AI Slop Code Risk Monitor

eyaltoledano/claude-task-master

SlopCodeMonitor badge for eyaltoledano/claude-task-master Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

An AI-powered task-management system you can drop into Cursor, Lovable, Windsurf, Roo, and others.

2.0 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for eyaltoledano/claude-task-master, a JavaScript project with 28,280 GitHub stars. SynthScan examined 282,873 lines of code across 1118 source files, recording 291 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 2.0 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

2.0
Adjusted Signal
2.0
Raw Pattern Score
100%
Time Factor
2026-04-28
Last Push
28.3K
Stars
JavaScript
Language
282.9K
Lines of Code
1.1K
Files
291
Pattern Hits
2026-10-31
Scan Date
0.02
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 264 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.6/100 · LOW

Are imports declared and package/API names verified? 14 finding(s).

Agent Over-Engineering Ratio 2.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 154 finding(s).

PR Review Velocity Impact 8.2/100 · LOW

Which changes need focused human review? 291 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 25MEDIUM 33LOW 233

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 291 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers141 hits · 142 pts
SeverityFileLineSnippetContext
LOWcontext/mcp-js-sdk-docs.txt4315export function clientRegistrationHandler({CODE
LOWcontext/mcp-js-sdk-docs.txt10212function promptArgumentsFromSchema(CODE
LOWmcp-server/src/custom-sdk/schema-converter.js11export function convertSchemaToInstructions(schema, objectName = 'result') {CODE
LOWmcp-server/src/custom-sdk/schema-converter.js56function generateExampleFromSchema(schema) {CODE
LOWmcp-server/src/tools/update-subtask.js22export function registerUpdateSubtaskTool(server) {CODE
LOWmcp-server/src/tools/clear-subtasks.js16export function registerClearSubtasksTool(server) {CODE
LOWmcp-server/src/tools/remove-dependency.js16export function registerRemoveDependencyTool(server) {CODE
LOWmcp-server/src/tools/add-dependency.js16export function registerAddDependencyTool(server) {CODE
LOWmcp-server/src/tools/set-task-status.js27export function registerSetTaskStatusTool(server) {CODE
LOWmcp-server/src/tools/initialize-project.js10export function registerInitializeProjectTool(server) {CODE
LOWmcp-server/src/tools/response-language.js9export function registerResponseLanguageTool(server) {CODE
LOWmcp-server/src/tools/complexity-report.js21export function registerComplexityReportTool(server) {CODE
LOWmcp-server/src/tools/get-operation-status.js10export function registerGetOperationStatusTool(server, asyncManager) {CODE
LOWmcp-server/src/tools/validate-dependencies.js16export function registerValidateDependenciesTool(server) {CODE
LOWmcp-server/src/tools/analyze.js24export function registerAnalyzeProjectComplexityTool(server) {CODE
LOWmcp-server/src/tools/utils.js175function getProjectRootFromSession(session, log) {CODE
LOWmcp-server/src/tools/utils.js662function getRawProjectRootFromSession(session, log) {CODE
LOWmcp-server/src/tools/utils.js686function withNormalizedProjectRoot(executeFn) {CODE
LOWmcp-server/src/tools/remove-subtask.js20export function registerRemoveSubtaskTool(server) {CODE
