Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
This report summarizes scanner evidence for jeremylongshore/claude-code-plugins-plus-skills, a Python project with 2,831 GitHub stars. SynthScan examined 3,083,604 lines of code across 24515 source files, recording 25868 pattern matches distributed across 26 syntactic categories. The legacy adjusted pattern signal is 15.0 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 20994 finding(s).
Are imports declared and package/API names verified? 911 finding(s).
Are wrappers, guards, and repeated structures necessary? 6991 finding(s).
Which changes need focused human review? 25868 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 25868 distinct pattern matches across 26 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2430 | # Step 0: Ensure the discovery schema exists (no-op on an established DB). | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2433 | # Step 1: Migrate schema — add run_id to all target tables | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2445 | # Step 2: Determine run_id | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2452 | # Step 3: Purge any existing rows for this run_id (idempotent) | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2460 | # Step 4: Insert discovery_runs record | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2484 | # Step 6: Collect SKILL.md paths (used by multiple scan groups) | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2490 | # Step 7: Skill file analysis | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2494 | # Step 8: Commands and agents | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2498 | # Step 9: Docs | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2502 | # Step 10: Scripts and CI | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2506 | # Step 11: Structural analysis | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2512 | # Step 12: Root files | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2516 | # Step 13: Marketplace catalog | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2520 | # Step 14: Misc tables | COMMENT |
| LOW | freshie/scripts/rebuild-inventory.py | 2471 | # Step 5: Scan packs / plugins / skills | COMMENT |
| LOW | freshie/scripts/rebuild-inventory.py | 2534 | # Step 15: Update discovery_runs totals | COMMENT |
| LOW⚡ | …/database-transaction-monitor/commands/transactions.md | 66 | ### Step 1: Enable Transaction Monitoring | COMMENT |
| LOW⚡ | …/database-transaction-monitor/commands/transactions.md | 70 | ### Step 2: Build Real-Time Monitor | COMMENT |
| LOW⚡ | …/database-transaction-monitor/commands/transactions.md | 74 | ### Step 3: Define Alert Thresholds | COMMENT |
| LOW⚡ | …/database-transaction-monitor/commands/transactions.md | 78 | ### Step 4: Implement Automated Actions | COMMENT |
| LOW⚡ | …/database-transaction-monitor/commands/transactions.md | 82 | ### Step 5: Create Dashboards | COMMENT |
| LOW⚡ | …tabase/database-deadlock-detector/commands/deadlock.md | 65 | ### Step 1: Configure Database Deadlock Logging | COMMENT |
| LOW⚡ | …tabase/database-deadlock-detector/commands/deadlock.md | 69 | ### Step 2: Implement Deadlock Monitoring | COMMENT |
| LOW⚡ | …tabase/database-deadlock-detector/commands/deadlock.md | 73 | ### Step 3: Analyze Deadlock Patterns | COMMENT |
| LOW⚡ | …tabase/database-deadlock-detector/commands/deadlock.md | 77 | ### Step 4: Implement Prevention Strategies | COMMENT |
| LOW⚡ | …tabase/database-deadlock-detector/commands/deadlock.md | 81 | ### Step 5: Set Up Continuous Monitoring | COMMENT |
| LOW⚡ | …database/database-archival-system/commands/archival.md | 67 | ### Step 1: Analyze Table Growth and Identify Archival Candidates | COMMENT |
| LOW⚡ | …database/database-archival-system/commands/archival.md | 71 | ### Step 2: Design Archival Strategy | COMMENT |
| LOW⚡ | …database/database-archival-system/commands/archival.md | 75 | ### Step 3: Implement Archival Automation | COMMENT |
| LOW⚡ | …database/database-archival-system/commands/archival.md | 79 | ### Step 4: Validate Data Integrity | COMMENT |
| LOW⚡ | …database/database-archival-system/commands/archival.md | 83 | ### Step 5: Monitor and Optimize | COMMENT |
| LOW⚡ | …atabase/database-recovery-manager/commands/recovery.md | 65 | ### Step 1: Configure WAL Archiving and Continuous Backup | COMMENT |
| LOW⚡ | …atabase/database-recovery-manager/commands/recovery.md | 69 | ### Step 2: Implement Automated Base Backup System | COMMENT |
| LOW⚡ | …atabase/database-recovery-manager/commands/recovery.md | 73 | ### Step 3: Design Failover and High Availability Architecture | COMMENT |
| LOW⚡ | …atabase/database-recovery-manager/commands/recovery.md | 77 | ### Step 4: Build Recovery Testing Framework | COMMENT |
| LOW⚡ | …atabase/database-recovery-manager/commands/recovery.md | 81 | ### Step 5: Document and Drill Recovery Procedures | COMMENT |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 144 | # Step 1: Verify prerequisites | COMMENT |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 170 | # Step 2: List available base backups | COMMENT |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 193 | # Step 3: Restore base backup | COMMENT |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 218 | # Step 4: Configure recovery | COMMENT |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 256 | # Step 5: Start recovery and monitor | COMMENT |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 290 | # Step 6: Verify recovery | COMMENT |
| LOW | …ie-inventory-manager/skills/freshie-inventory/SKILL.md | 65 | ### Step 1: Present Main Menu | COMMENT |
| LOW | …ie-inventory-manager/skills/freshie-inventory/SKILL.md | 91 | ### Step 2: Execute Chosen Workflow | COMMENT |
| LOW | …ie-inventory-manager/skills/freshie-inventory/SKILL.md | 351 | ### Step 3: Email PDF Report | COMMENT |
| LOW | …-automator/skills/automating-database-backups/SKILL.md | 80 | ### Step 1: Gather Requirements | COMMENT |
| LOW | …-automator/skills/automating-database-backups/SKILL.md | 91 | ### Step 2: Generate Backup Script | COMMENT |
| LOW | …-automator/skills/automating-database-backups/SKILL.md | 104 | ### Step 3: Schedule with Cron | COMMENT |
| LOW | …-automator/skills/automating-database-backups/SKILL.md | 115 | ### Step 4: Validate Backup | COMMENT |
| LOW | …-automator/skills/automating-database-backups/SKILL.md | 125 | ### Step 5: Generate Restore Procedure | COMMENT |
| LOW⚡ | …e/database-replication-manager/commands/replication.md | 68 | ### Step 1: Configure Primary for Replication | COMMENT |
| LOW⚡ | …e/database-replication-manager/commands/replication.md | 72 | ### Step 2: Initialize Replica with Base Backup | COMMENT |
| LOW⚡ | …e/database-replication-manager/commands/replication.md | 76 | ### Step 3: Configure Replica Connection | COMMENT |
| LOW⚡ | …e/database-replication-manager/commands/replication.md | 80 | ### Step 4: Verify Replication Status | COMMENT |
| LOW⚡ | …e/database-replication-manager/commands/replication.md | 84 | ### Step 5: Implement Monitoring and Failover | COMMENT |
| LOW⚡ | plugins/database/database-diff-tool/commands/db-diff.md | 67 | ### Step 1: Connect to Source and Target Databases | COMMENT |
| LOW⚡ | plugins/database/database-diff-tool/commands/db-diff.md | 71 | ### Step 2: Extract Schema Metadata | COMMENT |
| LOW⚡ | plugins/database/database-diff-tool/commands/db-diff.md | 75 | ### Step 3: Compare Schemas | COMMENT |
| LOW⚡ | plugins/database/database-diff-tool/commands/db-diff.md | 79 | ### Step 4: Generate Migration Script | COMMENT |
| LOW⚡ | plugins/database/database-diff-tool/commands/db-diff.md | 83 | ### Step 5: Validate and Test | COMMENT |
| 15471 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | sources.yaml | 39 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 42 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 50 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 53 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 81 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 86 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 94 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 96 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 451 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 457 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 705 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 710 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 918 | # ============================================================ | COMMENT |
| MEDIUM⚡ | sources.yaml | 924 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 232 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 235 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 264 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 269 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 324 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 329 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 368 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 374 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 403 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 407 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 492 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 495 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 521 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 523 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 573 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 576 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 599 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 602 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 625 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 628 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 652 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 655 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 678 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 681 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 735 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 738 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 820 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 823 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 855 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 858 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 888 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 895 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 950 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 953 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 995 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 998 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 1034 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 1041 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 1079 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 1085 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 1180 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 1183 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 1207 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 1211 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 1242 | # ============================================================ | COMMENT |
| MEDIUM | sources.yaml | 1246 | # ============================================================ | COMMENT |
| 1361 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | freshie/scripts/promote-to-curated.py | 343 | def resolve_promotion_candidates(grades_csv: Path) -> Tuple[List[Dict[str, str]], Dict]: | CODE |
| LOW | freshie/scripts/promote-to-curated.py | 482 | def _manifest_selection_errors( | CODE |
| LOW | freshie/scripts/rebuild-inventory.py | 523 | def purge_incomplete_latest_run(conn: sqlite3.Connection) -> None: | CODE |
| LOW | freshie/scripts/rebuild-inventory.py | 611 | def scan_packs_plugins_skills( | CODE |
| LOW | freshie/scripts/rebuild-inventory.py | 2224 | def scan_skill_database_vendors(run_id: int, conn: sqlite3.Connection, dry_run: bool) -> int: | CODE |
| LOW⚡ | freshie/scripts/batch-remediate.py | 566 | def get_agents_with_invalid_fields(db: sqlite3.Connection) -> list[Path]: | CODE |
| LOW⚡ | freshie/scripts/batch-remediate.py | 597 | def _skills_missing_tags_from_fs() -> list[Path]: | CODE |
| LOW⚡ | freshie/scripts/batch-remediate.py | 601 | def _skills_missing_compat_from_fs() -> list[Path]: | CODE |
| LOW⚡ | freshie/scripts/batch-remediate.py | 611 | def _agents_with_invalid_fields_from_fs() -> list[Path]: | CODE |
| LOW | freshie/scripts/batch-remediate.py | 65 | def _load_removable_agent_fields() -> frozenset[str]: | CODE |
| LOW | freshie/scripts/batch-remediate.py | 434 | def add_compatible_with_to_file(file_path: Path, dry_run: bool) -> tuple[bool, str | None]: | CODE |
| LOW | freshie/scripts/batch-remediate.py | 468 | def remove_deprecated_agent_fields(file_path: Path, dry_run: bool) -> tuple[bool, list[str], str | None]: | CODE |
| LOW | freshie/scripts/batch-remediate.py | 544 | def get_skills_missing_compatible_with(db: sqlite3.Connection) -> list[Path]: | CODE |
| LOW | freshie/scripts/run-delta.py | 425 | def build_forge_proof_receipt(report: dict) -> dict: | CODE |
| LOW | freshie/scripts/run-delta.py | 444 | def preserve_legacy_forge_proof_receipt(reports_dir: Path, report: dict) -> Path: | CODE |
| LOW | freshie/scripts/doltlite-sync.py | 281 | def resolve_full_dolt_lineage( | CODE |
| LOW | freshie/scripts/doltlite-sync.py | 346 | def gate_tracked_full_dolt_receipt(run_id: int, commit: str) -> None: | CODE |
