3.2

Adjusted Signal

3.2

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

9.7K

Stars

Language

538.5K

Lines of Code

2.1K

Files

1.4K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 12.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1288 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.2/100 · LOW

Are imports declared and package/API names verified? 63 finding(s).

Agent Over-Engineering Ratio 2.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 121 finding(s).

PR Review Velocity Impact 14.4/100 · LOW

Which changes need focused human review? 1418 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 31MEDIUM 49LOW 1338

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1418 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block1061 hits · 1012 pts

Severity	File	Line	Snippet	Context
LOW	get_helm.sh	1	#!/usr/bin/env bash	COMMENT
LOW	cmd/higress/main.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/hack/oras-retry.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/hack/create-cluster.sh	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/hack/gobuild.sh	1	#!/bin/bash	COMMENT
LOW	tools/hack/kind-load-image.sh	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/hack/build-istio-pilot.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/hack/install-kind-metallb.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/hack/docker-pull-image.sh	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/hack/report_build_info.sh	1	#!/bin/bash	COMMENT
LOW	tools/hack/build-wasm-plugins.sh	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/hack/run-inference-extension-conformance.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/hack/run.sh	1	#!/bin/bash	COMMENT
LOW	tools/hack/build-golang-filters.sh	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/hack/check-golang-filter-envoy-sync.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/hack/build-envoy.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…/hack/verify-inference-extension-conformance-report.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/hack/setup_env.sh	1	#!/bin/bash	COMMENT
LOW	tools/hack/build-istio-image.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/hack/get-hgctl.sh	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/hack/download-inference-extension-conformance.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/hack/setup-istio-env.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/plugin-release/emergency_input_hash.go	1	// Copyright 2026 Higress Authors	COMMENT
LOW	tools/plugin-release/emergency_input_hash_test.go	1	// Copyright 2026 Higress Authors	COMMENT
LOW	tools/plugin-release/bootstrap_backfill_test.go	1	// Copyright 2026 Higress Authors	COMMENT
LOW	tools/plugin-release/model.go	1	// Copyright 2026 Higress Authors	COMMENT
LOW	tools/plugin-release/model.go	241	// BootstrapEvidence declares that this snapshot is the first managed	COMMENT
LOW	tools/plugin-release/model.go	261	ControlDigest string `json:"controlDigest"`	COMMENT
LOW	tools/plugin-release/migration.go	161		COMMENT
LOW	tools/src/kind/pin.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/src/kustomize/pin.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/src/controller-gen/pin.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/src/setup-envtest/pin.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	tools/src/kind-gateway-api/pin.go	1	// Copyright (c) 2026 Alibaba Group Holding Ltd.	COMMENT
LOW	docker/docker-copy.sh	1	#!/bin/bash	COMMENT
LOW	test/inference-extension/manifests/epp-tls.yaml	1	# Copyright (c) 2026 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/e2e_test.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/embed.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	…e/conformance/tests/httproute-exact-domain-fallback.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/go-wasm-bot-detect.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/httproute-timeout.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	…ts/httproute-canary-header-with-customized-header.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/go-wasm-ai-cache.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/httproute-dns-registry.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/go-wasm-opa.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	…onformance/tests/go-wasm-jwt-auth-single-consumer.yaml	1	# Copyright (c) 2024 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/go-wasm-basic-auth.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	…2e/conformance/tests/httproute-match-query-params.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/go-wasm-jwt-auth-deny.yaml	1	# Copyright (c) 2024 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/cpp-wasm-key-auth.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/httproute-consul-httpbin.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	…/e2e/conformance/tests/go-wasm-reroute-match-rule.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	…t/e2e/conformance/tests/httproute-full-path-regex.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/httproute-default-backend.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/httproute-match-path.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/go-wasm-ai-proxy.go	1	// Copyright (c) 2025 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/go-wasm-opa.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/configmap-global.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/httproute-match-headers.go	1	// Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
LOW	test/e2e/conformance/tests/go-wasm-request-block.yaml	1	# Copyright (c) 2022 Alibaba Group Holding Ltd.	COMMENT
1001 more matches not shown…

