This report summarizes scanner evidence for elie222/rakazo. SynthScan examined 834,401 lines of code across 3361 source files, recording 1398 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 2.1 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 1049 finding(s).
Are imports declared and package/API names verified? 339 finding(s).
Are wrappers, guards, and repeated structures necessary? 1031 finding(s).
Which changes need focused human review? 1398 finding(s).
Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1398 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | infra/sandboxes/computer/test_team_desktops.py | 68 | def assert_file_chooser_portals(): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 353 | def test_closed_stdin_cancels_helper_without_a_browser(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 360 | def test_act_without_a_browser_is_not_uncertain(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 369 | def test_closed_extended_frame_does_not_spin(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 379 | def test_bounds_frame_before_reading_payload(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 469 | def test_snapshot_waits_for_the_page_to_finish_its_requests(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 478 | def test_snapshot_flags_a_page_that_is_still_loading(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 487 | def test_snapshot_reports_loading_when_the_browser_is_too_slow_to_answer(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 545 | def test_a_new_document_does_not_inherit_the_old_one_being_idle(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 552 | def test_rejects_url_credentials_before_navigation(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 559 | def test_rejects_navigation_error(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 565 | def test_preserves_completed_actions_when_next_response_is_lost(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 575 | def test_rejects_missing_text_before_any_action(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 581 | def test_contenteditable_fill_inserts_the_whole_text_once(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 698 | def test_card_fill_finds_the_field_in_a_payment_frame_and_types_it_there(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 708 | def test_card_fill_types_into_the_page_itself_when_the_field_is_there(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 715 | def test_card_fill_types_nothing_into_frames_the_page_does_not_own_or_providers_not_listed(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 764 | def test_card_fill_clears_a_field_that_did_not_keep_every_digit(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 774 | def test_card_fill_reports_a_field_it_could_not_confirm_empty_as_uncertain(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 782 | def test_card_fill_clears_a_field_whose_page_left_after_the_last_key(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 792 | def test_card_fill_types_only_the_digits_of_an_expiry(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 797 | def test_card_fill_counts_formatted_digits_as_kept(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 802 | def test_snapshot_points_to_fill_card_only_for_payment_frames_with_card_fields(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 832 | def test_pay_token_goes_to_the_stripe_frame_block_as_an_argument_only(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 840 | def test_pay_token_goes_to_the_page_itself_when_its_block_is_there(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 846 | def test_pay_token_refuses_other_merchants_frames_and_sites(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 861 | def test_pay_token_reports_a_checkout_that_did_not_take_it_without_the_token(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 867 | def test_pay_token_steps_need_their_token_origin_and_account_and_no_ref(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 877 | def test_key_events_preserve_ascii_key_mappings_and_control_insertion(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 969 | def test_type_still_inserts_a_literal_tab_without_changing_focus(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 