LOWmcp-server/src/tools/fix-dependencies.js16export function registerFixDependenciesTool(server) {CODE
LOW…er/src/core/direct-functions/create-tag-from-branch.js32export async function createTagFromBranchDirect(args, log, context = {}) {CODE
LOW…ver/src/core/direct-functions/validate-dependencies.js21export async function validateDependenciesDirect(args, log) {CODE
LOW…r/src/core/direct-functions/analyze-task-complexity.js31export async function analyzeTaskComplexityDirect(args, log, context = {}) {CODE
LOWmcp-server/src/core/utils/path-utils.js139export function resolveComplexityReportPath(args, log = silentLogger) {CODE
LOWmcp-server/src/core/utils/path-utils.js235export function resolveComplexityReportOutputPath(CODE
LOWtests/unit/init.test.js133 function mockCreateProjectStructure(projectName) {CODE
LOWtests/unit/init.test.js199 function mockSetupMCPConfiguration(targetDir, projectName) {CODE
LOWtests/unit/profiles/claude-integration.test.js52 function mockCreateClaudeStructure() {CODE
LOWtests/unit/profiles/vscode-integration.test.js76 function mockCreateVSCodeStructure() {CODE
LOWtests/unit/profiles/gemini-integration.test.js51 function mockCreateGeminiStructure() {CODE
LOWtests/unit/profiles/windsurf-integration.test.js51 function mockCreateWindsurfStructure() {CODE
LOWtests/unit/profiles/opencode-integration.test.js40 function mockCreateOpenCodeStructure() {CODE
LOWtests/unit/profiles/cursor-integration.test.js86 function mockCreateCursorStructure() {CODE
LOWtests/manual/prompts/prompt-test.js1826async function generateAndSaveHTMLReport() {CODE
LOWscripts/test-claude-errors.js38function createErrorSimulationScript(errorType, failureCount = 2) {CODE
LOWscripts/modules/ui.js76async function displayCurrentTagIndicator(tag, options = {}) {CODE
LOWscripts/modules/ui.js405function formatDependenciesWithStatus(CODE
LOWscripts/modules/ui.js2036function generateComplexityAnalysisPrompt(tasksData) {CODE
LOWscripts/modules/ui.js2192function displayModelConfiguration(configData, allAvailableModels = []) {CODE
LOWscripts/modules/ui.js2376async function displayMultipleTasksSummary(CODE
LOWscripts/modules/ui.js2877export function displayCrossTagDependencyError(CODE
LOWscripts/modules/ui.js2984export function displayInvalidTagCombinationError(CODE
LOWscripts/modules/ui.js3007export function displayDependencyValidationHints(context = 'general') {CODE
LOWscripts/modules/dependency-manager.js534function removeDuplicateDependencies(tasksData) {CODE
LOWscripts/modules/dependency-manager.js559function cleanupSubtaskDependencies(tasksData) {CODE
LOWscripts/modules/dependency-manager.js599async function validateDependenciesCommand(tasksPath, options = {}) {CODE
LOWscripts/modules/dependency-manager.js1113function ensureAtLeastOneIndependentSubtask(tasksData) {CODE
LOWscripts/modules/dependency-manager.js1163function validateAndFixDependencies(CODE
LOWscripts/modules/dependency-manager.js1163function validateAndFixDependencies(CODE
LOWscripts/modules/dependency-manager.js1279function findAllDependenciesRecursively(sourceTasks, allTasks, options = {}) {CODE
LOWscripts/modules/dependency-manager.js1376function findTaskCrossTagConflicts(task, targetTag, allTasks) {CODE
LOWscripts/modules/config-manager.js81export function setSuppressConfigWarnings(suppress) {CODE
LOWscripts/modules/config-manager.js89export function isConfigWarningSuppressed() {CODE