| LOW | freshie/scripts/doltlite-sync.py | 530 | def gate_publication_denominator(tables: Iterable[str], allowlist: frozenset[str], baseline_path: Path) -> None: | CODE |
| LOW | freshie/scripts/doltlite-sync.py | 572 | def source_snapshot_receipt_payload( | CODE |
| LOW | freshie/scripts/doltlite-sync.py | 603 | def seal_source_snapshot_receipt(payload: dict[str, Any]) -> dict[str, Any]: | CODE |
| LOW | freshie/scripts/doltlite-sync.py | 609 | def gate_committed_source_receipt(path: Path) -> None: | CODE |
| LOW | freshie/scripts/doltlite-sync.py | 639 | def gate_source_snapshot_receipt( | CODE |
| LOW⚡ | freshie/scripts/dolt-sync.py | 920 | def normalize_grade_export_path(skill_path: str, repo_root: Path = REPO_ROOT) -> str: | CODE |
| LOW | freshie/scripts/dolt-sync.py | 736 | def demote_unretained_forge_proofs(conn: sqlite3.Connection) -> list[tuple[int, str]]: | CODE |
| LOW | freshie/scripts/dolt-sync.py | 997 | def gate_tracked_grade_exports(conn: sqlite3.Connection, csv_path: Path, | CODE |
| LOW | …/database-transaction-monitor/commands/transactions.md | 214 | def find_long_running_transactions( | STRING |
| LOW | …/database-transaction-monitor/commands/transactions.md | 224 | def find_blocked_transactions( | CODE |
| LOW | …tabase/database-deadlock-detector/commands/deadlock.md | 331 | def suggest_prevention_strategy(self, analysis: Dict[str, any]) -> List[str]: | CODE |
| LOW | …tabase/database-deadlock-detector/commands/deadlock.md | 386 | def run_continuous_monitoring(self): | CODE |
| LOW | …database/database-archival-system/commands/archival.md | 385 | def _count_archival_candidates( | STRING |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 475 | def verify_database_integrity(self) -> Dict[str, any]: | CODE |
| LOW | …ng-database-backups/scripts/backup_script_generator.py | 310 | def generate_postgresql_script(config: BackupConfig) -> str: | CODE |
| LOW | …e/database-replication-manager/commands/replication.md | 494 | def promote_replica_to_primary(self, replica_host: str) -> bool: | STRING |
| LOW | plugins/database/database-diff-tool/commands/db-diff.md | 467 | def generate_migration_script(self, differences: Dict[str, any]) -> str: | CODE |
| LOW | …atabase/database-documentation-gen/commands/db-docs.md | 1411 | def _analyze_implicit_relationships(self): | STRING |
| LOW | …/database-documentation-gen/scripts/validate_config.py | 131 | def validate_project_structure(self) -> bool: | CODE |
| LOW | …abase/database-health-monitor/commands/health-check.md | 188 | def _collect_connection_metrics(self, cur) -> Dict[str, any]: | CODE |
| LOW | …abase/database-health-monitor/commands/health-check.md | 220 | def _collect_performance_metrics(self, cur) -> Dict[str, any]: | STRING |
| LOW | …abase/database-health-monitor/commands/health-check.md | 278 | def _collect_resource_metrics(self, cur) -> Dict[str, any]: | STRING |
| LOW | …abase/database-health-monitor/commands/health-check.md | 342 | def _collect_replication_metrics(self, cur) -> Dict[str, any]: | STRING |
| LOW | …se/database-security-scanner/commands/security-scan.md | 229 | def _check_excessive_permissions(self, conn) -> None: | STRING |
| LOW | …se/database-security-scanner/commands/security-scan.md | 292 | def _check_public_schema_permissions(self, conn) -> None: | STRING |
| LOW | …se/database-security-scanner/commands/security-scan.md | 337 | def _check_password_encryption(self, conn) -> None: | CODE |
| LOW | …se/database-security-scanner/commands/security-scan.md | 380 | def _check_connection_logging(self, conn) -> None: | CODE |
| LOW | …se/database-security-scanner/commands/security-scan.md | 545 | def generate_remediation_script(self) -> str: | CODE |
| LOW | …/skills/modeling-nosql-data/scripts/validate_schema.py | 126 | def validate_naming_convention(self) -> List[Dict[str, Any]]: | CODE |
| LOW | …/skills/modeling-nosql-data/scripts/validate_schema.py | 192 | def validate_document_structure(self) -> List[Dict[str, Any]]: | CODE |
| LOW | …r/skills/modeling-nosql-data/scripts/migrate_schema.py | 178 | def _extract_firestore_fields(self, schema: Dict[str, Any]) -> Dict[str, Any]: | CODE |
| LOW | …gator/skills/aggregating-crypto-news/scripts/scorer.py | 219 | def get_market_moving_keywords() -> List[str]: | CODE |
| LOW | …rypto/mempool-analyzer/skills/analyzing-mempool/ARD.md | 102 | def detect_sandwich_opportunity(pending_txs) -> List[Opportunity] | CODE |
| LOW | …nalyzer/skills/analyzing-mempool/scripts/tx_decoder.py | 223 | def estimate_attached_eth_usd_value(self, tx: Dict, eth_price: float = 3000.0) -> float: | CODE |
| LOW | …lyzer/skills/analyzing-mempool/scripts/mev_detector.py | 174 | def detect_sandwich_opportunities( | CODE |
| LOW | …lyzer/skills/analyzing-mempool/scripts/mev_detector.py | 229 | def detect_arbitrage_opportunities( | CODE |
| LOW | …lyzer/skills/analyzing-mempool/scripts/mev_detector.py | 262 | def detect_liquidation_opportunities(self, pending_txs: List[Any]) -> List[MEVOpportunity]: | CODE |
| LOW | …nalyzer/skills/analyzing-mempool/scripts/formatters.py | 115 | def format_pending_swaps_table(swaps: List[Any]) -> str: | CODE |
| LOW | …nalyzer/skills/analyzing-mempool/scripts/rpc_client.py | 170 | def _parse_pending_transactions(self, txs: List[Dict]) -> List[PendingTransaction]: | CODE |
| LOW | …nalyzer/skills/analyzing-mempool/scripts/rpc_client.py | 192 | def _get_mock_pending_transactions(self, limit: int) -> List[PendingTransaction]: | CODE |
| LOW | …ypto/wallet-portfolio-tracker/commands/track-wallet.md | 1039 | def _calculate_diversification(self, balances: List[TokenBalance]) -> float: | STRING |
| LOW | …ypto/wallet-portfolio-tracker/commands/track-wallet.md | 1078 | def get_historical_performance( | STRING |
| LOW | …rds-optimizer/skills/optimizing-staking-rewards/ARD.md | 414 | def comprehensive_yield_analysis(asset, amount): | CODE |
| 2906 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | freshie/scripts/promote-to-curated.py | 417 | except Exception: # noqa: BLE001 — a validator crash on one file must not sink the run | CODE |
| LOW | freshie/scripts/promote-to-curated.py | 909 | except Exception: # noqa: BLE001 | CODE |
| MEDIUM | freshie/scripts/rebuild-inventory.py | 190 | def git_commit_hash() -> str: | CODE |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 199 | except Exception: | CODE |
| LOW | freshie/scripts/rebuild-inventory.py | 719 | except Exception: | CODE |
| LOW | freshie/scripts/rebuild-inventory.py | 997 | except Exception: | CODE |
| LOW | freshie/scripts/rebuild-inventory.py | 1984 | except Exception as e: | CODE |
| LOW | freshie/scripts/doltlite-sync.py | 798 | except Exception: | CODE |
| LOW | freshie/scripts/doltlite-sync.py | 1158 | except Exception: | CODE |
| LOW | freshie/scripts/dolt-sync.py | 1213 | except Exception as exc: # noqa: BLE001 — normalize sibling-module errors | CODE |
| LOW | …/database-transaction-monitor/commands/transactions.md | 403 | except Exception as e: | CODE |
| LOW | …tabase/database-deadlock-detector/commands/deadlock.md | 383 | except Exception as e: | CODE |
| LOW | …tabase/database-deadlock-detector/commands/deadlock.md | 419 | except Exception as e: | CODE |
| LOW | …database/database-archival-system/commands/archival.md | 363 | except Exception as e: | STRING |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 419 | except Exception as e: | CODE |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 471 | except Exception as e: | CODE |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 517 | except Exception as e: | STRING |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 531 | except Exception as e: | STRING |
| LOW | …atabase/database-recovery-manager/commands/recovery.md | 537 | except Exception as e: | STRING |
| LOW | …utomating-database-backups/scripts/backup_validator.py | 111 | except Exception: | CODE |
| LOW | …utomating-database-backups/scripts/backup_validator.py | 163 | except Exception as e: | CODE |
| LOW | …utomating-database-backups/scripts/backup_validator.py | 212 | except Exception as e: | CODE |
| LOW | …utomating-database-backups/scripts/backup_validator.py | 250 | except Exception as e: | CODE |
| LOW | …utomating-database-backups/scripts/backup_scheduler.py | 113 | except Exception: | CODE |
| LOW | …utomating-database-backups/scripts/backup_scheduler.py | 150 | except Exception as e: | CODE |
| MEDIUM | …utomating-database-backups/scripts/backup_scheduler.py | 151 | print(f"Error installing cron entry: {e}") | CODE |
| LOW | …utomating-database-backups/scripts/backup_scheduler.py | 209 | except Exception as e: | CODE |
| MEDIUM | …utomating-database-backups/scripts/backup_scheduler.py | 210 | print(f"Error updating crontab: {e}") | CODE |
| LOW | …e/database-replication-manager/commands/replication.md | 427 | except Exception as e: | CODE |
| LOW | …e/database-replication-manager/commands/replication.md | 490 | except Exception as e: | STRING |
| LOW | …e/database-replication-manager/commands/replication.md | 535 | except Exception as e: | STRING |
| LOW | …e/database-replication-manager/commands/replication.md | 569 | except Exception as e: | STRING |
| LOW | …e/database-replication-manager/commands/replication.md | 664 | except Exception as e: | STRING |
| LOW | …ills/managing-database-replication/scripts/failover.py | 35 | except Exception as e: | CODE |
| LOW | …abase/database-index-advisor/commands/index-advisor.md | 372 | except Exception as e: | STRING |
| LOW | …gins/database/database-cache-layer/commands/caching.md | 585 | except Exception as e: | CODE |
| LOW | …gins/database/database-cache-layer/commands/caching.md | 634 | except Exception as e: | STRING |
| LOW | …gins/database/database-cache-layer/commands/caching.md | 683 | except Exception as e: | STRING |
| LOW | …ls/database-documentation-gen/scripts/erd_generator.py | 33 | except Exception as e: | CODE |
| LOW | …ls/database-documentation-gen/scripts/erd_generator.py | 44 | except Exception as e: | CODE |
| LOW | …ls/database-documentation-gen/scripts/erd_generator.py | 246 | except Exception as e: | CODE |
| LOW | …/database-documentation-gen/scripts/validate_config.py | 37 | except Exception as e: | CODE |
| LOW | …abase/database-health-monitor/commands/health-check.md | 499 | except Exception as e: | STRING |
| LOW | …abase/database-health-monitor/commands/health-check.md | 536 | except Exception as e: | STRING |
| LOW | …se/database-partition-manager/commands/partitioning.md | 575 | except Exception as e: | STRING |
| LOW | …skills/optimizing-sql-queries/scripts/explain_query.py | 35 | except Exception as e: | CODE |
| MEDIUM | …tabase-integrity/scripts/generate_validation_report.py | 47 | print(f"Error loading results: {e}", file=sys.stderr) | CODE |
| LOW | …tabase-integrity/scripts/generate_validation_report.py | 367 | except Exception as e: | STRING |
| MEDIUM | …tabase-integrity/scripts/generate_validation_report.py | 368 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM | …tabase-integrity/scripts/configure_validation_rules.py | 144 | print(f"Error loading config: {e}", file=sys.stderr) | CODE |
| LOW | …tabase-integrity/scripts/configure_validation_rules.py | 161 | except Exception as e: | CODE |
| MEDIUM | …tabase-integrity/scripts/configure_validation_rules.py | 162 | print(f"Error saving config: {e}", file=sys.stderr) | CODE |
| MEDIUM | …tabase-integrity/scripts/configure_validation_rules.py | 180 | print("Error: Table name is required") | CODE |
| MEDIUM | …tabase-integrity/scripts/configure_validation_rules.py | 223 | print("Error: Invalid numeric values") | CODE |
| MEDIUM | …tabase-integrity/scripts/configure_validation_rules.py | 245 | print("Error: Invalid rule number") | CODE |
| MEDIUM | …tabase-integrity/scripts/configure_validation_rules.py | 247 | print("Error: Invalid input") | CODE |
| MEDIUM | …tabase-integrity/scripts/configure_validation_rules.py | 271 | print("Error: Failed to save configuration") | CODE |
| LOW | …tabase-integrity/scripts/configure_validation_rules.py | 445 | except Exception as e: | STRING |
| MEDIUM | …tabase-integrity/scripts/configure_validation_rules.py | 446 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM | …-stored-procedures/scripts/database_connection_test.py | 200 | print(f"Error: {result.message}") | CODE |