975 | def test_type_of_one_character_replaces_only_the_box_it_is_typed_into(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 981 | def test_type_checks_the_page_before_every_key_and_after_the_last(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 986 | def test_type_presses_no_key_when_emptying_the_field_made_the_page_navigate(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 995 | def test_type_breaks_lines_with_shift_enter_only_where_a_line_break_belongs(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1005 | def test_type_reports_characters_the_page_did_not_keep(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1011 | def test_type_stops_at_once_when_the_page_navigates_mid_code(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1069 | def test_type_stops_when_focus_leaves_the_field_or_its_code(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1078 | def test_type_into_a_select_chooses_the_option_as_fill_does(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1084 | def test_type_presses_nothing_when_the_field_does_not_take_focus(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1090 | def test_reads_arguments_from_one_stdin_line_only(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1096 | def test_discovery_cannot_leave_loopback_endpoint(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1101 | def test_ensure_world_reuses_named_isolated_context(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1515 | def test_a_click_without_a_file_chooser_is_unaffected(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1524 | def test_the_whole_wait_after_an_action_has_one_budget(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1533 | def test_a_request_still_open_at_the_bound_skips_the_settle_and_flags_loading(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1539 | def test_an_action_that_moves_to_another_document_waits_as_long_as_a_snapshot_does(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1548 | def test_a_snapshot_after_a_spent_budget_does_not_wait_for_the_page(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1556 | def test_click_on_a_native_select_sends_no_mouse_event(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1563 | def test_a_step_the_page_cannot_take_is_settled_with_the_page_and_no_desktop_fallback(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1577 | def test_a_settled_step_reports_the_steps_already_done(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1587 | def test_the_helper_raises_the_page_script_s_settled_errors_as_settled(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1595 | def test_unsupported_input_types_still_fall_back_to_the_desktop(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1663 | def test_a_page_that_always_changes_does_not_hold_the_result_back(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1672 | def test_a_request_still_open_at_the_bound_marks_the_result_as_loading(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1682 | def test_act_takes_its_snapshot_only_after_waiting_and_flags_a_page_still_busy(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1707 | def test_page_text_cannot_pass_for_a_frame_s_header_line(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1716 | def test_snapshot_reads_the_frames_in_the_order_of_their_elements_in_the_page(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1726 | def test_snapshot_leaves_out_hidden_frames_and_payment_frames_and_reads_nothing_in_them(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1758 | def test_snapshot_skips_frames_with_nothing_in_them_without_calling_them_unread(self): | CODE |
| LOW⚡ | infra/sandboxes/computer/test_page_browser.py | 1765 | def test_snapshot_reports_frames_beyond_the_depth_limit_as_unread(self): | CODE |
| 960 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | infra/compose/host-safeguards.test.py | 134 | self.assertNotIn("owner@example.org", redacted) | CODE |
| LOW⚡ | infra/compose/host-safeguards.test.py | 136 | event = self.auth("PGPASSWORD=fake-value owner@example.org", program) | CODE |
| LOW⚡ | infra/compose/host-safeguards.test.py | 138 | self.assertNotIn("owner@example.org", event["message"]) | CODE |