LOWscripts/modules/config-manager.js327function validateProviderModelCombination(providerName, modelId) {CODE
LOWscripts/modules/config-manager.js345export function getSupportedModelsForProvider(providerName) {CODE
LOWscripts/modules/config-manager.js359function validateClaudeCodeSettings(settings) {CODE
LOWscripts/modules/config-manager.js487function getCodexCliSettingsForCommand(CODE
LOWscripts/modules/config-manager.js497function getClaudeCodeSettingsForCommand(CODE
LOWscripts/modules/config-manager.js513function getGrokCliSettingsForCommand(CODE
LOWscripts/modules/config-manager.js567function isCodebaseAnalysisEnabled(session = null, projectRoot = null) {CODE
81 more matches not shown…
Structural Annotation Overuse47 hits · 92 pts
SeverityFileLineSnippetContext
LOWllms-install.md11### Step 1: Add MCP ConfigurationCOMMENT
LOWllms-install.md35### Step 2: API Key RequirementsCOMMENT
LOWllms-install.md49### Step 3: Initialize ProjectCOMMENT
LOWllms-install.md57### Step 4: Create Initial TasksCOMMENT
LOW.cursor/commands/goham.md5## Step 1: Verify Connection & AuthenticationCOMMENT
LOW.cursor/commands/goham.md17## Step 2: List Available TasksCOMMENT
LOW.cursor/commands/goham.md26## Step 3: Initialize Git Branch for BriefCOMMENT
LOW.cursor/commands/goham.md42## Step 4: Task Loop (Repeat for Each Task)COMMENT
LOW.cursor/commands/goham.md201## Step 5: Complete All TasksCOMMENT
LOW.cursor/commands/goham.md205## Step 6: Final Verification & PR CreationCOMMENT
LOW.cursor/commands/goham.md270## Step 7: CleanupCOMMENT
LOW⚡docs/examples/codex-cli-usage.md148# Step 1: Initialize projectCOMMENT
LOW⚡docs/examples/codex-cli-usage.md151# Step 2: Set up Codex CLICOMMENT
LOW⚡docs/examples/codex-cli-usage.md155# Step 3: Create PRDCOMMENT
LOW⚡docs/examples/codex-cli-usage.md167# Step 4: Parse PRD into tasksCOMMENT
LOW⚡docs/examples/codex-cli-usage.md170# Step 5: Analyze complexityCOMMENT
LOW⚡docs/examples/codex-cli-usage.md173# Step 6: Expand complex tasksCOMMENT
LOW⚡docs/examples/codex-cli-usage.md176# Step 7: Start workingCOMMENT
LOW⚡docs/examples/codex-cli-usage.md180# Step 8: Mark completed as you workCOMMENT
LOW⚡docs/examples/codex-cli-usage.md183# Step 9: Continue to next taskCOMMENT
LOW…/tm-profiles/src/slash-commands/commands/team/goham.ts23## Step 1: Verify Connection & AuthenticationCOMMENT
LOW⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts35## Step 2: List Available TasksCOMMENT
LOW⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts44## Step 3: Initialize Git Branch for BriefCOMMENT
LOW⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts60## Step 4: Task Loop (Repeat for Each Task)COMMENT
LOW⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts219## Step 5: Complete All TasksCOMMENT
LOW⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts223## Step 6: Final Verification & PR CreationCOMMENT
LOW…/tm-profiles/src/slash-commands/commands/team/goham.ts288## Step 7: CleanupCOMMENT
LOW⚡…/integration/auth/auth-token-refresh-singleton.test.ts239 // Step 1: AuthManager creates its singletonCOMMENT
LOW⚡…/integration/auth/auth-token-refresh-singleton.test.ts243 // Step 2: StorageFactory creates API storageCOMMENT
LOW⚡…/integration/auth/auth-token-refresh-singleton.test.ts247 // Step 3: Get the singleton client directlyCOMMENT
LOW…core/src/modules/tasks/services/task-loader.service.ts75 // Step 1: Load taskCOMMENT
