An AI-powered task-management system you can drop into Cursor, Lovable, Windsurf, Roo, and others.
This report summarizes scanner evidence for eyaltoledano/claude-task-master, a JavaScript project with 28,280 GitHub stars. SynthScan examined 282,873 lines of code across 1118 source files, recording 291 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 2.0 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 264 finding(s).
Are imports declared and package/API names verified? 14 finding(s).
Are wrappers, guards, and repeated structures necessary? 154 finding(s).
Which changes need focused human review? 291 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 291 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | context/mcp-js-sdk-docs.txt | 4315 | export function clientRegistrationHandler({ | CODE |
| LOW | context/mcp-js-sdk-docs.txt | 10212 | function promptArgumentsFromSchema( | CODE |
| LOW | mcp-server/src/custom-sdk/schema-converter.js | 11 | export function convertSchemaToInstructions(schema, objectName = 'result') { | CODE |
| LOW | mcp-server/src/custom-sdk/schema-converter.js | 56 | function generateExampleFromSchema(schema) { | CODE |
| LOW | mcp-server/src/tools/update-subtask.js | 22 | export function registerUpdateSubtaskTool(server) { | CODE |
| LOW | mcp-server/src/tools/clear-subtasks.js | 16 | export function registerClearSubtasksTool(server) { | CODE |
| LOW | mcp-server/src/tools/remove-dependency.js | 16 | export function registerRemoveDependencyTool(server) { | CODE |
| LOW | mcp-server/src/tools/add-dependency.js | 16 | export function registerAddDependencyTool(server) { | CODE |
| LOW | mcp-server/src/tools/set-task-status.js | 27 | export function registerSetTaskStatusTool(server) { | CODE |
| LOW | mcp-server/src/tools/initialize-project.js | 10 | export function registerInitializeProjectTool(server) { | CODE |
| LOW | mcp-server/src/tools/response-language.js | 9 | export function registerResponseLanguageTool(server) { | CODE |
| LOW | mcp-server/src/tools/complexity-report.js | 21 | export function registerComplexityReportTool(server) { | CODE |
| LOW | mcp-server/src/tools/get-operation-status.js | 10 | export function registerGetOperationStatusTool(server, asyncManager) { | CODE |
| LOW | mcp-server/src/tools/validate-dependencies.js | 16 | export function registerValidateDependenciesTool(server) { | CODE |
| LOW | mcp-server/src/tools/analyze.js | 24 | export function registerAnalyzeProjectComplexityTool(server) { | CODE |
| LOW | mcp-server/src/tools/utils.js | 175 | function getProjectRootFromSession(session, log) { | CODE |
| LOW | mcp-server/src/tools/utils.js | 662 | function getRawProjectRootFromSession(session, log) { | CODE |
| LOW | mcp-server/src/tools/utils.js | 686 | function withNormalizedProjectRoot(executeFn) { | CODE |
| LOW | mcp-server/src/tools/remove-subtask.js | 20 | export function registerRemoveSubtaskTool(server) { | CODE |
| LOW | mcp-server/src/tools/fix-dependencies.js | 16 | export function registerFixDependenciesTool(server) { | CODE |
| LOW | …er/src/core/direct-functions/create-tag-from-branch.js | 32 | export async function createTagFromBranchDirect(args, log, context = {}) { | CODE |
| LOW | …ver/src/core/direct-functions/validate-dependencies.js | 21 | export async function validateDependenciesDirect(args, log) { | CODE |
| LOW | …r/src/core/direct-functions/analyze-task-complexity.js | 31 | export async function analyzeTaskComplexityDirect(args, log, context = {}) { | CODE |
| LOW | mcp-server/src/core/utils/path-utils.js | 139 | export function resolveComplexityReportPath(args, log = silentLogger) { | CODE |