| LOW | infra/compose/host-safeguards.test.py | 93 | ("psql -c \"select 'user@example.com'\"", "user@example.com", "psql", "select"), | CODE |
| LOW | infra/compose/host-safeguards.test.py | 119 | "AKIAEXAMPLEEXAMPLE12", "eyJfake.eyJfake.fake", "owner@example.org", | CODE |
| LOW⚡ | packages/core/src/egress.test.ts | 81 | "ada.li@example.org", | CODE |
| LOW⚡ | packages/core/src/egress.test.ts | 84 | "ada.li+tag@example.org", | CODE |
| LOW⚡ | packages/core/src/egress.test.ts | 85 | "ada.li+标签@example.org", | CODE |
| LOW⚡ | packages/core/src/egress.test.ts | 86 | "ada.li+📬@example.org", | CODE |
| LOW⚡ | packages/core/src/egress.test.ts | 87 | "ada.li/part@example.org", | CODE |
| LOW⚡ | packages/core/src/egress.test.ts | 88 | '"ada.li"@example.org', | CODE |
| LOW⚡ | packages/core/src/egress.test.ts | 89 | '"ada.li\\" contact"@example.org', | CODE |
| LOW⚡ | packages/core/src/egress.test.ts | 90 | "mailto:ada.li@example.org", | CODE |
| LOW | packages/core/src/model-probe.test.ts | 21 | apiKey: " fake-key ", | CODE |
| LOW | packages/core/src/model-probe.test.ts | 35 | apiKey: "fake-key", | CODE |
| LOW | packages/core/src/markdown-plain.test.ts | 113 | expect(plainTextFromMarkdown("<user@example.com>")).toBe("user@example.com"); | CODE |
| LOW | packages/core/src/model-providers.test.ts | 187 | id: "placeholder", | CODE |
| LOW | packages/core/src/model-providers.test.ts | 203 | enabledModelIds: ["text-only", "sees", "unknown", "custom", "placeholder"], | CODE |
| LOW⚡ | packages/core/src/run-error.test.ts | 80 | "500: {malformed https://example.test/keys/fake-key-id", | CODE |
| LOW⚡ | packages/core/src/run-error.test.ts | 85 | "Provider diagnostic: manage https://example.test/keys/fake-key-id; trace fake-trace", | CODE |
| LOW⚡ | packages/core/src/run-error.test.ts | 89 | "OpenRouter key limit exceeded (weekly). Manage https://example.test/keys/fake-key-id", | CODE |
| LOW | packages/core/src/run-error.test.ts | 739 | '403: {"message":"Key limit exceeded (weekly limit). Manage it using https://example.test/keys/fake-key-id $5.01 | CODE |
| LOW | packages/auth/src/email.test.ts | 19 | const url = "https://app.example.test/verify?token=fake-token&callbackURL=%2Fsign-in"; | CODE |
| LOW | packages/contracts/src/index.test.ts | 559 | ModelConnectInputSchema.parse({ provider: "test", apiKey: "fake-key", futureOption: true }), | CODE |
| LOW | packages/contracts/src/index.test.ts | 562 | apiKey: "fake-key", | CODE |
| LOW | packages/contracts/src/model-backups.test.ts | 129 | id: "placeholder", | CODE |
| LOW | packages/contracts/src/openai-compatible-ui.test.ts | 72 | expect(openAiCompatibleConnectReady({ ...input, apiKey: "fake-key" })).toBe(true); | CODE |
| LOW | packages/contracts/src/mcp-headers.test.ts | 7 | const headers = { X_API_KEY: "fake-key" }; | CODE |
| LOW | packages/contracts/src/mcp-headers.test.ts | 8 | expect(new Headers(headers).get("x_api_key")).toBe("fake-key"); | CODE |
| LOW | packages/contracts/src/mcp-headers.test.ts | 21 | const headers = { "X!#$%&'*+-.^_`|~": "fake-key", Authorization: "Bearer fake-token" }; | CODE |
| LOW⚡ | packages/contracts/src/mcp-headers.test.ts | 38 | expect(McpHeadersSchema.safeParse({ [name]: "fake-key" }).success).toBe(false); | CODE |
| LOW⚡ | packages/contracts/src/mcp-headers.test.ts | 39 | expect(() => new Headers({ [name]: "fake-key" })).toThrow(); | CODE |
| LOW⚡ | packages/contracts/src/mcp-headers.test.ts | 47 | expect(McpHeadersSchema.safeParse({ ...headers, X_Extra: "fake-key" }).success).toBe(false); | CODE |
| LOW | packages/contracts/src/bot-secrets.test.ts | 205 | username: "fake-user", | CODE |
| LOW | packages/contracts/src/bot-secrets.test.ts | 210 | { label: "Username", value: "fake-user", hidden: false }, | CODE |
| LOW | packages/contracts/src/bot-secrets.test.ts | 276 | { username: "fake-user", password: "" }, | CODE |
| LOW | packages/contracts/src/bot-secrets.test.ts | 277 | { username: "fake-user" }, | CODE |
| LOW | packages/testkit/src/authorization.test.ts | 2353 | apiKey: "fake-key", | CODE |
| LOW | packages/testkit/src/evals/approval.ts | 193 | args: { contact_id: "fake-501", properties: { phone: "555-0100" } }, | CODE |
| LOW | packages/testkit/src/evals/cli.test.ts | 151 | apiKey: "fake-key", | CODE |
