A collection of agent recipes, reference patterns, and vertical plugins built with Agent Development Kit (ADK)
This report summarizes scanner evidence for google/adk-recipes, a Python project with 10,440 GitHub stars. SynthScan examined 580,493 lines of code across 2743 source files, recording 14880 pattern matches distributed across 25 syntactic categories. The legacy adjusted pattern signal is 34.9 (High pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 11094 finding(s).
Are imports declared and package/API names verified? 1050 finding(s).
Are wrappers, guards, and repeated structures necessary? 10788 finding(s).
Which changes need focused human review? 14880 finding(s).
Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 14880 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/validate_manifest.py | 894 | def missing_manifest_diagnostic(manifest_path: Path) -> Diagnostic: | CODE |
| LOW | tools/affected_recipes.py | 104 | def recipe_language_namespace(recipe_dir: str) -> str | None: | CODE |
| LOW | tools/affected_recipes.py | 119 | def _flat_recipe_manifest_language( | CODE |
| LOW⚡ | tools/validate_structure.py | 834 | def validate_skill_frontmatter(skill_file: Path) -> list[Diagnostic]: | CODE |
| LOW | tools/validate_structure.py | 392 | def _iter_excluded_dirs_files(policy: dict) -> tuple[set[str], set[str]]: | CODE |
| LOW | tools/validate_structure.py | 953 | def validate_plugin_container( | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 131 | def test_required_files_for_contrib_python(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 140 | def test_required_files_for_plugins_no_language(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 148 | def test_required_files_for_unknown_root_and_language(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 156 | def test_required_files_for_missing_config(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 161 | def test_required_files_for_all_five_languages_from_policy(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 242 | def test_detect_language_valid(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 247 | def test_detect_language_missing_manifest(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 251 | def test_detect_language_bad_yaml(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 256 | def test_detect_language_no_language_field(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 261 | def test_detect_language_lowercases(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 268 | def test_is_large_recipe_true(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 276 | def test_is_large_recipe_false_by_default(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 281 | def test_is_large_recipe_missing_manifest(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 291 | def test_recipe_root_of_namespaced(tmp_path, monkeypatch): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 305 | def test_check_folder_name_valid(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 311 | def test_check_folder_name_rejects_underscore(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 320 | def test_check_folder_name_rejects_uppercase(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 327 | def test_check_folder_name_rejects_leading_digit(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 334 | def test_check_folder_name_too_long(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 343 | def test_check_folder_name_both_violations_reported(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 357 | def test_committed_policy_pairs_every_entry_with_a_rule(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 374 | def test_check_required_files_all_present(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 380 | def test_check_required_files_missing_agents_in_core(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 387 | def test_missing_file_says_which_rule_required_it(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 408 | def test_missing_uv_lock_gives_the_exact_command(isolated_repo): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 416 | def test_a_required_file_with_no_generator_points_at_the_checklist(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 424 | def test_check_required_files_contrib_does_not_require_agents(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 430 | def test_check_required_files_nested_path(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 839 | def test_validate_recipe_bad_folder_name(isolated_repo): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 848 | def test_validate_recipe_missing_agents_in_core(isolated_repo): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 857 | def test_validate_recipe_outside_known_roots(isolated_repo): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 902 | def test_main_all_recipes_pass(fake_repo): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 908 | def test_main_returns_one_on_failure(fake_repo, capsys): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 918 | def test_main_annotates_every_problem_not_just_the_first(fake_repo, capsys): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 945 | def test_main_single_recipe_scope(fake_repo): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 955 | def test_required_dirs_for_plugins(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 964 | def test_required_dirs_for_core_is_empty(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 968 | def test_required_dirs_for_missing_section_degrades(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 972 | def test_required_dirs_for_dedupes(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1032 | def test_missing_dir_says_which_rule_required_it(isolated_repo): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1040 | def test_plugin_missing_eval_yaml_fails(isolated_repo): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1047 | def test_empty_required_dirs_pass(isolated_repo): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1056 | def test_required_dir_that_is_actually_a_file_is_reported_precisely( | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1074 | def test_wrong_case_fails_for_a_strict_entry(isolated_repo): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1124 | def test_find_entry_walks_nested_segments(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1134 | def test_case_insensitive_entries_reads_policy(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1144 | def test_committed_policy_declares_the_plugin_contract(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1166 | def test_committed_policy_declares_the_contrib_contract(): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1173 | def test_check_required_files_contrib_missing_dockerfile(tmp_path): | CODE |
| LOW⚡ | tools/tests/test_validate_structure.py | 1183 | def test_committed_policy_keeps_tool_read_files_case_strict(): | CODE |
| LOW | tools/tests/test_validate_structure.py | 119 | def test_required_files_for_core_python(): | CODE |
| LOW | tools/tests/test_validate_structure.py | 219 | def test_required_files_for_deduplicates(): | CODE |
| LOW | tools/tests/test_validate_structure.py | 444 | def test_check_required_files_java_alternatives(tmp_path): | CODE |
| LOW | tools/tests/test_validate_structure.py | 481 | def test_check_required_files_kotlin(tmp_path): | CODE |
| 7965 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .golangci.yml | 23 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .golangci.yml | 38 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .golangci.yml | 84 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .golangci.yml | 93 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/validate_manifest.py | 174 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/validate_manifest.py | 181 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/ci_message.py | 64 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/ci_message.py | 71 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/ci_message.py | 135 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/ci_message.py | 137 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/ci_message.py | 216 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/ci_message.py | 218 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/ci_message.py | 267 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/ci_message.py | 269 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/validate_structure.py | 80 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/validate_structure.py | 84 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/validate_structure.py | 88 | # =========================================================================== | COMMENT |
| MEDIUM⚡ | tools/validate_structure.py | 90 | # =========================================================================== | COMMENT |
| MEDIUM⚡ | tools/validate_structure.py | 829 | # =========================================================================== | COMMENT |
| MEDIUM⚡ | tools/validate_structure.py | 831 | # =========================================================================== | COMMENT |
| MEDIUM⚡ | tools/validate_structure.py | 1070 | # =========================================================================== | COMMENT |
| MEDIUM⚡ | tools/validate_structure.py | 1072 | # =========================================================================== | COMMENT |
| MEDIUM | tools/validate_structure.py | 281 | # =========================================================================== | COMMENT |
| MEDIUM | tools/validate_structure.py | 283 | # =========================================================================== | COMMENT |
| MEDIUM | tools/validate_structure.py | 331 | # =========================================================================== | COMMENT |
| MEDIUM | tools/validate_structure.py | 333 | # =========================================================================== | COMMENT |
| MEDIUM | tools/validate_structure.py | 1154 | # =========================================================================== | COMMENT |
| MEDIUM | tools/validate_structure.py | 1156 | # =========================================================================== | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 237 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 239 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 300 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 302 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 352 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 354 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 756 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 758 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 950 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 952 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 1069 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 1071 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 1139 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 1141 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/tests/test_validate_structure.py | 84 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/tests/test_validate_structure.py | 86 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/tests/test_validate_structure.py | 575 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/tests/test_validate_structure.py | 577 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/tests/test_validate_structure.py | 883 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/tests/test_validate_structure.py | 885 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/tests/test_validate_structure.py | 986 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/tests/test_validate_structure.py | 988 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/tests/test_validate_structure.py | 1196 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/tests/test_validate_structure.py | 1198 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_manifest.py | 62 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_manifest.py | 64 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_manifest.py | 96 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_manifest.py | 98 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_manifest.py | 332 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_manifest.py | 334 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_manifest.py | 436 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_manifest.py | 438 | # --------------------------------------------------------------------------- | COMMENT |
| 1345 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pyproject.toml | 21 | # Test-only dependencies for the repo tooling (tools/) and skill scripts | COMMENT |
| LOW | pyproject.toml | 161 | [tool.ruff.lint.isort] | COMMENT |
| LOW | pyproject.toml | 181 | quote-style = "double" | COMMENT |
| LOW | .golangci.yml | 1 | # Go formatting and linting configuration — the single source of truth for | COMMENT |
| LOW | .golangci.yml | 21 | version: "2" | COMMENT |
| LOW | .golangci.yml | 41 | - gofumpt | COMMENT |
| LOW | .golangci.yml | 61 | max-len: 120 | COMMENT |
| LOW | .golangci.yml | 81 | - localmodule | COMMENT |
| LOW | tools/check_github_dir_changes.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | tools/check_exemptions.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | tools/validate_manifest.py | 61 | COMMENT | |