Structural Annotation Overuse78 hits · 149 pts

Severity	File	Line	Snippet	Context
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2284	// Step 1: Mock SSE channel response headers (GET request response)	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2293	// Step 2: Send SSE endpoint message	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2303	// Step 3: Mock initialize response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2310	// Step 4: Send SSE initialize response in the stream	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2319	// Step 5: Mock notification response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2327	// Step 6: Mock tools/list response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2334	// Step 7: Send SSE tools/list response in the stream	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2408	// Step 1: Mock SSE channel response headers	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2416	// Step 2: Send SSE endpoint message	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2423	// Step 3: Mock initialize response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2430	// Step 4: Send SSE initialize response in the stream	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2437	// Step 5: Mock notification response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2444	// Step 6: Mock tools/call response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2451	// Step 7: Send SSE tools/call response in the stream	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	113	#### Step 1: 配置 Auth0 账户	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	120	#### Step 2: Higress 配置服务来源	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	126	#### Step 3: OIDC 服务 HTTPS 配置	COMMENT
LOW	plugins/wasm-go/extensions/oidc/README.md	152	#### Step 4: Wasm 插件配置	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	202	#### Step 1: Get started with keycloak on docker	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	208	#### Step 2: Higress 配置服务来源	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	214	#### Step 3: Wasm 插件配置	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	259	#### Step 1: 配置 Aliyun OAuth应用	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	263	#### Step 2: Higress 配置服务来源	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	269	#### Step 3: Wasm 插件配置	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	302	#### Step 1: 配置 Github OAuth应用	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	306	#### Step 2: Higress 配置服务来源	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	313	#### Step 3: OIDC 服务 HTTPS 配置	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README.md	317	#### Step 4: Wasm 插件配置	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	101	#### Step 1: Configure Auth0 Account	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	106	#### Step 2: Higress Configure Service Source	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	110	#### Step 3: OIDC Service HTTPS Configuration	COMMENT
LOW	plugins/wasm-go/extensions/oidc/README_EN.md	135	#### Step 4: Wasm Plugin Configuration	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	178	#### Step 1: Get Started with Keycloak on Docker	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	182	#### Step 2: Higress Configure Service Source	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	186	#### Step 3: Wasm Plugin Configuration	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	225	#### Step 1: Configure Aliyun OAuth Application	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	228	#### Step 2: Higress Configure Service Source	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	232	#### Step 3: Wasm Plugin Configuration	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	260	#### Step 1: Configure Github OAuth App	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	264	#### Step 2: Higress Configure Service Source	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	271	#### Step 3: OIDC Service HTTPS Protocol	COMMENT
LOW⚡	plugins/wasm-go/extensions/oidc/README_EN.md	274	#### Step 4: Wasm Plugin Configuration	COMMENT
LOW	plugins/wasm-go/pkg/mcp/server/proxy_tool.go	337	// Step 1: Send initialize request	COMMENT
LOW	plugins/wasm-go/pkg/mcp/server/proxy_tool.go	431	// Step 2: Send notifications/initialized	COMMENT
LOW	.agents/skills/higress-openclaw-integration/SKILL.md	12	### Step 1: Collect Information from User	COMMENT
LOW	.agents/skills/higress-openclaw-integration/SKILL.md	64	### Step 2: Deploy Gateway	COMMENT
LOW	.agents/skills/higress-openclaw-integration/SKILL.md	126	### Step 3: Install OpenClaw Plugin	COMMENT
LOW⚡	.agents/skills/higress-openclaw-integration/SKILL.md	142	# Step 1: Enable the plugin	COMMENT
LOW⚡	.agents/skills/higress-openclaw-integration/SKILL.md	145	# Step 2: Configure provider (interactive - will prompt for Gateway URL, API Key, models, etc.)	COMMENT
LOW⚡	.agents/skills/higress-openclaw-integration/SKILL.md	148	# Step 3: Restart OpenClaw gateway to apply changes	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	149	// Step 1: Get Gateway URL	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	157	// Step 2: Get Console URL (for auto-router configuration)	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	165	// Step 3: Test connection (create a new spinner)	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	181	// Step 4: Get API Key (optional for local gateway)	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	188	// Step 5: Fetch available models (create a new spinner)	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	196	// Step 6: Let user customize model list	COMMENT
LOW	…s/higress-openclaw-integration/scripts/plugin/index.ts	213	// Step 7: Configure default model for auto-routing	COMMENT
LOW	…es/mcp/protocol/2026-07-28/02-rest-to-mcp/README_EN.md	21	## Step 1: Deploy and reset the backend	COMMENT
LOW	…es/mcp/protocol/2026-07-28/02-rest-to-mcp/README_EN.md	28	## Step 2: Inspect the published REST Tool	COMMENT
LOW	…es/mcp/protocol/2026-07-28/02-rest-to-mcp/README_EN.md	44	## Step 3: Call the Tool	COMMENT
18 more matches not shown…

Magic Placeholder Names16 hits · 80 pts

Severity	File	Line	Snippet	Context
HIGH	plugins/wasm-go/extensions/mcp-server/README.md	864	apiKey: your-api-key-here	CODE
HIGH	plugins/wasm-go/extensions/mcp-server/README.md	989	apiKey: your-api-key-here	CODE
HIGH	plugins/wasm-go/extensions/mcp-server/README_EN.md	856	apiKey: your-api-key-here	CODE
HIGH	plugins/wasm-go/extensions/mcp-server/README_EN.md	981	apiKey: your-api-key-here	CODE
HIGH	plugins/wasm-go/extensions/ai-image-reader/README.md	35	"apiKey": "YOUR_API_KEY",	CODE
HIGH	plugins/wasm-go/extensions/ai-image-reader/README_EN.md	31	"apiKey": "YOUR_API_KEY",	CODE
HIGH	plugins/wasm-go/extensions/ai-proxy/README.md	2173	- "YOUR_API_KEY"	CODE
HIGH	plugins/wasm-go/extensions/ai-proxy/README.md	2295	- "YOUR_API_KEY"	CODE
HIGH	plugins/wasm-go/extensions/ai-proxy/README_EN.md	1954	- "YOUR_API_KEY"	CODE
HIGH	plugins/wasm-go/extensions/ai-proxy/README_EN.md	2071	- "YOUR_API_KEY"	CODE
HIGH	plugins/wasm-go/mcp-servers/README.md	201	apiKey: your-api-key-here	CODE
HIGH	plugins/wasm-go/mcp-servers/README.md	313	apiKey: your-api-key-here	CODE
HIGH	plugins/wasm-go/mcp-servers/README.md	400	apiKey: your-api-key-here	CODE
HIGH	plugins/wasm-go/pkg/mcp/validator/example_usage.go	29	"apiKey": "your-api-key"	CODE
HIGH	plugins/wasm-go/pkg/mcp/validator/example_usage.go	185	apiKey: your-api-key	CODE
HIGH	plugins/wasm-go/pkg/mcp/validator/README.md	67	apiKey: your-api-key	CODE