| LOW | mcp-server/src/core/utils/path-utils.js | 235 | export function resolveComplexityReportOutputPath( | CODE |
| LOW | tests/unit/init.test.js | 133 | function mockCreateProjectStructure(projectName) { | CODE |
| LOW | tests/unit/init.test.js | 199 | function mockSetupMCPConfiguration(targetDir, projectName) { | CODE |
| LOW | tests/unit/profiles/claude-integration.test.js | 52 | function mockCreateClaudeStructure() { | CODE |
| LOW | tests/unit/profiles/vscode-integration.test.js | 76 | function mockCreateVSCodeStructure() { | CODE |
| LOW | tests/unit/profiles/gemini-integration.test.js | 51 | function mockCreateGeminiStructure() { | CODE |
| LOW | tests/unit/profiles/windsurf-integration.test.js | 51 | function mockCreateWindsurfStructure() { | CODE |
| LOW | tests/unit/profiles/opencode-integration.test.js | 40 | function mockCreateOpenCodeStructure() { | CODE |
| LOW | tests/unit/profiles/cursor-integration.test.js | 86 | function mockCreateCursorStructure() { | CODE |
| LOW | tests/manual/prompts/prompt-test.js | 1826 | async function generateAndSaveHTMLReport() { | CODE |
| LOW | scripts/test-claude-errors.js | 38 | function createErrorSimulationScript(errorType, failureCount = 2) { | CODE |
| LOW | scripts/modules/ui.js | 76 | async function displayCurrentTagIndicator(tag, options = {}) { | CODE |
| LOW | scripts/modules/ui.js | 405 | function formatDependenciesWithStatus( | CODE |
| LOW | scripts/modules/ui.js | 2036 | function generateComplexityAnalysisPrompt(tasksData) { | CODE |
| LOW | scripts/modules/ui.js | 2192 | function displayModelConfiguration(configData, allAvailableModels = []) { | CODE |
| LOW | scripts/modules/ui.js | 2376 | async function displayMultipleTasksSummary( | CODE |
| LOW | scripts/modules/ui.js | 2877 | export function displayCrossTagDependencyError( | CODE |
| LOW | scripts/modules/ui.js | 2984 | export function displayInvalidTagCombinationError( | CODE |
| LOW | scripts/modules/ui.js | 3007 | export function displayDependencyValidationHints(context = 'general') { | CODE |
| LOW | scripts/modules/dependency-manager.js | 534 | function removeDuplicateDependencies(tasksData) { | CODE |
| LOW | scripts/modules/dependency-manager.js | 559 | function cleanupSubtaskDependencies(tasksData) { | CODE |
| LOW | scripts/modules/dependency-manager.js | 599 | async function validateDependenciesCommand(tasksPath, options = {}) { | CODE |
| LOW | scripts/modules/dependency-manager.js | 1113 | function ensureAtLeastOneIndependentSubtask(tasksData) { | CODE |
| LOW | scripts/modules/dependency-manager.js | 1163 | function validateAndFixDependencies( | CODE |
| LOW | scripts/modules/dependency-manager.js | 1163 | function validateAndFixDependencies( | CODE |
| LOW | scripts/modules/dependency-manager.js | 1279 | function findAllDependenciesRecursively(sourceTasks, allTasks, options = {}) { | CODE |
| LOW | scripts/modules/dependency-manager.js | 1376 | function findTaskCrossTagConflicts(task, targetTag, allTasks) { | CODE |
| LOW | scripts/modules/config-manager.js | 81 | export function setSuppressConfigWarnings(suppress) { | CODE |
| LOW | scripts/modules/config-manager.js | 89 | export function isConfigWarningSuppressed() { | CODE |
| LOW | scripts/modules/config-manager.js | 327 | function validateProviderModelCombination(providerName, modelId) { | CODE |
| LOW | scripts/modules/config-manager.js | 345 | export function getSupportedModelsForProvider(providerName) { | CODE |
| LOW | scripts/modules/config-manager.js | 359 | function validateClaudeCodeSettings(settings) { | CODE |
