AI Slop Code Risk Monitor

james-6-23/codex2api

SlopCodeMonitor badge for james-6-23/codex2api Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Codex2API 是一个基于 Go + Gin + React/Vite 的 Codex 反向代理与管理后台项目

0.9 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for james-6-23/codex2api, a Go project with 2,329 GitHub stars. SynthScan examined 661,743 lines of code across 1668 source files, recording 436 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 0.9 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

0.9
Adjusted Signal
0.9
Raw Pattern Score
100%
Time Factor
2026-10-27
Last Push
2.3K
Stars
Go
Language
661.7K
Lines of Code
1.7K
Files
436
Pattern Hits
2026-10-31
Scan Date
0.01
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 302 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.5/100 · LOW

Are imports declared and package/API names verified? 114 finding(s).

Agent Over-Engineering Ratio 1.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 204 finding(s).

PR Review Velocity Impact 4.4/100 · LOW

Which changes need focused human review? 436 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 21MEDIUM 28LOW 387

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 436 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers184 hits · 188 pts
SeverityFileLineSnippetContext
LOWfrontend/src/api.ts375async function requestImageStudioPortalBlob(path: string, apiKey: string, options: RequestInit = {}): Promise<Blob> {CODE
LOWfrontend/src/api.ts397function parseContentDispositionFilename(header: string | null): string {CODE
LOWfrontend/src/api.ts472function buildOpsErrorSearchParams(params: {CODE
LOWfrontend/src/api.ts524export function buildUsageLogSearchParams(params: UsageLogQueryParams) {CODE
LOWfrontend/src/types.ts3014export function parseAdvancedConfigDocument(raw: string): AdvancedConfigDocument {CODE
LOWfrontend/src/types.ts3044export function patchAdvancedConfigDocument(CODE
LOWfrontend/src/components/AccountStateOverlay.tsx227export function renderAccountStateOverlay(CODE
LOWfrontend/src/components/AccountStateOverlay.tsx259export function renderDisabledAccountOverlay(CODE
LOW…tend/src/components/APIKeyModelRequestLimitsEditor.tsx8export default function APIKeyModelRequestLimitsEditor({CODE
LOWfrontend/src/components/RouteErrorBoundary.tsx25async function clearRuntimeCachesAndReload() {CODE
LOWfrontend/src/components/RequestCountPills.tsx282function formatAverageFirstTokenMs(value: number): string {CODE
LOWfrontend/src/components/APIKeyModelRequestUsage.tsx6export default function APIKeyModelRequestUsageCard({CODE
LOWfrontend/src/components/ClaudeConnectionTestModal.tsx17export default function ClaudeConnectionTestModal({ account, onClose, onSettled }: {CODE
LOW…ntend/src/components/AccountRateLimitRecoveryChart.tsx74export default function AccountRateLimitRecoveryChart({ analysis, className = '', compact = false }: AccountRateLimitRecCODE
LOWfrontend/src/components/PromptFilterNewAPIBindings.tsx165export default function PromptFilterNewAPIBindings() {CODE
LOWfrontend/src/components/AccountIntelligenceBar.tsx21export function AccountIntelligenceActions({ bar, accountID, accountName }: AccountIntelligenceProps) {CODE