| 1845 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ging-database-replication/scripts/setup_replication.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …ging-database-replication/scripts/setup_replication.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …ls/managing-database-sharding/scripts/init_sharding.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …ed/managing-database-sharding/scripts/init_sharding.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …s/implementing-database-caching/scripts/redis_setup.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …d/implementing-database-caching/scripts/redis_setup.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …lls/setting-up-log-aggregation/scripts/setup_splunk.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …kills/setting-up-log-aggregation/scripts/setup_loki.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …skills/setting-up-log-aggregation/scripts/setup_elk.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …ted/setting-up-log-aggregation/scripts/setup_splunk.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …rated/setting-up-log-aggregation/scripts/setup_loki.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …urated/setting-up-log-aggregation/scripts/setup_elk.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …-secrets-managers/scripts/aws_secrets_manager_setup.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …-secrets-managers/scripts/aws_secrets_manager_setup.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …strating-deployment-pipelines/scripts/init_pipeline.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …strating-deployment-pipelines/scripts/init_pipeline.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …anaging-test-environments/scripts/setup_environment.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …anaging-test-environments/scripts/setup_environment.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …/skills/running-performance-tests/scripts/init_test.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …curated/running-performance-tests/scripts/init_test.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …chestrating-multi-agent-systems/scripts/agent_setup.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …orchestrating-multi-agent-systems/scripts/env_setup.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …chestrating-multi-agent-systems/scripts/agent_setup.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …orchestrating-multi-agent-systems/scripts/env_setup.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …implementing-real-user-monitoring/scripts/setup_rum.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …implementing-real-user-monitoring/scripts/setup_rum.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …tting-up-synthetic-monitoring/scripts/setup_monitor.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …tting-up-synthetic-monitoring/scripts/setup_monitor.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …setting-up-distributed-tracing/scripts/setup_jaeger.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …setting-up-distributed-tracing/scripts/setup_jaeger.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …ls/detecting-memory-leaks/scripts/setup_environment.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …ed/detecting-memory-leaks/scripts/setup_environment.py | 0 | # {project_name} initialized with memory-leak-detector skill ## structure - config/ - configuration files - data/ - inpu | STRING |
| HIGH | …-database-schemas/scripts/generate_migration_script.py | 0 | # {title} generated by orm-code-generator date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} ## overview {content} ## | STRING |
| HIGH | …-database-schemas/scripts/generate_migration_script.py | 0 | # {title} generated by orm-code-generator date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} ## overview {content} ## | STRING |
| HIGH | …/skills/generating-orm-code/scripts/generate_schema.py | 0 | # {title} generated by orm-code-generator date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} ## overview {content} ## | STRING |
| HIGH | …r/skills/generating-orm-code/scripts/generate_model.py | 0 | # {title} generated by orm-code-generator date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} ## overview {content} ## | STRING |
| HIGH | …curated/generating-orm-code/scripts/generate_schema.py | 0 | # {title} generated by orm-code-generator date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} ## overview {content} ## | STRING |
| HIGH | ….curated/generating-orm-code/scripts/generate_model.py | 0 | # {title} generated by orm-code-generator date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} ## overview {content} ## | STRING |
| HIGH | …-database-schemas/scripts/generate_migration_script.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …-database-schemas/scripts/generate_migration_script.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …/skills/generating-orm-code/scripts/generate_schema.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …r/skills/generating-orm-code/scripts/generate_model.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …curated/generating-orm-code/scripts/generate_schema.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | ….curated/generating-orm-code/scripts/generate_model.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …-environment-configurations/scripts/generate_config.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …-environment-configurations/scripts/generate_config.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …uring-auto-scaling-policies/scripts/generate_config.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …uring-auto-scaling-policies/scripts/generate_config.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …erating-infrastructure-as-code/scripts/iac_generate.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …erating-infrastructure-as-code/scripts/iac_generate.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …optimizing-cloud-costs/scripts/generate_cost_report.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …optimizing-cloud-costs/scripts/generate_cost_report.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …r/skills/generating-helm-charts/scripts/helm_create.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | ….curated/generating-helm-charts/scripts/helm_create.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …/configuring-load-balancers/scripts/generate_config.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …/configuring-load-balancers/scripts/generate_config.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …ng-network-policies/scripts/generate_network_policy.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …ng-network-policies/scripts/generate_network_policy.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …/analyzing-security-headers/scripts/generate_report.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| HIGH | …/analyzing-security-headers/scripts/generate_report.py | 0 | #!/bin/bash # generated by performance-regression-detector # date: {datetime.now().strftime("%y-%m-%d %h:%m:%s")} set -e | STRING |
| 376 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | RELEASING.md | 125 | ## Operational guardrails | COMMENT |
| MEDIUM⚡ | sources.yaml | 454 | # Advanced multi-agent orchestration with persistent cross-session | COMMENT |
| MEDIUM⚡ | sources.yaml | 454 | # Advanced multi-agent orchestration with persistent cross-session | COMMENT |
| MEDIUM⚡ | sources.yaml | 709 | # aomi-build (scaffold Rust SDK crates from OpenAPI specs). | COMMENT |
| MEDIUM⚡ | sources.yaml | 922 | # to scaffold portals, add datasets/charts/maps, connect CKAN, | COMMENT |
| MEDIUM | freshie/plans/universal-validator-plan.md | 83 | maxTurns: integer # max agentic turns | CODE |
| MEDIUM | freshie/exports/run-1/plugin_fields.json | 129 | "https://github.com/damienlaine/agentic-sprint", | CODE |
| MEDIUM | freshie/exports/run-1/plugin_fields.json | 321 | "https://github.com/damienlaine/agentic-sprint", | CODE |
| MEDIUM | freshie/exports/run-1/plugin_values.json | 3260 | "raw_value": "https://github.com/damienlaine/agentic-sprint" | CODE |
| MEDIUM | freshie/exports/run-1/plugin_values.json | 3265 | "raw_value": "https://github.com/damienlaine/agentic-sprint" | CODE |
| MEDIUM | …e/freshie-inventory-manager/agents/anomaly-detector.md | 20 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …/freshie-inventory-manager/agents/discovery-scanner.md | 20 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …eshie-inventory-manager/agents/compliance-validator.md | 20 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …query-performance-analyzer/agents/performance-agent.md | 22 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/database/orm-code-generator/agents/orm-agent.md | 23 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …base/data-validation-engine/agents/validation-agent.md | 23 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …gins/database/nosql-data-modeler/agents/nosql-agent.md | 21 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM⚡ | plugins/design/uizze/README.md | 124 | - [Agentic Awesome Skills listing](https://github.com/sickn33/agentic-awesome-skills) (accepted in the active 45,000+ st | CODE |
| MEDIUM⚡ | plugins/design/uizze/README.md | 124 | - [Agentic Awesome Skills listing](https://github.com/sickn33/agentic-awesome-skills) (accepted in the active 45,000+ st | CODE |
| MEDIUM⚡ | plugins/design/uizze/README.md | 133 | - [Awesome Agentic Patterns contribution](https://github.com/nibzard/awesome-agentic-patterns/pull/134) (4,888-star patt | CODE |
| MEDIUM⚡ | plugins/design/uizze/README.md | 134 | - [Chinese Agentic AI catalogue submission](https://github.com/WenyuChiou/awesome-agentic-ai-zh/pull/111) (5,300-star tr | CODE |
| MEDIUM | plugins/crypto/mempool-analyzer/agents/mempool-agent.md | 21 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/crypto/aomi/README.md | 107 | `aomi-transact` ships with a complete [OWASP AST03 (Over-Privileged Skills)](https://owasp.org/www-project-agentic-skill | CODE |
| MEDIUM | plugins/crypto/aomi/SECURITY.md | 3 | The `aomi` plugin bundle ships two skills with materially different risk profiles. This document maps each against the [ | CODE |
| MEDIUM | plugins/crypto/aomi/skills/transact/SKILL.md | 150 | - OWASP AST03 (Over-Privileged Skills) spec: https://owasp.org/www-project-agentic-skills-top-10/ast03 | CODE |
| MEDIUM | plugins/crypto/aomi/skills/transact/SECURITY.md | 3 | This document maps the `aomi-transact` skill against [OWASP Agentic Skills Top 10 (v1.0, March 2026)](https://owasp.org/ | CODE |
| MEDIUM | …ss-chain-bridge-monitor/agents/bridge-monitor-agent.md | 22 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …crypto-derivatives-tracker/agents/derivatives-agent.md | 22 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …to/token-launch-tracker/agents/launch-tracker-agent.md | 21 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …/crypto/flash-loan-simulator/agents/flashloan-agent.md | 21 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/devops/README.md | 61 | # Container orchestration | COMMENT |
| MEDIUM | …ls/engineer-design-diagram/references/accessibility.md | 7 | - [ARIA Scaffolding](#aria-scaffolding) | CODE |
| MEDIUM | plugins/devops/jeremy-vertex-terraform/README.md | 868 | ### Vector Search for RAG | COMMENT |
| MEDIUM | …form/skills/vertex-infra-expert/references/examples.md | 59 | ## Example 2: Vector Search Index for RAG | COMMENT |
| MEDIUM | …emy-github-actions-gcp/agents/gh-actions-gcp-expert.md | 25 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …airdb-operations-kit/agents/fairdb-automation-agent.md | 22 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …-enhancers/skill-creator/skills/agent-creator/SKILL.md | 173 | maxTurns: 15 # Max agentic turns before stopping | CODE |
| MEDIUM | …rs/skill-creator/skills/skill-creator/agents/grader.md | 22 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …kill-creator/skills/skill-creator/agents/comparator.md | 22 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …/skill-creator/skills/skill-creator/agents/analyzer.md | 21 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …eator/skills/skill-creator/templates/agent-template.md | 16 | # maxTurns: 15 # Max agentic loop iterations | COMMENT |
| MEDIUM | …curity/severity1-marketplace/agents/severity-triage.md | 23 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | …/ai-agency/make-scenario-builder/agents/make-expert.md | 23 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/n8n-workflow-designer/README.md | 71 | - EXECUTIONS_MODE=queue # Critical for multi-agent | CODE |
| MEDIUM | …s/ai-agency/n8n-workflow-designer/agents/n8n-expert.md | 23 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/mint.md | 25 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/frame.md | 24 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/crest.md | 28 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/gate.md | 24 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/lodge.md | 23 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/tune.md | 25 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/guard.md | 25 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/spine.md | 27 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/proof.md | 25 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/touch.md | 27 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/move.md | 23 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/sample.md | 25 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/hue.md | 23 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/wire.md | 23 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| MEDIUM | plugins/ai-agency/tonone/agents/terra.md | 25 | # maxTurns: 50 # cap the agentic loop (omit = engine default) | COMMENT |
| 518 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | freshie/exports/run-1/csv-exports/INDEX.md | 28 | | `content_signals.csv` | 1,426 | Per-skill quality metrics — line/word count, code blocks, placeholder detection (TODO, | CODE |
| HIGH⚡ | …rbitrage-opportunity-finder/commands/find-arbitrage.md | 822 | dex_rpc_url = 'https://eth-mainnet.g.alchemy.com/v2/YOUR_API_KEY' | CODE |
| HIGH⚡ | …rypto/liquidity-pool-analyzer/commands/analyze-pool.md | 908 | 'coingecko': 'your_api_key', | CODE |
| HIGH⚡ | …rypto/liquidity-pool-analyzer/commands/analyze-pool.md | 909 | 'defillama': 'your_api_key', | CODE |