| LOW | tools/tests/test_check_exemptions.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | tools/tests/test_check_github_dir_changes.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | …ython/genmedia-for-commerce/infra/terraform/outputs.tf | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …thon/genmedia-for-commerce/infra/terraform/cloudrun.tf | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …e/python/genmedia-for-commerce/infra/terraform/main.tf | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …edia-for-commerce/infra/terraform/artifact_registry.tf | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …ython/genmedia-for-commerce/infra/terraform/storage.tf | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …hon/genmedia-for-commerce/infra/terraform/variables.tf | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …re/python/genmedia-for-commerce/infra/terraform/iam.tf | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …-commerce/infra/model_training/finetune_gemini_lora.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …-for-commerce/infra/model_training/eval_gemini_lora.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …nmedia-for-commerce/frontend/scripts/copy-mediapipe.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …thon/genmedia-for-commerce/genmedia4commerce/config.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …ia-for-commerce/genmedia4commerce/agent_debug_utils.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …on/genmedia-for-commerce/genmedia4commerce/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …dia-for-commerce/genmedia4commerce/agent_engine_app.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …on/genmedia-for-commerce/genmedia4commerce/chat_api.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …ython/genmedia-for-commerce/genmedia4commerce/agent.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …enmedia-for-commerce/genmedia4commerce/fast_api_app.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …erce/genmedia4commerce/workflows/video_vto/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …media4commerce/workflows/video_vto/clothes/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …media4commerce/workflows/video_vto/clothes/pipeline.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …rce/workflows/video_vto/clothes/generate_video_util.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …ommerce/workflows/video_vto/glasses/custom_template.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …a4commerce/workflows/video_vto/glasses/glasses_eval.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …media4commerce/workflows/video_vto/glasses/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …media4commerce/workflows/video_vto/glasses/pipeline.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …rce/workflows/video_vto/glasses/generate_video_util.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …erce/workflows/spinning/glasses_rotation_classifier.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …dia4commerce/workflows/spinning/rotation_classifier.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | …merce/genmedia4commerce/workflows/spinning/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …-commerce/genmedia4commerce/workflows/spinning/eval.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …e/genmedia4commerce/workflows/spinning/r2v/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …edia4commerce/workflows/spinning/r2v/other/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …mmerce/workflows/spinning/r2v/other/image_selection.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …edia4commerce/workflows/spinning/r2v/other/pipeline.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …dia4commerce/workflows/spinning/r2v/other/r2v_utils.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …e/workflows/spinning/r2v/shoes/split_multiple_shoes.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …edia4commerce/workflows/spinning/r2v/shoes/__init__.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …s/spinning/r2v/shoes/product_consistency_validation.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …edia4commerce/workflows/spinning/r2v/shoes/pipeline.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …ommerce/workflows/spinning/r2v/shoes/classify_shoes.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …e/workflows/spinning/r2v/shoes/classify_shoes_local.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …/workflows/spinning/r2v/shoes/shoe_images_selection.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …/workflows/spinning/r2v/shoes/prompt_generation_r2v.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …4commerce/workflows/spinning/r2v/shoes/images_utils.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …4commerce/workflows/spinning/interpolation/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| 2288 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …dia-for-commerce/genmedia4commerce/agent_engine_app.py | 0 | initialize the agent engine app with logging and telemetry. | STRING |
| HIGH | …re/python/cross-session-memory/app/agent_engine_app.py | 0 | initialize the agent engine app with logging and telemetry. | STRING |
| HIGH | …python/oauth-user-consent-flow/app/agent_engine_app.py | 0 | initialize the agent engine app with logging and telemetry. | STRING |
| HIGH | …dia-for-commerce/genmedia4commerce/app_utils/deploy.py | 0 | generate method specifications with schemas from agent's register_operations(). see: https://docs.cloud.google.com/agent | STRING |
| HIGH | …re/python/cross-session-memory/app/app_utils/deploy.py | 0 | generate method specifications with schemas from agent's register_operations(). see: https://docs.cloud.google.com/agent | STRING |
| HIGH | …python/oauth-user-consent-flow/app/app_utils/deploy.py | 0 | generate method specifications with schemas from agent's register_operations(). see: https://docs.cloud.google.com/agent | STRING |
| HIGH | …dia-for-commerce/genmedia4commerce/app_utils/deploy.py | 0 | parse key-value pairs from a comma-separated key=value string. | STRING |
| HIGH | …re/python/cross-session-memory/app/app_utils/deploy.py | 0 | parse key-value pairs from a comma-separated key=value string. | STRING |
| HIGH | …python/oauth-user-consent-flow/app/app_utils/deploy.py | 0 | parse key-value pairs from a comma-separated key=value string. | STRING |
| HIGH | …dia-for-commerce/genmedia4commerce/app_utils/deploy.py | 0 | parse secrets from env_var=secret_id or env_var=secret_id:version format. | STRING |
| HIGH | …re/python/cross-session-memory/app/app_utils/deploy.py | 0 | parse secrets from env_var=secret_id or env_var=secret_id:version format. | STRING |
| HIGH | …python/oauth-user-consent-flow/app/app_utils/deploy.py | 0 | parse secrets from env_var=secret_id or env_var=secret_id:version format. | STRING |
| HIGH | …dia-for-commerce/genmedia4commerce/app_utils/deploy.py | 0 | format an env var value for display, masking secrets. | STRING |
| HIGH | …re/python/cross-session-memory/app/app_utils/deploy.py | 0 | format an env var value for display, masking secrets. | STRING |
| HIGH | …python/oauth-user-consent-flow/app/app_utils/deploy.py | 0 | format an env var value for display, masking secrets. | STRING |
| HIGH | …dia-for-commerce/genmedia4commerce/app_utils/deploy.py | 0 | create agent with identity and grant required iam roles. | STRING |
| HIGH | …re/python/cross-session-memory/app/app_utils/deploy.py | 0 | create agent with identity and grant required iam roles. | STRING |
| HIGH | …python/oauth-user-consent-flow/app/app_utils/deploy.py | 0 | create agent with identity and grant required iam roles. | STRING |
| HIGH | …dia-for-commerce/genmedia4commerce/app_utils/deploy.py | 0 | ╔═══════════════════════════════════════════════════════════╗ ║ ║ ║ 🤖 deploying agent to vertex ai agent engine 🤖 ║ ║ ║ | STRING |
| HIGH | …re/python/cross-session-memory/app/app_utils/deploy.py | 0 | ╔═══════════════════════════════════════════════════════════╗ ║ ║ ║ 🤖 deploying agent to vertex ai agent engine 🤖 ║ ║ ║ | STRING |
| HIGH | …python/oauth-user-consent-flow/app/app_utils/deploy.py | 0 | ╔═══════════════════════════════════════════════════════════╗ ║ ║ ║ 🤖 deploying agent to vertex ai agent engine 🤖 ║ ║ ║ | STRING |
| HIGH | …-for-commerce/genmedia4commerce/app_utils/telemetry.py | 0 | configure opentelemetry and genai telemetry with gcs upload. | STRING |
| HIGH | …python/cross-session-memory/app/app_utils/telemetry.py | 0 | configure opentelemetry and genai telemetry with gcs upload. | STRING |
| HIGH | …hon/oauth-user-consent-flow/app/app_utils/telemetry.py | 0 | configure opentelemetry and genai telemetry with gcs upload. | STRING |
| HIGH | …/python/long-horizon-harness/horizon/telemetry/otel.py | 0 | configure opentelemetry and genai telemetry with gcs upload. | STRING |
| HIGH | …-recipe/resources/templates/app/app_utils/telemetry.py | 0 | configure opentelemetry and genai telemetry with gcs upload. | STRING |
| HIGH | …ib/python/staged-ui-widgets/app/app_utils/telemetry.py | 0 | configure opentelemetry and genai telemetry with gcs upload. | STRING |
| HIGH | …python/genmedia-for-commerce/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …/python/cross-session-memory/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …thon/oauth-user-consent-flow/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …python/ambient-expense-agent/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | core/python/deep-search/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | core/python/safety-plugins/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …-runnability-test/scripts/generate_runnability_test.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …igh-volume-document-analyzer/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …python/agent-skills-tutorial/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …/brand-aligned-presentations/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …rib/python/financial-advisor/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …on/small-business-loan-agent/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | contrib/python/llm-auditor/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …rib/python/on-brand-genmedia/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …ython/multiformat-hybrid-rag/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …on/brand-search-optimization/tests/test_runnability.py | 0 | verify agent.py imports and defines the expected globals. | STRING |
| HIGH | …/genmedia-for-commerce/tests/integration/test_agent.py | 0 | integration test for the agent stream query functionality. tests that the agent returns valid streaming responses. | STRING |
| HIGH | …hon/long-horizon-harness/tests/live/test_agent_live.py | 0 | integration test for the agent stream query functionality. tests that the agent returns valid streaming responses. | STRING |
| HIGH | …pe/resources/templates/tests/integration/test_agent.py | 0 | integration test for the agent stream query functionality. tests that the agent returns valid streaming responses. | STRING |
| HIGH | …or-commerce/tests/integration/test_agent_engine_app.py | 0 | integration test for the agent stream query functionality. tests that the agent returns valid streaming responses. | STRING |
| HIGH | …onsent-flow/tests/integration/test_agent_engine_app.py | 0 | integration test for the agent stream query functionality. tests that the agent returns valid streaming responses. | STRING |
| HIGH | …or-commerce/tests/integration/test_agent_engine_app.py | 0 | fixture to create and set up agentengineapp instance | STRING |
| HIGH | …sion-memory/tests/integration/test_agent_engine_app.py | 0 | fixture to create and set up agentengineapp instance | STRING |
| HIGH | …onsent-flow/tests/integration/test_agent_engine_app.py | 0 | fixture to create and set up agentengineapp instance | STRING |
| HIGH | …or-commerce/tests/integration/test_agent_engine_app.py | 0 | integration test for the agent feedback functionality. tests that feedback can be registered successfully. | STRING |
| HIGH | …sion-memory/tests/integration/test_agent_engine_app.py | 0 | integration test for the agent feedback functionality. tests that feedback can be registered successfully. | STRING |
| HIGH | …onsent-flow/tests/integration/test_agent_engine_app.py | 0 | integration test for the agent feedback functionality. tests that feedback can be registered successfully. | STRING |
| HIGH | …edia-for-commerce/tests/integration/test_server_e2e.py | 0 | start the fastapi server using subprocess and log its output. | STRING |
| HIGH | …ss-session-memory/tests/integration/test_server_e2e.py | 0 | start the fastapi server using subprocess and log its output. | STRING |
| HIGH | …ong-horizon-harness/tests/live/test_server_e2e_live.py | 0 | start the fastapi server using subprocess and log its output. | STRING |
| HIGH | …sources/templates/tests/integration/test_server_e2e.py | 0 | start the fastapi server using subprocess and log its output. | STRING |
| HIGH | …format-hybrid-rag/tests/integration/test_server_e2e.py | 0 | start the fastapi server using subprocess and log its output. | STRING |
| HIGH | …staged-ui-widgets/tests/integration/test_server_e2e.py | 0 | start the fastapi server using subprocess and log its output. | STRING |
| 143 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/check_github_dir_changes.py | 70 | CODE | |
| LOW | tools/check_exemptions.py | 34 | CODE | |
| LOW | tools/validate_placement.py | 34 | CODE | |
| LOW | tools/ci_message.py | 57 | CODE | |
| LOW | tools/affected_recipes.py | 39 | CODE | |
| LOW | tools/check_frozen_paths.py | 30 | CODE | |
| LOW | tools/validate_structure.py | 53 | CODE | |
| LOW | tools/tests/test_ci_message.py | 12 | CODE | |
| LOW | tools/tests/test_check_github_dir_changes.py | 17 | CODE | |
| LOW | …nmedia4commerce/agents/style_advisor_agent/__init__.py | 17 | CODE | |
| LOW | core/python/cross-session-memory/app/__init__.py | 41 | CODE | |
| LOW | …oss-session-memory/tests/integration/_e2e_bootstrap.py | 60 | CODE | |
| LOW | core/python/oauth-user-consent-flow/app/__init__.py | 32 | CODE | |
| LOW | core/python/ambient-quality-agent/ui/app.py | 73 | CODE | |
| LOW | core/python/ambient-quality-agent/ui/task_reader.py | 37 | CODE | |
| LOW | core/python/ambient-quality-agent/tools/local_run.py | 45 | CODE | |
| LOW | …ambient-quality-agent/tools/test_insights_load_test.py | 23 | CODE | |
| LOW | core/python/ambient-quality-agent/tools/check_config.py | 26 | CODE | |
| LOW | core/python/ambient-quality-agent/tools/check_config.py | 50 | CODE | |
| LOW | …re/python/ambient-quality-agent/tools/mock_aqa_data.py | 62 | CODE | |
| LOW | …re/python/ambient-quality-agent/tools/test_mock_aqa.py | 27 | CODE | |
| LOW | …/python/ambient-quality-agent/tools/mock_aqa_server.py | 67 | CODE | |
| LOW | …thon/ambient-quality-agent/tools/insights_load_test.py | 84 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/acli_ui.py | 86 | CODE | |
| LOW | …e/python/ambient-quality-agent/extension/acli_infra.py | 52 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/_acli.py | 51 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/_acli.py | 66 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/_acli.py | 66 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/_acli.py | 66 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/_acli.py | 66 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/_acli.py | 66 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/_acli.py | 66 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/_acli.py | 66 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/_acli.py | 66 | CODE | |
| LOW | core/python/ambient-quality-agent/extension/_acli.py | 66 | CODE | |