LOW⚡…core/src/modules/tasks/services/task-loader.service.ts87 // Step 2: Validate task statusCOMMENT
LOW⚡…core/src/modules/tasks/services/task-loader.service.ts93 // Step 3: Check for subtasksCOMMENT
LOW⚡…core/src/modules/tasks/services/task-loader.service.ts99 // Step 4: Validate subtask structureCOMMENT
LOW⚡…core/src/modules/tasks/services/task-loader.service.ts105 // Step 5: Analyze dependenciesCOMMENT
LOW⚡…ges/tm-core/src/modules/auth/services/oauth-service.ts154 // Step 1: Generate keypair for E2E encryptionCOMMENT
LOW⚡…ges/tm-core/src/modules/auth/services/oauth-service.ts158 // Step 2: Start the flow on the backend with our public keyCOMMENT
LOW…ges/tm-core/src/modules/auth/services/oauth-service.ts178 // Step 3: Open browser with verification URLCOMMENT
LOW…ges/tm-core/src/modules/auth/services/oauth-service.ts196 // Step 4: Poll for completionCOMMENT
LOWapps/extension/docs/extension-development-guide.md77### Step 1: Build Clean PackageCOMMENT
LOWapps/extension/docs/extension-development-guide.md83### Step 2: Create VSIXCOMMENT
LOW⚡.taskmaster/docs/tdd-workflow-phase-1-orchestrator.md250### Step 1: WorkflowOrchestrator SkeletonCOMMENT
LOW⚡.taskmaster/docs/tdd-workflow-phase-1-orchestrator.md256### Step 2: Work Unit GenerationCOMMENT
LOW⚡.taskmaster/docs/tdd-workflow-phase-1-orchestrator.md262### Step 3: Git/Test AdaptersCOMMENT
LOW⚡.taskmaster/docs/tdd-workflow-phase-1-orchestrator.md268### Step 4: MCP IntegrationCOMMENT
LOW⚡.taskmaster/docs/tdd-workflow-phase-1-orchestrator.md274### Step 5: CLI IntegrationCOMMENT
LOW⚡.taskmaster/docs/tdd-workflow-phase-1-orchestrator.md280### Step 6: Integration TestingCOMMENT
Magic Placeholder Names13 hits · 88 pts
SeverityFileLineSnippetContext
HIGHCHANGELOG.md1864 export GROK_CLI_API_KEY="your-api-key-here"CODE
HIGHcontext/mcp-protocol-repo.txt3089 "GITHUB_PERSONAL_ACCESS_TOKEN": "<YOUR_TOKEN>"CODE
HIGH⚡tests/unit/profiles/gemini-integration.test.js67 YOUR_ANTHROPIC_API_KEY: 'your-api-key-here',CODE
HIGH⚡tests/unit/profiles/gemini-integration.test.js68 YOUR_PERPLEXITY_API_KEY: 'your-api-key-here',CODE
HIGH⚡tests/unit/profiles/gemini-integration.test.js69 YOUR_OPENAI_API_KEY: 'your-api-key-here',CODE
HIGH⚡tests/unit/profiles/gemini-integration.test.js70 YOUR_GOOGLE_API_KEY: 'your-api-key-here',CODE
HIGH⚡tests/unit/profiles/gemini-integration.test.js71 YOUR_MISTRAL_API_KEY: 'your-api-key-here',CODE
HIGH⚡tests/unit/profiles/gemini-integration.test.js72 YOUR_AZURE_OPENAI_API_KEY: 'your-api-key-here',CODE
HIGH⚡tests/unit/profiles/gemini-integration.test.js74 YOUR_OPENROUTER_API_KEY: 'your-api-key-here',CODE
HIGH⚡tests/unit/profiles/gemini-integration.test.js75 YOUR_XAI_API_KEY: 'your-api-key-here',CODE
HIGH⚡tests/unit/profiles/gemini-integration.test.js76 YOUR_OLLAMA_API_KEY: 'your-api-key-here',CODE
HIGHpackages/ai-sdk-provider-grok-cli/README.md34 export GROK_CLI_API_KEY="your-api-key"CODE
HIGHpackages/ai-sdk-provider-grok-cli/README.md105 apiKey: 'your-api-key', // Optional if set via env/CLICODE
Synthetic Comment Markers12 hits · 72 pts
SeverityFileLineSnippetContext
HIGHCHANGELOG.md1932 Tasks and subtasks generated by Claude Code are now informed by actual codebase analysis, resulting in more accurate aCODE
HIGHCHANGELOG.md1985 Tasks and subtasks generated by Claude Code are now informed by actual codebase analysis, resulting in more accurate aCODE