Empty Error Handlers13 hits · 65 pts

Severity	File	Line	Snippet	Context
HIGH	…ns/mcp-server/testdata/runtime-verification/backend.py	30	except json.JSONDecodeError:	CODE
HIGH	…erver/testdata/runtime-verification/routing_backend.py	66	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	…erver/testdata/runtime-verification/routing_backend.py	92	except (queue.Empty, BrokenPipeError, ConnectionResetError):	CODE
HIGH	…p-server/testdata/runtime-verification/auto_backend.py	80	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	…server/testdata/runtime-verification/verify_routing.py	64	except OSError: pass	CODE
HIGH	…-server/testdata/runtime-verification/verify_compat.py	91	except ValueError: pass	CODE
HIGH	…server/testdata/runtime-verification/compat_backend.py	39	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	…server/testdata/runtime-verification/compat_backend.py	137	except (queue.Empty, BrokenPipeError, ConnectionResetError):	CODE
HIGH	…ons/mcp-server/testdata/runtime-verification/verify.py	119	except (OSError, urllib.error.URLError, socket.timeout):	CODE
HIGH	…ons/mcp-server/testdata/runtime-verification/verify.py	172	except (OSError, urllib.error.URLError, socket.timeout):	CODE
HIGH	.agents/skills/agent-session-monitor/main.py	324	except (json.JSONDecodeError, ValueError, KeyError):	CODE
HIGH	.agents/skills/agent-session-monitor/main.py	175	except (json.JSONDecodeError, TypeError):	CODE
HIGH	.agents/skills/agent-session-monitor/main.py	187	except (json.JSONDecodeError, TypeError):	CODE