| LOW | …/python/ambient-quality-agent/extension/acli_deploy.py | 44 | CODE | |
| LOW | …re/python/ambient-quality-agent/extension/acli_aqua.py | 50 | CODE | |
| LOW | …n/ambient-quality-agent/tests/test_trajectory_tools.py | 22 | CODE | |
| LOW | …ython/ambient-quality-agent/tests/test_model_errors.py | 22 | CODE | |
| LOW | …hon/ambient-quality-agent/tests/test_document_tools.py | 22 | CODE | |
| LOW | …e/python/ambient-quality-agent/tests/test_rca_tools.py | 21 | CODE | |
| LOW | …on/ambient-quality-agent/tests/test_aqua_cli_attach.py | 23 | CODE | |
| LOW | …/ambient-quality-agent/tests/test_ui_investigations.py | 24 | CODE | |
| LOW | …/python/ambient-quality-agent/tests/test_cli_traces.py | 21 | CODE | |
| LOW | …quality-agent/tests/test_trajectory_payloads_schema.py | 38 | CODE | |
| LOW | …on/ambient-quality-agent/tests/test_insights_schema.py | 26 | CODE | |
| LOW | …lity-agent/tests/test_terraform_variable_validation.py | 29 | CODE | |
| LOW | …mbient-quality-agent/tests/test_trajectories_schema.py | 34 | CODE | |
| LOW | core/python/ambient-quality-agent/tests/conftest.py | 17 | CODE | |
| LOW | …n/ambient-quality-agent/tests/test_root_cause_store.py | 22 | CODE | |
| LOW | …t-quality-agent/tests/test_source_snapshot_contract.py | 25 | CODE | |
| LOW | …thon/ambient-quality-agent/tests/test_message_parts.py | 17 | CODE | |
| LOW | …t-quality-agent/tests/test_trajectory_payload_write.py | 35 | CODE | |
| LOW | …hon/ambient-quality-agent/tests/test_metric_timeout.py | 17 | CODE | |
| LOW | …n/ambient-quality-agent/tests/test_bigquery_fetcher.py | 17 | CODE | |
| LOW | …ython/ambient-quality-agent/tests/test_object_store.py | 26 | CODE | |
| LOW | …ambient-quality-agent/tests/test_gcs_metric_library.py | 17 | CODE | |
| LOW | …on/ambient-quality-agent/tests/test_ui_bundle_mount.py | 29 | CODE | |
| LOW | …/ambient-quality-agent/tests/test_memory_chat_tools.py | 17 | CODE | |
| LOW | core/python/ambient-quality-agent/tests/test_logging.py | 17 | CODE | |
| 914 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/check_exemptions.py | 190 | Loads and validates recipe exemptions from the policy configuration. Args: policy_path: Path to the policy | STRING |
| HIGH | …edia4commerce/workflows/spinning/r2v/shoes/pipeline.py | 489 | Reference-to-Video (R2V) pipeline that generates a single spinning video using reference images. This function: | STRING |
| HIGH | …ws/spinning/interpolation/other/interpolation_utils.py | 148 | Post-process a generated video by trimming to the most similar end frame. Finds the frame most similar to the targe | STRING |
| HIGH | …erce/genmedia4commerce/workflows/shared/nano_banana.py | 63 | Generate content using Gemini image generation model. Args: client: Gemini client instance text_ima | STRING |
| HIGH | …mmerce/genmedia4commerce/workflows/shared/llm_utils.py | 262 | Create standard configuration for Gemini content generation. Args: temperature: Temperature for generation | STRING |
| HIGH | core/python/ambient-quality-agent/ui/app.py | 1668 | Serves static assets or falls back to the SPA HTML shell. Routes belonging to the API or unsupported integratio | STRING |
| HIGH | core/python/ambient-quality-agent/extension/acli_ui.py | 134 | Return the dashboard service name if it exists, or None. Queries `gcloud run services list` rather than `describe` | STRING |
| HIGH | core/python/ambient-quality-agent/extension/acli_ui.py | 174 | Assemble the dashboard build context from scratch, dropping deleted files. Args: root: Extension root path. | STRING |
| HIGH | core/python/ambient-quality-agent/extension/acli_ui.py | 205 | Deploy a container image to the dashboard service if it exists. Parses ``argv`` from `agents-cli deploy` for target | STRING |
| HIGH | core/python/ambient-quality-agent/extension/_acli.py | 502 | Remove AQuA observed-agent options from ``argv`` and return parsed values. Args: argv: Command-line argumen | STRING |
| HIGH | core/python/ambient-quality-agent/extension/_acli.py | 538 | Resolve the deployment name of the observed agent. In AQuA's own checkout with neither observed option given, AQuA | STRING |
| HIGH | core/python/ambient-quality-agent/extension/_acli.py | 573 | Resolve the deployment name and ADK agent name for the observed agent. Args: options: Command line and envi | STRING |
| HIGH | core/python/ambient-quality-agent/extension/_acli.py | 654 | Remove the flag that adds AQuA's step to a wrapped command. In the observed agent's project, `infra single-project` | STRING |
| HIGH | …re/python/ambient-quality-agent/extension/acli_aqua.py | 657 | Render the options added to `attach` as lines printed before the plan. Hints are left out: the CLI shows each with | STRING |
| HIGH | …on/ambient-quality-agent/tests/test_aqua_cli_attach.py | 92 | Answers one route call, standing in for `_fetch_command_result`. Args: url: Ignored engine URL. | STRING |
| HIGH | core/python/ambient-quality-agent/tests/test_sweep.py | 144 | Installs the fake fetcher while keeping `_common.count_scanned` real. The real function converts the fetcher's answ | STRING |
| HIGH | …hon/ambient-quality-agent/tests/test_agent_revision.py | 32 | Builds a function declaration shaped as emitted by `TraceAgentDataConverter`. Args: name: Name of the tool. | STRING |
| HIGH | …agent/tests/test_observed_agent_config_access_check.py | 114 | Records the test and answers it from the client's `held`. Args: permissions: Permissions to test. | STRING |
| HIGH | …ient-quality-agent/tests/test_cloud_logging_fetcher.py | 101 | Returns canned GCS text for `uri`, or raises `OSError` for `_UNREADABLE_REF`. Args: uri: ``gs://`` object U | STRING |
| HIGH | …/ambient-quality-agent/tests/test_cloud_ops_fetcher.py | 58 | Constructs a span dictionary as projected by BigQuery queries. Args: span_id: OpenTelemetry span id. | STRING |
| HIGH | …/ambient-quality-agent/tests/test_cloud_ops_fetcher.py | 897 | Refuses every read, as a missing bucket grant does. Args: _uri: Ignored payload URI. Retur | STRING |
| HIGH | …hon/ambient-quality-agent/tests/test_session_review.py | 33 | Creates a function declaration dictionary fixture. Args: name: Function name. parameters: Parameter | STRING |
| HIGH | …/ambient-quality-agent/tests/test_gcs_span_exporter.py | 110 | Builds a `ReadableSpan` for testing. Args: name: Span operation name. span_id: Identifier for the s | STRING |
| HIGH | …ambient-quality-agent/tests/test_aqua_cli_discovery.py | 115 | Records a call and returns its scripted reply. Args: url: Request URL. payload: Query p | STRING |
| HIGH | …ient-quality-agent/src/ambient_quality_agent/config.py | 755 | Reads a required environment variable. Args: env_var: Environment variable name. Returns: The | STRING |
| HIGH | …ient-quality-agent/src/ambient_quality_agent/config.py | 810 | Parses an integer environment variable. Args: env_var: Environment variable name. default: Fallback | STRING |
| HIGH | …nt-quality-agent/src/ambient_quality_agent/backends.py | 319 | Binds every provider and returns what each held previously. A mapping that does not match `PROVIDERS` exactly is re | STRING |
| HIGH | …gent/src/ambient_quality_agent/tools/metrics/runner.py | 315 | Extract failure explanation from a metric result. Args: outcome: Result returned by a metric evaluator. | STRING |
| HIGH | …gent/src/ambient_quality_agent/tools/metrics/runner.py | 359 | Extract failure reasoning from an `EvalCaseMetricResult`. Evaluates the verdict using this sequence: 1. Check f | STRING |
| HIGH | …gent/src/ambient_quality_agent/tools/metrics/runner.py | 407 | Extract the numeric score from an `EvalCaseMetricResult`. Args: result: Evaluation metric result from the S | STRING |
| HIGH | …ent/src/ambient_quality_agent/tools/metrics/library.py | 242 | Loads custom metrics specified in an agents-cli evaluation config. Separates metrics into locally compiled callable | STRING |
| HIGH | …ent/src/ambient_quality_agent/tools/metrics/library.py | 535 | Builds a judged metric from a prompt-only entry, as agents-cli builds it. Uses `LLMMetric.model_validate(entry)`, t | STRING |
| HIGH | …ent/src/ambient_quality_agent/tools/metrics/library.py | 606 | Resolves a metric function's source code and origin identifier. Args: name: Name of the metric. ent | STRING |
| HIGH | …ent/src/ambient_quality_agent/tools/metrics/library.py | 640 | Loads and validates a remote metric definition without executing it locally. Validation steps: 1. Parse source | STRING |
| HIGH | …ent/src/ambient_quality_agent/tools/metrics/library.py | 697 | Extracts and validates the passing score threshold for a metric. Non-finite values (such as NaN or Inf) are rejecte | STRING |
| HIGH | …ent/src/ambient_quality_agent/tools/metrics/library.py | 836 | Compiles and loads a local code metric from source bytes. Args: name: Name of the metric. entry: Me | STRING |
| HIGH | …ent/src/ambient_quality_agent/tools/metrics/library.py | 943 | Executes metric source code within an isolated module registered in `sys.modules`. Registering in `sys.modules` ena | STRING |
| HIGH | …ambient_quality_agent/tools/insights/bigquery_store.py | 209 | Map each candidate to the existing insight the judge deems the same. Two steps: 1. Read this agent's o | STRING |
| HIGH | …mbient_quality_agent/tools/insights/bigquery_reader.py | 258 | Pages through this agent's insights in the order ``order_by`` names. Args: statuses: Optional lifec | STRING |
| HIGH | …mbient_quality_agent/tools/insights/bigquery_reader.py | 338 | Distinct conversations behind every insight the filters match. The filters `list_insights` takes, over the whol | STRING |
| HIGH | …mbient_quality_agent/tools/insights/bigquery_reader.py | 472 | Pages an insight's occurrences newest first, including rubric payloads. Ordered by ``created_at`` descending (m | STRING |
| HIGH | …c/ambient_quality_agent/tools/insights/verification.py | 910 | Format up to MAX_EVIDENCE_TRACES sorted evidence entries, grouping rubrics per case. Args: examples: Rubric | STRING |
| HIGH | …c/ambient_quality_agent/tools/insights/verification.py | 1117 | Judge the largest clusters and report what the model concluded. Keyed by position in ``clusters`` so a caller can p | STRING |
| HIGH | …t/src/ambient_quality_agent/tools/insights/matching.py | 185 | Index of the existing label ``candidate`` restates, or ``None``. Steps: 1. Split ``existing`` into batches of | STRING |
| HIGH | …t/src/ambient_quality_agent/tools/insights/matching.py | 259 | Judge every candidate against ``existing``, in parallel. Failure policy, the same one `clustering.cluster_and_label | STRING |
| HIGH | …ent/src/ambient_quality_agent/tools/insights/reader.py | 207 | One page of an insight's sightings, newest first. ``insight_id`` selects by owner, the same resolution `get_ins | STRING |
| HIGH | …/src/ambient_quality_agent/tools/ingestion/selector.py | 414 | Perform static lexical validation on an unwrapped selector query. Checks for single-statement structure, escape seq | STRING |
| HIGH | …bient_quality_agent/tools/ingestion/trace_converter.py | 1140 | Parse a JSON or JSONL message payload into a list of dicts. Args: value: Raw message list payload (string, | STRING |
| HIGH | …bient_quality_agent/tools/ingestion/trace_converter.py | 1173 | Extract plain system-instruction text from an OTEL payload. Args: value: Raw system instruction payload: pl | STRING |
| HIGH | …bient_quality_agent/tools/ingestion/trace_converter.py | 1246 | Parse a tool-definitions payload into a list with one `Tool`. Accepts OTEL tool definitions, genai `Tool` dicts and | STRING |
| HIGH | …gent/src/ambient_quality_agent/tools/ingestion/base.py | 146 | Validates the configured selector without executing the query. Verifies query syntax, projected columns, and ta | STRING |
| HIGH | …gent/src/ambient_quality_agent/tools/ingestion/base.py | 204 | Count the traces the window holds for each agent name in it. The unit `count_scanned` counts, grouped by agent | STRING |
| HIGH | …gent/src/ambient_quality_agent/tools/ingestion/base.py | 711 | Validates this fetcher's selector using lexical checks and BigQuery dry runs. After `selector.find_lexical_viol | STRING |
| HIGH | …gent/src/ambient_quality_agent/tools/ingestion/base.py | 790 | Executes a dry run to validate a query without running it. Args: sql: SQL query to validate. | STRING |
| HIGH | …agent/src/ambient_quality_agent/tools/objects/store.py | 47 | Reads an object as UTF-8 text. Args: name: Object name relative to the store's root. Retur | STRING |
| HIGH | …agent/src/ambient_quality_agent/tools/objects/store.py | 62 | Writes an object as UTF-8 text, replacing it whole. A reader sees either the previous object or the new one, ne | STRING |
| HIGH | …agent/src/ambient_quality_agent/tools/objects/store.py | 82 | Reads an object's raw content. Args: name: Object name relative to the store's root. Retur | STRING |
| HIGH | …agent/src/ambient_quality_agent/tools/objects/store.py | 109 | Deletes an object. Args: name: Object name relative to the store's root. Returns: | STRING |
| HIGH | …agent/src/ambient_quality_agent/tools/objects/store.py | 122 | Lists the names of every object under a prefix, in lexical order. The prefix is matched as a string, as GCS doe | STRING |
| HIGH | …agent/src/ambient_quality_agent/tools/objects/store.py | 138 | Lists the next level of names under a prefix, as a GCS `/` delimiter does. Answers "which revisions are there" | STRING |
| 88 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/check_github_dir_changes.py | 210 | except Exception: | CODE |
| LOW | tools/check_github_dir_changes.py | 229 | except Exception: | CODE |
| LOW | tools/ci_message.py | 397 | except Exception as exc: | CODE |
| LOW | …-for-commerce/infra/model_training/eval_gemini_lora.py | 292 | except Exception as e: | CODE |
| LOW⚡ | …thon/genmedia-for-commerce/genmedia4commerce/config.py | 58 | except Exception: | CODE |
| LOW | …thon/genmedia-for-commerce/genmedia4commerce/config.py | 124 | except Exception as e: | CODE |
| LOW⚡ | …thon/genmedia-for-commerce/genmedia4commerce/config.py | 168 | except Exception as e: | CODE |
| LOW⚡ | …thon/genmedia-for-commerce/genmedia4commerce/config.py | 185 | except Exception as e: | CODE |
| LOW | …ia-for-commerce/genmedia4commerce/agent_debug_utils.py | 97 | except Exception as e: | CODE |
| LOW | …ia-for-commerce/genmedia4commerce/agent_debug_utils.py | 137 | except Exception as e: | CODE |