LOW…ntend/src/components/AccountQuotaDistributionChart.tsx72export default function AccountQuotaDistributionChart({CODE
LOWfrontend/src/components/ChannelMonitorConfigDialog.tsx21export default function ChannelMonitorConfigDialog({CODE
LOW…nd/src/components/AccountIntelligenceHistoryDialog.tsx20export default function AccountIntelligenceHistoryDialog({ accountID, accountName, onClose }: {CODE
LOWfrontend/src/components/AccountGroupFilterSelect.tsx25export function isAccountGroupFilterEmpty(CODE
LOWfrontend/src/components/AccountGroupFilterSelect.tsx33export function accountMatchesGroupFilter(CODE
LOWfrontend/src/components/ui/sheet.tsx18function isInteractivePortalTarget(target: EventTarget | null) {CODE
LOWfrontend/src/components/ui/dialog.tsx18function isInteractivePortalTarget(target: EventTarget | null) {CODE
LOW…src/components/image-studio/StudioCollectionChrome.tsx55export function StudioCollectionPagination({ page, pageSize, total, loading, onChange }: { page: number; pageSize: numbeCODE
LOWfrontend/src/hooks/useShowFullUsageNumbers.ts10function fetchShowFullUsageNumbers(): Promise<boolean> {CODE
LOWfrontend/src/lib/qualityTestSVG.ts124function installQualityTestSVGBridge(previewID: string, capture: (limit: number) => string, limit: number) {CODE
LOWfrontend/src/lib/qualityTestSVG.ts153export function qualityTestSVGExportScript(previewID: string): string {CODE
LOWfrontend/src/lib/claudeConnectionTest.ts42export function createClaudeTestEventParser(onEvent: (event: ClaudeTestEvent) => void) {CODE
LOWfrontend/src/lib/accountListPreferences.ts96export function normalizeAccountAutoRefreshSeconds(CODE
LOWfrontend/src/lib/accountListPreferences.ts105export function readAccountAutoRefreshSeconds(CODE
LOWfrontend/src/lib/accountListPreferences.ts118export function writeAccountAutoRefreshSeconds(CODE
LOWfrontend/src/lib/visibleChannels.ts31export function readCachedVisibleChannels(): UpstreamChannel[] {CODE
LOWfrontend/src/lib/visibleChannels.ts41export function writeCachedVisibleChannels(channels: readonly UpstreamChannel[]) {CODE
LOWfrontend/src/lib/usageFormat.ts4export function formatLongUsageWindowLabel(account: {CODE
LOWfrontend/src/lib/usageFormat.ts116export function getAccountStatusBadgeStatus(account: AccountStatusSource): string {CODE
LOWfrontend/src/lib/usageFormat.ts129export function isOfficialCostHiddenAccount(account: {CODE
LOWfrontend/src/lib/usageFormat.ts197export function officialUsdFromDailyItems(CODE
LOWfrontend/src/lib/usageFormat.ts236export function isWorkspaceCreditHardStop(account: {CODE
LOWfrontend/src/lib/inviteAccountSelection.ts25export function mergeInviteRecipientIndex(CODE
LOW⚡frontend/src/lib/inviteAccountSelection.ts60export function isInviteAccountSelectable(account: AccountRow): boolean {CODE
LOW⚡frontend/src/lib/inviteAccountSelection.ts69export function isCodexInviteSenderCandidate(account: AccountRow): boolean {CODE
LOW⚡frontend/src/lib/inviteAccountSelection.ts76export function inviteRecipientCandidates(CODE
LOWfrontend/src/lib/responseCacheMetrics.ts32export function validateResponseCacheBudget(CODE
LOWfrontend/src/lib/responseCacheMetrics.ts59export function buildResponseCacheBudgetPatch(CODE