| LOW | scripts/modules/config-manager.js | 487 | function getCodexCliSettingsForCommand( | CODE |
| LOW | scripts/modules/config-manager.js | 497 | function getClaudeCodeSettingsForCommand( | CODE |
| LOW | scripts/modules/config-manager.js | 513 | function getGrokCliSettingsForCommand( | CODE |
| LOW | scripts/modules/config-manager.js | 567 | function isCodebaseAnalysisEnabled(session = null, projectRoot = null) { | CODE |
| 81 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | llms-install.md | 11 | ### Step 1: Add MCP Configuration | COMMENT |
| LOW | llms-install.md | 35 | ### Step 2: API Key Requirements | COMMENT |
| LOW | llms-install.md | 49 | ### Step 3: Initialize Project | COMMENT |
| LOW | llms-install.md | 57 | ### Step 4: Create Initial Tasks | COMMENT |
| LOW | .cursor/commands/goham.md | 5 | ## Step 1: Verify Connection & Authentication | COMMENT |
| LOW | .cursor/commands/goham.md | 17 | ## Step 2: List Available Tasks | COMMENT |
| LOW | .cursor/commands/goham.md | 26 | ## Step 3: Initialize Git Branch for Brief | COMMENT |
| LOW | .cursor/commands/goham.md | 42 | ## Step 4: Task Loop (Repeat for Each Task) | COMMENT |
| LOW | .cursor/commands/goham.md | 201 | ## Step 5: Complete All Tasks | COMMENT |
| LOW | .cursor/commands/goham.md | 205 | ## Step 6: Final Verification & PR Creation | COMMENT |
| LOW | .cursor/commands/goham.md | 270 | ## Step 7: Cleanup | COMMENT |
| LOW⚡ | docs/examples/codex-cli-usage.md | 148 | # Step 1: Initialize project | COMMENT |
| LOW⚡ | docs/examples/codex-cli-usage.md | 151 | # Step 2: Set up Codex CLI | COMMENT |
| LOW⚡ | docs/examples/codex-cli-usage.md | 155 | # Step 3: Create PRD | COMMENT |
| LOW⚡ | docs/examples/codex-cli-usage.md | 167 | # Step 4: Parse PRD into tasks | COMMENT |
| LOW⚡ | docs/examples/codex-cli-usage.md | 170 | # Step 5: Analyze complexity | COMMENT |
| LOW⚡ | docs/examples/codex-cli-usage.md | 173 | # Step 6: Expand complex tasks | COMMENT |
| LOW⚡ | docs/examples/codex-cli-usage.md | 176 | # Step 7: Start working | COMMENT |
| LOW⚡ | docs/examples/codex-cli-usage.md | 180 | # Step 8: Mark completed as you work | COMMENT |
| LOW⚡ | docs/examples/codex-cli-usage.md | 183 | # Step 9: Continue to next task | COMMENT |
| LOW | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 23 | ## Step 1: Verify Connection & Authentication | COMMENT |
| LOW⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 35 | ## Step 2: List Available Tasks | COMMENT |
| LOW⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 44 | ## Step 3: Initialize Git Branch for Brief | COMMENT |
| LOW⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 60 | ## Step 4: Task Loop (Repeat for Each Task) | COMMENT |
| LOW⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 219 | ## Step 5: Complete All Tasks | COMMENT |
| LOW⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 223 | ## Step 6: Final Verification & PR Creation | COMMENT |
| LOW | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 288 | ## Step 7: Cleanup | COMMENT |
| LOW⚡ | …/integration/auth/auth-token-refresh-singleton.test.ts | 239 | // Step 1: AuthManager creates its singleton | COMMENT |
| LOW⚡ | …/integration/auth/auth-token-refresh-singleton.test.ts | 243 | // Step 2: StorageFactory creates API storage | COMMENT |
| LOW⚡ | …/integration/auth/auth-token-refresh-singleton.test.ts | 247 | // Step 3: Get the singleton client directly | COMMENT |
| LOW | …core/src/modules/tasks/services/task-loader.service.ts | 75 | // Step 1: Load task | COMMENT |
| LOW⚡ | …core/src/modules/tasks/services/task-loader.service.ts | 87 | // Step 2: Validate task status | COMMENT |