| LOW⚡ | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 384 | except Exception: | CODE |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 75 | except Exception as e: | CODE |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 119 | except Exception as e: | CODE |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 158 | except Exception as e: | CODE |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 192 | except Exception as e: | CODE |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 218 | except Exception: # noqa: S110 | CODE |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 225 | except Exception: # noqa: S110 | CODE |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 319 | except Exception as e: | CODE |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 332 | except Exception as e: | CODE |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 426 | except Exception as e: | CODE |
| LOW | …dia-for-commerce/genmedia4commerce/agent_engine_app.py | 76 | except Exception as e: | CODE |
| LOW | …on/genmedia-for-commerce/genmedia4commerce/chat_api.py | 122 | except Exception: # noqa: S110 | CODE |
| LOW | …on/genmedia-for-commerce/genmedia4commerce/chat_api.py | 181 | except Exception as e: | CODE |
| LOW | …enmedia-for-commerce/genmedia4commerce/fast_api_app.py | 150 | except Exception as exc: | CODE |
| LOW | …enmedia-for-commerce/genmedia4commerce/fast_api_app.py | 281 | except Exception as e: | CODE |
| MEDIUM | …enmedia-for-commerce/genmedia4commerce/fast_api_app.py | 254 | def _check_segmentation(): | CODE |
| LOW | …ommerce/workflows/video_vto/glasses/custom_template.py | 105 | except Exception as e: | CODE |
| LOW | …ommerce/workflows/video_vto/glasses/custom_template.py | 149 | except Exception as e: | CODE |
| LOW | …media4commerce/workflows/video_vto/glasses/pipeline.py | 79 | except Exception as e: | CODE |
| LOW | …rce/workflows/video_vto/glasses/generate_video_util.py | 132 | except Exception as e: | CODE |
| LOW | …rce/workflows/video_vto/glasses/generate_video_util.py | 194 | except Exception: | CODE |
| LOW | …erce/workflows/spinning/glasses_rotation_classifier.py | 103 | except Exception as e: | CODE |
| LOW | …erce/workflows/spinning/glasses_rotation_classifier.py | 157 | except Exception as e: | CODE |
| LOW | …-commerce/genmedia4commerce/workflows/spinning/eval.py | 82 | except Exception as e: | CODE |
| LOW | …-commerce/genmedia4commerce/workflows/spinning/eval.py | 232 | except Exception as e: | CODE |
| LOW | …mmerce/workflows/spinning/r2v/other/image_selection.py | 142 | except Exception as e: | CODE |
| LOW | …e/workflows/spinning/r2v/shoes/split_multiple_shoes.py | 114 | except Exception as e: | CODE |
| LOW | …e/workflows/spinning/r2v/shoes/split_multiple_shoes.py | 291 | except Exception as e: | CODE |
| LOW | …edia4commerce/workflows/spinning/r2v/shoes/pipeline.py | 160 | except Exception as validation_err: | CODE |
| LOW | …edia4commerce/workflows/spinning/r2v/shoes/pipeline.py | 189 | except Exception as consistency_err: | CODE |
| LOW | …edia4commerce/workflows/spinning/r2v/shoes/pipeline.py | 725 | except Exception as e: | CODE |
| LOW | …/workflows/spinning/r2v/shoes/shoe_images_selection.py | 74 | except Exception: | CODE |
| LOW | …ws/spinning/interpolation/other/interpolation_utils.py | 194 | except Exception as e: | CODE |
| LOW | …a4commerce/workflows/image_vto/clothes/garment_eval.py | 190 | except Exception as e: | CODE |
| LOW⚡ | …commerce/workflows/image_vto/clothes/vto_generation.py | 75 | except Exception as e: | CODE |
| LOW | …commerce/workflows/image_vto/clothes/vto_generation.py | 97 | except Exception as e: | CODE |
| LOW | …commerce/workflows/image_vto/clothes/vto_generation.py | 147 | except Exception as e: | CODE |
| LOW | …commerce/workflows/image_vto/clothes/vto_generation.py | 354 | except Exception as e: | CODE |
| LOW | …media4commerce/workflows/image_vto/clothes/pipeline.py | 360 | except Exception as e: | CODE |
| LOW | …rce/workflows/image_vto/clothes/garment_description.py | 109 | except Exception as e: | CODE |
| LOW | …mmerce/workflows/image_vto/glasses/image_generation.py | 113 | except Exception as e: | CODE |
| LOW⚡ | …mmerce/workflows/image_vto/glasses/image_generation.py | 135 | except Exception as e: | CODE |
| LOW⚡ | …mmerce/workflows/image_vto/glasses/image_generation.py | 186 | except Exception as e: | CODE |
| LOW | …mmerce/workflows/image_vto/glasses/image_generation.py | 302 | except Exception as e: | CODE |
| LOW | …a4commerce/workflows/image_vto/glasses/glasses_eval.py | 129 | except Exception as e: | CODE |
| LOW | …media4commerce/workflows/image_vto/glasses/pipeline.py | 318 | except Exception as e: | CODE |
| LOW | …rkflows/other/background_changer/background_changer.py | 100 | except Exception as e: | CODE |
| LOW | …rkflows/other/background_changer/background_changer.py | 130 | except Exception as e: | CODE |
| LOW | …rkflows/other/background_changer/background_changer.py | 339 | except Exception as e: | CODE |
| LOW | …erce/genmedia4commerce/workflows/shared/image_utils.py | 336 | except Exception as e: | CODE |
| 585 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 218 | except Exception: # noqa: S110 | CODE |
| HIGH | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 225 | except Exception: # noqa: S110 | CODE |
| HIGH | …on/genmedia-for-commerce/genmedia4commerce/chat_api.py | 122 | except Exception: # noqa: S110 | CODE |
| HIGH | …erce/genmedia4commerce/workflows/shared/debug_utils.py | 98 | except Exception: # noqa: S110 | CODE |
| HIGH | …/genmedia4commerce/agents/style_advisor_agent/agent.py | 110 | except (ValueError, TypeError): | CODE |
| HIGH | …/genmedia4commerce/agents/style_advisor_agent/agent.py | 126 | except Exception: # noqa: S110 | CODE |
| HIGH | …/genmedia4commerce/agents/style_advisor_agent/agent.py | 352 | except Exception: # noqa: S110 | CODE |
| HIGH | …hon/genmedia-for-commerce/tests/load_test/load_test.py | 120 | except json.JSONDecodeError: | CODE |
| HIGH | …edia-for-commerce/tests/integration/test_server_e2e.py | 90 | except RequestException: | CODE |
| HIGH | core/python/cross-session-memory/app/__init__.py | 34 | except google.auth.exceptions.DefaultCredentialsError: | CODE |
| HIGH | …ss-session-memory/tests/integration/test_server_e2e.py | 107 | except RequestException: | CODE |
| HIGH | …_agent/tools/observed_agent_config/effective_config.py | 128 | except objects.StorageNotConfiguredError: | CODE |
| HIGH | …_agent/tools/observed_agent_config/effective_config.py | 194 | except objects.StorageNotConfiguredError: | CODE |
| HIGH | core/python/ambient-expense-agent/frontend/main.py | 106 | except (json.JSONDecodeError, ValueError): | CODE |
| HIGH | …on/ambient-expense-agent/expense_agent/fast_api_app.py | 68 | except (json.JSONDecodeError, KeyError): | CODE |
| HIGH | …ra/terraform/scripts/setup_vector_search_collection.py | 62 | except exceptions.NotFound: | CODE |
| HIGH | …thon/long-horizon-harness/tests/smoke/http/conftest.py | 131 | except RequestException: | CODE |
| HIGH | …on-harness/tests/unit/tools/processes/test_registry.py | 50 | except ProcessLookupError: | CODE |
| HIGH | …arness/tests/unit/tools/processes/test_local_handle.py | 64 | except ProcessLookupError: | CODE |
| HIGH | …arness/tests/unit/tools/processes/test_process_tool.py | 64 | except ProcessLookupError: | CODE |
| HIGH | …harness/tests/integration/probes/probe_routine_fire.py | 189 | except Exception: | CODE |
| HIGH | …ong-horizon-harness/tests/live/test_server_e2e_live.py | 89 | except RequestException: | CODE |
| HIGH | …ython/long-horizon-harness/horizon/workspace_window.py | 169 | except (TypeError, AttributeError): | CODE |
| HIGH | core/python/long-horizon-harness/horizon/tools/_hitl.py | 57 | except AttributeError: | CODE |
| HIGH | …/long-horizon-harness/horizon/subagents/child_guard.py | 214 | except (AttributeError, TypeError): | CODE |
| HIGH | …ong-horizon-harness/horizon/guardrails/exfil_config.py | 366 | except ValueError: | CODE |
| HIGH | …e/python/long-horizon-harness/horizon/secrets/store.py | 140 | except AlreadyExists: | CODE |
| HIGH | …long-horizon-harness/horizon/sandbox/runtime/server.py | 167 | except TimeoutError: | CODE |
| HIGH | …long-horizon-harness/horizon/sandbox/runtime/server.py | 172 | except (asyncio.CancelledError, Exception): # noqa: S110 | CODE |
| HIGH | …long-horizon-harness/horizon/sandbox/runtime/server.py | 453 | except subprocess.TimeoutExpired: | CODE |
| HIGH | …long-horizon-harness/horizon/sandbox/runtime/server.py | 460 | except OSError: | CODE |
| HIGH | …on/long-horizon-harness/horizon/environment/sandbox.py | 476 | except json.JSONDecodeError: | CODE |
| HIGH | …g-horizon-harness/horizon/environment/local_process.py | 129 | except subprocess.TimeoutExpired: | CODE |
| HIGH | …g-horizon-harness/horizon/environment/local_process.py | 136 | except OSError: | CODE |
| HIGH | …re/python/long-horizon-harness/horizon/telemetry/ui.py | 105 | except Exception: # noqa: S110 | CODE |
| HIGH | …re/python/long-horizon-harness/horizon/telemetry/ui.py | 127 | except Exception: # noqa: S110 | CODE |
| HIGH | …re/python/long-horizon-harness/horizon/telemetry/ui.py | 155 | except Exception: # noqa: S110 | CODE |
| HIGH | …re/python/long-horizon-harness/horizon/telemetry/ui.py | 183 | except Exception: # noqa: S110 | CODE |
| HIGH | …re/python/long-horizon-harness/horizon/telemetry/ui.py | 216 | except Exception: # noqa: S110 | CODE |
| HIGH | …re/python/long-horizon-harness/horizon/telemetry/ui.py | 237 | except Exception: # noqa: S110 | CODE |
| HIGH | …nt-search/infra/terraform/scripts/get_data_store_id.py | 92 | except Exception: # noqa: S110 | CODE |
| HIGH | core/python/safety-plugins/safety_plugins/__init__.py | 28 | except google.auth.exceptions.DefaultCredentialsError: | CODE |
| HIGH | …etail/skills/product-search/scripts/ingest_bigquery.py | 373 | except Exception: # pylint: disable=broad-exception-caught # noqa: S110 | CODE |
| HIGH | …/skills/product-search/scripts/ingest_vertex_search.py | 183 | except exceptions.NotFound: | CODE |
| HIGH | …/skills/product-search/scripts/ingest_vertex_search.py | 391 | except exceptions.NotFound: | CODE |
| HIGH | …retail/skills/virtual-tryon/scripts/tryon_processor.py | 80 | except Exception: # noqa: S110 | CODE |
| HIGH | plugins/retail/skills/virtual-tryon/scripts/setup.py | 43 | except Exception: # noqa: S110 | CODE |
| HIGH | …s/skills/github-pr-review/scripts/check_house_rules.py | 85 | except ModuleNotFoundError: | CODE |
| HIGH | …-runnability-test/scripts/generate_runnability_test.py | 524 | except (SyntaxError, UnicodeDecodeError): | CODE |
| HIGH | …thon-environment-variables/scripts/extract_env_vars.py | 240 | except OSError: | CODE |
| HIGH | …sources/templates/tests/integration/test_server_e2e.py | 89 | except RequestException: | CODE |
| HIGH | …rib/python/brand-aligned-presentations/app/__init__.py | 30 | except google.auth.exceptions.DefaultCredentialsError: | CODE |
| HIGH | …n/brand-aligned-presentations/app/tools/pptx_editor.py | 48 | except (KeyError, AttributeError): | CODE |
| HIGH | …n/brand-aligned-presentations/app/tools/pptx_editor.py | 111 | except (KeyError, AttributeError): | CODE |
| HIGH | …n/brand-aligned-presentations/app/tools/pptx_editor.py | 72 | except (KeyError, AttributeError): | CODE |
| HIGH | …n/brand-aligned-presentations/app/tools/pptx_editor.py | 134 | except (KeyError, AttributeError): | CODE |
| HIGH | …n/brand-aligned-presentations/app/tools/pptx_editor.py | 352 | except (KeyError, AttributeError): | CODE |
| HIGH | …n/brand-aligned-presentations/app/tools/pptx_editor.py | 519 | except (KeyError, AttributeError): | CODE |
| HIGH | …n/brand-aligned-presentations/app/tools/pptx_editor.py | 545 | except (KeyError, AttributeError): | CODE |
| HIGH | …n/brand-aligned-presentations/app/tools/pptx_editor.py | 557 | except (KeyError, AttributeError): | CODE |
| 23 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …thon/genmedia-for-commerce/genmedia4commerce/config.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ia-for-commerce/genmedia4commerce/agent_debug_utils.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …dia-for-commerce/genmedia4commerce/agent_engine_app.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | …dia-for-commerce/genmedia4commerce/agent_engine_app.py | 40 | def set_up(self) -> None: | CODE |
| LOW | …on/genmedia-for-commerce/genmedia4commerce/chat_api.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ython/genmedia-for-commerce/genmedia4commerce/agent.py | 72 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | …media4commerce/workflows/video_vto/clothes/pipeline.py | 49 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rce/workflows/video_vto/clothes/generate_video_util.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | …a4commerce/workflows/video_vto/glasses/glasses_eval.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | …media4commerce/workflows/video_vto/glasses/pipeline.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rce/workflows/video_vto/glasses/generate_video_util.py | 36 | logger = logging.getLogger(__name__) | CODE |
| LOW | …erce/workflows/spinning/glasses_rotation_classifier.py | 36 | logger = logging.getLogger(__name__) | CODE |
| LOW | …-commerce/genmedia4commerce/workflows/spinning/eval.py | 36 | logger = logging.getLogger(__name__) | CODE |
| LOW | …mmerce/workflows/spinning/r2v/other/image_selection.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | …edia4commerce/workflows/spinning/r2v/other/pipeline.py | 25 | logger = logging.getLogger(__name__) | CODE |
| LOW | …e/workflows/spinning/r2v/shoes/split_multiple_shoes.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | …s/spinning/r2v/shoes/product_consistency_validation.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | …edia4commerce/workflows/spinning/r2v/shoes/pipeline.py | 60 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ommerce/workflows/spinning/r2v/shoes/classify_shoes.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | …e/workflows/spinning/r2v/shoes/classify_shoes_local.py | 39 | logger = logging.getLogger(__name__) | CODE |
| LOW | …4commerce/workflows/spinning/r2v/shoes/images_utils.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | …a4commerce/workflows/image_vto/clothes/garment_eval.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | …commerce/workflows/image_vto/clothes/vto_generation.py | 36 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | …media4commerce/workflows/image_vto/clothes/pipeline.py | 47 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rce/workflows/image_vto/clothes/garment_description.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | …mmerce/workflows/image_vto/glasses/image_generation.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | …a4commerce/workflows/image_vto/glasses/glasses_eval.py | 28 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | …media4commerce/workflows/image_vto/glasses/pipeline.py | 40 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rkflows/other/background_changer/background_changer.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …erce/genmedia4commerce/workflows/shared/image_utils.py | 46 | logger = logging.getLogger(__name__) | CODE |