LOWfrontend/src/lib/responseCacheMetrics.ts73export function mergeResponseCacheGeneration(CODE
LOWfrontend/src/lib/intelligenceCheck.ts40export function intelligenceTargetConflict(error: unknown): IntelligenceTargetConflict | null {CODE
LOWfrontend/src/lib/accountListSort.ts15export function resolveDisabledAccountSorts(CODE
LOWfrontend/src/lib/codexConnectionTest.ts87export function isFinalCodexTestDiagnostics(diagnostics?: CodexTestDiagnostics | null): boolean {CODE
LOWfrontend/src/lib/promptFilterScore.ts3export function normalizePromptFilterScore(score: number): number {CODE
LOWfrontend/src/lib/poolRunway.ts342export function pressureForecastFromAnalysis(CODE
LOWfrontend/src/lib/poolRunway.ts366export function selectPoolRunwayFromAnalysis(CODE
LOWfrontend/src/lib/poolRunway.ts510function estimateSupplyPressurePoint(CODE
LOWfrontend/src/lib/requestErrorStatus.ts35export function buildErrorStatusBreakdown(CODE
LOWfrontend/src/lib/workspaceRoute.ts3export function workspaceRouteFromHeaders(CODE
LOWfrontend/src/lib/workspaceRoute.ts14export function applyWorkspaceRouteHeader(CODE
LOWfrontend/src/lib/workspaceRoute.ts33export function applyOptionalWorkspaceRouteHeader(CODE
LOWfrontend/src/lib/imageStudioModels.ts20export function normalizeImageQualityForModel(quality: string, model: string): string {CODE
LOWfrontend/src/lib/apiKeyModelRequests.ts26export function modelRequestLimitsFromAPIKey(rules?: APIKeyModelRequestLimit[]): ModelRequestLimitFormState[] {CODE
LOWfrontend/src/lib/apiKeyModelRequests.ts37export function modelRequestLimitsToPayload(CODE
LOWfrontend/src/lib/accountProxyBinding.ts128export function isManagedProxyUnavailable(CODE
124 more matches not shown…
Magic Placeholder Names20 hits · 108 pts
SeverityFileLineSnippetContext
HIGHfrontend/src/locales/zh.json6053 "claudeCodeNote": "其中 YOUR_API_KEY 是你在 API 密钥页面中创建的 API Key。模型映射可在系统设置中配置。",CODE
HIGHfrontend/src/locales/zh.json6494 "curlDesc": "用以下命令验证端点是否可用,YOUR_API_KEY 会自动填充为第一个 API Key。",CODE
HIGHfrontend/src/locales/en.json6054 "claudeCodeNote": "Replace YOUR_API_KEY with the API Key created on the API Keys page. Model mapping can be configurCODE
HIGHfrontend/src/locales/en.json6495 "curlDesc": "Use these commands to verify your endpoints. YOUR_API_KEY auto-fills with your first API key.",CODE
HIGHfrontend/src/pages/Guide.tsx157 const key = activeKey || 'YOUR_API_KEY'CODE
HIGHfrontend/src/pages/Guide.tsx297 const keyForSnippet = activeKey || 'YOUR_API_KEY'CODE
HIGH⚡frontend/src/pages/Docs.tsx836 apiKeyExample: "YOUR_API_KEY",CODE
HIGH⚡frontend/src/pages/Docs.tsx842 content: codexAuthJson.split(activeKey).join("YOUR_API_KEY"),CODE
HIGH⚡frontend/src/pages/Docs.tsx847 content: claudeSettingsJson.split(activeKey).join("YOUR_API_KEY"),CODE
HIGHfrontend/src/pages/Docs.tsx885 const activeKey = selectedKey || firstKey || "YOUR_API_KEY";CODE
HIGHfrontend/src/pages/docs/docsContent.ts314 -H 'Authorization: Bearer YOUR_API_KEY' \\CODE
HIGHfrontend/src/pages/docs/docsGuides.ts75 "Authorization: Bearer YOUR_API_KEY",CODE
HIGHfrontend/src/pages/docs/docsGuides.ts460 content: `curl "${base}/v1/models" \\\n -H "Authorization: Bearer YOUR_API_KEY"`,CODE