HIGHCHANGELOG.md2135 - Tasks and subtasks generated by Claude Code are now informed by actual codebase analysis, resulting in more accurateCODE
HIGHCHANGELOG.md2233 - Tasks and subtasks generated by Claude Code are now informed by actual codebase analysis, resulting in more accurateCODE
HIGHscripts/modules/task-manager/update-task-by-id.js509 // Fix AI-generated subtask IDs that might be strings or use parent ID as prefixCOMMENT
HIGHscripts/modules/task-manager/update-task-by-id.js512 id: currentSubtaskId, // Override AI-generated ID with correct sequential IDCODE
HIGHscripts/modules/task-manager/list-tasks.js510 // Increase priority column width as requestedCOMMENT
HIGHscripts/modules/task-manager/list-tasks.js513 // Make dependencies column smaller as requested (-20%)COMMENT
HIGH…ntegration/ai-operations/metadata-preservation.test.ts206 description: 'First step generated by AI',CODE
HIGH…ntegration/ai-operations/metadata-preservation.test.ts218 description: 'Second step generated by AI',CODE
HIGH…ntegration/ai-operations/metadata-preservation.test.ts378 // AI-generated fieldsCOMMENT
HIGH.github/workflows/claude-docs-updater.yml110 *This PR was automatically generated by Claude Code GitHub Action*COMMENT
AI Slop Vocabulary17 hits · 42 pts
SeverityFileLineSnippetContext
MEDIUM…ipts/modules/task-manager/update-subtask-by-id.test.js120// Import mocked utils to leverage mocks laterCOMMENT
LOWtests/e2e/run_e2e.sh37 # For now, just pass it along in case --analyze-log needs it laterCOMMENT
MEDIUM…/tm-profiles/src/slash-commands/commands/team/goham.ts237# Final comprehensive checksCOMMENT
MEDIUM…/tm-profiles/src/slash-commands/commands/team/goham.ts254# Create comprehensive PR descriptionCOMMENT
MEDIUMpackages/tm-core/src/utils/time.utils.ts16 // Use date-fns for robust formatting with proper edge case handlingCOMMENT
MEDIUMapps/cli/src/utils/auto-update/restart.ts21 stdio: 'inherit', // Inherit stdin/stdout/stderr so it looks seamlessCODE
MEDIUMsrc/prompts/analyze-complexity.json48 "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase CODE
MEDIUM⚡src/prompts/add-task.json64 "system": "You are a helpful assistant that creates well-structured tasks for a software development project. GeneratCODE
MEDIUM⚡src/prompts/add-task.json65 "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase CODE
MEDIUM⚡src/prompts/add-task.json65 "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase CODE
MEDIUMsrc/prompts/research.json49 "system": "You are an expert AI research assistant helping with a software development project. You have access to prCODE
MEDIUM⚡src/prompts/parse-prd.json59 "system": "You are an AI assistant specialized in analyzing Product Requirements Documents (PRDs) and generating a stCODE
MEDIUM⚡src/prompts/parse-prd.json60 "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase CODE
MEDIUMsrc/prompts/update-task.json62 "system": "You are an AI assistant helping to update a software development task based on new context.{{#if useResearCODE
MEDIUMsrc/prompts/update-task.json63 "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase CODE
MEDIUMsrc/prompts/update-subtask.json63 "system": "You are an AI assistant helping to update a subtask. You will be provided with the subtask's existing detaCODE