| HIGH⚡ | …rypto/liquidity-pool-analyzer/commands/analyze-pool.md | 910 | 'etherscan': 'your_api_key' | CODE |
| HIGH⚡ | …router/skills/routing-dex-trades/scripts/dex_router.py | 340 | print(" export ONEINCH_API_KEY=your-api-key") | CODE |
| HIGH⚡ | …router/skills/routing-dex-trades/scripts/dex_router.py | 341 | print(" export ZEROX_API_KEY=your-api-key") | CODE |
| HIGH⚡ | …/skills/tracking-token-launches/references/examples.md | 140 | --etherscan-key YOUR_API_KEY | CODE |
| HIGH | plugins/devops/fairdb-operations-kit/README.md | 131 | CONTABO_API_KEY=<your-api-key> | CODE |
| HIGH | …development/api-sdk-generator/commands/generate-sdk.md | 299 | const client = new ApiClient('your-api-key'); | CODE |
| HIGH | …development/api-sdk-generator/commands/generate-sdk.md | 482 | api_key="your-api-key", | CODE |
| HIGH | …pc-service-generator/commands/generate-grpc-service.md | 732 | api_key='your-api-key', | CODE |
| HIGH | …rocessor/skills/skill-adapter/assets/job_template.json | 14 | "Authorization": "Bearer YOUR_API_KEY" | CODE |
| HIGH | …/skills/skill-adapter/assets/example_batch_config.json | 9 | "Authorization": "Bearer YOUR_API_KEY" | CODE |
| HIGH | …kills/skill-adapter/assets/migration_guide_template.md | 46 | const apiKey = "[YOUR_API_KEY]"; | CODE |
| HIGH | …ster/skills/skill-adapter/assets/example_api_spec.json | 13 | "Authorization": "Bearer <your_api_key>" | CODE |
| HIGH | …ator/skills/generating-api-docs/references/examples.md | 69 | -H "Authorization: Bearer YOUR_API_KEY" \ | CODE |
| HIGH | …ator/skills/generating-api-docs/references/examples.md | 79 | "Authorization": "Bearer YOUR_API_KEY", | CODE |
| HIGH | …ator/skills/generating-api-docs/references/examples.md | 92 | headers={"Authorization": "Bearer YOUR_API_KEY"}, | CODE |
| HIGH | plugins/ai-agency/tonone/agents/sample.md | 41 | **A code sample has one job: run without modification on the first try. If it doesn't, trust is broken. Samples must use | CODE |
| HIGH | plugins/mcp/lumera-agent-memory/README.md | 258 | export LUMERA_CASCADE_API_KEY="your-api-key" | CODE |
| HIGH | …s/mcp/conversational-api-debugger/agents/api-expert.md | 285 | Authorization: Bearer YOUR_TOKEN_HERE | CODE |
| HIGH⚡ | …/lindy-install-auth/references/implementation-guide.md | 32 | export LINDY_API_KEY="your-api-key" | CODE |
| HIGH⚡ | …/lindy-install-auth/references/implementation-guide.md | 35 | echo 'LINDY_API_KEY=your-api-key' >> .env | CODE |
| HIGH | …indy-local-dev-loop/references/implementation-guide.md | 111 | LINDY_API_KEY=your-api-key | CODE |
| HIGH⚡ | …ks/shopify-pack/skills/shopify-ci-integration/SKILL.md | 50 | gh secret set SHOPIFY_API_KEY --body "your_api_key" | CODE |
| HIGH | …hopify-theme-performance/references/core-web-vitals.md | 46 | curl "https://chromeuxreport.googleapis.com/v1/records:queryRecord?key=YOUR_API_KEY" \ | CODE |
| HIGH⚡ | …packs/shopify-pack/skills/shopify-hello-world/SKILL.md | 53 | SHOPIFY_API_KEY=your_api_key | CODE |
| HIGH | …ls/shopify-ai-toolkit-wrapper/references/mcp-config.md | 42 | export SHOPIFY_API_KEY="your-api-key" | CODE |
| HIGH | …s/shopify-pack/skills/shopify-security-basics/SKILL.md | 45 | SHOPIFY_API_KEY=your_api_key | CODE |
| HIGH⚡ | …-packs/fathom-pack/skills/fathom-install-auth/SKILL.md | 55 | export FATHOM_API_KEY="your-api-key-here" | CODE |
| HIGH⚡ | …-packs/fathom-pack/skills/fathom-install-auth/SKILL.md | 66 | FATHOM_API_KEY=your-api-key | CODE |
| HIGH | …assemblyai-security-basics/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …assemblyai-core-workflow-b/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …yai-reference-architecture/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …assemblyai-webhooks-events/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …lls/assemblyai-rate-limits/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …lls/assemblyai-hello-world/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …/assemblyai-ci-integration/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …ls/assemblyai-sdk-patterns/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …s/assemblyai-common-errors/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …emblyai-performance-tuning/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …assemblyai-core-workflow-a/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …/assemblyai-prod-checklist/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …ls/assemblyai-debug-bundle/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …emblyai-deploy-integration/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …semblyai-upgrade-migration/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …ls/assemblyai-install-auth/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …/assemblyai-local-dev-loop/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …lls/assemblyai-cost-tuning/references/official-docs.md | 15 | - [Account limits and billing](https://www.assemblyai.com/docs/faq/how-to-get-your-api-key) | CODE |
| HIGH | …menso-common-errors/references/implementation-guide.md | 32 | export DOCUMENSO_API_KEY="your-api-key" | CODE |
| HIGH⚡ | …umenso-install-auth/references/implementation-guide.md | 62 | export DOCUMENSO_API_KEY="your-api-key" | CODE |
| HIGH⚡ | …umenso-install-auth/references/implementation-guide.md | 65 | echo 'DOCUMENSO_API_KEY=your-api-key' >> .env | CODE |
| HIGH | …-deploy-integration/references/implementation-guide.md | 31 | vercel secrets add apollo-api-key "your-api-key" | CODE |
| HIGH | …-deploy-integration/references/implementation-guide.md | 63 | echo -n "your-api-key" | gcloud secrets versions add apollo-api-key --data-file=- | CODE |
| HIGH | …-deploy-integration/references/implementation-guide.md | 107 | --value "your-api-key" | CODE |
| HIGH | …-deploy-integration/references/implementation-guide.md | 168 | api-key: your-api-key # Use sealed-secrets in production | CODE |
| HIGH⚡ | …acks/apollo-pack/skills/apollo-local-dev-loop/SKILL.md | 46 | APOLLO_API_KEY=your-api-key-here | CODE |
| HIGH | …ollo-local-dev-loop/references/implementation-guide.md | 32 | APOLLO_API_KEY=your-api-key-here | CODE |
| HIGH⚡ | …-packs/apollo-pack/skills/apollo-install-auth/SKILL.md | 60 | echo 'APOLLO_API_KEY=your-api-key-here' >> .env | CODE |
| 111 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | freshie/scripts/rebuild-inventory.py | 232 | except ValueError: | CODE |
| HIGH | freshie/scripts/rebuild-inventory.py | 2376 | except sqlite3.OperationalError: | CODE |
| HIGH | freshie/scripts/rebuild-inventory.py | 2400 | except sqlite3.OperationalError: | CODE |
| HIGH | freshie/scripts/batch-remediate.py | 274 | except (ValueError, IndexError): | CODE |
| HIGH | freshie/scripts/dolt-sync.py | 1359 | except (json.JSONDecodeError, OSError): | CODE |
| HIGH | …skills/aggregating-crypto-news/scripts/feed_fetcher.py | 165 | except Exception: | CODE |
| HIGH | …skills/aggregating-crypto-news/scripts/feed_fetcher.py | 175 | except Exception: | CODE |
| HIGH | …lls/aggregating-crypto-news/scripts/news_aggregator.py | 114 | except ImportError: | CODE |
| HIGH | …lls/aggregating-crypto-news/scripts/news_aggregator.py | 116 | except Exception: | CODE |
| HIGH | …/skills/aggregating-crypto-news/scripts/feed_parser.py | 60 | except Exception: | CODE |
| HIGH | …/skills/aggregating-crypto-news/scripts/feed_parser.py | 147 | except Exception: | CODE |
| HIGH | …/skills/aggregating-crypto-news/scripts/feed_parser.py | 154 | except Exception: | CODE |
| HIGH | …nalyzer/skills/analyzing-mempool/scripts/rpc_client.py | 251 | except Exception: | CODE |
| HIGH | …/optimizing-staking-rewards/scripts/staking_fetcher.py | 91 | except (json.JSONDecodeError, IOError): | CODE |
| HIGH | …/optimizing-staking-rewards/scripts/staking_fetcher.py | 103 | except IOError: | CODE |
| HIGH | …lls/backtesting-trading-strategies/scripts/backtest.py | 317 | except ImportError: | CODE |
| HIGH | …kills/analyzing-nft-rarity/scripts/metadata_fetcher.py | 107 | except IOError: | CODE |
| HIGH | …kills/analyzing-nft-rarity/scripts/metadata_fetcher.py | 98 | except (json.JSONDecodeError, IOError): | CODE |
| HIGH | …calculating-crypto-taxes/scripts/transaction_parser.py | 268 | except ValueError: | CODE |
| HIGH | …skills/analyzing-on-chain-data/scripts/data_fetcher.py | 60 | except (json.JSONDecodeError, IOError): | CODE |
| HIGH | …skills/analyzing-on-chain-data/scripts/data_fetcher.py | 69 | except IOError: | CODE |
| HIGH | …ls/exploring-blockchain-data/scripts/token_resolver.py | 358 | except Exception: | CODE |
| HIGH | …kills/analyzing-market-sentiment/scripts/fear_greed.py | 197 | except Exception: | CODE |
| HIGH | …kills/analyzing-market-sentiment/scripts/fear_greed.py | 223 | except Exception: | CODE |
| HIGH | …r/skills/generating-trading-signals/scripts/scanner.py | 92 | except Exception: | CODE |
| HIGH | …s/auditing-wallet-security/scripts/approval_scanner.py | 226 | except Exception: | CODE |
| HIGH | …lls/optimizing-defi-yields/scripts/protocol_fetcher.py | 163 | except IOError: | CODE |
| HIGH | …lls/monitoring-whale-activity/scripts/wallet_labels.py | 189 | except (IOError, json.JSONDecodeError): | CODE |
| HIGH | …lls/monitoring-whale-activity/scripts/wallet_labels.py | 208 | except (IOError, json.JSONDecodeError): | CODE |
| HIGH | …lls/monitoring-whale-activity/scripts/wallet_labels.py | 220 | except IOError: | CODE |
| HIGH | …lls/monitoring-whale-activity/scripts/price_service.py | 86 | except (json.JSONDecodeError, IOError): | CODE |
| HIGH | …lls/monitoring-whale-activity/scripts/price_service.py | 96 | except IOError: | CODE |
| HIGH | …/skills/monitoring-whale-activity/scripts/whale_api.py | 71 | except (json.JSONDecodeError, IOError): | CODE |
| HIGH | …/skills/monitoring-whale-activity/scripts/whale_api.py | 81 | except IOError: | CODE |
| HIGH | …ills/analyzing-liquidity-pools/scripts/pool_fetcher.py | 349 | except IOError: | CODE |
| HIGH | …izer/skills/optimizing-gas-fees/scripts/gas_fetcher.py | 113 | except (json.JSONDecodeError, IOError): | CODE |
| HIGH | …izer/skills/optimizing-gas-fees/scripts/gas_fetcher.py | 122 | except IOError: | CODE |
| HIGH | …skills/optimizing-gas-fees/scripts/pattern_analyzer.py | 127 | except (json.JSONDecodeError, IOError): | CODE |
| HIGH | …skills/optimizing-gas-fees/scripts/pattern_analyzer.py | 141 | except IOError: | CODE |
| HIGH | …ills/tracking-token-launches/scripts/token_analyzer.py | 362 | except Exception: | CODE |
| HIGH | …anner/skills/scanning-market-movers/scripts/scanner.py | 108 | except ImportError: | CODE |
| HIGH | …anner/skills/scanning-market-movers/scripts/scanner.py | 110 | except Exception: | CODE |
| HIGH | …anner/skills/scanning-market-movers/scripts/scanner.py | 131 | except Exception: | CODE |
| HIGH | …nner/skills/scanning-market-movers/scripts/analyzer.py | 189 | except Exception: | CODE |
| HIGH | …lls/tracking-crypto-portfolio/scripts/price_fetcher.py | 231 | except Exception: | CODE |
| HIGH | …skills/tracking-crypto-prices/scripts/cache_manager.py | 132 | except IOError: | CODE |
| HIGH | …skills/tracking-crypto-prices/scripts/cache_manager.py | 139 | except IOError: | CODE |
| HIGH | …skills/tracking-crypto-prices/scripts/cache_manager.py | 101 | except (json.JSONDecodeError, KeyError): | CODE |
| HIGH | …skills/tracking-crypto-prices/scripts/cache_manager.py | 113 | except (json.JSONDecodeError, KeyError): | CODE |
| HIGH | …skills/tracking-crypto-prices/scripts/price_tracker.py | 106 | except ImportError: | CODE |
| HIGH | …skills/tracking-crypto-prices/scripts/price_tracker.py | 109 | except Exception: | CODE |
| HIGH | …or/skills/skill-creator/eval-viewer/generate_review.py | 327 | except subprocess.TimeoutExpired: | CODE |
| HIGH | …or/skills/skill-creator/eval-viewer/generate_review.py | 252 | except (json.JSONDecodeError, OSError, KeyError): | CODE |
| HIGH | …or/skills/skill-creator/eval-viewer/generate_review.py | 460 | except (json.JSONDecodeError, OSError): | CODE |
| HIGH | …or/skills/skill-creator/eval-viewer/generate_review.py | 120 | except (json.JSONDecodeError, OSError): | CODE |
| HIGH | …or/skills/skill-creator/eval-viewer/generate_review.py | 158 | except (json.JSONDecodeError, OSError): | CODE |
| HIGH | …or/skills/skill-creator/eval-viewer/generate_review.py | 134 | except OSError: | CODE |
| HIGH | …or/skills/skill-creator/eval-viewer/generate_review.py | 323 | except (ProcessLookupError, ValueError): | CODE |
| HIGH | …or/skills/skill-creator/eval-viewer/generate_review.py | 365 | except (json.JSONDecodeError, OSError): | CODE |
| HIGH | …or/skills/skill-creator/scripts/aggregate_benchmark.py | 146 | except json.JSONDecodeError: | CODE |
| 128 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | freshie/scripts/promote-to-curated.py | 571 | CODE | |
| LOW | freshie/scripts/promote-to-curated.py | 922 | CODE | |
| LOW | freshie/scripts/rebuild-inventory.py | 237 | CODE | |
| LOW | freshie/scripts/rebuild-inventory.py | 594 | CODE | |
| LOW | freshie/scripts/rebuild-inventory.py | 611 | CODE | |
| LOW | freshie/scripts/rebuild-inventory.py | 1103 | CODE | |
| LOW | freshie/scripts/rebuild-inventory.py | 1566 | CODE | |
| LOW | freshie/scripts/rebuild-inventory.py | 1841 | CODE | |
| LOW | freshie/scripts/rebuild-inventory.py | 2180 | CODE | |
| LOW | freshie/scripts/batch-remediate.py | 279 | CODE | |
| LOW | freshie/scripts/batch-remediate.py | 586 | CODE | |
| LOW | freshie/scripts/batch-remediate.py | 685 | CODE | |
| LOW | freshie/scripts/batch-remediate.py | 710 | CODE | |