| LOW⚡ | …core/src/modules/tasks/services/task-loader.service.ts | 93 | // Step 3: Check for subtasks | COMMENT |
| LOW⚡ | …core/src/modules/tasks/services/task-loader.service.ts | 99 | // Step 4: Validate subtask structure | COMMENT |
| LOW⚡ | …core/src/modules/tasks/services/task-loader.service.ts | 105 | // Step 5: Analyze dependencies | COMMENT |
| LOW⚡ | …ges/tm-core/src/modules/auth/services/oauth-service.ts | 154 | // Step 1: Generate keypair for E2E encryption | COMMENT |
| LOW⚡ | …ges/tm-core/src/modules/auth/services/oauth-service.ts | 158 | // Step 2: Start the flow on the backend with our public key | COMMENT |
| LOW | …ges/tm-core/src/modules/auth/services/oauth-service.ts | 178 | // Step 3: Open browser with verification URL | COMMENT |
| LOW | …ges/tm-core/src/modules/auth/services/oauth-service.ts | 196 | // Step 4: Poll for completion | COMMENT |
| LOW | apps/extension/docs/extension-development-guide.md | 77 | ### Step 1: Build Clean Package | COMMENT |
| LOW | apps/extension/docs/extension-development-guide.md | 83 | ### Step 2: Create VSIX | COMMENT |
| LOW⚡ | .taskmaster/docs/tdd-workflow-phase-1-orchestrator.md | 250 | ### Step 1: WorkflowOrchestrator Skeleton | COMMENT |
| LOW⚡ | .taskmaster/docs/tdd-workflow-phase-1-orchestrator.md | 256 | ### Step 2: Work Unit Generation | COMMENT |
| LOW⚡ | .taskmaster/docs/tdd-workflow-phase-1-orchestrator.md | 262 | ### Step 3: Git/Test Adapters | COMMENT |
| LOW⚡ | .taskmaster/docs/tdd-workflow-phase-1-orchestrator.md | 268 | ### Step 4: MCP Integration | COMMENT |
| LOW⚡ | .taskmaster/docs/tdd-workflow-phase-1-orchestrator.md | 274 | ### Step 5: CLI Integration | COMMENT |
| LOW⚡ | .taskmaster/docs/tdd-workflow-phase-1-orchestrator.md | 280 | ### Step 6: Integration Testing | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CHANGELOG.md | 1864 | export GROK_CLI_API_KEY="your-api-key-here" | CODE |
| HIGH | context/mcp-protocol-repo.txt | 3089 | "GITHUB_PERSONAL_ACCESS_TOKEN": "<YOUR_TOKEN>" | CODE |
| HIGH⚡ | tests/unit/profiles/gemini-integration.test.js | 67 | YOUR_ANTHROPIC_API_KEY: 'your-api-key-here', | CODE |
| HIGH⚡ | tests/unit/profiles/gemini-integration.test.js | 68 | YOUR_PERPLEXITY_API_KEY: 'your-api-key-here', | CODE |
| HIGH⚡ | tests/unit/profiles/gemini-integration.test.js | 69 | YOUR_OPENAI_API_KEY: 'your-api-key-here', | CODE |
| HIGH⚡ | tests/unit/profiles/gemini-integration.test.js | 70 | YOUR_GOOGLE_API_KEY: 'your-api-key-here', | CODE |
| HIGH⚡ | tests/unit/profiles/gemini-integration.test.js | 71 | YOUR_MISTRAL_API_KEY: 'your-api-key-here', | CODE |
| HIGH⚡ | tests/unit/profiles/gemini-integration.test.js | 72 | YOUR_AZURE_OPENAI_API_KEY: 'your-api-key-here', | CODE |
| HIGH⚡ | tests/unit/profiles/gemini-integration.test.js | 74 | YOUR_OPENROUTER_API_KEY: 'your-api-key-here', | CODE |
| HIGH⚡ | tests/unit/profiles/gemini-integration.test.js | 75 | YOUR_XAI_API_KEY: 'your-api-key-here', | CODE |
| HIGH⚡ | tests/unit/profiles/gemini-integration.test.js | 76 | YOUR_OLLAMA_API_KEY: 'your-api-key-here', | CODE |
| HIGH | packages/ai-sdk-provider-grok-cli/README.md | 34 | export GROK_CLI_API_KEY="your-api-key" | CODE |
| HIGH | packages/ai-sdk-provider-grok-cli/README.md | 105 | apiKey: 'your-api-key', // Optional if set via env/CLI | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CHANGELOG.md | 1932 | Tasks and subtasks generated by Claude Code are now informed by actual codebase analysis, resulting in more accurate a | CODE |
| HIGH | CHANGELOG.md | 1985 | Tasks and subtasks generated by Claude Code are now informed by actual codebase analysis, resulting in more accurate a | CODE |