HIGHfrontend/src/pages/docs/endpointDetails.ts273 `curl --request POST '${baseUrl}${path}' \\\n --header 'Authorization: Bearer YOUR_API_KEY' \\\n --header 'ContentCODE
HIGHfrontend/src/pages/docs/endpointDetails.ts275 `curl '${baseUrl}${path}' \\\n --header 'Authorization: Bearer YOUR_API_KEY'`;CODE
HIGHfrontend/src/pages/docs/endpointDetails.ts614 curl: `# WebSocket URL: ${baseUrl.replace(/^http/, "ws")}/v1/responses\n# Header: Authorization: Bearer YOUR_API_KCODE
HIGHdocs/API.md288`GET /api/image-studio/quota` 使用 `Authorization: Bearer YOUR_API_KEY` 查询当前 Key 的累计美元额度。只受生图门户开关控制,不依赖公开用量页开关,也不接受通过查询参数指CODE
HIGHdocs/API.md435 --header 'Authorization: Bearer YOUR_API_KEY'CODE
HIGHdocs/API.md2889公开自助接口 `GET /api/key-usage/summary` 与别名 `GET /api/key-usage/me` 在原有 `key`、`range`、`usage` 之外增加相同结构的顶层 `model_request_usaCODE
HIGHdocs/USAGE.md24| 普通 API | `Authorization: Bearer YOUR_API_KEY`;Messages 也接受 `x-api-key` |CODE
Over-Commented Block102 hits · 102 pts
SeverityFileLineSnippetContext
LOWcmd/claude_login/main.go1// 独立的 Claude Code OAuth 登录自测工具(非交互、两步式)。COMMENT
LOWdatabase/billing.go321 // custom / synced 覆盖:以代码默认为底,合并非 0 字段(部分覆盖)。COMMENT
LOWdatabase/antigravity_quota_source.go1package databaseCOMMENT
LOWdatabase/postgres.go1861 TokenLimit5h int64 `json:"token_limit_5h,omitempty"`COMMENT
LOWdatabase/postgres.go1881 AllowLive bool `json:"allow_live,omitempty"`COMMENT
LOWdatabase/credential_crypto.go1package databaseCOMMENT
LOWdatabase/data_migrations.go121 return nilCOMMENT
LOWproxy/handler.go201COMMENT
LOWproxy/handler.go8981 // persistUsageSnapshot=false keeps the in-memory/scheduler update but skipsCOMMENT
LOWproxy/usage_wham_daily.go21// 接入时只回 7 天)。稳态同步仍只滚动回补最近 WhamDailyUsageRetentionDays 天,COMMENT
LOWproxy/egress.go21// 优先级固定为 Resin > 代理 > 直连,且 Resin 是整层覆盖:一旦启用,Codex 渠道COMMENT
LOWproxy/codex_fingerprint.go21//COMMENT
LOWproxy/codex_fingerprint.go61// deriveStableCodexUUID 从种子确定性派生一个 UUIDv4 格式的字符串:同一种子恒定返回COMMENT
LOWproxy/codex_fingerprint.go121 sum := sha256.Sum256([]byte("codex2api:codex-identity-ts:v1:" + seed))COMMENT
LOWproxy/codex_fingerprint.go461 }COMMENT
LOWproxy/codex_fingerprint.go521func convergeCodexLineageValue(accountID int64, key, original string) string {COMMENT
LOWproxy/utls_transport.go21COMMENT
LOWproxy/utls_transport.go41 // 与标准 transport 的 IdleConnTimeout 对齐。到点由 h2 自身的空闲定时器COMMENT
LOWproxy/stream_flush_writer.go41// Small buffers are reused across token events; an exceptional large eventCOMMENT
LOWproxy/runtime_config.go121 OverflowAutoCompact boolCOMMENT
LOWproxy/grok_upstream.go741}COMMENT
LOWproxy/antigravity_quota.go41 // delay this long is really a quota window, not a burst limit.COMMENT
LOWproxy/upstream_drain.go1package proxyCOMMENT
LOWproxy/handler_anthropic.go561 // 验证 JSONCOMMENT
LOWproxy/prompt_preupstream_lock_test.go21// 必须被会话锁拦下,而不是被放行到上游。COMMENT
LOWproxy/overflow_compact.go21// 上游不接受 truncation/context_management 参数(实测 400 Unsupported parameter),COMMENT
LOWproxy/content_session_seed.go1package proxyCOMMENT
LOWproxy/content_session_seed.go21// 只会让身份与载荷对同一段对话给出两种答案。COMMENT
LOWproxy/antigravity_stream_errors.go21//COMMENT
LOWproxy/claude_upstream.go1package proxyCOMMENT
LOWproxy/apikey_scope_budget.go1// Package proxy: API Key × 账号分组/账号 维度的用量预算(issue #439)。COMMENT