| LOW | freshie/scripts/batch-remediate.py | 733 | CODE | |
| LOW | freshie/scripts/doltlite-sync.py | 364 | CODE | |
| LOW | freshie/scripts/doltlite-sync.py | 485 | CODE | |
| LOW | freshie/scripts/doltlite-sync.py | 1008 | CODE | |
| LOW | freshie/scripts/dolt-sync.py | 351 | CODE | |
| LOW | freshie/scripts/dolt-sync.py | 736 | CODE | |
| LOW | freshie/scripts/dolt-sync.py | 1408 | CODE | |
| LOW | …utomating-database-backups/scripts/backup_validator.py | 39 | CODE | |
| LOW | …utomating-database-backups/scripts/backup_validator.py | 73 | CODE | |
| LOW | …utomating-database-backups/scripts/backup_validator.py | 128 | CODE | |
| LOW | …utomating-database-backups/scripts/backup_validator.py | 180 | CODE | |
| LOW | …utomating-database-backups/scripts/backup_validator.py | 238 | CODE | |
| LOW | …utomating-database-backups/scripts/backup_scheduler.py | 47 | CODE | |
| LOW | …ls/database-documentation-gen/scripts/erd_generator.py | 127 | CODE | |
| LOW | …ls/database-documentation-gen/scripts/erd_generator.py | 199 | CODE | |
| LOW | …/database-documentation-gen/scripts/validate_config.py | 102 | CODE | |
| LOW | …tabase-integrity/scripts/generate_validation_report.py | 123 | CODE | |
| LOW | …tabase-integrity/scripts/configure_validation_rules.py | 166 | CODE | |
| LOW | …tabase-integrity/scripts/configure_validation_rules.py | 275 | CODE | |
| LOW | …tabase-integrity/scripts/configure_validation_rules.py | 338 | CODE | |
| LOW | …-stored-procedures/scripts/database_connection_test.py | 78 | CODE | |
| LOW | …-stored-procedures/scripts/database_connection_test.py | 113 | CODE | |
| LOW | …stored-procedures/scripts/stored_procedure_deployer.py | 253 | CODE | |
| LOW | …/skills/modeling-nosql-data/scripts/validate_schema.py | 421 | CODE | |
| LOW | …/skills/modeling-nosql-data/scripts/validate_schema.py | 267 | CODE | |
| LOW | …/skills/modeling-nosql-data/scripts/validate_schema.py | 317 | CODE | |
| LOW | …r/skills/modeling-nosql-data/scripts/migrate_schema.py | 117 | CODE | |
| LOW | …r/skills/modeling-nosql-data/scripts/migrate_schema.py | 189 | CODE | |
| LOW | …ls/modeling-nosql-data/scripts/generate_sample_data.py | 261 | CODE | |
| LOW | …ls/modeling-nosql-data/scripts/generate_sample_data.py | 32 | CODE | |
| LOW | …skills/aggregating-crypto-news/scripts/feed_fetcher.py | 53 | CODE | |
| LOW | …r/skills/aggregating-crypto-news/scripts/formatters.py | 171 | CODE | |
| LOW | …lls/aggregating-crypto-news/scripts/news_aggregator.py | 88 | CODE | |
| LOW | …/skills/aggregating-crypto-news/scripts/feed_parser.py | 141 | CODE | |
| LOW | …/skills/aggregating-crypto-news/scripts/feed_parser.py | 175 | CODE | |
| LOW | …gator/skills/aggregating-crypto-news/scripts/scorer.py | 146 | CODE | |
| LOW | …nalyzer/skills/analyzing-mempool/scripts/tx_decoder.py | 139 | CODE | |
| LOW | …lyzer/skills/analyzing-mempool/scripts/mev_detector.py | 92 | CODE | |
| LOW | …nalyzer/skills/analyzing-mempool/scripts/rpc_client.py | 156 | CODE | |
| LOW | …lyzer/skills/analyzing-mempool/scripts/gas_analyzer.py | 51 | CODE | |
| LOW | …lyzer/skills/analyzing-mempool/scripts/gas_analyzer.py | 174 | CODE | |
| LOW | …ptimizing-staking-rewards/scripts/staking_optimizer.py | 25 | CODE | |
| LOW | …ls/optimizing-staking-rewards/scripts/risk_assessor.py | 239 | CODE | |
| LOW | …ls/optimizing-staking-rewards/scripts/risk_assessor.py | 254 | CODE | |
| LOW | …ls/optimizing-staking-rewards/scripts/risk_assessor.py | 294 | CODE | |
| LOW | …s/backtesting-trading-strategies/scripts/fetch_data.py | 23 | CODE | |
| LOW | …lls/backtesting-trading-strategies/scripts/backtest.py | 83 | CODE | |
| 729 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | codecov.yml | 1 | # Codecov configuration for jeremylongshore/claude-code-plugins-plus-skills | COMMENT |
| LOW | sources.yaml | 1 | # External Plugin Sources | COMMENT |
| LOW | sources.yaml | 21 | # upstream repair, but sync must not add it to the install catalog. | COMMENT |
| LOW | sources.yaml | 41 | # https://github.com/numman-ali/n-skills | COMMENT |
| LOW | sources.yaml | 81 | # ============================================================ | COMMENT |
| LOW | sources.yaml | 361 | # x86_64) inside the skill. `skills/**` is unanchored, so it is | COMMENT |
| LOW | sources.yaml | 441 | # Upstream commits its own claude-mem session exhaust at | COMMENT |
| LOW | sources.yaml | 561 | # - name: dev-browser | COMMENT |
| LOW | sources.yaml | 881 | # NOTE (2026-07-07): mytradeledger-skills (trpsbill/skills) was removed | COMMENT |
| LOW | .lychee.toml | 21 | # VitePress-style site that uses its own root-relative routing | COMMENT |
| LOW | .lychee.toml | 161 | # docs.sigstore.dev — timing out from CI runners (host throttles). | COMMENT |
| LOW | .lychee.toml | 181 | "^https?://spacy\\.io/", | COMMENT |
| LOW | ruff.toml | 1 | # Ruff configuration for claude-code-plugins-plus-skills | COMMENT |
| LOW | ruff.toml | 21 | # skills/.curated/ is a GENERATED mirror of the best plugin skills for skills.sh | COMMENT |
| LOW | .gitleaks.toml | 1 | # gitleaks configuration for claude-code-plugins-plus-skills | COMMENT |
| LOW | .gitleaks.toml | 61 | # below, which the default rules would re-read as leaks. | COMMENT |
| LOW | .gitleaks.toml | 101 | # docs) are public identifiers, not secrets. | COMMENT |
| LOW | .sops.yaml | 1 | # SOPS configuration. Encrypted secrets travel with the code. | COMMENT |
| LOW | secrets.example.yaml | 1 | # secrets.example.yaml — template for SOPS-encrypted secrets. | COMMENT |
| LOW | CLAUDE.md | 61 | # Single test (vitest has no --grep; filter by test name with -t, or pass a file path) | COMMENT |
| LOW | .gemini/config.yaml | 1 | # Gemini Code Assist GitHub App configuration. | COMMENT |
| LOW | freshie/scripts/dolt-sync.py | 141 | DEFAULT_REPO = "freshie-inventory" | COMMENT |
| LOW | plugins/database/README.md | 221 | # Result: List of slow queries | COMMENT |
| LOW | …lls/managing-database-recovery/scripts/pitr_restore.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …/managing-database-recovery/scripts/validate_backup.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …ls/managing-database-recovery/scripts/test_recovery.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …/skills/managing-database-recovery/scripts/failover.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …tor/skills/aggregating-crypto-news/config/sources.yaml | 1 | # RSS News Sources Registry | COMMENT |
| LOW | …tor/skills/aggregating-crypto-news/config/sources.yaml | 141 | - name: Crypto Law Insider | COMMENT |
| LOW | …ills/optimizing-staking-rewards/references/examples.md | 1 | # Usage Examples | COMMENT |
| LOW | …ills/optimizing-staking-rewards/references/examples.md | 61 | # Analyzes for a $25,000 position | COMMENT |
| LOW | …ills/optimizing-staking-rewards/references/examples.md | 81 | # | COMMENT |
| LOW | …ills/optimizing-staking-rewards/references/examples.md | 101 | # - stETH occasionally trades at slight discount to ETH | COMMENT |
| LOW | …ills/optimizing-staking-rewards/references/examples.md | 121 | # Position APY Annual Return | COMMENT |
| LOW | …ills/optimizing-staking-rewards/references/examples.md | 181 | # "project": "lido", | COMMENT |
| LOW | …ins/crypto/aomi/skills/transact/references/examples.md | 81 | # label: Approve Uniswap Router to spend USDC | COMMENT |
| LOW | …ins/crypto/aomi/skills/transact/references/examples.md | 181 | # tx-3 to 0x87870Bca3F3fD6335C3F4ce8392D69350B4fA4E2 (Aave V3 Pool) | COMMENT |
| LOW | …ins/crypto/aomi/skills/transact/references/examples.md | 281 | COMMENT | |
| LOW | …ins/crypto/aomi/skills/transact/references/examples.md | 381 | # tx-1 to 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 (USDC) | COMMENT |
| LOW | …ins/crypto/aomi/skills/transact/references/examples.md | 461 | (no drain-vector annotations) | COMMENT |
| LOW | …crypto/aomi/skills/transact/templates/aomi-workflow.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …crypto/aomi/skills/transact/templates/aomi-workflow.sh | 221 | # Single-tx flow (no approve, no batch): | COMMENT |
| LOW | …/monitoring-cross-chain-bridges/references/examples.md | 1 | # Usage Examples | COMMENT |
| LOW | …/monitoring-cross-chain-bridges/references/examples.md | 61 | # Output: | COMMENT |
| LOW | …/monitoring-cross-chain-bridges/references/examples.md | 81 | # arbitrum $234.56M | COMMENT |
| LOW | …/monitoring-cross-chain-bridges/references/examples.md | 141 | # Bridge: Stargate | COMMENT |
| LOW | …/monitoring-cross-chain-bridges/references/examples.md | 181 | # ============================================================ | COMMENT |
| LOW | …/monitoring-cross-chain-bridges/references/examples.md | 201 | # ---------------------------------------- | COMMENT |
| LOW | …arket-sentiment-analyzer/commands/analyze-sentiment.md | 821 | # For demonstration - would integrate with Glassnode, CoinMetrics, etc. | COMMENT |
| LOW | …skills/analyzing-market-sentiment/config/settings.yaml | 1 | # Market Sentiment Analyzer Configuration | COMMENT |
| LOW | …skills/auditing-wallet-security/references/examples.md | 1 | # Usage Examples | COMMENT |
| LOW | …skills/auditing-wallet-security/references/examples.md | 21 | # | COMMENT |
| LOW | …skills/auditing-wallet-security/references/examples.md | 81 | # Step 1/3: Scanning token approvals... | COMMENT |
| LOW | …skills/auditing-wallet-security/references/examples.md | 101 | # ╚═══════════════════════════════════════════════════════════════════╝ | COMMENT |
| LOW | …skills/auditing-wallet-security/references/examples.md | 121 | # | COMMENT |
| LOW | …skills/auditing-wallet-security/references/examples.md | 141 | # "risk_factors": [ | COMMENT |
| LOW | …skills/auditing-wallet-security/references/examples.md | 161 | # Output: | COMMENT |
| LOW | …skills/auditing-wallet-security/references/examples.md | 201 | # REVOKE RECOMMENDATIONS | COMMENT |
| LOW | …skills/auditing-wallet-security/references/examples.md | 241 | python wallet_auditor.py report 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 --json | COMMENT |
| LOW | …skills/auditing-wallet-security/references/examples.md | 261 | # "unique_spenders": 8, | COMMENT |
| 529 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .gitleaks.toml | 94 | '''placeholder''', | STRING |
| LOW | freshie/exports/run-1/plugin_values.json | 11845 | "raw_value": "[\"testing\", \"test-data\", \"fake-data\", \"fixtures\", \"factory\", \"agent-skills\"]" | CODE |
| LOW | …er/skills/implementing-database-audit-logging/SKILL.md | 97 | - At the start of each request: `SET LOCAL app.user = 'user@example.com'` | CODE |
| LOW | …er/skills/implementing-database-audit-logging/SKILL.md | 114 | - **All changes by a user**: `SELECT * FROM audit_log WHERE changed_by = 'user@example.com' ORDER BY changed_at DESC` | CODE |
| LOW | …enerator/skills/generating-database-seed-data/SKILL.md | 58 | - **Raw SQL**: `INSERT INTO users (name, email, ...) VALUES ('John Doe', 'john@example.com', ...);` with proper escap | CODE |
| LOW | …ase/stored-procedure-generator/commands/stored-proc.md | 250 | '{"street": "123 Main St", "city": "Portland", "state": "OR", "zip": "97201"}'::JSONB | CODE |
| LOW | …gins/database/nosql-data-modeler/agents/nosql-agent.md | 46 | name: "John Doe", | CODE |
| LOW | …eployment-rollbacks/assets/example_rollback_config.yml | 110 | recipients: ["admin@example.com", "devops@example.com"] | CODE |
| LOW | …ting-docker-compose-files/scripts/generate_env_file.py | 199 | return "user@example.com" | CODE |
| LOW | …rating-deployment-pipelines/assets/example_config.yaml | 83 | - "admin@example.com" | CODE |
| LOW | …/skills/skill-adapter/assets/examples/figma_specs.json | 116 | "author": "John Doe", | CODE |
| LOW | plugins/security/penetration-tester/tests/conftest.py | 32 | "name": "Jane Doe", | CODE |
| LOW⚡ | …ty/penetration-tester/tests/test_cluster6_reporting.py | 322 | assert "Jane Doe" in summary | CODE |
| LOW | …g-penetration-testing/scripts/code_security_scanner.py | 548 | "placeholder", | CODE |
| LOW | …scanner/skills/skill-adapter/assets/report_template.md | 87 | "address": "123 Main St", | CODE |
| LOW | …api-versioning-manager/commands/manage-api-versions.md | 808 | name: 'John Doe', | CODE |
| LOW | …api-versioning-manager/commands/manage-api-versions.md | 816 | displayName: 'John Doe', | CODE |
| LOW | …lls/skill-adapter/assets/compatibility_test_suite.json | 17 | "name": "John Doe", | CODE |
| LOW | …lls/skill-adapter/assets/compatibility_test_suite.json | 34 | "full_name": "John Doe", | CODE |
| LOW | …kills/skill-adapter/assets/migration_guide_template.md | 83 | "user_name": "John Doe" | CODE |
| LOW | …kills/skill-adapter/assets/migration_guide_template.md | 92 | "name": "John Doe", | CODE |
| LOW | …ls/skill-adapter/assets/deprecation_notice_template.md | 59 | * **Old:** `{"id": 123, "name": "John Doe"}` | COMMENT |
| LOW | …t/api-contract-generator/commands/generate-contract.md | 175 | "name": "John Doe", | CODE |
| LOW | …t/api-contract-generator/commands/generate-contract.md | 271 | name: 'John Doe', | CODE |
| LOW | …ator/skills/skill-adapter/assets/example_contract.json | 30 | "author": "John Doe", | CODE |
| LOW | …ator/skills/skill-adapter/assets/example_contract.json | 87 | "author": "John Doe", | CODE |
| LOW | …tor/skills/skill-adapter/assets/contract_template.json | 27 | "name": "John Doe", | CODE |
| LOW | …tor/skills/skill-adapter/assets/contract_template.json | 30 | "street": "123 Main St", | CODE |