| LOW | packages/adapters/src/executor.test.ts | 261 | message: "Rejected fake-provider-key using Bearer fake-token", | CODE |
| LOW | …ckages/adapters/src/executor-readonly-approval.test.ts | 2062 | it.each(["ada.li@example.org", "ada.li+tag@example.org", "ada.li@例子.测试"])( | CODE |
| LOW⚡ | packages/adapters/src/pi-runtime.test.ts | 49 | const token = "fake-token"; | CODE |
| LOW⚡ | packages/adapters/src/pi-runtime.test.ts | 51 | command: `curl -H 'Authorization: Bearer ${token}' https://example.test?api_key=fake-key password=fake-password`, | CODE |
| LOW⚡ | packages/adapters/src/pi-runtime.test.ts | 57 | expect(line).not.toContain("fake-key"); | CODE |
| LOW | packages/adapters/src/host-command-environment.test.ts | 9 | USER: "fake-user", | CODE |
| LOW | packages/adapters/src/host-command-environment.test.ts | 30 | USER: "fake-user", | CODE |
| LOW | packages/adapters/src/secret-persistence.test.ts | 553 | new EncryptedSecretStore("fake-key"), | CODE |
| LOW | packages/adapters/src/secret-persistence.test.ts | 629 | new EncryptedSecretStore("fake-key"), | CODE |
| LOW | packages/adapters/src/secret-persistence.test.ts | 709 | const store = new EncryptedSecretStore("fake-key"); | CODE |
| LOW⚡ | packages/adapters/src/jev-auto-review.test.ts | 188 | apiKey: "fake-key", | CODE |
| LOW⚡ | packages/adapters/src/jev-auto-review.test.ts | 189 | fetch: async () => new Response("fake-key leaked", { status }), | CODE |
| LOW⚡ | packages/adapters/src/jev-auto-review.test.ts | 193 | expect(JSON.stringify(result)).not.toContain("fake-key"); | CODE |
| LOW | packages/adapters/src/browser-tools.test.ts | 303 | const values = { username: "fake-user@example.test", password: "fake-password-1" }; | CODE |
| LOW | packages/adapters/src/audit-forwarding.test.ts | 78 | { url: "https://siem.example.test/ingest", authorization: "Bearer fake-token" }, | CODE |
| LOW | packages/adapters/src/audit-forwarding.test.ts | 85 | expect(new Headers(init!.headers).get("authorization")).toBe("Bearer fake-token"); | CODE |
| LOW | packages/adapters/src/executor-login-redaction.test.ts | 22 | const USERNAME = "fake-user@example.test"; | CODE |
| LOW | packages/adapters/src/agent-import-settings.test.ts | 495 | ["'placeholder\"#suffix' # comment", 'placeholder"#suffix'], | CODE |
| LOW | packages/adapters/src/agent-import-settings.test.ts | 497 | ['placeholder"#suffix', 'placeholder"#suffix'], | CODE |
| LOW | packages/adapters/src/http-decisions.test.ts | 41 | apiKey: "fake-key", | CODE |
| 224 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/core/src/node/desktop-runtime.ts | 240 | elif not profile: | CODE |
| HIGH | packages/core/src/node/desktop-runtime.ts | 264 | print(port) | CODE |
| HIGH | packages/core/src/node/desktop-runtime.ts | 784 | print(index) | CODE |
| HIGH | packages/core/src/node/terminal-server.ts | 89 | elif kind == 1 and len(payload) == 4: | CODE |
| HIGH | …es/testkit/src/playwright-artifact-publication.test.ts | 224 | print("NoSuchKey 404", file=sys.stderr) | CODE |
| HIGH | packages/testkit/src/backup-scripts.test.ts | 848 | elif [[ "$2" == "${last}" || "$2" == "${last}/appdata.tgz" ]]; then | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 110 | print("mismatch") | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 114 | print("ok") | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 115 | elif op == "begin-release": | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 118 | print(current[len("draining:"):]) | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 119 | elif current: | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 122 | print(current) | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 124 | print("") | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 125 | elif op == "abort-release": | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 130 | print("ok") | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 131 | elif op == "commit-release": | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 136 | print("ok") | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 137 | elif op == "put": | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 140 | print(current) | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 141 | elif screen_id == "screen-0" and "screen-0" in data.values(): | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 142 | print("NEED_CREATE") | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 146 | print(screen_id) | CODE |