LOWproxy/anthropic.go1861// server_tool_use(客户端据此展示「正在检索」)+ web_search_tool_result。COMMENT
LOWproxy/grok_media.go21COMMENT
LOWproxy/images.go701 }COMMENT
LOWproxy/images.go921 "turn this image",COMMENT
LOWproxy/newapi_policy.go821COMMENT
LOWproxy/maintenance_client.go21// 修复:维护请求复用按 (用途 + 账号 + 代理 + transport 模式) 隔离的 Client。COMMENT
LOWproxy/payload_rules.go21// 典型用途:覆盖/追加 instructions(系统提示词)、覆盖 service_tier、COMMENT
LOWproxy/payload_rules.go41// "api_key_names": ["fast*"], // 下游 API Key 名称通配COMMENT
LOWproxy/prompt_guard_test_evaluation.go21}COMMENT
LOWproxy/antigravity_json_mode.go61// answer (a generateContent body or one streamed data payload) into the answerCOMMENT
LOWproxy/apikey_limits.go1// Package proxy: API Key 级别的细粒度限流与配额校验。COMMENT
LOWproxy/codex_multi_agent_v2.go21// encrypted_content;第三方子模型无法读取。Codex 只在 function_call 带有COMMENT
LOWproxy/codex_request_compression.go21// 请求体却 100% 明文」构成一个每请求都在、零噪声的区分特征:上游只要按COMMENT
LOWproxy/codex_request_compression.go61 if err != nil {COMMENT
LOWproxy/codex_session_headers.go41 return codexSessionHeaderModeLegacyCOMMENT
LOWproxy/codex_session_headers.go81// ApplyCodexSessionHeaders 写出站会话标识头。COMMENT
LOWproxy/client_scaffolding.go1package proxyCOMMENT
LOWproxy/client_scaffolding.go21// turns and would otherwise invalidate the cached prefix. It also stabilises theCOMMENT
LOWproxy/executor.go21 "github.com/codex2api/auth"COMMENT
LOWproxy/executor.go481COMMENT
LOWproxy/executor.go1461// 3. Header: Conversation_idCOMMENT
LOWproxy/grok_protocol.go1901 }COMMENT
LOWproxy/model_registry.go81 modelInfoForID("gpt-5.6-sol", ModelSourceBuiltin),COMMENT
LOWproxy/continuity.go81 return nilCOMMENT
LOWproxy/codex_ws_transport_lane.go21 // 前三种与用户 turn 是同一条连接或同一段顺序动作,必须同道;未声明的视同 turn。COMMENT
LOWproxy/antigravity_ws_selection_test.go1package proxyCOMMENT
LOWproxy/apikey_scope_concurrency.go1// Package proxy: 「该 Key × 某分组/账号」的并发上限(issue #439 v2)。COMMENT
LOWproxy/codex_alpha_search.go21// Codex CLI 开启 web_search = "live"(或 --search)后会调用COMMENT
LOWproxy/wsrelay/busy_policy.go1package wsrelayCOMMENT
42 more matches not shown…
Fake / Example Data93 hits · 97 pts
SeverityFileLineSnippetContext
LOWdatabase/sqlite_test.go350 "email": "user@example.com",CODE
LOWdatabase/sqlite_test.go356 got, err = db.FindActiveAccountByOAuthIdentity(ctx, "user@example.com", "workspace-identity", id)CODE
LOWdatabase/sqlite_test.go370 if _, err := db.FindActiveAccountByOAuthIdentity(ctx, "user@example.com", "workspace-identity"); err == nil {CODE
LOWdatabase/sqlite_test.go389 "email": "user@example.com",CODE
LOWdatabase/sqlite_test.go397 "email": "user@example.com",CODE
LOWdatabase/sqlite_test.go415 got, err = db.FindActiveAccountByOAuthRouteIdentity(ctx, "user@example.com", "team-workspace")CODE
LOWdatabase/sqlite_test.go423 if _, err := db.FindActiveAccountByOAuthRouteIdentity(ctx, "user@example.com", "other-workspace"); err != sql.ErrNoRowsCODE
LOWdatabase/sqlite_test.go565 "email": "user@example.com",CODE
LOWdatabase/sqlite_test.go585 "email": "user@example.com",CODE
LOWdatabase/sqlite_test.go610 "email": "user@example.com",CODE
LOWdatabase/sqlite_test.go689 "email": "user@example.com",CODE