| LOW | …lls/building-api-authentication/references/examples.md | 201 | -d '{"email":"user@example.com","password":"secret123"}' | CODE |
| LOW | …-builder/skills/skill-adapter/assets/jwt_template.json | 17 | "name": "John Doe", | CODE |
| LOW | …velopment/api-request-logger/commands/setup-logging.md | 467 | user = {"id": user_id, "email": "user@example.com", "ssn": "123-45-6789"} | CODE |
| LOW | …ster/skills/skill-adapter/assets/example_api_spec.json | 35 | "name": "John Doe", | CODE |
| LOW | …ster/skills/skill-adapter/assets/example_api_spec.json | 44 | "value": "John Doe", | CODE |
| LOW | …ster/skills/skill-adapter/assets/example_api_spec.json | 57 | "name": "Jane Doe", | CODE |
| LOW | …ster/skills/skill-adapter/assets/example_api_spec.json | 66 | "value": "Jane Doe", | CODE |
| LOW | …-documentation-generator/commands/generate-api-docs.md | 1414 | ("string", "email"): "user@example.com", | CODE |
| LOW | …/skills/skill-adapter/assets/example_event_schema.json | 59 | "example": "123 Main St" | CODE |
| LOW⚡ | …ills/skill-adapter/assets/example_webhook_payload.json | 30 | "name": "John Doe", | CODE |
| LOW⚡ | …ills/skill-adapter/assets/example_webhook_payload.json | 31 | "address_line1": "123 Main St", | CODE |
| LOW⚡ | …ills/skill-adapter/assets/example_webhook_payload.json | 39 | "name": "John Doe", | CODE |
| LOW⚡ | …ills/skill-adapter/assets/example_webhook_payload.json | 40 | "address_line1": "123 Main St", | CODE |
| LOW | …lopment/api-mock-server/commands/create-mock-server.md | 730 | 'admin@example.com': { password: 'admin123', role: 'admin', mfaEnabled: true }, | CODE |
| LOW | …lopment/api-mock-server/commands/create-mock-server.md | 731 | 'user@example.com': { password: 'user123', role: 'user', mfaEnabled: false }, | CODE |
| LOW | …/skills/skill-adapter/assets/mock_server_template.yaml | 36 | name: "John Doe" | CODE |
| LOW | …erver/skills/skill-adapter/assets/openapi_example.yaml | 113 | example: "John Doe" | CODE |
| LOW | …erver/skills/skill-adapter/assets/openapi_example.yaml | 136 | example: "Jane Doe" | CODE |
| LOW⚡ | …development/api-migration-tool/commands/migrate-api.md | 179 | "name": "John Doe", | CODE |
| LOW⚡ | …development/api-migration-tool/commands/migrate-api.md | 181 | "street": "123 Main St", | CODE |
| LOW⚡ | …development/api-migration-tool/commands/migrate-api.md | 190 | "name": "John Doe", | CODE |
| LOW⚡ | …development/api-migration-tool/commands/migrate-api.md | 193 | "street": "123 Main St", | CODE |
| LOW | plugins/ai-agency/tonone/skills/form-social/SKILL.md | 46 | - If copy is not yet written: flag it now. No lorem ipsum will appear in any spec. | CODE |
| LOW | plugins/ai-agency/tonone/skills/form-social/SKILL.md | 198 | Copy: [EXACT text — never lorem ipsum] | CODE |
| LOW | plugins/ai-agency/tonone/skills/form-social/SKILL.md | 253 | - **No lorem ipsum.** Use the real copy or flag that copy is needed. A spec with placeholder text is not a spec — it's a | CODE |
| LOW | plugins/ai-agency/tonone/skills/form-social/SKILL.md | 264 | - Lorem ipsum in any deliverable — real copy or a clear flag that copy is missing | CODE |
| LOW | plugins/ai-agency/tonone/skills/proof-design/SKILL.md | 86 | - [ ] Lorem ipsum or placeholder text shipped → Critical | CODE |
| LOW | …ugins/ai-agency/hyperflow/skills/hyperflow/DOCTRINE.md | 389 | - Test cases that just restate Acceptance criteria in table form — Acceptance is shape (`exported as X`); test cases are | CODE |
| LOW | …/ai-agency/hyperflow/skills/hyperflow/worker-prompt.md | 65 | - Cases that just restate Acceptance criteria in table form — Acceptance is shape (`exported as X`); test cases are beha | CODE |
| LOW | …/ai-agency/hyperflow/skills/hyperflow/worker-prompt.md | 179 | | 1 | happy path two words | \`<UserAvatar name="John Doe" userId="u1" />\` | renders "JD"; consistent background color | CODE |
| LOW⚡ | …er/skills/skill-adapter/assets/dashboard_template.html | 104 | <strong>Experiment ID:</strong> <span class="placeholder">{{experiment_id_1}}</span><br> | CODE |
| LOW⚡ | …er/skills/skill-adapter/assets/dashboard_template.html | 105 | <strong>Description:</strong> <span class="placeholder">{{experiment_description_1}}</span><br> | CODE |
| 305 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | freshie/scripts/promote-to-curated.py | 73 | CODE | |
| LOW | freshie/scripts/rebuild-inventory.py | 19 | CODE | |
| LOW | freshie/scripts/rebuild-inventory.py | 24 | CODE | |
| LOW | freshie/scripts/batch-remediate.py | 17 | CODE | |
| LOW | freshie/scripts/run-delta.py | 38 | CODE | |
| LOW | freshie/scripts/doltlite-sync.py | 4 | CODE | |
| LOW | freshie/scripts/dolt-sync.py | 109 | CODE | |
| LOW | …s/backtesting-trading-strategies/scripts/fetch_data.py | 11 | CODE | |
| LOW | …er/skills/tracking-crypto-prices/scripts/api_client.py | 163 | CODE | |
| LOW | …kills/engineer-design-diagram/scripts/validate_html.py | 19 | CODE | |
| LOW | …/skills/engineer-design-diagram/scripts/fingerprint.py | 21 | CODE | |
| LOW | …ills/artifact-validator/scripts/inventory_artifacts.py | 4 | CODE | |
| LOW | …it/skills/production-upgrade/scripts/audit_evidence.py | 4 | CODE | |
| LOW | …agent-safety-preflight/scripts/agent_preflight_lite.py | 4 | CODE | |
| LOW | plugins/security/penetration-tester/tests/conftest.py | 7 | CODE | |
| LOW | …tion-tester/tests/test_cluster4_dependency_analysis.py | 14 | CODE | |
| LOW | …s/security/penetration-tester/tests/test_lib_report.py | 3 | CODE | |
| LOW | …ty/penetration-tester/tests/test_cluster6_reporting.py | 9 | CODE | |
| LOW | …/security/penetration-tester/tests/test_lib_finding.py | 8 | CODE | |
| LOW | …on-tester/tests/test_cluster5_engagement_governance.py | 9 | CODE | |
| LOW | plugins/security/penetration-tester/lib/finding.py | 18 | CODE | |
| LOW | plugins/security/penetration-tester/lib/http_client.py | 21 | CODE | |
| LOW | plugins/security/penetration-tester/lib/authz_check.py | 27 | CODE | |
| LOW | plugins/security/penetration-tester/lib/report.py | 15 | CODE | |
| LOW | …g-directory-listing/scripts/probe_directory_listing.py | 15 | CODE | |
| LOW | …cing-transitive-vulnerabilities/scripts/trace_vulns.py | 20 | CODE | |
| LOW | …etecting-weak-cryptography/scripts/scan_weak_crypto.py | 12 | CODE | |
| LOW | …g-pentest-authorization/scripts/check_authorization.py | 18 | CODE | |
| LOW | …/skills/defining-pentest-scope/scripts/define_scope.py | 18 | CODE | |
| LOW | …s/mapping-findings-to-owasp-top10/scripts/map_owasp.py | 16 | CODE | |
| LOW | …scanning-for-hardcoded-secrets/scripts/scan_secrets.py | 27 | CODE | |
| LOW | …ter/skills/analyzing-tls-config/scripts/analyze_tls.py | 24 | CODE | |
| LOW | …/detecting-ssl-cert-issues/scripts/check_cert_chain.py | 29 | CODE | |
| LOW | …robing-dangerous-http-methods/scripts/probe_methods.py | 28 | CODE | |
| LOW | …s/auditing-python-dependencies/scripts/audit_python.py | 19 | CODE | |
| LOW | …printing-server-software/scripts/fingerprint_server.py | 21 | CODE | |
| LOW | …ster/skills/auditing-cors-policy/scripts/audit_cors.py | 25 | CODE | |
| LOW | …/skills/detecting-eval-exec-usage/scripts/scan_eval.py | 8 | CODE | |
| LOW | …g-penetration-testing/scripts/code_security_scanner.py | 23 | CODE | |
| LOW | …ming-penetration-testing/scripts/dependency_auditor.py | 25 | CODE | |
| LOW | …orming-penetration-testing/scripts/security_scanner.py | 23 | CODE | |
| LOW | …mposing-vulnerability-report/scripts/compose_report.py | 17 | CODE | |
| LOW | …ecting-command-injection-patterns/scripts/scan_cmdi.py | 9 | CODE | |
| LOW | …/checking-license-compliance/scripts/check_licenses.py | 20 | CODE | |
| LOW | …ording-pentest-engagement/scripts/record_engagement.py | 16 | CODE | |
| LOW | …tecting-exposed-secrets-files/scripts/probe_secrets.py | 15 | CODE | |
| LOW | …/detecting-sql-injection-patterns/scripts/scan_sqli.py | 9 | CODE | |
| LOW | …hecking-http-security-headers/scripts/check_headers.py | 24 | CODE | |
| LOW | …kills/detecting-debug-endpoints/scripts/probe_debug.py | 23 | CODE | |
| LOW | …s/generating-executive-summary/scripts/exec_summary.py | 17 | CODE | |
| LOW | …secure-deserialization/scripts/scan_deserialization.py | 9 | CODE | |
| LOW | …/skills/auditing-npm-dependencies/scripts/audit_npm.py | 20 | CODE | |
| LOW | plugins/ai-agency/hyperflow/scripts/resolve-mode.py | 21 | CODE | |
| LOW | plugins/ai-agency/hyperflow/scripts/migrate-cache.py | 26 | CODE | |
| LOW | …gins/ai-agency/hyperflow/scripts/generate-demo-cast.py | 15 | CODE | |
| LOW | plugins/ai-agency/hyperflow/scripts/auto-bridge.py | 24 | CODE | |
| LOW | plugins/ai-agency/hyperflow/scripts/auto-bridge.py | 28 | CODE | |
| LOW | plugins/ai-agency/hyperflow/scripts/generate-og.py | 17 | CODE | |
| LOW | …agency/hyperflow/scripts/generate-portable-doctrine.py | 26 | CODE | |
| LOW | …ugins/ai-agency/hyperflow/scripts/archive-artefacts.py | 35 | CODE | |
| 290 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | freshie/scripts/rebuild-inventory.py | 554 | # Check if table exists | COMMENT |
| LOW | freshie/scripts/rebuild-inventory.py | 558 | # Check if run_id column already present | COMMENT |
| LOW | freshie/scripts/batch-remediate.py | 375 | # Check if this line starts a target field | COMMENT |
| LOW | plugins/install-jeremy-plugins.sh | 24 | # Check if already installed | COMMENT |
| LOW | …lls/managing-database-recovery/scripts/pitr_restore.sh | 130 | # Check if target time is in the future | COMMENT |
| LOW | …/managing-database-recovery/scripts/validate_backup.sh | 123 | # Check if file is readable | COMMENT |
| LOW | …/managing-database-recovery/scripts/validate_backup.sh | 151 | # Check if it's a SQL dump file | COMMENT |
| LOW | …ls/managing-database-recovery/scripts/test_recovery.sh | 184 | # Check if target port is available | COMMENT |
| LOW | …g-database-backups/scripts/restore_script_generator.py | 78 | # Check if database exists | COMMENT |
| LOW | …g-database-backups/scripts/restore_script_generator.py | 192 | # Check if database exists | COMMENT |
| LOW⚡ | …g-database-backups/scripts/restore_script_generator.py | 299 | # Check if it contains gzipped bson | COMMENT |
| LOW⚡ | …g-database-backups/scripts/restore_script_generator.py | 305 | # Check if database exists | COMMENT |
| LOW | …g-database-backups/scripts/restore_script_generator.py | 419 | # Check if database exists | COMMENT |
| LOW | …utomating-database-backups/scripts/backup_scheduler.py | 122 | # Check if entry already exists | COMMENT |
| LOW | …/database-documentation-gen/scripts/validate_config.py | 136 | # Check if we're in a documentation project directory | COMMENT |
| LOW | …rocedures/scripts/stored_procedure_syntax_validator.py | 67 | # Check if function has RETURNS | COMMENT |
| LOW | …/skills/modeling-nosql-data/scripts/validate_schema.py | 281 | # Check if reference target exists | COMMENT |
| LOW | …/skills/modeling-nosql-data/scripts/validate_schema.py | 455 | # Output results | STRING |
| LOW⚡ | …skills/aggregating-crypto-news/scripts/feed_fetcher.py | 148 | # Check if expired | COMMENT |
| LOW | …/optimizing-staking-rewards/scripts/staking_fetcher.py | 148 | # Check if it's a known staking protocol | COMMENT |
| LOW | …/optimizing-staking-rewards/scripts/staking_fetcher.py | 199 | # Check if asset is in the pool symbol | COMMENT |
| LOW | …lls/backtesting-trading-strategies/scripts/backtest.py | 401 | # Print results | COMMENT |
| LOW | …/skills/calculating-crypto-taxes/scripts/tax_engine.py | 111 | # Check if we have enough to dispose | COMMENT |
| LOW | …nitoring-cross-chain-bridges/scripts/bridge_monitor.py | 149 | # Check if both chains supported | COMMENT |
| LOW | …s/monitoring-cross-chain-bridges/scripts/tx_tracker.py | 98 | # Check if pending | COMMENT |
| LOW | …s/auditing-wallet-security/scripts/approval_scanner.py | 285 | # Check if unlimited | COMMENT |
| LOW | …s/auditing-wallet-security/scripts/approval_scanner.py | 292 | # Check if risky | COMMENT |
| LOW | …lls/auditing-wallet-security/scripts/wallet_auditor.py | 132 | # Display results | COMMENT |
| LOW | …skills/auditing-wallet-security/scripts/tx_analyzer.py | 259 | # Check if it's a contract | COMMENT |
| LOW | …lls/optimizing-defi-yields/scripts/yield_calculator.py | 172 | # Check if it's a stablecoin-only pool | COMMENT |
| LOW | …ills/analyzing-liquidity-pools/scripts/pool_fetcher.py | 117 | # Check if both tokens are in the symbol | COMMENT |
| LOW⚡ | …router/skills/routing-dex-trades/scripts/dex_router.py | 345 | # Check if running in demo mode | COMMENT |
| LOW | …ills/tracking-token-launches/scripts/token_analyzer.py | 237 | # Check if proxy | COMMENT |
| LOW | …anner/skills/scanning-market-movers/scripts/scorers.py | 90 | # Check if all changes are in same direction | COMMENT |
| LOW | …nner/skills/scanning-market-movers/scripts/analyzer.py | 58 | # Check if dependency exists | COMMENT |
| LOW | …skills/tracking-crypto-prices/scripts/price_tracker.py | 228 | # Output results | COMMENT |
| LOW | …skills/tracking-crypto-prices/scripts/price_tracker.py | 297 | # Output results | COMMENT |
| LOW | …ting-docker-compose-files/scripts/generate_env_file.py | 355 | # Output results | STRING |
| LOW | …ills/generating-docker-compose-files/scripts/deploy.sh | 194 | # Check if Swarm is initialized | COMMENT |
| LOW | …ills/generating-docker-compose-files/scripts/deploy.sh | 246 | # Check if kompose is available | COMMENT |
| LOW | …ating-docker-compose-files/assets/compose_template.yml | 20 | test: ["CMD-SHELL", "curl -f http://localhost || exit 1"] # Check if the web server is responding | CODE |