| HIGH | CHANGELOG.md | 2135 | - Tasks and subtasks generated by Claude Code are now informed by actual codebase analysis, resulting in more accurate | CODE |
| HIGH | CHANGELOG.md | 2233 | - Tasks and subtasks generated by Claude Code are now informed by actual codebase analysis, resulting in more accurate | CODE |
| HIGH | scripts/modules/task-manager/update-task-by-id.js | 509 | // Fix AI-generated subtask IDs that might be strings or use parent ID as prefix | COMMENT |
| HIGH | scripts/modules/task-manager/update-task-by-id.js | 512 | id: currentSubtaskId, // Override AI-generated ID with correct sequential ID | CODE |
| HIGH | scripts/modules/task-manager/list-tasks.js | 510 | // Increase priority column width as requested | COMMENT |
| HIGH | scripts/modules/task-manager/list-tasks.js | 513 | // Make dependencies column smaller as requested (-20%) | COMMENT |
| HIGH | …ntegration/ai-operations/metadata-preservation.test.ts | 206 | description: 'First step generated by AI', | CODE |
| HIGH | …ntegration/ai-operations/metadata-preservation.test.ts | 218 | description: 'Second step generated by AI', | CODE |
| HIGH | …ntegration/ai-operations/metadata-preservation.test.ts | 378 | // AI-generated fields | COMMENT |
| HIGH | .github/workflows/claude-docs-updater.yml | 110 | *This PR was automatically generated by Claude Code GitHub Action* | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ipts/modules/task-manager/update-subtask-by-id.test.js | 120 | // Import mocked utils to leverage mocks later | COMMENT |
| LOW | tests/e2e/run_e2e.sh | 37 | # For now, just pass it along in case --analyze-log needs it later | COMMENT |
| MEDIUM | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 237 | # Final comprehensive checks | COMMENT |
| MEDIUM | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 254 | # Create comprehensive PR description | COMMENT |
| MEDIUM | packages/tm-core/src/utils/time.utils.ts | 16 | // Use date-fns for robust formatting with proper edge case handling | COMMENT |
| MEDIUM | apps/cli/src/utils/auto-update/restart.ts | 21 | stdio: 'inherit', // Inherit stdin/stdout/stderr so it looks seamless | CODE |
| MEDIUM | src/prompts/analyze-complexity.json | 48 | "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase | CODE |
| MEDIUM⚡ | src/prompts/add-task.json | 64 | "system": "You are a helpful assistant that creates well-structured tasks for a software development project. Generat | CODE |
| MEDIUM⚡ | src/prompts/add-task.json | 65 | "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase | CODE |
| MEDIUM⚡ | src/prompts/add-task.json | 65 | "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase | CODE |
| MEDIUM | src/prompts/research.json | 49 | "system": "You are an expert AI research assistant helping with a software development project. You have access to pr | CODE |
| MEDIUM⚡ | src/prompts/parse-prd.json | 59 | "system": "You are an AI assistant specialized in analyzing Product Requirements Documents (PRDs) and generating a st | CODE |
| MEDIUM⚡ | src/prompts/parse-prd.json | 60 | "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase | CODE |
| MEDIUM | src/prompts/update-task.json | 62 | "system": "You are an AI assistant helping to update a software development task based on new context.{{#if useResear | CODE |
| MEDIUM | src/prompts/update-task.json | 63 | "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase | CODE |
| MEDIUM | src/prompts/update-subtask.json | 63 | "system": "You are an AI assistant helping to update a subtask. You will be provided with the subtask's existing deta | CODE |