MEDIUMsrc/prompts/update-subtask.json64 "user": "{{#if hasCodebaseAnalysis}}## IMPORTANT: Codebase Analysis Required\n\nYou have access to powerful codebase CODE
Verbosity Indicators19 hits · 39 pts
SeverityFileLineSnippetContext
LOW…/tm-profiles/src/slash-commands/commands/team/goham.ts23## Step 1: Verify Connection & AuthenticationCOMMENT
LOW⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts35## Step 2: List Available TasksCOMMENT
LOW⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts44## Step 3: Initialize Git Branch for BriefCOMMENT
LOW⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts60## Step 4: Task Loop (Repeat for Each Task)COMMENT
LOW⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts219## Step 5: Complete All TasksCOMMENT
LOW⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts223## Step 6: Final Verification & PR CreationCOMMENT
LOW…/tm-profiles/src/slash-commands/commands/team/goham.ts288## Step 7: CleanupCOMMENT
LOW⚡…/integration/auth/auth-token-refresh-singleton.test.ts239 // Step 1: AuthManager creates its singletonCOMMENT
LOW⚡…/integration/auth/auth-token-refresh-singleton.test.ts243 // Step 2: StorageFactory creates API storageCOMMENT
LOW⚡…/integration/auth/auth-token-refresh-singleton.test.ts247 // Step 3: Get the singleton client directlyCOMMENT
LOW…core/src/modules/tasks/services/task-loader.service.ts75 // Step 1: Load taskCOMMENT
LOW⚡…core/src/modules/tasks/services/task-loader.service.ts87 // Step 2: Validate task statusCOMMENT
LOW⚡…core/src/modules/tasks/services/task-loader.service.ts93 // Step 3: Check for subtasksCOMMENT
LOW⚡…core/src/modules/tasks/services/task-loader.service.ts99 // Step 4: Validate subtask structureCOMMENT
LOW⚡…core/src/modules/tasks/services/task-loader.service.ts105 // Step 5: Analyze dependenciesCOMMENT
LOW⚡…ges/tm-core/src/modules/auth/services/oauth-service.ts154 // Step 1: Generate keypair for E2E encryptionCOMMENT
LOW⚡…ges/tm-core/src/modules/auth/services/oauth-service.ts158 // Step 2: Start the flow on the backend with our public keyCOMMENT
LOW…ges/tm-core/src/modules/auth/services/oauth-service.ts178 // Step 3: Open browser with verification URLCOMMENT
LOW…ges/tm-core/src/modules/auth/services/oauth-service.ts196 // Step 4: Poll for completionCOMMENT
Self-Referential Comments8 hits · 24 pts
SeverityFileLineSnippetContext
MEDIUMtests/e2e/run_e2e.sh188# Create the log directory if it doesn't existCOMMENT
MEDIUMtests/e2e/run_fallback_verification.sh35 # Define a placeholder if not found, so the script doesn't break immediately,COMMENT
MEDIUMscripts/create-worktree.sh3# Create a git worktree for parallel Claude Code developmentCOMMENT
MEDIUMscripts/create-worktree.sh48 # Create a local branch from the remote and attach worktreeCOMMENT
MEDIUMpackages/tm-bridge/src/add-tag-bridge.ts75 header: '# Create a Brief in Hamster Studio',CODE
MEDIUM⚡…/tm-profiles/src/slash-commands/commands/team/goham.ts51# Create a single branch for the entire brief (e.g., hamster-brief-YYYY-MM-DD or brief-specific name)COMMENT
MEDIUM…src/slash-commands/commands/solo/install-taskmaster.ts80 # Create a test PRDCOMMENT
MEDIUM.github/workflows/forward-port.yml135 # Create the PRCOMMENT
Decorative Section Separators5 hits · 15 pts
SeverityFileLineSnippetContext
MEDIUMtests/e2e/run_e2e.sh66# ==========================================COMMENT
MEDIUMtests/e2e/run_e2e.sh105# ==========================================COMMENT