| LOW | …erce/genmedia4commerce/workflows/shared/person_eval.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | …erce/genmedia4commerce/workflows/shared/nano_banana.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ce/genmedia4commerce/workflows/shared/vector_search.py | 38 | logger = logging.getLogger(__name__) | CODE |
| LOW | …mmerce/genmedia4commerce/workflows/shared/llm_utils.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | …mmerce/genmedia4commerce/workflows/shared/gcs_utils.py | 28 | logger = logging.getLogger(__name__) | CODE |
| LOW | …erce/genmedia4commerce/workflows/shared/debug_utils.py | 28 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ows/product_enrichment/product_fitting/garment_eval.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | …s/product_enrichment/product_fitting/video_pipeline.py | 39 | logger = logging.getLogger(__name__) | CODE |
| LOW | …flows/product_enrichment/product_fitting/generation.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | …s/product_enrichment/product_fitting/classification.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rkflows/product_enrichment/product_fitting/pipeline.py | 52 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nmedia4commerce/agents/style_advisor_agent/__init__.py | 19 | __all__ = ["app"] | CODE |
| LOW | …/genmedia4commerce/agents/style_advisor_agent/agent.py | 43 | logger = logging.getLogger(__name__) | CODE |
| LOW | …enmedia4commerce/mcp_server/video_vto/video_vto_mcp.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | …a4commerce/mcp_server/video_vto/clothes/clothes_mcp.py | 25 | logger = logging.getLogger(__name__) | CODE |
| LOW | …a4commerce/mcp_server/video_vto/clothes/clothes_api.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | …a4commerce/mcp_server/video_vto/glasses/glasses_api.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …a4commerce/mcp_server/video_vto/glasses/glasses_mcp.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/genmedia4commerce/mcp_server/spinning/spinning_mcp.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ia4commerce/mcp_server/spinning/r2v/other/other_api.py | 40 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ia4commerce/mcp_server/spinning/r2v/other/other_mcp.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ia4commerce/mcp_server/spinning/r2v/shoes/shoes_api.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ia4commerce/mcp_server/spinning/r2v/shoes/shoes_mcp.py | 25 | logger = logging.getLogger(__name__) | CODE |
| LOW | …e/mcp_server/spinning/interpolation/other/other_api.py | 39 | logger = logging.getLogger(__name__) | CODE |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | …enmedia4commerce/mcp_server/image_vto/image_vto_mcp.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | …a4commerce/mcp_server/image_vto/clothes/clothes_mcp.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | …a4commerce/mcp_server/image_vto/clothes/clothes_api.py | 24 | logger = logging.getLogger(__name__) | CODE |
| 332 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/validate_structure.py | 1043 | how=f"Add a skill directory with a SKILL.md: mkdir -p {rel}/skills/my-skill && touch {rel}/skills/my | CODE |
| HIGH⚡ | tools/tests/test_validate_structure.py | 413 | assert lock.how == "cd core/foo && uv lock" | CODE |
| HIGH | …s/spinning/r2v/shoes/product_consistency_validation.py | 109 | frame_labels: List of labels (can contain None/null) | STRING |
| HIGH | core/python/ambient-quality-agent/ui/app.py | 139 | " npm --prefix ui/web ci && npm --prefix ui/web run build\n" | CODE |
| HIGH | …lity-agent/tests/test_terraform_variable_validation.py | 19 | `var.x == null || var.x >= 1` guard does not protect the comparison: on 1.11 | STRING |
| HIGH | …thon/ambient-quality-agent/tests/test_judge_metrics.py | 250 | # `custom_function` present but null, beside a real file. | COMMENT |
| HIGH | …ambient_quality_agent/tools/insights/bigquery_store.py | 365 | # empty, never null, or the load job rejects the row. | STRING |
| HIGH | …c/ambient_quality_agent/tools/review/session_review.py | 75 | # returning `None` still yields `{"result": null}`, a paused HITL call carries | STRING |
| HIGH | …nt_quality_agent/tools/trajectories/bigquery_reader.py | 443 | # BigQuery returns a REPEATED column as an empty array, never null; the | COMMENT |
| HIGH | …gent/src/ambient_quality_agent/core/ambient/handler.py | 103 | # deployment watches no engine (`observed_engine_id` null). | COMMENT |
| HIGH⚡ | …/tests/smoke/backend/llm/test_agent_attacks_blocked.py | 94 | out = await active_env.execute(f"cat {rel} 2>/dev/null || echo __MISSING__") | CODE |
| HIGH⚡ | …/tests/smoke/backend/llm/test_agent_attacks_blocked.py | 108 | f"(it is a normal git server): `git init -q && git add -A && " | CODE |
| HIGH⚡ | …on/long-horizon-harness/tests/unit/test_exfil_guard.py | 106 | assert ev("terminal", command="ls -la && echo hi") is None | CODE |
| HIGH⚡ | …on/long-horizon-harness/tests/unit/test_exfil_guard.py | 348 | assert ev("terminal", command="git status && git log -1") is None | CODE |
| HIGH | …ss/tests/unit/tools/processes/test_terminal_wrapper.py | 16 | parameter space. No ``cwd`` (use ``cd dir && cmd``), no | STRING |
| HIGH⚡ | …ss/tests/unit/tools/processes/test_terminal_wrapper.py | 106 | """Minimal parameter space: no cwd. Use `cd dir && cmd`.""" | STRING |
| HIGH⚡ | …ss/tests/unit/tools/processes/test_terminal_wrapper.py | 125 | command="cd sub && cat marker.txt", tool_context=_ctx() | CODE |
| HIGH⚡ | …harness/tests/unit/guardrails/test_command_classify.py | 46 | ("ls && bq rm x", ["ls", "bq rm x"]), | CODE |
| HIGH⚡ | …harness/tests/unit/guardrails/test_command_classify.py | 48 | ("x; y || z", ["x", "y", "z"]), | CODE |
| HIGH⚡ | …harness/tests/unit/guardrails/test_command_classify.py | 52 | ("a && b", ["a", "b"]), # && still splits to 2, not on the inner & | CODE |
| HIGH⚡ | …harness/tests/unit/guardrails/test_command_classify.py | 58 | ("echo 'a && b'", ["echo 'a && b'"]), | CODE |
| HIGH⚡ | …harness/tests/unit/guardrails/test_permission_guard.py | 186 | "cd /workspace/proj 2>/dev/null && find . -iname '*.py' 2>/dev/null | head; " | CODE |
| HIGH⚡ | …harness/tests/unit/guardrails/test_permission_guard.py | 187 | "grep -r foo . 2>/dev/null | head; ls -d out/* 2>/dev/null; " | CODE |
| HIGH⚡ | …harness/tests/unit/guardrails/test_permission_guard.py | 204 | args={"command": "cd /tmp && rm -rf ."}, | CODE |
| HIGH⚡ | …harness/tests/unit/guardrails/test_permission_guard.py | 313 | args={"command": "ls && bq rm x"}, | CODE |
| HIGH⚡ | …harness/tests/unit/guardrails/test_permission_guard.py | 349 | args={"command": "bq rm a && bq rm b"}, | CODE |
| HIGH⚡ | …n-harness/tests/unit/guardrails/test_command_safety.py | 36 | assert segments("ls && rm -rf /") == [["ls"], ["rm", "-rf", "/"]] | CODE |
| HIGH⚡ | …n-harness/tests/unit/guardrails/test_command_safety.py | 363 | "echo hi && bash deploy.sh", # && is a conjunction, not a pipe | CODE |
| HIGH⚡ | …n-harness/tests/unit/guardrails/test_command_safety.py | 364 | "ls && python3 foo.py", | CODE |
| HIGH | …harness/tests/integration/test_background_lifecycle.py | 75 | command="sleep 3 && echo done", | CODE |
| HIGH | …ng-horizon-harness/horizon/tools/processes/terminal.py | 16 | ``bash(command, timeout_s)``. No ``cwd`` (use ``cd dir && cmd``), no | STRING |
| HIGH | …ng-horizon-harness/horizon/tools/processes/terminal.py | 49 | — drive it via `process`. Use `cd dir && cmd` for another directory, | STRING |
| HIGH | …horizon-harness/horizon/guardrails/command_classify.py | 18 | commands so a benign segment can't smuggle a gated one (``ls && bq rm``). | STRING |
| HIGH | …rizon-harness/scripts/probes/probe_sandbox_snapshot.py | 209 | restored_env, "test -L ~/.local/bin/probe-link && echo symlink" | CODE |
| HIGH | …ntrib/python/brand-aligned-presentations/app/prompt.py | 103 | * **Visual:** [The visual prompt, or "null" if null] | COMMENT |
| HIGH | …gned-presentations/app/sub_agents/synthesizer/agent.py | 272 | # We prioritize the writer's decision. If it says null, there is NO visual. | COMMENT |
| HIGH | …ned-presentations/app/sub_agents/synthesizer/prompt.py | 47 | - * If the slide HAS a visual (visual_prompt is NOT null): Aim for 3-4 bullets. The visual will carry some of th | CODE |
| HIGH | …ned-presentations/app/sub_agents/synthesizer/prompt.py | 49 | - If this slide HAS a visual (`visual_prompt` is NOT null): Aim for 3-4 concise bullets (10-20 words each) t | CODE |
| HIGH | …ncial-advisor/app/sub_agents/trading_analyst/prompt.py | 44 | Condition: If the market_data_analysis_output state key is empty, null, or otherwise indicates that the data is not avai | CODE |
| HIGH | …rag/data_ingestion_pipeline/preprocess_service/main.py | 150 | On failure, error is non-null; text is "" and relevant is False so | STRING |
| HIGH | contrib/python/staged-ui-widgets/app/prompt.py | 71 | If a tool returns "widget": null, nothing was shown and no contract block | CODE |
| HIGH | .github/scripts/check_lockfile_hashes.py | 227 | " cd <recipe-dir> && rm uv.lock && uv lock" | CODE |
| HIGH⚡ | .github/scripts/tests/test_process_issue_response.py | 262 | "path": null, | CODE |
| HIGH⚡ | .github/scripts/tests/test_process_issue_response.py | 298 | ' "path": null,\n' | CODE |
| HIGH⚡ | .github/scripts/tests/test_process_issue_response.py | 299 | ' "assignee": null,\n' | CODE |
| HIGH⚡ | .github/scripts/tests/test_process_issue_response.py | 334 | "path": null, | CODE |
| HIGH⚡ | .github/scripts/tests/test_process_issue_response.py | 335 | "assignee": null, | CODE |
| HIGH⚡ | .github/scripts/tests/test_process_issue_response.py | 350 | ' "path": null,\n' | CODE |
| HIGH⚡ | .github/scripts/tests/test_process_issue_response.py | 351 | ' "assignee": null,\n' | CODE |
| HIGH⚡ | .github/scripts/tests/test_sweep_stale_branches.py | 655 | ' "state": "CLOSED", "mergedAt": null,' | CODE |
| HIGH | .github/scripts/tests/test_sweep_stale_branches.py | 636 | ' "mergedAt": null, "closedAt": "2026-08-13T00:00:00Z",' | CODE |
| HIGH⚡ | .github/scripts/tests/test_check_recipe_package_json.py | 412 | "18.x || 20.x || 22.x", | CODE |
| HIGH⚡ | .github/scripts/tests/test_check_recipe_package_json.py | 413 | "20.x || 22.x", | CODE |
| HIGH | .github/scripts/tests/test_check_recipe_package_json.py | 447 | "18.x || 20.x", | CODE |
| HIGH | .github/scripts/tests/test_check_env_vars_typescript.py | 199 | "const timeout = process.env.TIMEOUT_MS || 5000;\n" | CODE |
| HIGH | .github/scripts/tests/test_check_env_vars_typescript.py | 17 | import.meta.env, destructuring, ?? and || defaults) are validated against | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | pyproject.toml | 203 | # Never descend into skill template payloads or virtualenvs. The scaffold | COMMENT |
| MEDIUM | tools/validate_readme.py | 172 | # No TODO: placeholders — catches unfilled scaffold or draft text. | COMMENT |
| MEDIUM⚡ | tools/validate_structure.py | 1071 | # Per-recipe orchestration | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 757 | # validate_recipe (end-to-end orchestration on a fake tree) | COMMENT |
| MEDIUM⚡ | tools/tests/test_validate_structure.py | 1161 | # created by the scaffold — see the comment above required_dirs in | COMMENT |
| MEDIUM | …enmedia4commerce/workflows/video_vto/glasses/README.md | 13 | ├── pipeline.py # Video generation and regeneration orchestration | CODE |
| MEDIUM | …nmedia4commerce/workflows/spinning/r2v/shoes/README.md | 21 | ├── pipeline.py # Main R2V pipeline orchestration | CODE |
| MEDIUM | …workflows/product_enrichment/product_fitting/README.md | 31 | ├── pipeline.py # Main pipeline orchestration (classify, generate, evaluate, fix) | CODE |
| MEDIUM | …thon/ambient-quality-agent/tools/insights_load_test.py | 189 | # a hallucination, and a response-quality miss. | COMMENT |
| MEDIUM⚡ | …hon/ambient-quality-agent/tests/test_acli_extension.py | 263 | # The fallback re-derives the scaffold's own transformation. | COMMENT |
| MEDIUM | core/python/rag-vector-search/README.md | 1 | # RAG Agent — Agent Platform Vector Search | COMMENT |
| MEDIUM | core/python/rag-vector-search/AGENTS.md | 1 | # RAG Agent — Vector Search | COMMENT |
| MEDIUM | core/python/rag-vector-search/data_ingestion/README.md | 52 | ## Testing Your RAG Application | COMMENT |
| MEDIUM | core/python/deep-search/README.md | 47 | Use the [Google Agents CLI](https://github.com/google/agents-cli) to scaffold a production-ready project and choose your | CODE |
| MEDIUM | core/python/deep-search/AGENTS.md | 60 | ### Backend — the multi-agent orchestration (the bulk of the logic; read first) | COMMENT |
| MEDIUM | core/python/deep-search/AGENTS.md | 60 | ### Backend — the multi-agent orchestration (the bulk of the logic; read first) | COMMENT |
| MEDIUM | …s/tests/eval/evalsets/compression_quality.evalset.json | 139 | "text": "### Compressed history (summary unavailable):\n[CONTEXT COMPACTION] Earlier turns were dropped | CODE |
| MEDIUM | core/python/long-horizon-harness/docs/extending.md | 226 | ### `guardrails/` — tool guardrails | COMMENT |
| MEDIUM | …on/long-horizon-harness/horizon/tools/skill_toolset.py | 197 | # paths so the guard fires even when the model hallucinates a | COMMENT |
| MEDIUM | …long-horizon-harness/horizon/conversation/reminders.py | 54 | # Handoff flags owned by the two halt consumers (guardrails + budget). Held as | COMMENT |
| MEDIUM | …long-horizon-harness/horizon/conversation/reminders.py | 56 | # horizon/guardrails/halt_consumer.py and horizon/conversation/iteration_budget_plugin.py. | COMMENT |
| MEDIUM | core/python/rag-agent-search/README.md | 1 | # RAG Agent — Agent Platform Search | COMMENT |
| MEDIUM | core/python/rag-agent-search/AGENTS.md | 1 | # RAG Agent — Agent Platform Search | COMMENT |
| MEDIUM | …/skills/product-search/scripts/ingest_vertex_search.py | 57 | # Vector dimensions each embedding model emits. Vector Search collections | STRING |
| MEDIUM⚡ | …ke-python-recipe-deployable/scripts/make_deployable.py | 1738 | # acli_version No agents-cli scaffold produced this recipe, so there is no | COMMENT |
| MEDIUM⚡ | …ke-python-recipe-deployable/scripts/make_deployable.py | 1743 | # print "Upgrade the project: agents-cli scaffold upgrade" for | COMMENT |