| HIGH⚡ | packages/adapters/src/createos-sandbox.ts | 148 | print(json.dumps(data)) | CODE |
| HIGH | packages/adapters/src/createos-sandbox.ts | 209 | print(port) | CODE |
| HIGH | packages/adapters/src/createos-sandbox.ts | 605 | print(json.dumps(out)) | CODE |
| HIGH | packages/adapters/src/createos-sandbox.ts | 608 | print(json.dumps(out)) | CODE |
| HIGH | packages/adapters/src/createos-sandbox.ts | 619 | print(json.dumps(out)) | CODE |
| HIGH | packages/adapters/src/desktop-command-guard.test.ts | 178 | print(connection.getresponse().status) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | packages/adapters/src/executor-start-timing.test.ts | 109 | prisma.run.updateMany.mock.calls.every(([args]) => args.data.startedAt === undefined), | CODE |
| CRITICAL | packages/adapters/src/executor-start-timing.test.ts | 135 | prisma.run.updateMany.mock.calls.every(([args]) => args.data.startedAt === undefined), | CODE |
| CRITICAL | packages/adapters/src/railway-sandbox.test.ts | 1059 | expect(sandbox.files.write.mock.calls.every((call) => call[2] === undefined)).toBe(true); | CODE |
| CRITICAL | packages/adapters/src/bot-messages.test.ts | 136 | harness.tx.thread.update.mock.calls.filter( | CODE |
| CRITICAL | packages/adapters/src/bot-messages.test.ts | 166 | const unreadWrites = harness.tx.thread.update.mock.calls.filter( | CODE |
| CRITICAL | packages/adapters/src/computer-update.test.ts | 506 | const clearOrder = harness.computer.updateMany.mock.invocationCallOrder.at(-1) ?? 0; | CODE |
| CRITICAL | packages/adapters/src/computer-update.test.ts | 626 | const index = harness.computerUpdate.updateMany.mock.calls.findIndex( | CODE |
| CRITICAL | packages/adapters/src/computer-update.test.ts | 631 | const clearIndex = harness.computer.updateMany.mock.calls.findIndex( | CODE |
| CRITICAL | packages/adapters/src/teaching-session.test.ts | 242 | tx.event.create.mock.calls.filter( | CODE |
| CRITICAL | packages/adapters/src/group-handoff.test.ts | 368 | h.tx.task.create.mock.calls.map( | CODE |
| CRITICAL | packages/adapters/src/computer-idle.test.ts | 1911 | return harness.sandbox.execute.mock.calls.filter( | CODE |
| CRITICAL | packages/db/src/events.test.ts | 225 | expect(tx.event.create.mock.calls.map(([{ data }]) => data.type)).toEqual([ | CODE |
| CRITICAL | packages/db/src/events.test.ts | 880 | expect(tx.event.create.mock.calls.map(([call]) => call.data.type)).toEqual([ | CODE |
| CRITICAL | packages/db/src/events.test.ts | 964 | expect(tx.event.create.mock.calls.map(([call]) => call.data.type)).toEqual([ | CODE |
| CRITICAL | packages/db/src/events.test.ts | 1170 | expect(tx.event.create.mock.calls.map(([input]) => input.data.type)).toEqual([ | CODE |
| CRITICAL | packages/db/src/events.test.ts | 2530 | tx.userActionApprovalRule.upsert.mock.calls.map(([call]) => call.create.matchValue), | CODE |
| CRITICAL | apps/mobile/lib/client-update.test.ts | 50 | const buttons = rn.Alert.alert.mock.calls.at(-1)?.[2] as Array<{ onPress: () => void }>; | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | infra/sandboxes/computer/test_focus_or_launch.py | 1367 | if (symbol == NoSymbol || symbol > sizeof KEYS / sizeof KEYS[0]) return 0; | CODE |
| HIGH⚡ | infra/sandboxes/computer/test_focus_or_launch.py | 1373 | if (group != 0 || level != 0) return NoSymbol; | CODE |
| HIGH⚡ | infra/sandboxes/computer/test_focus_or_launch.py | 1375 | if (KEYS[index].keycode == key && KEYS[index].level0 == NULL) return (KeySym)(index + 1); | CODE |
| HIGH | infra/sandboxes/computer/test_focus_or_launch.py | 411 | if (display && display->fd >= 0) { | CODE |
| HIGH | infra/sandboxes/computer/test_focus_or_launch.py | 470 | if (!image || !image->data || image->height < 0 || image->bytes_per_line < 0) return 0; | CODE |
| HIGH | infra/sandboxes/computer/test_focus_or_launch.py | 552 | if (png && png->write_fn) png->write_fn(png, bytes, sizeof bytes); | CODE |
| HIGH | infra/sandboxes/computer/test_focus_or_launch.py | 1388 | if (index < 0 || index >= key_event_count || index >= KEY_EVENT_CAP) return 0; | CODE |