MEDIUMtests/e2e/run_e2e.sh211# ==========================================COMMENT
MEDIUMtests/e2e/run_e2e.sh249# ==========================================COMMENT
MEDIUMtests/e2e/run_e2e.sh326 # ========================================COMMENT
Redundant / Tautological Comments9 hits · 13 pts
SeverityFileLineSnippetContext
LOWtests/e2e/run_e2e.sh114 # Check if a log file path was provided as the second argumentCOMMENT
LOWtests/e2e/run_e2e.sh293 # Check if source .env file existsCOMMENT
LOWtests/e2e/run_e2e.sh300 # Check if sample PRD existsCOMMENT
LOWtests/e2e/run_fallback_verification.sh90 if [[ -n "${total_fallback_cost+x}" && "$total_fallback_cost" != "0.0" ]]; then # Check if var is set and not initiaCODE
LOWscripts/create-worktree.sh37# Check if worktree already existsCOMMENT
LOW…src/slash-commands/commands/solo/install-taskmaster.ts24 # Check if task-master command existsCOMMENT
LOW.github/workflows/release.yml114 # Check if we're in pre-release mode with the "rc" tagCOMMENT
LOW.github/workflows/log-issue-events.yml112 # Check if issue was closed automatically (by checking if closed_by is a bot)COMMENT
LOW.github/workflows/log-issue-events.yml118 # Check if closed as duplicate by state_reasonCOMMENT
Excessive Try-Catch Wrapping8 hits · 10 pts
SeverityFileLineSnippetContext
LOWcontext/mcp-protocol-repo.txt2100 except Exception as error:CODE
LOWcontext/mcp-protocol-repo.txt2399 except Exception as exc:CODE
LOW⚡context/mcp-protocol-repo.txt2465 except Exception as exc:CODE
LOW⚡context/mcp-protocol-repo.txt2474 except Exception as exc:CODE
LOW⚡context/mcp-protocol-repo.txt2481 except Exception as exc:CODE
LOWcontext/mcp-protocol-repo.txt3475 except Exception as e:CODE
LOWcontext/mcp-protocol-repo.txt4401 except Exception:CODE
MEDIUMcontext/mcp-protocol-repo.txt2460def message_handler():CODE
Over-Commented Block8 hits · 8 pts
SeverityFileLineSnippetContext
LOWcontext/fastmcp-docs.txt3321 // path: "/path/to/image.png",COMMENT
LOWtests/e2e/run_fallback_verification.sh1#!/bin/bashCOMMENT
LOWdocs/configuration.md201ANTHROPIC_API_KEY=sk-ant-api03-your-key-hereCOMMENT
LOWscripts/modules/ai-services-unified.js641 messages.push({COMMENT
LOWpackages/tm-core/POC-STATUS.md101### Current CLI StructureCOMMENT
LOW…/integration/auth/auth-token-refresh-singleton.test.ts101 const config = createApiStorageConfig();COMMENT
LOW…s/tm-core/src/common/utils/project-root-finder.test.ts241 // IMPORTANT: For .env loading (e.g., TM_BASE_DOMAIN for auth),COMMENT
LOWsrc/ai-providers/anthropic.js61// TODO: Implement streamAnthropicObject if needed and supported well by the SDK for Anthropic.COMMENT
Modern AI Meta-Vocabulary3 hits · 7 pts
SeverityFileLineSnippetContext
MEDIUMcontext/mcp-protocol-repo.txt112[BeeAI Framework](https://i-am-bee.github.io/beeai-framework) is an open-source framework for building, deploying, and sCODE
MEDIUMcontext/mcp-protocol-repo.txt277[Windsurf Editor](https://codeium.com/windsurf) is an agentic IDE that combines AI assistance with developer workflows. CODE
MEDIUM⚡src/prompts/parse-prd.json59 "system": "You are an AI assistant specialized in analyzing Product Requirements Documents (PRDs) and generating a stCODE
Fake / Example Data1 hit · 1 pts
SeverityFileLineSnippetContext
LOW…/tests/integration/workflow/autopilot-workflow.test.ts93 execSync('git config user.email "test@test.com"', {CODE