LOWdatabase/workspace_identity_test.go40 "id_token": workspaceIdentityJWT(t, "user@example.com", "workspace-1"),CODE
LOWdatabase/workspace_identity_test.go47 "email": "user@example.com",CODE
LOWdatabase/workspace_identity_test.go87 "email": "user@example.com",CODE
LOWdatabase/credential_crypto_test.go19 "email": "user@example.com",CODE
LOWdatabase/credential_crypto_test.go30 if enc["email"] != "user@example.com" || enc["upstream_type"] != "claude" {CODE
LOWproxy/newapi_policy_test.go919 if !normalizeVerifiedNewAPIPolicyMeta(&meta) || meta.UserName != "示例平台用户" || meta.UserEmail != "user@example.com" || meCODE
LOWfrontend/src/locales/zh.json852 "placeholder": "输入管理密钥…",CODE
LOWfrontend/src/locales/zh.json6446 "placeholder": "点击发送请求开始调试",CODE
LOWfrontend/src/locales/en.json852 "placeholder": "Enter admin secret…",CODE
LOWfrontend/src/locales/en.json6447 "placeholder": "Click Send to make a request",CODE
LOWfrontend/src/pages/ApiReference.tsx1226 "email": "user@example.com",CODE
LOWfrontend/src/pages/ApiReference.tsx1274 "email": "user@example.com",CODE
LOWfrontend/src/pages/ApiReference.tsx1356 "email": "user@example.com"CODE
LOWfrontend/src/pages/ApiReference.tsx1396 "email": "user@example.com"CODE
LOWfrontend/src/pages/ApiReference.tsx1417 "email": "user@example.com",CODE
LOWfrontend/src/pages/ApiReference.tsx1441 "email": "user@example.com"CODE
LOWfrontend/src/pages/ApiReference.tsx1509 "email": "user@example.com",CODE
LOWfrontend/src/pages/docs/docsContent.ts592 "email": "user@example.com",CODE
LOWsecurity/validator_test.go126 {"user@example.com", "us****@example.com"},CODE
LOWsecurity/promptfilter/match_context_test.go85 "sk-live123456", "hunter2", "sk-testabcdef", "admin@example.com",CODE
LOWauth/antigravity_client_test.go314 _, _ = io.WriteString(w, `{"id":"google-subject","email":"user@example.com","verified_email":true,"name":"User Name",CODE
LOWauth/antigravity_client_test.go360 if result.Profile.ID != "google-subject" || result.Profile.Email != "user@example.com" {CODE
LOWauth/antigravity_client_test.go514 _, _ = io.WriteString(w, `{"id":"subject","email":"user@example.com","verified_email":true}`)CODE
LOWauth/antigravity_client_test.go537 if result.Credential.AccessToken != "access-new" || result.Credential.RefreshToken != "refresh-rotated" || result.ProfiCODE
LOWauth/antigravity_client_test.go550 _, _ = io.WriteString(w, `{"id":"subject","email":"user@example.com","verified_email":true}`)CODE
LOWauth/antigravity_client_test.go596 _, _ = io.WriteString(w, `{"id":"subject","email":"user@example.com","verified_email":true}`)CODE
LOWauth/antigravity_client_test.go635 _, _ = io.WriteString(w, `{"id":"subject","email":"user@example.com","verified_email":true}`)CODE
LOWauth/antigravity_client_test.go780 _, _ = io.WriteString(w, `{"id":"google-subject","email":"user@example.com","verified_email":true}`)CODE
LOWauth/antigravity_refresh_safety_test.go52 "email": "user@example.com", "verified_email": true,CODE
LOWauth/antigravity_refresh_safety_test.go88 _, _ = io.WriteString(w, `{"id":"subject-1","email":"user@example.com","verified_email":true}`)CODE
LOWauth/antigravity_refresh_safety_test.go149 _, _ = io.WriteString(w, `{"id":"subject-1","email":"user@example.com","verified_email":true,"name":"User"}`)CODE