Hyper-Verbose Identifiers54 hits · 61 pts

Severity	File	Line	Snippet	Context
LOW	plugins/wasm-assemblyscript/assembly/plugin_wrapper.ts	141	function getCurrentTimeMilliseconds(): u64 {	CODE
LOW	plugins/golang-filter/mcp-server/servers/rag/README.md	705	def similarity_search_with_score(self, query: str, k: int = 5) -> List[tuple]:	CODE
LOW	…cp-server/testdata/runtime-verification/verify_auto.py	39	def explicit_baseline_matches(candidate_cases, candidate_exchanges, baseline, baseline_log):	CODE
LOW	…cp-server/testdata/runtime-verification/verify_auto.py	190	def concurrent_legacy_isolation():	CODE
LOW	…rver/testdata/runtime-verification/compat_self_test.py	151	def counter_and_legacy_diagnostic_checks():	CODE
LOW	…rver/testdata/runtime-verification/compat_self_test.py	182	def sse_get_auth_focused_checks():	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	64	def test_sse_business_uses_historical_data_space_without_changing_probe_frames(self):	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	77	def test_required_cases_are_distinct_and_complete(self):	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	88	def test_session_oracle_rejects_swapped_sessions_and_replayed_business(self):	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	132	def test_phase_release_is_observable_before_reconfiguration(self):	CODE
LOW⚡	…server/testdata/runtime-verification/auto_self_test.py	151	def test_execution_precedes_connection_loss(self):	CODE
LOW⚡	…server/testdata/runtime-verification/auto_self_test.py	159	def test_capability_and_identity_change_between_requests(self):	CODE
LOW⚡	…server/testdata/runtime-verification/auto_self_test.py	169	def test_failure_fixtures_keep_discriminating_evidence(self):	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	193	def test_modern_proxy_preserves_ordinary_headers_and_stateless_boundaries(self):	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	220	def test_explicit_differential_rejects_contract_and_access_corruption(self):	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	253	def test_auto_rejection_and_explicit_compatibility_use_separate_pinned_modules(self):	CODE
LOW	…stdata/runtime-verification/orchestration_self_test.py	27	def check_transient_lds_publish_timeout():	CODE
LOW	…stdata/runtime-verification/orchestration_self_test.py	44	def check_rejection_poll_classification():	CODE
LOW	…stdata/runtime-verification/orchestration_self_test.py	117	def check_partial_corpus_diagnostic():	CODE
LOW	…stdata/runtime-verification/orchestration_self_test.py	142	def check_instructions_disconnect_request():	CODE
LOW	…stdata/runtime-verification/orchestration_self_test.py	163	def check_instructions_fixture():	CODE
LOW	…stdata/runtime-verification/orchestration_self_test.py	216	def check_instructions_evidence_rejects_incomplete_runs():	CODE
LOW⚡	…estdata/runtime-verification/instructions_self_test.py	35	def test_complete_independently_pinned_cases_and_requests(self):	CODE
LOW⚡	…estdata/runtime-verification/instructions_self_test.py	43	def test_only_exact_raw_query_fixture_path_can_be_sanitized(self):	CODE
LOW⚡	…estdata/runtime-verification/instructions_self_test.py	53	def test_case_substitution_is_rejected_even_with_same_count(self):	CODE
LOW⚡	…estdata/runtime-verification/instructions_self_test.py	59	def test_exchange_loss_duplication_and_case_misattribution_are_rejected(self):	CODE
LOW	…estdata/runtime-verification/instructions_self_test.py	71	def test_raw_disconnect_payload_and_access_are_required(self):	CODE
LOW⚡	…estdata/runtime-verification/instructions_self_test.py	83	def test_missing_duplicate_unexpected_or_wrong_listener_access_fails(self):	CODE
LOW⚡	…estdata/runtime-verification/instructions_self_test.py	93	def test_rpc_error_must_not_include_normal_instructions_result(self):	CODE
LOW⚡	…estdata/runtime-verification/instructions_self_test.py	100	def test_legacy_bridge_requires_ordinary_headers_and_isolates_controls(self):	CODE
LOW	…ver/testdata/runtime-verification/routing_self_test.py	25	def test_verifier_requires_nonempty_boolean_green_rows_and_zero_exit(self):	CODE
LOW	…ver/testdata/runtime-verification/routing_self_test.py	41	def test_subprocess_failure_is_recorded_and_cannot_be_silently_accepted(self):	CODE
LOW	…ver/testdata/runtime-verification/routing_self_test.py	54	def test_json_capture_preserves_provider_banner_and_failure_status(self):	CODE
LOW	…ver/testdata/runtime-verification/routing_self_test.py	84	def test_runner_startup_failure_retains_manifest_and_nonzero_exit(self):	CODE
LOW	…ver/testdata/runtime-verification/routing_self_test.py	100	def test_logging_oracle_requires_both_request_and_async_response_payloads(self):	CODE
LOW	…ver/testdata/runtime-verification/routing_self_test.py	110	def test_route_timeout_oracle_rejects_fast_failures_and_slow_successes(self):	CODE
LOW	…ver/testdata/runtime-verification/routing_self_test.py	122	def test_fixture_keeps_route_deadline_and_plugin_timeout_independent(self):	CODE
LOW	…-server/testdata/runtime-verification/verify_compat.py	49	def capture_sse_auth_response(body, headers):	CODE
LOW	…-server/testdata/runtime-verification/verify_compat.py	541	def write_sse_get_auth_headers(self, expected, startup_error):	CODE
LOW	…ons/mcp-server/testdata/runtime-verification/verify.py	720	def check_modern_proxy_events(events):	CODE
LOW	…ons/mcp-server/testdata/runtime-verification/verify.py	751	def check_modern_to_legacy_events(events):	CODE
LOW	…ons/mcp-server/testdata/runtime-verification/verify.py	806	def unsupported_legacy_to_modern():	CODE
LOW	…ons/mcp-server/testdata/runtime-verification/verify.py	843	def check_instructions_failure(status, body, mode):	CODE
LOW	…ons/mcp-server/testdata/runtime-verification/verify.py	855	def instructions_disconnect_request():	CODE
LOW	…ons/mcp-server/testdata/runtime-verification/verify.py	866	def instructions_verification():	CODE
LOW⚡	…-28/05-instructions-passthrough/verify_gateway_test.py	32	def test_regenerated_ids_join_by_current_run_user_agent(self):	CODE
LOW⚡	…-28/05-instructions-passthrough/verify_gateway_test.py	37	def test_buffered_and_previous_run_records_cannot_pass_early(self):	CODE
LOW⚡	…-28/05-instructions-passthrough/verify_gateway_test.py	45	def test_access_corruption_is_rejected(self):	CODE
LOW⚡	…28/05-instructions-passthrough/finish_evidence_test.py	27	def test_success_and_original_failure_are_consistent(self):	CODE
LOW⚡	…28/05-instructions-passthrough/finish_evidence_test.py	34	def test_invalid_summary_and_checksum_targets_fail(self):	CODE
LOW⚡	…28/05-instructions-passthrough/finish_evidence_test.py	42	def test_unwritable_summary_and_checksum_targets_fail(self):	CODE
LOW	…28/05-instructions-passthrough/finish_evidence_test.py	55	def test_invalid_phase_json_fails_before_final_status(self):	CODE
LOW	…2026-07-28/05-instructions-passthrough/cleanup_test.py	43	def test_evidence_failures_do_not_skip_restore_or_leave_success_completion(self):	STRING
LOW	…2026-07-28/05-instructions-passthrough/cleanup_test.py	59	def test_original_nonzero_exit_survives_evidence_failure(self):	STRING