| MEDIUM | src/prompts/update-subtask.json | 64 | "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 23 | ## Step 1: Verify Connection & Authentication | COMMENT |
| LOW⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 35 | ## Step 2: List Available Tasks | COMMENT |
| LOW⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 44 | ## Step 3: Initialize Git Branch for Brief | COMMENT |
| LOW⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 60 | ## Step 4: Task Loop (Repeat for Each Task) | COMMENT |
| LOW⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 219 | ## Step 5: Complete All Tasks | COMMENT |
| LOW⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 223 | ## Step 6: Final Verification & PR Creation | COMMENT |
| LOW | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 288 | ## Step 7: Cleanup | COMMENT |
| LOW⚡ | …/integration/auth/auth-token-refresh-singleton.test.ts | 239 | // Step 1: AuthManager creates its singleton | COMMENT |
| LOW⚡ | …/integration/auth/auth-token-refresh-singleton.test.ts | 243 | // Step 2: StorageFactory creates API storage | COMMENT |
| LOW⚡ | …/integration/auth/auth-token-refresh-singleton.test.ts | 247 | // Step 3: Get the singleton client directly | COMMENT |
| LOW | …core/src/modules/tasks/services/task-loader.service.ts | 75 | // Step 1: Load task | COMMENT |
| LOW⚡ | …core/src/modules/tasks/services/task-loader.service.ts | 87 | // Step 2: Validate task status | COMMENT |
| LOW⚡ | …core/src/modules/tasks/services/task-loader.service.ts | 93 | // Step 3: Check for subtasks | COMMENT |
| LOW⚡ | …core/src/modules/tasks/services/task-loader.service.ts | 99 | // Step 4: Validate subtask structure | COMMENT |
| LOW⚡ | …core/src/modules/tasks/services/task-loader.service.ts | 105 | // Step 5: Analyze dependencies | COMMENT |
| LOW⚡ | …ges/tm-core/src/modules/auth/services/oauth-service.ts | 154 | // Step 1: Generate keypair for E2E encryption | COMMENT |
| LOW⚡ | …ges/tm-core/src/modules/auth/services/oauth-service.ts | 158 | // Step 2: Start the flow on the backend with our public key | COMMENT |
| LOW | …ges/tm-core/src/modules/auth/services/oauth-service.ts | 178 | // Step 3: Open browser with verification URL | COMMENT |
| LOW | …ges/tm-core/src/modules/auth/services/oauth-service.ts | 196 | // Step 4: Poll for completion | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/e2e/run_e2e.sh | 188 | # Create the log directory if it doesn't exist | COMMENT |
| MEDIUM | tests/e2e/run_fallback_verification.sh | 35 | # Define a placeholder if not found, so the script doesn't break immediately, | COMMENT |
| MEDIUM | scripts/create-worktree.sh | 3 | # Create a git worktree for parallel Claude Code development | COMMENT |
| MEDIUM | scripts/create-worktree.sh | 48 | # Create a local branch from the remote and attach worktree | COMMENT |
| MEDIUM | packages/tm-bridge/src/add-tag-bridge.ts | 75 | header: '# Create a Brief in Hamster Studio', | CODE |
| MEDIUM⚡ | …/tm-profiles/src/slash-commands/commands/team/goham.ts | 51 | # Create a single branch for the entire brief (e.g., hamster-brief-YYYY-MM-DD or brief-specific name) | COMMENT |
| MEDIUM | …src/slash-commands/commands/solo/install-taskmaster.ts | 80 | # Create a test PRD | COMMENT |
| MEDIUM | .github/workflows/forward-port.yml | 135 | # Create the PR | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/e2e/run_e2e.sh | 66 | # ========================================== | COMMENT |
| MEDIUM | tests/e2e/run_e2e.sh | 105 | # ========================================== | COMMENT |