LOWauth/antigravity_refresh_safety_test.go226 _, _ = io.WriteString(w, `{"id":"subject-1","email":"user@example.com","verified_email":true}`)CODE
LOWauth/antigravity_refresh_safety_test.go276 _, _ = io.WriteString(w, `{"id":"subject-1","email":"user@example.com","verified_email":true}`)CODE
LOWauth/antigravity_refresh_safety_test.go331 _, _ = io.WriteString(w, `{"id":"subject-1","email":"user@example.com","verified_email":true}`)CODE
LOWauth/antigravity_refresh_safety_test.go551 _, _ = io.WriteString(w, `{"id":"subject-1","email":"user@example.com","verified_email":true}`)CODE
LOWauth/antigravity_refresh_safety_test.go622 _, _ = io.WriteString(w, `{"id":"subject-1","email":"user@example.com","verified_email":true}`)CODE
LOWauth/token_parse_test.go24 "email": "user@example.com",CODE
LOW⚡auth/token_parse_test.go35 if info.Email != "user@example.com" {CODE
LOW⚡auth/token_parse_test.go36 t.Fatalf("Email = %q, want %q", info.Email, "user@example.com")CODE
LOW⚡auth/token_parse_test.go42 "email": "user@example.com",CODE
LOWauth/antigravity_quota_summary_test.go381 _, _ = io.WriteString(w, `{"id":"subject-1","email":"user@example.com","verified_email":true}`)CODE
LOWauth/workspace_route_refresh_test.go37 "email": "user@example.com",CODE
LOWauth/workspace_route_refresh_test.go47 "email": "user@example.com",CODE
LOWauth/workspace_route_refresh_test.go73 source.Email = "user@example.com"CODE
LOWauth/workspace_route_refresh_test.go87 "email": "user@example.com",CODE
LOWauth/antigravity_store_admin_sync_test.go54 _, _ = io.WriteString(w, `{"id":"subject-1","email":"user@example.com","verified_email":true}`)CODE
LOWadmin/antigravity_account_list_test.go52 "refresh_token": "rt-tight", "email": "tight@example.org", "antigravity_quota": antigravityQuotaJSON(t, 0.2),CODE
LOWadmin/antigravity_account_list_test.go55 "refresh_token": "rt-loose", "email": "loose@example.org", "antigravity_quota": antigravityQuotaJSON(t, 0.9),CODE
LOWadmin/token_credentials_test.go77 "email": "user@example.com",CODE
33 more matches not shown…
Decorative Section Separators19 hits · 57 pts
SeverityFileLineSnippetContext
MEDIUMdeploy.sh2# ============================================================COMMENT
MEDIUMdeploy.sh5# ============================================================COMMENT
MEDIUMdeploy.sh474# ============================COMMENT
MEDIUMdeploy.sh477# ============================COMMENT
MEDIUMdeploy.sh500# ============================COMMENT
MEDIUMdeploy.sh503# ============================COMMENT
MEDIUMproxy/claude_upstream.go1116// ── Claude 统一限流头 → 账号用量快照 ─────────────────────────────────────────COMMENT
MEDIUMfrontend/src/pages/ClaudeAccounts.tsx1168 // ── 账号操作 ──────────────────────────────────────────────COMMENT
MEDIUMfrontend/src/pages/ClaudeAccounts.tsx1267 // ── 批量操作 ──────────────────────────────────────────────COMMENT
MEDIUMfrontend/src/pages/ClaudeAccounts.tsx1366 // ── 派生 UI 数据 ──────────────────────────────────────────COMMENT
MEDIUMfrontend/src/pages/ClaudeAccounts.tsx2866// ── 账号分组指派弹窗 ──────────────────────────────────────COMMENT
MEDIUMfrontend/src/pages/ClaudeAccounts.tsx2954// ── 账号编辑弹窗:仅 Claude 账号真实可调的字段 ─────────────COMMENT