Excessive Try-Catch Wrapping42 hits · 52 pts

Severity	File	Line	Snippet	Context
LOW	plugins/golang-filter/mcp-server/servers/rag/README.md	508	except Exception as e:	CODE
LOW	plugins/golang-filter/mcp-server/servers/rag/README.md	541	except Exception as e:	CODE
LOW	plugins/golang-filter/mcp-server/servers/rag/README.md	567	except Exception as e:	CODE
LOW	plugins/golang-filter/mcp-server/servers/rag/README.md	599	except Exception as e:	CODE
LOW	plugins/golang-filter/mcp-server/servers/rag/README.md	636	except Exception as e:	CODE
LOW	plugins/golang-filter/mcp-server/servers/rag/README.md	674	except Exception as e:	CODE
LOW	plugins/golang-filter/mcp-server/servers/rag/README.md	701	except Exception as e:	CODE
LOW	plugins/golang-filter/mcp-server/servers/rag/README.md	724	except Exception as e:	CODE
LOW	plugins/golang-filter/mcp-server/servers/rag/README.md	750	except Exception as e:	CODE
LOW	…server/testdata/runtime-verification/verify_routing.py	162	except Exception as error: check("runner-exception", False, repr(error))	CODE
LOW	…cp-server/testdata/runtime-verification/run_routing.py	180	except Exception as error:	CODE
LOW	…-server/testdata/runtime-verification/verify_compat.py	489	except Exception as error:	CODE
LOW	…-server/testdata/runtime-verification/verify_compat.py	512	except Exception as error:	CODE
LOW	…-server/testdata/runtime-verification/verify_compat.py	534	except Exception as error:	CODE
LOW	…ons/mcp-server/testdata/runtime-verification/verify.py	301	except Exception as exc:	CODE
LOW	…ons/mcp-server/testdata/runtime-verification/verify.py	332	except Exception as exc:	CODE
LOW	…ons/mcp-server/testdata/runtime-verification/verify.py	1097	except Exception as exc:	CODE
LOW	…mcp-server/testdata/runtime-verification/run_compat.py	138	except Exception as error:	CODE
LOW	…mcp-server/testdata/runtime-verification/run_compat.py	146	except Exception as error:	CODE
LOW	…ns/wasm-go/mcp-servers/mcp-scripts/yaml_to_markdown.py	12	except Exception as e:	CODE
MEDIUM	…ns/wasm-go/mcp-servers/mcp-scripts/yaml_to_markdown.py	13	print(f"Error reading YAML file: {e}")	CODE
MEDIUM⚡	…ns/wasm-go/mcp-servers/mcp-scripts/yaml_to_markdown.py	54	print("Error: Unexpected API response format")	STRING
LOW⚡	…ns/wasm-go/mcp-servers/mcp-scripts/yaml_to_markdown.py	56	except Exception as e:	STRING
MEDIUM⚡	…ns/wasm-go/mcp-servers/mcp-scripts/yaml_to_markdown.py	57	print(f"Error calling OpenAI API: {e}")	STRING
LOW⚡	…ns/wasm-go/mcp-servers/mcp-scripts/yaml_to_markdown.py	65	except Exception as e:	CODE
MEDIUM⚡	…ns/wasm-go/mcp-servers/mcp-scripts/yaml_to_markdown.py	66	print(f"Error saving Markdown file: {e}")	CODE
LOW	…ns/wasm-go/mcp-servers/mcp-scripts/translate_readme.py	12	except Exception as e:	CODE
MEDIUM	…ns/wasm-go/mcp-servers/mcp-scripts/translate_readme.py	13	print(f"Error reading file: {e}")	CODE
MEDIUM⚡	…ns/wasm-go/mcp-servers/mcp-scripts/translate_readme.py	52	print("Error: Unexpected API response format")	STRING
LOW⚡	…ns/wasm-go/mcp-servers/mcp-scripts/translate_readme.py	54	except Exception as e:	STRING
MEDIUM⚡	…ns/wasm-go/mcp-servers/mcp-scripts/translate_readme.py	55	print(f"Error calling OpenAI API: {e}")	STRING
LOW⚡	…ns/wasm-go/mcp-servers/mcp-scripts/translate_readme.py	63	except Exception as e:	CODE
MEDIUM⚡	…ns/wasm-go/mcp-servers/mcp-scripts/translate_readme.py	64	print(f"Error saving Markdown file: {e}")	CODE
LOW⚡	.agents/skills/agent-session-monitor/main.py	414	except Exception as e:	CODE
LOW	.agents/skills/agent-session-monitor/main.py	111	except Exception as e:	CODE
LOW	.agents/skills/agent-session-monitor/main.py	298	except Exception as e:	CODE
LOW	.agents/skills/agent-session-monitor/main.py	308	except Exception as e:	CODE
LOW	…ents/skills/agent-session-monitor/scripts/webserver.py	175	except Exception as e:	CODE
LOW	.agents/skills/agent-session-monitor/scripts/cli.py	103	except Exception as e:	CODE
LOW	.agents/skills/agent-session-monitor/scripts/cli.py	592	except Exception as e:	STRING
LOW	.github/workflows/translate-readme.yaml	80	except Exception as e:	CODE
MEDIUM	.github/workflows/translate-readme.yaml	81	print("Error parsing chunk:", e)	CODE