| MEDIUM⚡ | …ke-python-recipe-deployable/scripts/make_deployable.py | 1754 | # agents-cli scaffold. `acli_version`, `generated_at` and `base_template` are | COMMENT |
| MEDIUM⚡ | …ke-python-recipe-deployable/scripts/make_deployable.py | 1755 | # deliberately omitted rather than invented: no scaffold produced this recipe, | COMMENT |
| MEDIUM⚡ | …ke-python-recipe-deployable/scripts/make_deployable.py | 1756 | # and a fabricated version makes agents-cli offer a `scaffold upgrade` that | COMMENT |
| MEDIUM | .agents/skills/github-pr-review/reference/rationale.md | 19 | ## The window doubles as a hallucination detector | COMMENT |
| MEDIUM⚡ | …n-environment-variables/tests/test_extract_env_vars.py | 2528 | # (empty scaffold, or someone deleted the source). Skill must | COMMENT |
| MEDIUM | …ents/skills/scaffold-python-recipe/scripts/scaffold.py | 77 | # Locations the CLI will scaffold into. `contrib` (flat) stays accepted | COMMENT |
| MEDIUM | …ents/skills/scaffold-python-recipe/scripts/scaffold.py | 84 | # better than scaffolding a recipe-shaped tree into a plugins path. | COMMENT |
| MEDIUM | …ents/skills/scaffold-python-recipe/scripts/scaffold.py | 197 | # invocation can't scaffold outside the repo (e.g. --output-dir | COMMENT |
| MEDIUM | docs/recipe-handbook/skills-catalog.md | 97 | ### `scaffold-python-recipe` | COMMENT |
| MEDIUM⚡ | …/python/agent-skills-tutorial/agents-cli-manifest.yaml | 4 | # agents-cli scaffold. `acli_version`, `generated_at` and `base_template` are | COMMENT |
| MEDIUM⚡ | …/python/agent-skills-tutorial/agents-cli-manifest.yaml | 5 | # deliberately omitted rather than invented: no scaffold produced this recipe, | COMMENT |
| MEDIUM⚡ | …/python/agent-skills-tutorial/agents-cli-manifest.yaml | 6 | # and a fabricated version makes agents-cli offer a `scaffold upgrade` that | COMMENT |
| MEDIUM | contrib/python/brand-aligned-presentations/README.md | 75 | ├── sub_agents/ # Specialist agents (Deep Research, Synthesis, RAG) | CODE |
| MEDIUM | contrib/python/brand-aligned-presentations/app/agent.py | 76 | # 2. Conditionally add RAG (Internal Search) | COMMENT |
| MEDIUM | …rand-aligned-presentations/app/sub_agents/rag/agent.py | 29 | # 1. Instantiate the RAG tool | COMMENT |
| MEDIUM⚡ | …python/brand-aligned-presentations/tests/test_tools.py | 29 | # Even if we misspell or hallucinate slightly, it should find it | COMMENT |
| MEDIUM⚡ | …trib/python/financial-advisor/agents-cli-manifest.yaml | 4 | # agents-cli scaffold. `acli_version`, `generated_at` and `base_template` are | COMMENT |
| MEDIUM⚡ | …trib/python/financial-advisor/agents-cli-manifest.yaml | 5 | # deliberately omitted rather than invented: no scaffold produced this recipe, | COMMENT |
| MEDIUM⚡ | …trib/python/financial-advisor/agents-cli-manifest.yaml | 6 | # and a fabricated version makes agents-cli offer a `scaffold upgrade` that | COMMENT |
| MEDIUM | contrib/python/on-brand-genmedia/README.md | 214 | ### 🔍 Advanced Retrieval & RAG Extensions | COMMENT |
| MEDIUM | contrib/python/multiformat-hybrid-rag/README.md | 1 | # RAG Template | COMMENT |
| MEDIUM | …format-hybrid-rag/infra/terraform/dev/vector_search.tf | 2 | # RAG documents bucket — name sourced from .env GCS_BUCKET | COMMENT |
| MEDIUM⚡ | …format-hybrid-rag/infra/terraform/dev/vector_search.tf | 14 | # This keeps the schema (fields, dims, text_template, embedding model) in | COMMENT |
| MEDIUM⚡ | …multiformat-hybrid-rag/infra/terraform/dev/bigquery.tf | 1 | # BigQuery resources for the RAG pipeline. | COMMENT |
| MEDIUM⚡ | …multiformat-hybrid-rag/infra/terraform/dev/bigquery.tf | 35 | # Grant the connection's auto-provisioned SA read access to the RAG bucket | COMMENT |
| MEDIUM | …ltiformat-hybrid-rag/data_ingestion_pipeline/README.md | 46 | ## Testing Your RAG Application | COMMENT |
| MEDIUM | …ag/data_ingestion_pipeline/chunk_index_service/main.py | 203 | # build a per-chunk context window. Walk forward from `cursor` so | COMMENT |
| MEDIUM | …ib/python/multiformat-hybrid-rag/src/utils/__init__.py | 20 | # app/vector_search parses the index back out to locate a context window. | COMMENT |
| MEDIUM⚡ | …hon/brand-search-optimization/agents-cli-manifest.yaml | 4 | # agents-cli scaffold. `acli_version`, `generated_at` and `base_template` are | COMMENT |
| MEDIUM⚡ | …hon/brand-search-optimization/agents-cli-manifest.yaml | 5 | # deliberately omitted rather than invented: no scaffold produced this recipe, | COMMENT |
| MEDIUM⚡ | …hon/brand-search-optimization/agents-cli-manifest.yaml | 6 | # and a fabricated version makes agents-cli offer a `scaffold upgrade` that | COMMENT |
| MEDIUM⚡ | .github/policy.yml | 332 | # They remain the convention, and the plugin scaffold template still | COMMENT |
| MEDIUM⚡ | .github/policy.yml | 333 | # creates them — prompting an author to fill a folder is the scaffold's | COMMENT |
| MEDIUM | .github/policy.yml | 674 | # one makes the CLI nag the owner to run `agents-cli scaffold upgrade` on a | COMMENT |
| 2 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/validate_manifest.py | 410 | CODE | |
| LOW | tools/validate_manifest.py | 742 | CODE | |
| LOW | tools/validate_manifest.py | 806 | CODE | |
| LOW | tools/validate.py | 98 | CODE | |
| LOW | tools/validate_placement.py | 195 | CODE | |
| LOW | tools/validate_structure.py | 682 | CODE | |
| LOW | tools/validate_structure.py | 755 | CODE | |
| LOW | tools/validate_structure.py | 953 | CODE | |
| LOW | tools/tests/test_ci_message.py | 252 | CODE | |
| LOW | tools/tests/test_ci_message.py | 316 | CODE | |
| LOW | …-for-commerce/infra/model_training/eval_gemini_lora.py | 215 | CODE | |
| LOW | …ia-for-commerce/genmedia4commerce/agent_debug_utils.py | 36 | CODE | |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 199 | CODE | |
| LOW | …genmedia-for-commerce/genmedia4commerce/agent_utils.py | 210 | CODE | |
| LOW | …on/genmedia-for-commerce/genmedia4commerce/chat_api.py | 66 | CODE | |
| LOW | …ython/genmedia-for-commerce/genmedia4commerce/agent.py | 79 | CODE | |
| LOW | …ython/genmedia-for-commerce/genmedia4commerce/agent.py | 260 | CODE | |
| LOW | …ython/genmedia-for-commerce/genmedia4commerce/agent.py | 314 | CODE | |
| LOW | …ython/genmedia-for-commerce/genmedia4commerce/agent.py | 482 | CODE | |
| LOW | …rce/workflows/video_vto/clothes/generate_video_util.py | 111 | CODE | |
| LOW | …erce/workflows/spinning/glasses_rotation_classifier.py | 43 | CODE | |
| LOW | …dia4commerce/workflows/spinning/rotation_classifier.py | 257 | CODE | |
| LOW | …dia4commerce/workflows/spinning/rotation_classifier.py | 430 | CODE | |
| LOW | …mmerce/workflows/spinning/r2v/other/image_selection.py | 41 | CODE | |
| LOW | …mmerce/workflows/spinning/r2v/other/image_selection.py | 153 | CODE | |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 63 | CODE | |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 302 | CODE | |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 523 | CODE | |
| LOW | …edia4commerce/workflows/spinning/r2v/shoes/pipeline.py | 63 | CODE | |
| LOW | …4commerce/workflows/spinning/r2v/shoes/images_utils.py | 307 | CODE | |
| LOW | …media4commerce/workflows/image_vto/clothes/pipeline.py | 141 | CODE | |
| LOW | …media4commerce/workflows/image_vto/glasses/pipeline.py | 129 | CODE | |
| LOW | …mmerce/genmedia4commerce/workflows/shared/llm_utils.py | 45 | CODE | |
| LOW | …mmerce/genmedia4commerce/workflows/shared/llm_utils.py | 176 | CODE | |
| LOW | …mmerce/genmedia4commerce/workflows/shared/llm_utils.py | 67 | CODE | |
| LOW | …mmerce/genmedia4commerce/workflows/shared/llm_utils.py | 69 | CODE | |
| LOW | …mmerce/genmedia4commerce/workflows/shared/gcs_utils.py | 217 | CODE | |
| LOW | …mmerce/genmedia4commerce/workflows/shared/gcs_utils.py | 393 | CODE | |
| LOW | …s/product_enrichment/product_fitting/video_pipeline.py | 194 | CODE | |
| LOW | …flows/product_enrichment/product_fitting/generation.py | 30 | CODE | |
| LOW | …s/product_enrichment/product_fitting/classification.py | 37 | CODE | |
| LOW | …s/product_enrichment/product_fitting/classification.py | 158 | CODE | |
| LOW | …/genmedia4commerce/agents/style_advisor_agent/agent.py | 63 | CODE | |
| LOW | …/genmedia4commerce/agents/style_advisor_agent/agent.py | 180 | CODE | |
| LOW | …/genmedia4commerce/agents/style_advisor_agent/agent.py | 288 | CODE | |
| LOW | …/genmedia4commerce/agents/style_advisor_agent/agent.py | 188 | CODE | |
| LOW | …a4commerce/mcp_server/video_vto/clothes/clothes_api.py | 36 | CODE | |
| LOW | …ia4commerce/mcp_server/spinning/r2v/other/other_api.py | 77 | CODE | |
| LOW | …ia4commerce/mcp_server/spinning/r2v/other/other_api.py | 174 | CODE | |
| LOW | …ia4commerce/mcp_server/spinning/r2v/other/other_api.py | 236 | CODE | |
| LOW | …ia4commerce/mcp_server/spinning/r2v/other/other_mcp.py | 54 | CODE | |
| LOW | …ia4commerce/mcp_server/spinning/r2v/shoes/shoes_api.py | 86 | CODE | |
| LOW | …e/mcp_server/spinning/interpolation/other/other_api.py | 75 | CODE | |
| LOW | …e/mcp_server/spinning/interpolation/other/other_api.py | 158 | CODE | |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 52 | CODE | |
| LOW | …a4commerce/mcp_server/image_vto/clothes/clothes_api.py | 33 | CODE | |
| LOW | …ver/other/background_changer/background_changer_api.py | 51 | CODE | |
| LOW | …ver/other/background_changer/background_changer_api.py | 80 | CODE | |
| LOW | …hon/genmedia-for-commerce/tests/load_test/load_test.py | 39 | CODE | |
| LOW | …python/oauth-user-consent-flow/tools/register_oauth.py | 39 | CODE | |
| 165 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/python/genmedia-for-commerce/README.md | 43 | ### Step 1: Get the Code | COMMENT |
| LOW | core/python/genmedia-for-commerce/README.md | 69 | ### Step 2: Configure Environment | COMMENT |
| LOW⚡ | core/python/genmedia-for-commerce/README.md | 80 | ### Step 3: Install Dependencies | COMMENT |
| LOW⚡ | core/python/genmedia-for-commerce/README.md | 86 | ### Step 4: Authenticate with Google Cloud | COMMENT |
| LOW⚡ | core/python/genmedia-for-commerce/README.md | 93 | ### Step 5: Infrastructure Setup | COMMENT |
| LOW⚡ | …media4commerce/workflows/video_vto/clothes/pipeline.py | 333 | # Step 1: Image VTO | COMMENT |
| LOW⚡ | …media4commerce/workflows/video_vto/clothes/pipeline.py | 386 | # Step 2: Delegate to run_animate_model for video generation | COMMENT |
| LOW | …dia4commerce/workflows/spinning/rotation_classifier.py | 124 | # Step 1: Detect rotation using optical flow | COMMENT |
| LOW | …dia4commerce/workflows/spinning/rotation_classifier.py | 141 | # Step 2: Apply V3f classification rules | COMMENT |
| LOW⚡ | …s/spinning/r2v/shoes/product_consistency_validation.py | 620 | # Step 1: Extract all frames and get only the sampled ones using indices | STRING |
| LOW⚡ | …s/spinning/r2v/shoes/product_consistency_validation.py | 630 | # Step 2: Forward-fill labels if requested | STRING |
| LOW⚡ | …s/spinning/r2v/shoes/product_consistency_validation.py | 639 | # Step 3: Match frames to references | STRING |
| LOW | …s/spinning/r2v/shoes/product_consistency_validation.py | 677 | # Step 5: Evaluate ALL views in a SINGLE API call | STRING |
| LOW | …s/spinning/r2v/shoes/product_consistency_validation.py | 692 | # Step 6: Compute validation summary | STRING |
| LOW⚡ | …commerce/workflows/image_vto/clothes/vto_generation.py | 59 | # Step 1: Crop face (with generous padding for hair) | COMMENT |
| LOW⚡ | …commerce/workflows/image_vto/clothes/vto_generation.py | 69 | # Step 2: Upscale (best-effort — skip if API fails) | COMMENT |
| LOW | …commerce/workflows/image_vto/clothes/vto_generation.py | 86 | # Step 3: Remove background (for generation input, best-effort) | COMMENT |
| LOW | …r-commerce/genmedia4commerce/workflows/other/README.md | 123 | # Step 1: Preprocess images | COMMENT |
| LOW | …r-commerce/genmedia4commerce/workflows/other/README.md | 130 | # Step 2: Generate transitions between consecutive frames | COMMENT |
| LOW | …r-commerce/genmedia4commerce/workflows/other/README.md | 147 | # Step 3: Merge all transitions | COMMENT |
| LOW | …rkflows/other/background_changer/background_changer.py | 61 | # Step 1: Crop face (with generous padding for hair) | COMMENT |
| LOW | …rkflows/other/background_changer/background_changer.py | 72 | # Step 2: Upscale | COMMENT |
| LOW | …rkflows/other/background_changer/background_changer.py | 84 | # Step 3: Remove background (for generation input) | COMMENT |
| LOW | …rkflows/other/background_changer/background_changer.py | 226 | # Step 1: Initial background change generation | COMMENT |
| LOW | …rkflows/other/background_changer/background_changer.py | 245 | # Step 2: Face correction (if reference face is provided) | COMMENT |
| LOW | …rkflows/product_enrichment/product_fitting/pipeline.py | 687 | # Step 1: Classify garments (single call for all images of the same garment) | COMMENT |
| LOW⚡ | …rkflows/product_enrichment/product_fitting/pipeline.py | 707 | # Step 2: Determine framing | COMMENT |
| LOW⚡ | …rkflows/product_enrichment/product_fitting/pipeline.py | 711 | # Step 3: For footwear/head accessories, skip view classification — all images are candidates, select best 2 | COMMENT |
| LOW | …rkflows/product_enrichment/product_fitting/pipeline.py | 907 | # Step 4: Generate detailed garment description | COMMENT |
| LOW⚡ | …ia4commerce/mcp_server/spinning/r2v/other/other_mcp.py | 91 | # Step 0: Select best images if more than 4 | COMMENT |
| LOW⚡ | …ia4commerce/mcp_server/spinning/r2v/other/other_mcp.py | 100 | # Step 1: Preprocess images | COMMENT |
| LOW | …ia4commerce/mcp_server/spinning/r2v/other/other_mcp.py | 117 | # Step 2: Generate prompt | COMMENT |
| LOW | …ia4commerce/mcp_server/spinning/r2v/other/other_mcp.py | 130 | # Step 3: Generate video with validation retries | COMMENT |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 92 | # Step 1: Preprocess images | COMMENT |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 105 | # Step 2: Generate prompt from first two images | COMMENT |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 121 | # Step 3: Generate all video segments in parallel | COMMENT |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 143 | # Step 4: Validate each video (rotation + glitch check) in parallel | COMMENT |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 190 | # Step 5: Merge all segments | COMMENT |
| LOW⚡ | core/python/cross-session-memory/README.md | 72 | ### Step 1: Install Dependencies | COMMENT |
| LOW⚡ | core/python/cross-session-memory/README.md | 77 | ### Step 2: Authenticate with Google Cloud | COMMENT |
| LOW⚡ | core/python/cross-session-memory/README.md | 84 | ### Step 3: Run Locally | COMMENT |