| HIGH | infra/sandboxes/computer/test_focus_or_launch.py | 1392 | if (index < 0 || index >= key_event_count || index >= KEY_EVENT_CAP) return 0; | CODE |
| HIGH | infra/compose/host-safeguards.test.py | 180 | 'type=SYSCALL msg=audit(1761173035.000:4568): auid=1000 uid=0 comm="cat" exe="/usr/bin/cat" key=(null)', | CODE |
| HIGH | infra/compose/host-safeguards.test.py | 464 | "systemd-run": 'test "${FAIL_SCHEDULE:-0}" != 1 && test ! -e "$TIMER_STATE" && touch "$TIMER_STATE"', | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | infra/sandboxes/computer/xcapture.c | 1 | // Persistent, lossless X11 desktop capture with MIT-SHM and XDamage metadata. | COMMENT |
| LOW | infra/sandboxes/computer/test_focus_or_launch.py | 201 | typedef struct _Visual Visual; | COMMENT |
| LOW | infra/sandboxes/computer/test_focus_or_launch.py | 361 | COMMENT | |
| LOW | infra/sandboxes/computer/test_focus_or_launch.py | 1181 | #define False 0 | COMMENT |
| LOW | infra/compose/pitr-agent.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/compose/docker-compose.prod.docker.yml | 1 | # Optional overlay: local Docker computers on the production HTTPS stack. | COMMENT |
| LOW | infra/compose/docker-compose.images.yml | 1 | # Pull-based self-host: published GHCR images + Postgres + local Docker computers. | COMMENT |
| LOW | infra/compose/pitr.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/compose/upgrade-postgres.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/compose/restrict-computer-egress.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/compose/restrict-computer-egress.sh | 21 | # computer's bridge. Docker loads br_netfilter with bridge-nf-call-iptables, so | COMMENT |
| LOW | infra/compose/docker-compose.postgres-host.yml | 1 | # Optional overlay: publish Postgres on loopback for host-side clients | COMMENT |
| LOW | infra/compose/deploy-main.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | packages/adapters/src/computer-lifecycle.ts | 261 | // | COMMENT |
| LOW | .github/scripts/changed-areas.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | apps/desktop/native/speech/main.swift | 1 | // System speech recognition for desktop dictation on macOS: Electron's Web Speech has no | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | infra/sandboxes/computer/test_team_desktops.py | 92 | except OSError: | CODE |
| HIGH | infra/sandboxes/computer/test_team_desktops.py | 157 | except (ConnectionResetError, BrokenPipeError): | CODE |
| HIGH | infra/compose/audit-ship.py | 283 | except ValueError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | infra/sandboxes/computer/test_page_browser.py | 40 | CODE | |
| LOW | infra/sandboxes/computer/test_page_browser.py | 1011 | CODE | |
| LOW | infra/sandboxes/computer/test_page_browser.py | 1265 | CODE | |
| LOW | infra/sandboxes/computer/test_page_browser.py | 2099 | CODE | |
| LOW | infra/sandboxes/computer/control.py | 303 | CODE | |
| LOW | infra/sandboxes/computer/control.py | 354 | CODE | |
| LOW | infra/compose/check-services.py | 20 | CODE | |
| LOW | infra/compose/audit-ship.py | 166 | CODE | |
| LOW | scripts/extract-playwright-artifacts.py | 10 | CODE | |
| LOW | .github/scripts/dependency-update-patch.test.py | 17 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | infra/sandboxes/computer/control.py | 389 | except Exception as error: | CODE |
| LOW | infra/sandboxes/computer/test_focus_or_launch.py | 1105 | except Exception: | CODE |
| LOW | infra/compose/audit-ship.py | 371 | except Exception as error: | CODE |
| LOW | infra/compose/host-alert.py | 78 | except Exception as error: | CODE |
| MEDIUM | infra/compose/host-alert.py | 32 | def _deliver(key, message, config_path, state_file): | CODE |
| LOW | packages/adapters/src/createos-sandbox.ts | 159 | except Exception: | CODE |
| LOW | packages/adapters/src/createos-sandbox.ts | 1343 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | packages/core/src/agent-import/agent-import.test.ts | 184 | "Let me know if you need anything else.", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | infra/railway/start.sh | 10 | # Set DATABASE_MIGRATION_URL to the owner and DATABASE_URL to a runtime login to | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | infra/sandboxes/computer/test_page_browser.py | 28 | CODE |