Modern AI Meta-Vocabulary17 hits · 49 pts

Severity	File	Line	Snippet	Context
MEDIUM	…r/mcp-server/servers/higress/nginx-migration/README.md	49	### 进阶配置（启用 RAG 知识库）	COMMENT
MEDIUM	…r/mcp-server/servers/higress/nginx-migration/README.md	160	# 正常启用 RAG	COMMENT
MEDIUM	…r/mcp-server/servers/higress/nginx-migration/README.md	165	# RAG 未启用	COMMENT
MEDIUM	…r/mcp-server/servers/higress/nginx-migration/README.md	194	### 查询知识库（需启用 RAG）	COMMENT
MEDIUM⚡	…r/mcp-server/servers/higress/nginx-migration/README.md	220	│ ├── rag.json.example # RAG 配置示例	CODE
MEDIUM⚡	…r/mcp-server/servers/higress/nginx-migration/README.md	221	│ └── rag.json # RAG 配置（需自行创建）	CODE
MEDIUM⚡	…r/mcp-server/servers/higress/nginx-migration/README.md	231	│ └── rag_integration.go # RAG 知识库集成	CODE
MEDIUM⚡	…r/mcp-server/servers/higress/nginx-migration/README.md	241	│ ├── rag/ # RAG 功能实现	CODE
MEDIUM⚡	…r/mcp-server/servers/higress/nginx-migration/README.md	242	│ │ ├── config.go # RAG 配置结构	CODE
MEDIUM⚡	…r/mcp-server/servers/higress/nginx-migration/README.md	244	│ │ └── manager.go # RAG 管理器（查询、缓存）	CODE
MEDIUM	plugins/golang-filter/mcp-server/servers/rag/README.md	1	# Higress RAG MCP Server	COMMENT
MEDIUM	plugins/golang-filter/mcp-server/servers/rag/README.md	853	### 3. Higress RAG mcp server config 配置	COMMENT
MEDIUM	plugins/golang-filter/mcp-server/servers/rag/README.md	954	### 5. Higress RAG MCP 插件和 CherryStudio 集成	COMMENT
MEDIUM	plugins/wasm-go/extensions/ai-search/README_EN.md	90	Currently, document vectorization relies on Elasticsearch's embedding model, which requires an Elasticsearch Enterprise	CODE
MEDIUM	…-higress-migration/scripts/generate-plugin-scaffold.sh	2	# Generate WASM plugin scaffold for nginx snippet migration	COMMENT
MEDIUM	hgctl/pkg/agent/README.md	659	# 选择 "Improve and test it using agentic core"	COMMENT
MEDIUM	release-notes/2.1.8/README.md	20	- feat: add rag mcp server ([#2930](https://github.com/alibaba/higress/pull/2930)): By introducing the RAG MCP serve	CODE

Verbosity Indicators24 hits · 46 pts

Severity	File	Line	Snippet	Context
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2284	// Step 1: Mock SSE channel response headers (GET request response)	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2293	// Step 2: Send SSE endpoint message	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2303	// Step 3: Mock initialize response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2310	// Step 4: Send SSE initialize response in the stream	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2319	// Step 5: Mock notification response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2327	// Step 6: Mock tools/list response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2334	// Step 7: Send SSE tools/list response in the stream	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2408	// Step 1: Mock SSE channel response headers	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2416	// Step 2: Send SSE endpoint message	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2423	// Step 3: Mock initialize response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2430	// Step 4: Send SSE initialize response in the stream	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2437	// Step 5: Mock notification response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2444	// Step 6: Mock tools/call response via RouteCluster callback	COMMENT
LOW⚡	plugins/wasm-go/extensions/mcp-server/main_test.go	2451	// Step 7: Send SSE tools/call response in the stream	COMMENT
LOW	plugins/wasm-go/extensions/ai-search/main.go	302	// When defaultEnable is false, we need to check if web_search_options exists in the request	COMMENT
LOW	plugins/wasm-go/pkg/mcp/server/proxy_tool.go	337	// Step 1: Send initialize request	COMMENT
LOW	plugins/wasm-go/pkg/mcp/server/proxy_tool.go	431	// Step 2: Send notifications/initialized	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	149	// Step 1: Get Gateway URL	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	157	// Step 2: Get Console URL (for auto-router configuration)	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	165	// Step 3: Test connection (create a new spinner)	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	181	// Step 4: Get API Key (optional for local gateway)	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	188	// Step 5: Fetch available models (create a new spinner)	COMMENT
LOW⚡	…s/higress-openclaw-integration/scripts/plugin/index.ts	196	// Step 6: Let user customize model list	COMMENT
LOW	…s/higress-openclaw-integration/scripts/plugin/index.ts	213	// Step 7: Configure default model for auto-routing	COMMENT