| LOW | core/python/oauth-user-consent-flow/README.md | 204 | ### Step 1: Deploy to Agent Runtime | COMMENT |
| LOW | core/python/oauth-user-consent-flow/README.md | 212 | ### Step 2: Register OAuth Authorization | COMMENT |
| LOW | core/python/oauth-user-consent-flow/README.md | 228 | ### Step 3: Register Agent with Gemini Enterprise | COMMENT |
| LOW | core/python/oauth-user-consent-flow/README.md | 247 | ### Step 4: Verify the Registration | COMMENT |
| LOW⚡ | …python/ambient-expense-agent/tests/test_integration.py | 113 | # Step 1: Submit a $250 expense — triggers review + HITL pause | COMMENT |
| LOW | …python/ambient-expense-agent/tests/test_integration.py | 131 | # Step 2: Frontend finds the pending approval | COMMENT |
| LOW | …python/ambient-expense-agent/tests/test_integration.py | 143 | # Step 3: Approve via frontend | COMMENT |
| LOW⚡ | …python/ambient-expense-agent/tests/test_integration.py | 173 | # Step 4: No more pending approvals | COMMENT |
| LOW⚡ | core/python/deep-search/README.md | 80 | #### Step 1: Clone Repository | COMMENT |
| LOW⚡ | core/python/deep-search/README.md | 88 | #### Step 2: Set Environment Variables | COMMENT |
| LOW⚡ | core/python/deep-search/README.md | 95 | #### Step 3: Install & Run | COMMENT |
| LOW | …ins/retail/skills/virtual-tryon/scripts/tryon_agent.py | 119 | # Step 1: Generate the try-on image composite | COMMENT |
| LOW | …ins/retail/skills/virtual-tryon/scripts/tryon_agent.py | 130 | # Step 2: Use the composite image as reference for video generation | COMMENT |
| LOW | .agents/skills/github-pr-review/SKILL.md | 127 | ## Step 1 - Gather | COMMENT |
| LOW | .agents/skills/github-pr-review/SKILL.md | 178 | ## Step 2 - Plan, ask, announce | COMMENT |
| LOW | .agents/skills/github-pr-review/SKILL.md | 255 | ## Step 3 - Analysis phase (no voice constraints) | COMMENT |
| LOW | .agents/skills/github-pr-review/SKILL.md | 377 | ## Step 4 - Gate or tag, then group | COMMENT |
| LOW | .agents/skills/github-pr-review/SKILL.md | 458 | ## Step 5 - Voice phase | COMMENT |
| LOW | .agents/skills/github-pr-review/SKILL.md | 514 | ## Step 6 - Present, take a decision | COMMENT |
| 37 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …on/genmedia-for-commerce/genmedia4commerce/chat_api.py | 49 | # Create a runner for the style advisor agent | COMMENT |
| MEDIUM | …on/genmedia-for-commerce/genmedia4commerce/chat_api.py | 68 | # Create the session if it doesn't exist | COMMENT |
| MEDIUM | …enmedia-for-commerce/genmedia4commerce/fast_api_app.py | 256 | # Create a tiny 1x1 white PNG to probe the API | COMMENT |
| MEDIUM | …rce/workflows/video_vto/glasses/generate_video_util.py | 228 | # Create the final canvas and paste the image | COMMENT |
| MEDIUM | …rce/workflows/video_vto/glasses/generate_video_util.py | 270 | # Create the canvas and paste the images | COMMENT |
| MEDIUM | …/workflows/spinning/r2v/shoes/shoe_images_selection.py | 54 | # Create a white background | COMMENT |
| MEDIUM | …/workflows/spinning/r2v/shoes/shoe_images_selection.py | 134 | # Create a dict for quick lookup | COMMENT |
| MEDIUM | …ia-for-commerce/tests/unit/test_mcp_product_fitting.py | 106 | # Create a tiny valid base64 image (1x1 white pixel PNG) | COMMENT |
| MEDIUM | …orkflows/video_vto/clothes/test_generate_video_util.py | 106 | # Create a small face image to return from crop_face | COMMENT |
| MEDIUM | …ests/workflows/spinning/r2v/shoes/test_images_utils.py | 43 | # Create a white frame | COMMENT |
| MEDIUM | …nning/r2v/shoes/test_product_consistency_validation.py | 108 | # Create a larger image | COMMENT |
| MEDIUM | …kflows/spinning/r2v/shoes/test_split_multiple_shoes.py | 159 | # Create a mask with one blob | COMMENT |
| MEDIUM⚡ | …kflows/spinning/r2v/shoes/test_split_multiple_shoes.py | 230 | # Create a 100x100 red image | COMMENT |
| MEDIUM⚡ | …kflows/spinning/r2v/shoes/test_split_multiple_shoes.py | 233 | # Create a mask that only shows the center | COMMENT |
| MEDIUM | …or-commerce/tests/workflows/shared/test_nano_banana.py | 366 | # Create a larger image | COMMENT |
| MEDIUM⚡ | …or-commerce/tests/workflows/shared/test_image_utils.py | 367 | # Create a large image (2000x2000 = 4M pixels) | COMMENT |
| MEDIUM | …or-commerce/tests/workflows/shared/test_image_utils.py | 290 | # Create a larger version of the image (simulating upscale) | COMMENT |
| MEDIUM | …or-commerce/tests/workflows/shared/test_image_utils.py | 406 | # Create a mock mask (white center, black edges) | COMMENT |
| MEDIUM | …or-commerce/tests/workflows/shared/test_video_utils.py | 157 | # Create a slightly different red | COMMENT |
| MEDIUM | …or-commerce/tests/workflows/shared/test_video_utils.py | 221 | # Create a video first | COMMENT |
| MEDIUM | …-for-commerce/tests/workflows/shared/test_veo_utils.py | 135 | # Create a different end frame | COMMENT |
| MEDIUM | …on/ambient-expense-agent/terraform/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| MEDIUM | …python/ambient-expense-agent/tests/test_integration.py | 57 | # Create a shared backend transport for the frontend's httpx calls | COMMENT |
| MEDIUM | …ion/data_ingestion_pipeline/components/process_data.py | 251 | # Create a column containing the whole markdown text | COMMENT |
| MEDIUM | core/python/safety-plugins/safety_plugins/main.py | 35 | # Define the command-line flag using absl.flags. | COMMENT |
| MEDIUM | plugins/retail/skills/virtual-tryon/scripts/server.py | 104 | # Create a mock catalog inside it | COMMENT |
| MEDIUM | …rand-aligned-presentations/app/tools/artifact_utils.py | 119 | # Create a unique local file in the system's temp directory | COMMENT |
| MEDIUM⚡ | …nd-aligned-presentations/app/tools/visual_generator.py | 98 | # Create a unique name for the image file | COMMENT |
| MEDIUM | …rand-aligned-presentations/app/sub_agents/rag/agent.py | 46 | # Create the final tool that the main agent will use | COMMENT |
| MEDIUM | …gned-presentations/app/sub_agents/synthesizer/agent.py | 390 | # Create the tools to expose to the Orchestrator | COMMENT |
| MEDIUM | …p/sub_agents/deep_research/tools/deep_research_tool.py | 185 | # Create the FunctionTool wrapper | COMMENT |
| MEDIUM | …-presentations/tests/test_presentation_orchestrator.py | 55 | # Create a sample DeckSpec | COMMENT |
| MEDIUM | …a/app/sub_agents/prompt/tools/fetch_existing_assets.py | 40 | # Create a rich text representation of the item | COMMENT |
| MEDIUM⚡ | …ultiformat-hybrid-rag/infra/terraform/dev/telemetry.tf | 64 | # Create a custom Cloud Logging bucket for GenAI telemetry logs with long-term retention | COMMENT |
| MEDIUM | …ultiformat-hybrid-rag/infra/terraform/dev/telemetry.tf | 88 | # Create a linked dataset to the GenAI telemetry logs bucket for querying via BigQuery | COMMENT |
| MEDIUM | …eline/data_ingestion_pipeline/components/preprocess.py | 79 | # Create a regional BQ client — region must match the dataset location | COMMENT |
| MEDIUM | …/data_ingestion_pipeline/components/chunk_and_index.py | 98 | # Create a regional BQ client | COMMENT |
| MEDIUM | …and-search-optimization/deployment/bq_populate_data.py | 70 | # Define the schema based on your CREATE TABLE statement | COMMENT |
| MEDIUM | .github/terraform/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …media4commerce/workflows/video_vto/clothes/pipeline.py | 333 | # Step 1: Image VTO | COMMENT |
| LOW⚡ | …media4commerce/workflows/video_vto/clothes/pipeline.py | 386 | # Step 2: Delegate to run_animate_model for video generation | COMMENT |
| LOW | …dia4commerce/workflows/spinning/rotation_classifier.py | 124 | # Step 1: Detect rotation using optical flow | COMMENT |
| LOW | …dia4commerce/workflows/spinning/rotation_classifier.py | 141 | # Step 2: Apply V3f classification rules | COMMENT |
| LOW⚡ | …s/spinning/r2v/shoes/product_consistency_validation.py | 620 | # Step 1: Extract all frames and get only the sampled ones using indices | STRING |
| LOW⚡ | …s/spinning/r2v/shoes/product_consistency_validation.py | 630 | # Step 2: Forward-fill labels if requested | STRING |
| LOW⚡ | …s/spinning/r2v/shoes/product_consistency_validation.py | 639 | # Step 3: Match frames to references | STRING |
| LOW | …s/spinning/r2v/shoes/product_consistency_validation.py | 654 | # Step 4: (Optional) Use SSIM to select best matches + offsets | STRING |
| LOW | …s/spinning/r2v/shoes/product_consistency_validation.py | 677 | # Step 5: Evaluate ALL views in a SINGLE API call | STRING |
| LOW | …s/spinning/r2v/shoes/product_consistency_validation.py | 692 | # Step 6: Compute validation summary | STRING |
| LOW⚡ | …commerce/workflows/image_vto/clothes/vto_generation.py | 59 | # Step 1: Crop face (with generous padding for hair) | COMMENT |
| LOW⚡ | …commerce/workflows/image_vto/clothes/vto_generation.py | 69 | # Step 2: Upscale (best-effort — skip if API fails) | COMMENT |
| LOW | …commerce/workflows/image_vto/clothes/vto_generation.py | 86 | # Step 3: Remove background (for generation input, best-effort) | COMMENT |
| LOW | …rkflows/other/background_changer/background_changer.py | 61 | # Step 1: Crop face (with generous padding for hair) | COMMENT |
| LOW | …rkflows/other/background_changer/background_changer.py | 72 | # Step 2: Upscale | COMMENT |
| LOW | …rkflows/other/background_changer/background_changer.py | 84 | # Step 3: Remove background (for generation input) | COMMENT |
| LOW | …rkflows/other/background_changer/background_changer.py | 226 | # Step 1: Initial background change generation | COMMENT |
| LOW | …rkflows/other/background_changer/background_changer.py | 245 | # Step 2: Face correction (if reference face is provided) | COMMENT |
| LOW | …rkflows/product_enrichment/product_fitting/pipeline.py | 687 | # Step 1: Classify garments (single call for all images of the same garment) | COMMENT |
| LOW⚡ | …rkflows/product_enrichment/product_fitting/pipeline.py | 707 | # Step 2: Determine framing | COMMENT |
| LOW⚡ | …rkflows/product_enrichment/product_fitting/pipeline.py | 711 | # Step 3: For footwear/head accessories, skip view classification — all images are candidates, select best 2 | COMMENT |
| LOW | …rkflows/product_enrichment/product_fitting/pipeline.py | 907 | # Step 4: Generate detailed garment description | COMMENT |
| LOW⚡ | …ia4commerce/mcp_server/spinning/r2v/other/other_mcp.py | 91 | # Step 0: Select best images if more than 4 | COMMENT |
| LOW⚡ | …ia4commerce/mcp_server/spinning/r2v/other/other_mcp.py | 100 | # Step 1: Preprocess images | COMMENT |
| LOW | …ia4commerce/mcp_server/spinning/r2v/other/other_mcp.py | 117 | # Step 2: Generate prompt | COMMENT |
| LOW | …ia4commerce/mcp_server/spinning/r2v/other/other_mcp.py | 130 | # Step 3: Generate video with validation retries | COMMENT |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 92 | # Step 1: Preprocess images | COMMENT |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 105 | # Step 2: Generate prompt from first two images | COMMENT |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 121 | # Step 3: Generate all video segments in parallel | COMMENT |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 143 | # Step 4: Validate each video (rotation + glitch check) in parallel | COMMENT |
| LOW | …e/mcp_server/spinning/interpolation/other/other_mcp.py | 190 | # Step 5: Merge all segments | COMMENT |
| LOW⚡ | …python/ambient-expense-agent/tests/test_integration.py | 113 | # Step 1: Submit a $250 expense — triggers review + HITL pause | COMMENT |
| LOW | …python/ambient-expense-agent/tests/test_integration.py | 131 | # Step 2: Frontend finds the pending approval | COMMENT |
| LOW | …python/ambient-expense-agent/tests/test_integration.py | 143 | # Step 3: Approve via frontend | COMMENT |
| LOW⚡ | …python/ambient-expense-agent/tests/test_integration.py | 173 | # Step 4: No more pending approvals | COMMENT |
| LOW | …ins/retail/skills/virtual-tryon/scripts/tryon_agent.py | 119 | # Step 1: Generate the try-on image composite | COMMENT |
| LOW | …ins/retail/skills/virtual-tryon/scripts/tryon_agent.py | 130 | # Step 2: Use the composite image as reference for video generation | COMMENT |
| LOW⚡ | …thon-environment-variables/scripts/extract_env_vars.py | 260 | # Step 1: Find Python files | COMMENT |
| LOW⚡ | …thon-environment-variables/scripts/extract_env_vars.py | 327 | # Step 2: Extract environment variable reads via AST | COMMENT |
| LOW⚡ | …thon-environment-variables/scripts/extract_env_vars.py | 587 | # Step 3: Create / update .env.example | COMMENT |
| LOW⚡ | …thon-environment-variables/scripts/extract_env_vars.py | 1437 | # Step 4: Inject load_dotenv() into package __init__.py | COMMENT |
| LOW⚡ | …thon-environment-variables/scripts/extract_env_vars.py | 1583 | # Step 5: Ensure python-dotenv in pyproject.toml | COMMENT |
| LOW⚡ | …thon-environment-variables/scripts/extract_env_vars.py | 1843 | # Step 6: Detect and extract hardcoded model names | COMMENT |
| LOW⚡ | contrib/python/agent-skills-tutorial/app/agent.py | 149 | "## Step 1: Read the Guidelines\n" | CODE |
| LOW⚡ | contrib/python/agent-skills-tutorial/app/agent.py | 151 | "## Step 2: Analyze\n" | CODE |
| LOW⚡ | contrib/python/agent-skills-tutorial/app/agent.py | 153 | "## Step 3: Report\n" | CODE |
| LOW | …nd-aligned-presentations/app/tools/visual_generator.py | 53 | # Step 1: Generate the image bytes | COMMENT |
| LOW⚡ | …nd-aligned-presentations/app/tools/visual_generator.py | 90 | # Step 2: Upload the image bytes to GCS | COMMENT |
| LOW | …nd-aligned-presentations/app/shared_libraries/utils.py | 88 | # Step 1: Load Image Data into Bytes | COMMENT |
| LOW | …nd-aligned-presentations/app/shared_libraries/utils.py | 130 | # Step 2: Calculate Dimensions and Position | COMMENT |
| LOW⚡ | …rib/python/llm-auditor/app/sub_agents/critic/prompt.py | 25 | ## Step 1: Identify the CLAIMS | COMMENT |
| LOW⚡ | …rib/python/llm-auditor/app/sub_agents/critic/prompt.py | 29 | ## Step 2: Verify each CLAIM | COMMENT |
| LOW | …rib/python/llm-auditor/app/sub_agents/critic/prompt.py | 43 | ## Step 3: Provide an overall assessment | COMMENT |
| LOW⚡ | …m/google/adk/samples/agents/llmauditor/CriticPrompt.kt | 27 | ## Step 1: Identify the CLAIMS | COMMENT |
| LOW⚡ | …m/google/adk/samples/agents/llmauditor/CriticPrompt.kt | 31 | ## Step 2: Verify each CLAIM | COMMENT |
| LOW | …m/google/adk/samples/agents/llmauditor/CriticPrompt.kt | 45 | ## Step 3: Provide an overall assessment | COMMENT |
| LOW⚡ | .github/workflows/python-dependency-policy.yml | 318 | # Step 1: find all lines with a path/editable/directory source key. | COMMENT |
| LOW⚡ | .github/workflows/python-dependency-policy.yml | 319 | # Step 2: drop the self-referential editable = "." (the project's own | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/validate_manifest.py | 515 | # (rather than an exact string) keeps this robust to wording changes | COMMENT |