| LOW | …ating-docker-compose-files/assets/compose_template.yml | 46 | test: ["CMD-SHELL", "curl -f http://localhost:8000/health || exit 1"] # Check if the application is responding | CODE |
| LOW | …ating-docker-compose-files/assets/compose_template.yml | 72 | test: ["CMD-SHELL", "pg_isready -U user -d database"] # Check if the database is ready | CODE |
| LOW | …ting-kubernetes-deployments/scripts/delete_manifest.sh | 183 | # Check if resource exists | COMMENT |
| LOW | …kubernetes-deployments/assets/deployment_template.yaml | 39 | livenessProbe: # Check if the container is running | CODE |
| LOW | …kubernetes-deployments/assets/deployment_template.yaml | 47 | readinessProbe: # Check if the container is ready to serve traffic | CODE |
| LOW | …ls/creating-ansible-playbooks/scripts/test_playbook.sh | 170 | # Check if image exists | COMMENT |
| LOW | …authentication-implementations/scripts/jwt_analyzer.py | 162 | # Check if algorithm matches expected | COMMENT |
| LOW | …robing-dangerous-http-methods/scripts/probe_methods.py | 102 | # Check if the response body echoes the request — confirms XST | COMMENT |
| LOW | plugins/ai-agency/hyperflow/scripts/setup-detection.sh | 231 | # Check if shim already present (prefix match handles version-embedded marker) | COMMENT |
| LOW | …/skills/podium-rag-context-bridge/config/settings.yaml | 22 | # Set false to allow cross-contact retrieval (rare; only when contact identity is unknown). | COMMENT |
| LOW | …ills/managing-database-tests/assets/docker-compose.yml | 17 | test: ["CMD-SHELL", "pg_isready -U test_user -d test_database"] # Check if the database is ready | CODE |
| LOW | …ills/managing-database-tests/assets/docker-compose.yml | 37 | test: ["CMD-SHELL", "mysqladmin ping -h localhost -u root -proot_password"] # Check if the database is ready | CODE |
| LOW | …ills/managing-database-tests/assets/docker-compose.yml | 55 | test: ["CMD", "mongosh", "--eval", "db.runCommand('ping').ok"] # Check if the database is ready | CODE |
| LOW | …rforming-regression-analysis/scripts/evaluate_model.py | 351 | # Output results | STRING |
| LOW | …erforming-regression-analysis/scripts/validate_data.py | 267 | # Check if column exists | COMMENT |
| LOW | …erforming-regression-analysis/scripts/validate_data.py | 274 | # Check if numeric | COMMENT |
| LOW | …erforming-regression-analysis/scripts/validate_data.py | 484 | # Output results | STRING |
| LOW | …rforming-regression-analysis/scripts/generate_model.py | 378 | # Output results | STRING |
| LOW | …jeremy-vertex-validator/scripts/validate_compliance.py | 246 | # Check if models exist in the primary region | COMMENT |
| 109 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | freshie/scripts/promote-to-curated.py | 103 | # Machine-readable strategy marker consumed by the Epic 1 measurement harness. | COMMENT |
| MEDIUM | freshie/scripts/promote-to-curated.py | 104 | # Changing this value requires updating the harness and its independent fixtures. | COMMENT |
| MEDIUM | freshie/scripts/run-delta.py | 120 | """Table name from a diff row, robust to Dolt column-name variants. | STRING |
| MEDIUM | …tabase-integrity/scripts/generate_validation_report.py | 17 | """Generates comprehensive validation reports.""" | STRING |
| MEDIUM | …timizing-staking-rewards/scripts/metrics_calculator.py | 50 | """Calculates comprehensive metrics for staking options.""" | STRING |
| MEDIUM | …timizing-staking-rewards/scripts/metrics_calculator.py | 89 | """Calculate comprehensive metrics for a staking option. | STRING |
| MEDIUM | …skills/auditing-wallet-security/scripts/risk_scorer.py | 287 | # General best practices | COMMENT |
| MEDIUM | …ating-docker-compose-files/scripts/validate_compose.sh | 208 | # Check for recommended best practices | COMMENT |
| MEDIUM | …ng-kubernetes-deployments/scripts/validate_manifest.sh | 154 | # Perform best practices validation in strict mode | COMMENT |
| MEDIUM | …jeremy-github-actions-gcp/scripts/validate-workflow.sh | 3 | # Validate GitHub Actions workflow for Vertex AI / GCP best practices | COMMENT |
| MEDIUM | …alidating-cors-policies/scripts/generate_test_cases.py | 23 | """Generates comprehensive test cases for CORS policies.""" | STRING |
| MEDIUM⚡ | …tion-tester/tests/test_cluster4_dependency_analysis.py | 443 | # All 3 vulns flow through `express` (high-leverage ancestor) | COMMENT |
| MEDIUM⚡ | …tion-tester/tests/test_cluster4_dependency_analysis.py | 452 | # The top leverage ancestor should be `express` with 3 CVE count | COMMENT |
| MEDIUM | …tion-tester/tests/test_cluster4_dependency_analysis.py | 357 | # Only the leverage-report finding should be in the output (no real | COMMENT |
| MEDIUM | …tion-tester/tests/test_cluster4_dependency_analysis.py | 358 | # transitive vuln, no leverage to track) — but if INFO was incorrectly | COMMENT |
| MEDIUM | …tion-tester/tests/test_cluster4_dependency_analysis.py | 431 | """The leverage report should call out the direct ancestor for which | STRING |
| MEDIUM | …cing-transitive-vulnerabilities/scripts/trace_vulns.py | 350 | # Add leverage report findings — INFO severity, one per direct dep with >0 reachable CVEs. | COMMENT |
| MEDIUM | plugins/mcp/slack-channel/server.test.ts | 1227 | // buildSecretValueSet skips empty values, but guard must be robust anyway: | COMMENT |
| MEDIUM | plugins/mcp/slack-channel/server.test.ts | 17765 | test('expands ~/ prefix via os.homedir() (Gemini #185 — robust path resolution)', async () => { | CODE |
| MEDIUM⚡ | plugins/mcp/pr-to-spec/examples/bash-agent.sh | 53 | # Step 5: For medium-risk or clean PRs, use an LLM for nuanced review | COMMENT |
| MEDIUM | …ack/skills/coreweave-gpu-node-forensics/eval-spec.yaml | 8 | # The deterministic regression harness. This is the ground truth for the | COMMENT |
| MEDIUM | …automate/skills/run-interactive-session/scripts/run.sh | 162 | # Gemini CLI today and is robust to future AI hosts that | COMMENT |
| MEDIUM | …uilding-automl-pipelines/assets/pipeline_template.yaml | 23 | feature_scaling: "standard" # Scaling method for numeric features (e.g., standard, minmax, robust) | CODE |
| MEDIUM | …kills/vertex-engine-inspector/scripts/inspect-agent.sh | 3 | # Performs comprehensive validation including runtime config, security, and compliance | COMMENT |
| MEDIUM⚡ | …ing-security-code-review/assets/example_code_secure.py | 124 | # A more robust email regex can be used | COMMENT |
| MEDIUM | plugins/community/skills-janitor/scripts/lint.sh | 3 | # Validates skills against best practices | COMMENT |
| MEDIUM⚡ | …bs-pack/skills/audit-tests/shared-refs/harness-hash.sh | 2 | # harness-hash.sh — SHA-256 manifest for engineer-owned artifacts. | COMMENT |
| MEDIUM⚡ | …bs-pack/skills/audit-tests/shared-refs/harness-hash.sh | 9 | # bash harness-hash.sh --init # write manifest (engineer-initiated) | COMMENT |
| MEDIUM⚡ | …bs-pack/skills/audit-tests/shared-refs/harness-hash.sh | 10 | # bash harness-hash.sh --verify # compare current hashes to manifest | COMMENT |
| MEDIUM⚡ | …bs-pack/skills/audit-tests/shared-refs/harness-hash.sh | 11 | # bash harness-hash.sh --list # show which files are pinned | COMMENT |
| MEDIUM | scripts/lint-skill-codeblocks.py | 177 | # detection is robust to renames in sources.yaml without us having to | COMMENT |
| MEDIUM | scripts/validate-skills-schema.py | 395 | # Recommended sections (best practices, not mandated by any published standard) | COMMENT |
| MEDIUM | scripts/validate-skills-schema.py | 492 | # these are the same variables in their harness-free spelling. | COMMENT |
| MEDIUM | scripts/validate-skills-schema.py | 1197 | # to reflect that these are best practices, not requirements. | COMMENT |
| MEDIUM | .github/workflows/skill-conform.yml | 4 | # mcp configs, plugin manifests) via audit-harness@>=1.3.1 `conform`. | COMMENT |
| MEDIUM | .github/workflows/skill-conform.yml | 59 | # bundled) stays non-blocking by harness design. | COMMENT |
| MEDIUM | .github/workflows/kernel-vendor-hash.yml | 109 | # The single advisory step. continue-on-error guarantees a harness failure | COMMENT |
| MEDIUM | .github/workflows/kernel-shadow-validation.yml | 15 | # * The validation step uses `continue-on-error: true`, so even a harness crash | COMMENT |
| MEDIUM | .github/workflows/kernel-shadow-validation.yml | 76 | # The single advisory step. continue-on-error guarantees a harness failure | COMMENT |
| MEDIUM | .github/workflows/standalone-e2e.yml | 3 | # Owns the repository-local plugin/skill/MCP harness under tests/e2e. The | COMMENT |
| MEDIUM⚡ | .github/workflows/validate-plugins.yml | 194 | # @intentsolutions/audit-harness verify — exit 0 when policy hashes | COMMENT |
| MEDIUM⚡ | .github/workflows/validate-plugins.yml | 195 | # match `.harness-hash`, exit 2 when a hash-pinned file was changed | COMMENT |
| MEDIUM⚡ | .github/workflows/validate-plugins.yml | 196 | # without a paired engineer-initiated `pnpm exec audit-harness init`. | COMMENT |
| MEDIUM⚡ | .github/workflows/validate-plugins.yml | 198 | # skills/.curated/**/eval-spec.yaml, and .harness-hash-extra-patterns. | COMMENT |
| MEDIUM⚡ | .github/workflows/validate-plugins.yml | 199 | # Re-pin ritual: edit an eval-spec → `pnpm exec audit-harness init` → | COMMENT |
| MEDIUM | .github/workflows/validate-plugins.yml | 169 | # denylist-bearing skill may not claim a foreign harness in | COMMENT |
| MEDIUM | .github/workflows/validate-plugins.yml | 324 | # root dev dependencies (for audit-harness verify + lint:root), so | COMMENT |
| MEDIUM | .github/workflows/validate-plugins.yml | 2008 | # adapterless harness named as supported. R1/R2 (no per-plugin rows, | COMMENT |
| MEDIUM | .github/workflows/validate-plugins.yml | 2021 | # The canonical harness-free skill contract (blueprint 727 § 5.2, Epic 3 | COMMENT |
| MEDIUM | .github/workflows/validate-plugins.yml | 2061 | # token reappearing in the harness-free core (skill-card.yaml files or | COMMENT |
| MEDIUM | .github/workflows/validate-plugins.yml | 2069 | # SKILL.md may not name a harness outside the registered adapter set | COMMENT |
| MEDIUM | …cing-transitive-vulnerabilities/scripts/trace_vulns.py | 350 | # Add leverage report findings — INFO severity, one per direct dep with >0 reachable CVEs. | COMMENT |
| MEDIUM | …urated/auditing-wallet-security/scripts/risk_scorer.py | 287 | # General best practices | COMMENT |
| MEDIUM | …uilding-automl-pipelines/assets/pipeline_template.yaml | 23 | feature_scaling: "standard" # Scaling method for numeric features (e.g., standard, minmax, robust) | CODE |
| MEDIUM | …ng-kubernetes-deployments/scripts/validate_manifest.sh | 154 | # Perform best practices validation in strict mode | COMMENT |
| MEDIUM | …alidating-cors-policies/scripts/generate_test_cases.py | 23 | """Generates comprehensive test cases for CORS policies.""" | STRING |
| MEDIUM | …ating-docker-compose-files/scripts/validate_compose.sh | 208 | # Check for recommended best practices | COMMENT |
| MEDIUM⚡ | …ing-security-code-review/assets/example_code_secure.py | 124 | # A more robust email regex can be used | COMMENT |
| MEDIUM | …rated/vertex-engine-inspector/scripts/inspect-agent.sh | 3 | # Performs comprehensive validation including runtime config, security, and compliance | COMMENT |
| MEDIUM | …timizing-staking-rewards/scripts/metrics_calculator.py | 50 | """Calculates comprehensive metrics for staking options.""" | STRING |
| 7 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2430 | # Step 0: Ensure the discovery schema exists (no-op on an established DB). | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2433 | # Step 1: Migrate schema — add run_id to all target tables | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2445 | # Step 2: Determine run_id | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2452 | # Step 3: Purge any existing rows for this run_id (idempotent) | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2460 | # Step 4: Insert discovery_runs record | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2484 | # Step 6: Collect SKILL.md paths (used by multiple scan groups) | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2490 | # Step 7: Skill file analysis | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2494 | # Step 8: Commands and agents | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2498 | # Step 9: Docs | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2502 | # Step 10: Scripts and CI | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2506 | # Step 11: Structural analysis | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2512 | # Step 12: Root files | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2516 | # Step 13: Marketplace catalog | COMMENT |
| LOW⚡ | freshie/scripts/rebuild-inventory.py | 2520 | # Step 14: Misc tables | COMMENT |
| LOW | freshie/scripts/rebuild-inventory.py | 2471 | # Step 5: Scan packs / plugins / skills | COMMENT |
| LOW | freshie/scripts/rebuild-inventory.py | 2534 | # Step 15: Update discovery_runs totals | COMMENT |
| LOW | …ills/simulating-flash-loans/scripts/strategy_engine.py | 202 | # Step 1: Flash borrow | COMMENT |
| LOW | …ills/simulating-flash-loans/scripts/strategy_engine.py | 219 | # Step 2: Sell on high-price DEX | COMMENT |
| LOW | …ills/simulating-flash-loans/scripts/strategy_engine.py | 243 | # Step 3: Buy on low-price DEX | COMMENT |
| LOW | …ills/simulating-flash-loans/scripts/strategy_engine.py | 267 | # Step 4: Repay flash loan | COMMENT |