Decorative Section Separators12 hits · 39 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	.agents/skills/agent-session-monitor/main.py	418	# ============================================================================	COMMENT
MEDIUM⚡	.agents/skills/agent-session-monitor/main.py	420	# ============================================================================	COMMENT
MEDIUM	.agents/skills/agent-session-monitor/main.py	20	# ============================================================================	COMMENT
MEDIUM	.agents/skills/agent-session-monitor/main.py	22	# ============================================================================	COMMENT
MEDIUM	.agents/skills/agent-session-monitor/main.py	84	# ============================================================================	COMMENT
MEDIUM	.agents/skills/agent-session-monitor/main.py	86	# ============================================================================	COMMENT
MEDIUM	.agents/skills/agent-session-monitor/main.py	280	# ============================================================================	COMMENT
MEDIUM	.agents/skills/agent-session-monitor/main.py	282	# ============================================================================	COMMENT
MEDIUM	.agents/skills/agent-session-monitor/main.py	517	# ============================================================================	COMMENT
MEDIUM	.agents/skills/agent-session-monitor/main.py	519	# ============================================================================	COMMENT
MEDIUM	…o-higress-migration/scripts/generate-migration-test.sh	172	# ================================================	COMMENT
MEDIUM	…o-higress-migration/scripts/generate-migration-test.sh	174	# ================================================	COMMENT

Fake / Example Data30 hits · 38 pts

Severity	File	Line	Snippet	Context
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	407	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	417	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	427	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	437	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	447	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	456	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	466	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	476	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	535	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	545	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	555	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	565	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	575	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	585	- fake_token	CODE
LOW⚡	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	595	- fake_token	CODE
LOW	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	487	- fake_token	CODE
LOW	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	500	- fake_token	CODE
LOW	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	510	- fake_token	CODE
LOW	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	523	- fake_token	CODE
LOW	test/e2e/conformance/tests/go-wasm-ai-proxy.yaml	606	- fake_token	CODE
LOW	plugins/wasm-cpp/extensions/jwt_auth/README.md	341	"name": "John Doe"	CODE
LOW	plugins/wasm-cpp/extensions/jwt_auth/README_EN.md	296	"name": "John Doe"	CODE
LOW	…ins/wasm-go/extensions/request-validation/main_test.go	305	validBody := `{"name": "John Doe", "age": 30}`	CODE
LOW	…ins/wasm-go/extensions/request-validation/main_test.go	361	invalidBody := `{"name": "John Doe", "age": -5}`	CODE
LOW	…ins/wasm-go/extensions/ai-prompt-template/main_test.go	261	"recipient": "John Doe",	CODE
LOW	plugins/wasm-go/extensions/ai-proxy/provider/azure.go	184	defaultModel := "placeholder"	CODE
LOW	plugins/wasm-go/extensions/log-request-response/main.go	228	"placeholder": value,	CODE
LOW	plugins/wasm-go/extensions/log-request-response/main.go	235	marshalledRaw := gjson.GetBytes(marshalledHelper, "placeholder").Raw	CODE
LOW	plugins/wasm-go/examples/simple-jwt-auth/main_test.go	33	claims["name"] = "John Doe"	CODE
LOW	pkg/ingress/kube/secret/controller_test.go	39	secretFakeKey = "fake-key"	CODE

Deep Nesting34 hits · 34 pts

Severity	File	Line	Context
LOW	…testdata/runtime-verification/instructions_contract.py	69	CODE
LOW	…erver/testdata/runtime-verification/compat_evidence.py	74	CODE
LOW	…rver/testdata/runtime-verification/compat_self_test.py	73	CODE
LOW	…rver/testdata/runtime-verification/compat_self_test.py	182	CODE
LOW	…ns/mcp-server/testdata/runtime-verification/backend.py	114	CODE
LOW	…erver/testdata/runtime-verification/routing_backend.py	69	CODE
LOW	…erver/testdata/runtime-verification/routing_backend.py	96	CODE
LOW	…erver/testdata/runtime-verification/compat_contract.py	117	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	88	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	132	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	169	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	193	CODE
LOW	…server/testdata/runtime-verification/auto_self_test.py	220	CODE
LOW	…stdata/runtime-verification/orchestration_self_test.py	163	CODE
LOW	…server/testdata/runtime-verification/verify_routing.py	59	CODE
LOW	…estdata/runtime-verification/instructions_self_test.py	59	CODE
LOW	…estdata/runtime-verification/instructions_self_test.py	100	CODE
LOW	…ver/testdata/runtime-verification/routing_self_test.py	25	CODE
LOW	…ver/testdata/runtime-verification/routing_self_test.py	54	CODE
LOW	…cp-server/testdata/runtime-verification/run_routing.py	73	CODE
LOW	…-server/testdata/runtime-verification/verify_compat.py	219	CODE
LOW	…-server/testdata/runtime-verification/verify_compat.py	312	CODE
LOW	…-server/testdata/runtime-verification/verify_compat.py	461	CODE
LOW	…-server/testdata/runtime-verification/verify_compat.py	503	CODE
LOW	…server/testdata/runtime-verification/compat_backend.py	146	CODE
LOW	…mcp-server/testdata/runtime-verification/run_compat.py	30	CODE
LOW	.agents/skills/agent-session-monitor/main.py	100	CODE
LOW	.agents/skills/agent-session-monitor/main.py	368	CODE
LOW	…ents/skills/agent-session-monitor/scripts/webserver.py	37	CODE
LOW	.agents/skills/agent-session-monitor/scripts/cli.py	475	CODE
LOW	.agents/skills/agent-session-monitor/scripts/cli.py	107	CODE
LOW	.agents/skills/agent-session-monitor/scripts/cli.py	414	CODE
LOW	…6-07-28/05-instructions-passthrough/finish_evidence.py	24	CODE
LOW	…6-07-28/05-instructions-passthrough/finish_evidence.py	45	CODE

