh21# Redlib Instance Configuration FileCOMMENT
LOWinstall/alpine-redlib-install.sh41#REDLIB_DEFAULT_COMMENT_SORT=confidence # ["confidence", "top", "new", "controversial", "old"]COMMENT
LOWinstall/solidinvoice-install.sh21COMMENT
LOWinstall/solidinvoice-install.sh41COMMENT
LOWinstall/solidinvoice-install.sh61#SOLIDINVOICE_SSL_CERT=/etc/ssl/certs/solidinvoice.crtCOMMENT
LOWinstall/solidinvoice-install.sh81# ------------------------------------------------------------------COMMENT
LOWinstall/solidinvoice-install.sh101# Log format: "json" for structured logs (default for systemd), "console" for human-readable.COMMENT
LOWinstall/solidinvoice-install.sh121#SOLIDINVOICE_MAILER_SENDER=SolidInvoice <noreply@example.com>COMMENT
LOWinstall/solidinvoice-install.sh141COMMENT
LOWinstall/hammer-install.sh41# with a real certificate (self-signed certs are rejected by the clients).COMMENT
LOWinstall/hammer-install.sh61# To use an external PostgreSQL instead:COMMENT
LOWct/homepage.sh61 msg_info "Updating .env"COMMENT
LOWct/tracktor.sh41 fiCOMMENT
LOW.github/workflows/sync-to-incus.yml1name: Sync ct/install to IncusCOMMENT
LOW.github/workflows/notify-breaking-change.yml1name: Notify breaking changeCOMMENT
Self-Referential Comments5 hits · 18 pts
SeverityFileLineSnippetContext
MEDIUM⚡tools/pve/post-install-hook-examples.sh5# This file is NOT meant to be executed as-is.COMMENT
MEDIUMtools/pve/nic-offloading-fix.sh94# Create a checklist for interface selection with all interfaces initially checkedCOMMENT
MEDIUMtools/pve/nic-offloading-fix.sh154 # Create the service file with driver-specific optimizationsCOMMENT
MEDIUM⚡install/solidinvoice-install.sh25# This file is sourced by the systemd service unit.COMMENT
MEDIUMvm/unifi-os-server-vm.sh261# Create the first-boot installer scriptCOMMENT
Fake / Example Data8 hits · 8 pts
SeverityFileLineSnippetContext
LOWinstall/powerdns-install.sh56PA_ADMIN_EMAIL="admin@example.com"CODE
LOWinstall/hortusfox-install.sh48ADMIN_EMAIL="admin@example.com"CODE
LOWinstall/adventurelog-install.sh57# DEFAULT_FROM_EMAIL='user@example.com'COMMENT
LOWinstall/webtrees-install.sh77 --email="admin@example.com" \CODE
LOWinstall/projectsend-install.sh30ADMIN_EMAIL="admin@example.com"CODE
LOWinstall/openobserve-install.sh23ZO_ROOT_USER_EMAIL = "admin@example.com"CODE
LOWinstall/peertube-install.sh94 email: 'admin@example.com'CODE
LOWinstall/traefik-install.sh49 email: "foo@bar.com"CODE
Hyper-Verbose Identifiers2 hits · 2 pts
SeverityFileLineSnippetContext
LOWtools/pve/post-pve-install.sh574 " function removeSubscriptionElements() {" \CODE
LOW.github/workflows/push-json-to-pocketbase.yml204 async function resolveNotesAndInstallMethods(scriptId) {CODE