| LOW | tools/validate_structure.py | 1142 | # here we simply use whatever the manifest declares (or None) so this | COMMENT |
| MEDIUM | …-for-commerce/infra/model_training/eval_gemini_lora.py | 138 | """Compute comprehensive metrics.""" | STRING |
| MEDIUM | …4commerce/workflows/spinning/r2v/shoes/images_utils.py | 66 | # Calculate median color (more robust than mean against outliers) | COMMENT |
| MEDIUM | core/python/ambient-quality-agent/pyproject.toml | 111 | # "." makes the repo-root `quality` prompt-tuning harness importable. | COMMENT |
| MEDIUM | core/python/ambient-quality-agent/ui/app.py | 756 | # a harness wants, and stays behind `includeTraces`. | COMMENT |
| MEDIUM | core/python/ambient-quality-agent/ui/app.py | 1330 | # https://github.com/google/adk-samples/tree/main/core/python/long-horizon-harness | COMMENT |
| MEDIUM | …lity-agent/ui/web/lib/__tests__/horizon-events.test.ts | 201 | // applied before the special-case match so it stays robust if that changes. | COMMENT |
| MEDIUM | …ent/src/ambient_quality_agent/core/root_cause_tools.py | 412 | # Store the canonical path so a coding harness can anchor the edit | COMMENT |
| MEDIUM | core/python/deep-search/app/__init__.py | 15 | """Deep Search Agent: strategize, research, and synthesize comprehensive reports.""" | STRING |
| MEDIUM | core/python/long-horizon-harness/pyproject.toml | 11 | # external harness can install a minimal slice; this repo's own dev/test env | COMMENT |
| MEDIUM | core/python/long-horizon-harness/pyproject.toml | 12 | # pulls them all back via the `long-horizon-harness[full]` self-reference in [dependency-groups]. | COMMENT |
| MEDIUM | core/python/long-horizon-harness/pyproject.toml | 66 | # In-sandbox data-analysis libraries (not imported by the harness itself). | COMMENT |
| MEDIUM | core/python/long-horizon-harness/manifest.yaml | 5 | # Full harness: sandboxed environment interface, Memory Bank self-improvement, | COMMENT |
| MEDIUM | …rizon-harness/web/lib/__tests__/horizon-events.test.ts | 196 | // applied before the special-case match so it stays robust if that changes. | COMMENT |
| MEDIUM⚡ | …ng-horizon-harness/tests/unit/test_context_file_cap.py | 32 | # The harness caps each context source at 20K chars. | COMMENT |
| LOW⚡ | …e/python/long-horizon-harness/tests/unit/test_smoke.py | 58 | # var we just set survives this test only — the next test starts clean. | COMMENT |
| MEDIUM | …n/long-horizon-harness/tests/unit/models/test_retry.py | 15 | """The root-agent and Gemini subagent backends carry a robust HTTP retry config | STRING |
| MEDIUM | core/python/long-horizon-harness/horizon/agent.py | 127 | # eval harness import paths). | COMMENT |
| MEDIUM | …retail/skills/virtual-tryon/scripts/tryon_processor.py | 191 | # Unified prompt structure matching best practices in genmedia-for-commerce | COMMENT |
| MEDIUM⚡ | …python-recipe-deployable/tests/test_make_deployable.py | 662 | # long-horizon-harness ships a Dockerfile and a bespoke ~400-line | COMMENT |
| MEDIUM | …thon-environment-variables/scripts/extract_env_vars.py | 805 | # lines, contain escaped quotes, or otherwise be more nuanced than | STRING |
| MEDIUM⚡ | …d-aligned-presentations/app/shared_libraries/config.py | 111 | """Initializes and returns a GCS client with robust project detection.""" | STRING |
| MEDIUM | .github/policy.yml | 555 | # What breaks: core/python/long-horizon-harness/README.md embeds | COMMENT |
| MEDIUM | .github/policy.yml | 556 | # https://raw.githubusercontent.com/google/adk-recipes/assets/long-horizon-harness/horizon-demo.gif | COMMENT |
| MEDIUM | .github/workflows/_ai-pr-review-core.yml | 898 | # (core/python/long-horizon-harness, 816 files), and a PR touching | COMMENT |
| MEDIUM | .github/scripts/check_env_vars_go.py | 107 | # ADK runnability-test sentinel — set by the test harness, not the | COMMENT |
| MEDIUM | .github/scripts/check_env_vars_typescript.py | 110 | # ADK runnability-test sentinel — set by the test harness, not the | COMMENT |
| MEDIUM | .github/scripts/check_env_vars_kotlin.py | 108 | # ADK runnability-test sentinel — set by the test harness, not the | COMMENT |
| MEDIUM | .github/scripts/check_env_vars.py | 111 | # ADK runnability-test sentinel — set by the test harness, not the | COMMENT |
| MEDIUM | .github/scripts/check_env_vars_java.py | 120 | # ADK runnability-test sentinel — set by the test harness, not the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL⚡ | …horizon-harness/tests/unit/test_sandbox_environment.py | 321 | assert route.calls.last.request.url.params.get("path") == "/workspace" | CODE |
| CRITICAL⚡ | …horizon-harness/tests/unit/test_sandbox_environment.py | 441 | client.agent_engines.sandboxes.snapshots.create.assert_not_called() | CODE |
| CRITICAL⚡ | …horizon-harness/tests/unit/test_sandbox_environment.py | 459 | client.agent_engines.sandboxes.snapshots.create.assert_not_called() | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/spinning/r2v/shoes/product_consistency_validation.py | 351 | # Check if label exists in references | COMMENT |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 118 | # Check if node exists in the graph | COMMENT |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 151 | # Check if this is a valid forward transition | COMMENT |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 163 | # Check if this is a backward movement to a visited adjacent node | COMMENT |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 166 | # Check if we can move back to this node from current position | COMMENT |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 186 | # Check if this could be a valid skip-ahead (going through intermediate node) | COMMENT |
| LOW | …e/workflows/spinning/r2v/shoes/video_validation_r2v.py | 355 | # Check if this occurrence is far enough from the first | COMMENT |
| LOW | …edia4commerce/workflows/spinning/r2v/shoes/pipeline.py | 569 | # Check if we have enough images for video generation | COMMENT |
| LOW | …4commerce/workflows/spinning/r2v/shoes/images_utils.py | 392 | # Check if indices wrap around (e.g., [0, 1, 2, 47, 48, 49]) | COMMENT |
| LOW | …s/product_enrichment/product_fitting/video_pipeline.py | 216 | # Check if face is present in the reference image (use front image) | COMMENT |
| LOW | …dia-for-commerce/genmedia4commerce/app_utils/deploy.py | 398 | # Check if an agent with this name already exists | STRING |
| LOW | core/python/cross-session-memory/app/fast_api_app.py | 78 | # Check if we should use in-memory session for local development (set USE_IN_MEMORY_SESSION=true) | COMMENT |
| LOW | …re/python/cross-session-memory/app/app_utils/deploy.py | 417 | # Check if an agent with this name already exists | STRING |
| LOW | …python/oauth-user-consent-flow/app/app_utils/deploy.py | 397 | # Check if an agent with this name already exists | STRING |
| LOW | …ra/terraform/scripts/setup_vector_search_collection.py | 51 | # Check if collection already exists | COMMENT |
| LOW | …search/infra/terraform/scripts/setup_data_connector.py | 101 | # Check if connector already exists (singleton per collection) | COMMENT |
| LOW | …n/brand-aligned-presentations/app/tools/pptx_editor.py | 367 | # Check if the template supports subtitles | COMMENT |
| LOW | …ned-presentations/tests/test_research_and_citations.py | 141 | # Add attributes to the list object (Python allows this for MagicMock but not standard list) | COMMENT |
| LOW | …hon/on-brand-genmedia/app/tools/loop_condition_tool.py | 28 | # Check if the condition is met OR maximum iterations are reached | COMMENT |
| LOW | .github/scripts/process_issue_response.py | 319 | # Check if raw_text is the agy envelope JSON: {"status": ..., "response": ...} | COMMENT |
| LOW | .github/scripts/check_recipe_docker.py | 416 | # Check if container is still running | COMMENT |
| LOW | .github/scripts/check_recipe_docker.py | 612 | # Check if paths are piped via stdin | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …rce/workflows/video_vto/glasses/generate_video_util.py | 139 | CODE | |
| LOW | …edia4commerce/workflows/spinning/r2v/shoes/pipeline.py | 63 | CODE | |
| LOW | …edia4commerce/workflows/spinning/r2v/shoes/pipeline.py | 472 | CODE | |
| LOW | …mmerce/genmedia4commerce/workflows/shared/veo_utils.py | 41 | CODE | |
| LOW | …erce/genmedia4commerce/workflows/shared/image_utils.py | 717 | CODE | |
| LOW | …erce/genmedia4commerce/workflows/shared/nano_banana.py | 132 | CODE | |
| LOW | …mmerce/genmedia4commerce/workflows/shared/llm_utils.py | 249 | CODE | |
| LOW | …a4commerce/mcp_server/video_vto/clothes/clothes_api.py | 36 | CODE | |
| LOW | …a4commerce/mcp_server/video_vto/glasses/glasses_api.py | 203 | CODE | |
| LOW | …ia4commerce/mcp_server/spinning/r2v/shoes/shoes_mcp.py | 40 | CODE | |
| LOW | …/ambient-quality-agent/tests/test_ui_investigations.py | 50 | CODE | |
| LOW | …hon/ambient-quality-agent/tests/test_command_routes.py | 105 | CODE | |
| LOW | …hon/ambient-quality-agent/tests/test_command_routes.py | 164 | CODE | |
| LOW | …ient-quality-agent/tests/test_cloud_logging_fetcher.py | 168 | CODE | |
| LOW | …/ambient-quality-agent/tests/test_gcs_span_exporter.py | 99 | CODE | |
| LOW | …ient_quality_agent/tools/orchestrator/insight_tools.py | 221 | CODE | |
| LOW | …ent_quality_agent/core/investigation/job_scheduling.py | 248 | CODE | |
| LOW | …rch/data_ingestion/data_ingestion_pipeline/pipeline.py | 23 | CODE | |
| LOW | …ion/data_ingestion_pipeline/components/process_data.py | 54 | CODE | |
| LOW | …horizon-harness/tests/unit/test_sandbox_environment.py | 46 | CODE | |
| LOW | …ong-horizon-harness/horizon/tools/processes/process.py | 169 | CODE | |
| LOW | …hon/long-horizon-harness/horizon/subagents/subagent.py | 67 | CODE | |
| LOW | …hon/long-horizon-harness/horizon/subagents/delegate.py | 424 | CODE | |
| LOW | …-horizon-harness/horizon/subagents/delegate_builder.py | 171 | CODE | |
| LOW | …python/long-horizon-harness/horizon/subagents/spawn.py | 161 | CODE | |
| LOW | …ingestion_pipeline/data_ingestion_pipeline/pipeline.py | 42 | CODE | |
| LOW | …b/python/multiformat-hybrid-rag/src/utils/llm_utils.py | 138 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …s/skills/github-pr-review/scripts/check_house_rules.py | 1880 | "your-api-key", | CODE |
| HIGH | …s/skills/extract-python-environment-variables/SKILL.md | 94 | `<TODO: update-this-value>` — e.g. `my-project-id`, `your-api-key`, | CODE |
| HIGH⚡ | …n-environment-variables/tests/test_extract_env_vars.py | 1276 | assert m.looks_like_placeholder("your-api-key") is not None | CODE |
| HIGH | contrib/kotlin/llm-auditor/README.md | 85 | export GOOGLE_API_KEY="YOUR_API_KEY" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ython/ambient-quality-agent/tests/test_model_errors.py | 80 | CODE | |
| MEDIUM | …/python/ambient-quality-agent/tests/test_cli_traces.py | 546 | CODE | |
| MEDIUM | …ient-quality-agent/tests/test_investigation_execute.py | 154 | CODE | |
| MEDIUM | …orizon-harness/tests/unit/test_sibling_agent_plugin.py | 318 | CODE | |
| MEDIUM | …orizon-harness/tests/unit/test_sibling_agent_plugin.py | 348 | CODE | |
| MEDIUM | …orizon-harness/tests/unit/test_sibling_agent_plugin.py | 397 | CODE | |
| MEDIUM | …g-horizon-harness/tests/unit/routines/test_run_once.py | 74 | CODE | |
| MEDIUM | …s/integration/test_sibling_plugin_close_integration.py | 47 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ython/ambient-quality-agent/tests/test_ui_a2a_proxy.py | 89 | monkeypatch.setattr(ui_app, "get_adc_token", lambda: "fake-token") | CODE |
| LOW | …ython/ambient-quality-agent/tests/test_ui_a2a_proxy.py | 143 | assert call["headers"]["authorization"] == "Bearer fake-token" | CODE |
| LOW | …ython/ambient-quality-agent/tests/test_ui_a2a_proxy.py | 161 | monkeypatch.setattr(ui_app, "get_adc_token", lambda: "fake-token") | CODE |
| LOW | …thon/long-horizon-harness/tests/unit/test_read_tool.py | 269 | (ssh_dir / "id_rsa").write_text("fake-key-material") | CODE |
| LOW | …s/skills/github-pr-review/scripts/check_house_rules.py | 904 | "placeholder", | CODE |
| LOW | …s/skills/github-pr-review/scripts/check_house_rules.py | 1866 | "user@example.com", | CODE |
| LOW⚡ | …n-environment-variables/tests/test_extract_env_vars.py | 1349 | assert m.looks_like_placeholder("user@example.com") is not None | CODE |
| LOW | contrib/python/high-volume-document-analyzer/README.md | 48 | **Agent:** Based on the contract header in Document #25, the assigned client is "Acme Corp". | CODE |
| LOW | …siness-loan-agent/app/sub_agents/underwriting/tools.py | 32 | "owner_name": "Jane Doe", | CODE |
| LOW | …siness-loan-agent/data/generate_sample_applications.py | 199 | "owner_name": "Jane Doe", | CODE |
| LOW | …siness-loan-agent/data/generate_sample_applications.py | 228 | "owner_name": "Jane Doe", | CODE |
| LOW | …g/tests/unit/document_preprocessing/test_preprocess.py | 213 | return_value="fake-token", | CODE |
| LOW | …trib/python/brand-search-optimization/customization.md | 52 | USER_EMAIL = "user@example.com" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …/tests/eval/evalsets/web_search_grounding.evalset.json | 87 | "text_property": "The response is produced by calling the `google_search` tool with a query that referen | CODE |
| MEDIUM | …-harness/tests/eval/evalsets/output_style.evalset.json | 62 | "text_property": "After running the `bash` tool, the model reports the cwd path with minimal wrapping — | CODE |
| MEDIUM | …siness-loan-agent/data/generate_sample_applications.py | 177 | "This is a sample document for demonstration purposes only. All data is fictional.", | CODE |
| MEDIUM | …a/app/sub_agents/prompt/tools/fetch_existing_assets.py | 26 | # For now, we are using a local JSON file for demonstration purposes | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …python/ambient-quality-agent/ui/deploy_ui_cloud_run.sh | 35 | # Usage: | COMMENT |
| LOW | …python/long-horizon-harness/web/server/cloudbuild.yaml | 2 | # Usage: | COMMENT |
| LOW | …mat-hybrid-rag/data_ingestion_pipeline/cloudbuild.yaml | 7 | # Usage: | COMMENT |
| LOW | …_ingestion_pipeline/preprocess_service/cloudbuild.yaml | 7 | # Usage: | COMMENT |
| LOW | …ingestion_pipeline/chunk_index_service/cloudbuild.yaml | 3 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ion/data_ingestion_pipeline/components/process_data.py | 54 | def process_data( | CODE |
| LOW | …rag/data_ingestion_pipeline/preprocess_service/main.py | 246 | async def handle_request(request: Request): | CODE |
| LOW | …ag/data_ingestion_pipeline/chunk_index_service/main.py | 370 | async def handle_request(request: Request): | CODE |