Self-Referential Comments8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	tools/hack/setup_env.sh	139	# This function is designed for maximum compatibility with various platforms. This runs on	COMMENT
MEDIUM	test/e2e/conformance/base/nacos.yaml	15	# This file contains the base resources that most conformance tests will rely	COMMENT
MEDIUM	test/e2e/conformance/base/eureka.yaml	15	# This file contains the base resources that most conformance tests will rely	COMMENT
MEDIUM	test/e2e/conformance/base/manifests.yaml	15	# This file contains the base resources that most conformance tests will rely	COMMENT
MEDIUM	test/e2e/conformance/base/dubbo.yaml	15	# This file contains the base resources that most conformance tests will rely	COMMENT
MEDIUM	test/e2e/conformance/base/consul.yaml	15	# This file contains the base resources that most conformance tests will rely	COMMENT
MEDIUM	…m-go/mcp-servers/mcp-scripts/create_api_directories.sh	26	# Define the API data with English translations	COMMENT
MEDIUM	.github/workflows/prepare-plugin-release.yaml	451	# This function is consumed through command substitution below, so	COMMENT

Unused Imports17 hits · 17 pts

Severity	File	Line	Context
LOW	…rver/testdata/runtime-verification/compat_self_test.py	13	CODE
LOW	…erver/testdata/runtime-verification/compat_contract.py	12	CODE
LOW	…server/testdata/runtime-verification/verify_routing.py	3	CODE
LOW	…server/testdata/runtime-verification/verify_routing.py	8	CODE
LOW	…server/testdata/runtime-verification/compat_backend.py	11	CODE
LOW	…server/testdata/runtime-verification/compat_backend.py	11	CODE
LOW	…mcp-server/testdata/runtime-verification/run_compat.py	4	CODE
LOW	plugins/wasm-go/extensions/waf/local/app.py	1	CODE
LOW	…ns/wasm-go/mcp-servers/mcp-scripts/yaml_to_markdown.py	2	CODE
LOW	…ns/wasm-go/mcp-servers/mcp-scripts/translate_readme.py	2	CODE
LOW	.agents/skills/agent-session-monitor/main.py	9	CODE
LOW	.agents/skills/agent-session-monitor/main.py	13	CODE
LOW	…ents/skills/agent-session-monitor/scripts/webserver.py	14	CODE
LOW	…ents/skills/agent-session-monitor/scripts/webserver.py	14	CODE
LOW	…ents/skills/agent-session-monitor/scripts/webserver.py	15	CODE
LOW	…ents/skills/agent-session-monitor/scripts/webserver.py	21	CODE
LOW	.agents/skills/agent-session-monitor/scripts/cli.py	18	CODE

Synthetic Comment Markers2 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	.agents/skills/nginx-to-higress-migration/README.md	287	// Auto-generated by AI agent	COMMENT
HIGH	.agents/skills/nginx-to-higress-migration/README.md	482	### Q: Can I customize the AI-generated plugin code?	COMMENT

Redundant / Tautological Comments5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	…m-go/mcp-servers/mcp-scripts/create_api_directories.sh	46	# Check if any API codes were found	COMMENT
LOW	…/higress-openclaw-integration/scripts/detect-region.sh	7	# Check if timezone indicates China region (including Hong Kong)	COMMENT
LOW	…/nginx-to-higress-migration/scripts/analyze-ingress.sh	147	# Check if supported	COMMENT
LOW	…/nginx-to-higress-migration/scripts/analyze-ingress.sh	156	# Check if explicitly unsupported	COMMENT
LOW	helm/core/values.yaml	29	# Set this to false when reusing an existing IngressClass, for example during Nginx Ingress migration.	COMMENT

Slop Phrases2 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	plugins/wasm-rust/example/ai-intent/src/lib.rs	463	(0, r#" I apologize, but as a responsible AI language model, I cannot provide a response that categorizes a	CODE
MEDIUM	plugins/wasm-rust/example/ai-intent/src/lib.rs	464	(0, r#" I'm so sorry, but as a responsible AI language model, I must intervene to address an important conce	CODE

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	plugins/wasm-go/extensions/ai-proxy/provider/bedrock.go	1162	// This is more robust for models that are strict about explicit ttl fields.	COMMENT

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	plugins/wasm-go/extensions/ip-restriction/utils_test.go	64	// TODO: Add test cases.	COMMENT
LOW	pkg/ingress/kube/gateway/controller.go	167	// TODO: implement	COMMENT

higress-group/higress

Open-Source Code Quality, Security and Technical Debt Review