| MEDIUM | tests/e2e/run_e2e.sh | 211 | # ========================================== | COMMENT |
| MEDIUM | tests/e2e/run_e2e.sh | 249 | # ========================================== | COMMENT |
| MEDIUM | tests/e2e/run_e2e.sh | 326 | # ======================================== | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/e2e/run_e2e.sh | 114 | # Check if a log file path was provided as the second argument | COMMENT |
| LOW | tests/e2e/run_e2e.sh | 293 | # Check if source .env file exists | COMMENT |
| LOW | tests/e2e/run_e2e.sh | 300 | # Check if sample PRD exists | COMMENT |
| LOW | tests/e2e/run_fallback_verification.sh | 90 | if [[ -n "${total_fallback_cost+x}" && "$total_fallback_cost" != "0.0" ]]; then # Check if var is set and not initia | CODE |
| LOW | scripts/create-worktree.sh | 37 | # Check if worktree already exists | COMMENT |
| LOW | …src/slash-commands/commands/solo/install-taskmaster.ts | 24 | # Check if task-master command exists | COMMENT |
| LOW | .github/workflows/release.yml | 114 | # Check if we're in pre-release mode with the "rc" tag | COMMENT |
| LOW | .github/workflows/log-issue-events.yml | 112 | # Check if issue was closed automatically (by checking if closed_by is a bot) | COMMENT |
| LOW | .github/workflows/log-issue-events.yml | 118 | # Check if closed as duplicate by state_reason | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | context/mcp-protocol-repo.txt | 2100 | except Exception as error: | CODE |
| LOW | context/mcp-protocol-repo.txt | 2399 | except Exception as exc: | CODE |
| LOW⚡ | context/mcp-protocol-repo.txt | 2465 | except Exception as exc: | CODE |
| LOW⚡ | context/mcp-protocol-repo.txt | 2474 | except Exception as exc: | CODE |
| LOW⚡ | context/mcp-protocol-repo.txt | 2481 | except Exception as exc: | CODE |
| LOW | context/mcp-protocol-repo.txt | 3475 | except Exception as e: | CODE |
| LOW | context/mcp-protocol-repo.txt | 4401 | except Exception: | CODE |
| MEDIUM | context/mcp-protocol-repo.txt | 2460 | def message_handler(): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | context/fastmcp-docs.txt | 3321 | // path: "/path/to/image.png", | COMMENT |
| LOW | tests/e2e/run_fallback_verification.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docs/configuration.md | 201 | ANTHROPIC_API_KEY=sk-ant-api03-your-key-here | COMMENT |
| LOW | scripts/modules/ai-services-unified.js | 641 | messages.push({ | COMMENT |
| LOW | packages/tm-core/POC-STATUS.md | 101 | ### Current CLI Structure | COMMENT |
| LOW | …/integration/auth/auth-token-refresh-singleton.test.ts | 101 | const config = createApiStorageConfig(); | COMMENT |
| LOW | …s/tm-core/src/common/utils/project-root-finder.test.ts | 241 | // IMPORTANT: For .env loading (e.g., TM_BASE_DOMAIN for auth), | COMMENT |
| LOW | src/ai-providers/anthropic.js | 61 | // TODO: Implement streamAnthropicObject if needed and supported well by the SDK for Anthropic. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | context/mcp-protocol-repo.txt | 112 | [BeeAI Framework](https://i-am-bee.github.io/beeai-framework) is an open-source framework for building, deploying, and s | CODE |
| MEDIUM | context/mcp-protocol-repo.txt | 277 | [Windsurf Editor](https://codeium.com/windsurf) is an agentic IDE that combines AI assistance with developer workflows. | CODE |
| MEDIUM⚡ | src/prompts/parse-prd.json | 59 | "system": "You are an AI assistant specialized in analyzing Product Requirements Documents (PRDs) and generating a st | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/tests/integration/workflow/autopilot-workflow.test.ts | 93 | execSync('git config user.email "test@test.com"', { | CODE |