MEDIUMfrontend/src/pages/ClaudeAccounts.tsx3485// ── 添加账号弹窗:网页授权(OAuth / Setup Token) / 粘贴 Setup Token / sessionKey 登录 / 导入凭据 JSON ──────COMMENT
MEDIUMdocs/CONFIGURATION.md511# ============================================================COMMENT
MEDIUMdocs/CONFIGURATION.md513# ============================================================COMMENT
MEDIUMdocs/CONFIGURATION.md545# ============================================================COMMENT
MEDIUMdocs/CONFIGURATION.md547# ============================================================COMMENT
MEDIUMdocs/CONFIGURATION.md568# ============================================================COMMENT
MEDIUMdocs/CONFIGURATION.md570# ============================================================COMMENT
Modern AI Meta-Vocabulary8 hits · 17 pts
SeverityFileLineSnippetContext
MEDIUMCHANGELOG.md401- **Ultra mode is recorded and filterable in usage logs (#669, reported by @yy1105384898).** Codex clients that select aCODE
MEDIUMCHANGELOG.md497- **Antigravity catalog refresh, Gemini 3.8 Flash and folded reasoning tiers (#646, @dundunge).** Gemini 3.8 Flash is roCODE
MEDIUMCHANGELOG.md1094- **Context-window overflow auto-compaction (#415).** When an upstream turn overflows the model's context window, the gaCODE
MEDIUMCHANGELOG.md1211- **Continue-thinking no longer inflates the context window until it overflows (#353).** The continue-thinking fold stacCODE
MEDIUMCHANGELOG.md1226- **Reserved `collaboration.*` tools pass through untouched — gpt-5.6 multi-agent no longer 400s (#342).** GPT-5.6 multiCODE
MEDIUMCHANGELOG.md1238- **`agent_message` input items no longer 400 (#341).** Newer Codex CLI / Desktop (multi-agent v2) replay `agent_messageCODE
MEDIUMproxy/translator_test.go4061// issue #342: gpt-5.6 multi-agent 保留工具 collaboration.* 必须原样透传,COMMENT
MEDIUMdocs/CODEX_MULTI_AGENT_V2_COMPAT.md222- [PR #26210](https://github.com/openai/codex/pull/26210):Encrypt multi-agent v2 message payloadsCODE
Structural Annotation Overuse3 hits · 7 pts
SeverityFileLineSnippetContext
LOW⚡README.md413# Step 1: Generate an authorization URLCOMMENT
LOW⚡README.md419# Step 2: Open the returned auth_url in a browser, complete authorizationCOMMENT
LOW⚡README.md420# Step 3: Exchange the authorization code for a token (auto-creates account)COMMENT
AI Response Leakage1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHCHANGELOG.md805- **Local prompt-guard blocks now kill risky prompts before they reach upstream, with strike accrual and an operator-conCODE
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMapi/middleware.go355// For a more robust solution, use http.TimeoutHandler at the server level.COMMENT
Deep Nesting2 hits · 2 pts
SeverityFileLineSnippetContext
LOWscripts/repro-codex-multi-agent-v2.py73CODE
LOWscripts/repro-codex-multi-agent-v2.py80CODE
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOWscripts/build-release.sh7# Usage:COMMENT
Excessive Try-Catch Wrapping1 hit · 1 pts
SeverityFileLineSnippetContext
LOWscripts/repro-codex-multi-agent-v2.py86 except Exception:CODE
Unused Imports1 hit · 1 pts
SeverityFileLineSnippetContext
LOWscripts/repro-codex-multi-agent-v2.py27CODE