| LOW | …ills/simulating-flash-loans/scripts/strategy_engine.py | 390 | # Step 1: Flash borrow debt asset | COMMENT |
| LOW | …ills/simulating-flash-loans/scripts/strategy_engine.py | 407 | # Step 2: Liquidate position | COMMENT |
| LOW | …ills/simulating-flash-loans/scripts/strategy_engine.py | 424 | # Step 3: Swap collateral to debt asset | COMMENT |
| LOW | …ills/simulating-flash-loans/scripts/strategy_engine.py | 441 | # Step 4: Repay flash loan | COMMENT |
| LOW⚡ | plugins/mcp/lumera-agent-memory/src/mcp_server.py | 148 | # Step 1: Extract from CASS (simulated - would call real CASS API) | COMMENT |
| LOW⚡ | plugins/mcp/lumera-agent-memory/src/mcp_server.py | 151 | # Step 2: Redact secrets/PII | COMMENT |
| LOW⚡ | plugins/mcp/lumera-agent-memory/src/mcp_server.py | 154 | # Step 3: Generate memory card (wow factor) | COMMENT |
| LOW⚡ | plugins/mcp/lumera-agent-memory/src/mcp_server.py | 157 | # Step 4: Encrypt client-side | COMMENT |
| LOW⚡ | plugins/mcp/lumera-agent-memory/src/mcp_server.py | 160 | # Step 5: Upload to Cascade | COMMENT |
| LOW⚡ | plugins/mcp/lumera-agent-memory/src/mcp_server.py | 164 | # Step 6: Index locally | COMMENT |
| LOW⚡ | plugins/mcp/lumera-agent-memory/src/mcp_server.py | 236 | # Step 1: Fetch encrypted blob from Cascade | COMMENT |
| LOW⚡ | plugins/mcp/lumera-agent-memory/src/mcp_server.py | 240 | # Step 2: Get crypto metadata from index | COMMENT |
| LOW⚡ | plugins/mcp/lumera-agent-memory/src/mcp_server.py | 247 | # Step 3: Decrypt client-side | COMMENT |
| LOW⚡ | plugins/mcp/lumera-agent-memory/src/mcp_server.py | 251 | # Step 4: Return session with memory card | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-loader.ts | 179 | // Step 2: existence check. | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-loader.ts | 194 | // Step 3: SOPS decrypt. | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-loader.ts | 205 | // Step 4: parse + tamper-check. | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-loader.ts | 216 | // Step 5: staleness check (non-blocking). | COMMENT |
| LOW | plugins/mcp/slack-channel/stream-reply.ts | 176 | // Step 1: gate check at start. Failure here is a clean reject — | COMMENT |
| LOW⚡ | plugins/mcp/slack-channel/stream-reply.ts | 199 | // Step 2: pre-commit hash. | COMMENT |
| LOW⚡ | plugins/mcp/slack-channel/stream-reply.ts | 202 | // Step 3: chunk. | COMMENT |
| LOW⚡ | plugins/mcp/slack-channel/stream-reply.ts | 205 | // Step 4: journal the allow with pre-committed hash. The chain | COMMENT |
| LOW | plugins/mcp/slack-channel/stream-reply.ts | 222 | // Step 5: initial post. The returned ts is the cached id for | COMMENT |
| LOW | plugins/mcp/slack-channel/stream-reply.ts | 251 | // Step 6: progressive update. Each update carries the running | COMMENT |
| LOW | plugins/mcp/slack-channel/stream-reply.ts | 271 | // Step 7: stream finalized cleanly. Recompute the hash on the | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-cli.ts | 162 | // Step 1: refuse overwrite. The design doc is explicit — init is | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-cli.ts | 217 | // Step 7: announce success + print public key. | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-cli.ts | 299 | // Step 1: bridge-stopped confirmation. | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-cli.ts | 312 | // Step 2: refuse if no current key. | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-cli.ts | 347 | // Step 5: generate new. | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-cli.ts | 427 | // Step 11: archive old. | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-cli.ts | 444 | // Step 12: swap in new. | COMMENT |
| LOW | plugins/mcp/slack-channel/audit-key-cli.ts | 465 | // Step 13: announce success. | COMMENT |
| LOW⚡ | plugins/mcp/pr-to-spec/examples/bash-agent.sh | 14 | # Step 1: Generate the spec | COMMENT |
| LOW⚡ | plugins/mcp/pr-to-spec/examples/bash-agent.sh | 19 | # Step 2: Check exit code for high-risk | COMMENT |
| LOW⚡ | plugins/mcp/pr-to-spec/examples/bash-agent.sh | 25 | # Step 3: Extract key fields | COMMENT |
| LOW | plugins/mcp/pr-to-spec/examples/bash-agent.sh | 39 | # Step 4: Auto-decide based on heuristics | COMMENT |
| LOW⚡ | plugins/mcp/pr-to-spec/examples/bash-agent.sh | 53 | # Step 5: For medium-risk or clean PRs, use an LLM for nuanced review | COMMENT |
| LOW⚡ | plugins/mcp/pr-to-spec/examples/github-action-chain.yml | 21 | # Step 1: Generate the prompt-spec | COMMENT |
| LOW⚡ | plugins/mcp/pr-to-spec/examples/github-action-chain.yml | 31 | # Step 2: Check for high-risk flags | COMMENT |
| 27 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ls/modeling-nosql-data/scripts/generate_sample_data.py | 237 | Load schema from JSON file. Args: filepath: Path to schema file Returns: Schema dictionar | STRING |
| HIGH | …nalyzer/skills/analyzing-mempool/scripts/rpc_client.py | 107 | Get pending transactions from mempool. Note: Not all nodes support txpool_content. Args: l | STRING |
| HIGH | …er/skills/analyzing-nft-rarity/scripts/trait_parser.py | 106 | Parse token attributes into normalized traits. Args: attributes: Raw attribute list from metadata | STRING |
| HIGH | …lls/monitoring-whale-activity/scripts/wallet_labels.py | 263 | Add wallet to watchlist. Args: address: Wallet address name: Display name c | STRING |
| HIGH | …er/skills/tracking-crypto-prices/scripts/api_client.py | 178 | Make HTTP request to CoinGecko API with error handling. Args: endpoint: API endpoint path | STRING |
| HIGH | …kills/skill-adapter/assets/webhook_handler_template.py | 96 | Decorator to ensure idempotency of webhook requests. This example uses a simple in-memory store. For producti | STRING |
| HIGH | …tool/skills/skill-adapter/assets/migration_template.py | 29 | Loads data from a JSON file. Args: input_file (str): Path to the input JSON file. Returns: | STRING |
| HIGH | …tool/skills/skill-adapter/assets/migration_template.py | 54 | Transforms the data from the old format to the new format. This is where the core migration logic should be im | STRING |
| HIGH | …cks/cursor-pack/skills/cursor-model-selection/SKILL.md | 198 | Process an order through the payment and fulfillment pipeline. Args: order: The order to process. Retu | STRING |
| HIGH | …ills/skill-adapter/assets/skill_adaptation_template.py | 19 | Adapt skills from the source plugin to meet the target plugin's requirements. Args: source_plugin_skil | STRING |
| HIGH | …ills/skill-adapter/assets/skill_adaptation_template.py | 85 | Post-processes the output from the target plugin. Args: target_plugin_output (any): The raw output fro | STRING |
| HIGH | …gins/packages/ai-ml-engineering-pack/docs/USE_CASES.md | 579 | Generate comprehensive documentation for this code: CODE: {code} GENERATE: 1. High-level summary (1-2 sentences) 2. De | STRING |
| HIGH | …creating-alerting-rules/scripts/validate_thresholds.py | 18 | Load historical metric data from a JSON file. Args: filepath: Path to JSON file containing historical | STRING |
| HIGH | …/skills/creating-alerting-rules/scripts/route_alert.py | 41 | Load routing configuration from file or use defaults. Args: filepath: Optional path to routing configu | STRING |
| HIGH | …ls/creating-alerting-rules/scripts/generate_runbook.py | 180 | Load custom runbook templates from JSON file. Args: filepath: Path to JSON file with custom templates | STRING |
| HIGH | …ed/modeling-nosql-data/scripts/generate_sample_data.py | 237 | Load schema from JSON file. Args: filepath: Path to schema file Returns: Schema dictionar | STRING |
| HIGH | …creating-alerting-rules/scripts/validate_thresholds.py | 18 | Load historical metric data from a JSON file. Args: filepath: Path to JSON file containing historical | STRING |
| HIGH | …curated/creating-alerting-rules/scripts/route_alert.py | 41 | Load routing configuration from file or use defaults. Args: filepath: Optional path to routing configu | STRING |
| HIGH | …ed/creating-alerting-rules/scripts/generate_runbook.py | 180 | Load custom runbook templates from JSON file. Args: filepath: Path to JSON file with custom templates | STRING |
| HIGH | …ted/monitoring-whale-activity/scripts/wallet_labels.py | 263 | Add wallet to watchlist. Args: address: Wallet address name: Display name c | STRING |
| HIGH | …/.curated/tracking-crypto-prices/scripts/api_client.py | 178 | Make HTTP request to CoinGecko API with error handling. Args: endpoint: API endpoint path | STRING |
| HIGH | skills/.curated/analyzing-mempool/scripts/rpc_client.py | 107 | Get pending transactions from mempool. Note: Not all nodes support txpool_content. Args: l | STRING |
| HIGH | skills/.curated/cursor-model-selection/SKILL.md | 198 | Process an order through the payment and fulfillment pipeline. Args: order: The order to process. Retu | STRING |
| HIGH | …/.curated/analyzing-nft-rarity/scripts/trait_parser.py | 106 | Parse token attributes into normalized traits. Args: attributes: Raw attribute list from metadata | STRING |
| HIGH | …ated/skill-adapter/assets/skill_adaptation_template.py | 19 | Adapt skills from the source plugin to meet the target plugin's requirements. Args: source_plugin_skil | STRING |
| HIGH | …ated/skill-adapter/assets/skill_adaptation_template.py | 85 | Post-processes the output from the target plugin. Args: target_plugin_output (any): The raw output fro | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | freshie/scripts/rebuild-inventory.py | 210 | Parse a single YAML scalar. Handles: null, booleans, ints, floats, | STRING |
| HIGH | freshie/scripts/dolt-sync.py | 87 | dolt clone jeremylongshore/freshie-inventory && cd freshie-inventory | STRING |
| HIGH | …g-database-backups/scripts/restore_script_generator.py | 79 | DB_EXISTS=$(PGPASSWORD="${{PGPASSWORD:-}}" psql -h "$DB_HOST" -p "$DB_PORT" -U "$DB_USER" -tAc "SELECT 1 FROM pg_databas | CODE |
| HIGH⚡ | …g-database-backups/scripts/restore_script_generator.py | 306 | DB_EXISTS=$(mongosh "$MONGO_URI" --quiet --eval "db.getMongo().getDBNames().includes('$DB_NAME')" 2>/dev/null || echo "f | CODE |
| HIGH | …ster/skills/auditing-cors-policy/scripts/audit_cors.py | 191 | "and data: URLs send Origin:null; an attacker can host " | CODE |
| HIGH | plugins/mcp/dolt-mcp-vcs/scripts/dolt-mcp-client.py | 33 | dolt-detect.py --emit-descriptor && dolt-mcp-client.py \ | STRING |
| HIGH | …ls/creating-alerting-rules/scripts/generate_runbook.py | 42 | "Clear disk cache if needed: `sync && echo 3 > /proc/sys/vm/drop_caches`", | CODE |
| HIGH | …ls/creating-alerting-rules/scripts/generate_runbook.py | 97 | "Monitor disk growth: `du -sh . && sleep 60 && du -sh .`", | CODE |
| HIGH | tests/test_dolt_sync.py | 815 | dolt_sync.push(repo, "example", "inventory", "run-42") | CODE |
| HIGH | tests/test_dolt_sync.py | 841 | dolt_sync.push(repo, "example", "inventory", "run-43") | CODE |
| HIGH⚡ | tests/test_linear_pack_contract.py | 91 | "git revert HEAD && npm run deploy", | CODE |
| HIGH⚡ | scripts/validate-skills-schema.py | 4339 | (r"(?i)read .+\.md", "file reading at start", '!`[ -f FILE ] && head -5 FILE || echo "not found"`'), | CODE |
| HIGH⚡ | scripts/validate-skills-schema.py | 4343 | '!`git status --short 2>/dev/null || echo "not a git repo"`', | CODE |
| HIGH⚡ | scripts/validate-skills-schema.py | 4348 | '!`command -v TOOL 2>/dev/null && TOOL --version 2>/dev/null || echo "not installed"`', | CODE |
| HIGH⚡ | scripts/validate-skills-schema.py | 4348 | '!`command -v TOOL 2>/dev/null && TOOL --version 2>/dev/null || echo "not installed"`', | CODE |
| HIGH | scripts/validate-skills-schema.py | 3439 | warnings.append(f"[scripts] Code block {i + 1}: Consider adding error handling (set -e or || exit)") | CODE |
| HIGH | scripts/validate-skills-schema.py | 4168 | Fallback indicators: || echo, 2>/dev/null, || true, [ -f, command -v, which , type | STRING |
| HIGH⚡ | scripts/pr-prescreen/test_classify.py | 82 | # Regression: validator can emit {"errors": null} on partial results. | COMMENT |
| HIGH | …ed/creating-alerting-rules/scripts/generate_runbook.py | 42 | "Clear disk cache if needed: `sync && echo 3 > /proc/sys/vm/drop_caches`", | CODE |
| HIGH | …ed/creating-alerting-rules/scripts/generate_runbook.py | 97 | "Monitor disk growth: `du -sh . && sleep 60 && du -sh .`", | CODE |
| HIGH | …ls/.curated/auditing-cors-policy/scripts/audit_cors.py | 191 | "and data: URLs send Origin:null; an attacker can host " | CODE |
| HIGH | …g-database-backups/scripts/restore_script_generator.py | 79 | DB_EXISTS=$(PGPASSWORD="${{PGPASSWORD:-}}" psql -h "$DB_HOST" -p "$DB_PORT" -U "$DB_USER" -tAc "SELECT 1 FROM pg_databas | CODE |
| HIGH⚡ | …g-database-backups/scripts/restore_script_generator.py | 306 | DB_EXISTS=$(mongosh "$MONGO_URI" --quiet --eval "db.getMongo().getDBNames().includes('$DB_NAME')" 2>/dev/null || echo "f | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …kills/skill-adapter/assets/slack_message_template.json | 72 | "text": "Report generated by Claude using `web_search` and `search_to_slack` plugin." | CODE |
| HIGH | …b-issues-from-web-research/assets/config_template.json | 24 | "body": "## Summary\n{{summary}}\n\n## Source URL\n{{url}}\n\n---\nThis issue was automatically generated by Claude | CODE |
| HIGH | …ks/gamma-pack/skills/gamma-performance-tuning/SKILL.md | 160 | // "brief" text = fewer AI-generated words per card = faster | COMMENT |
| HIGH | …ion-test-runner/skills/running-mutation-tests/SKILL.md | 46 | - Exclude auto-generated code, third-party wrappers, and test utilities. | CODE |
| HIGH | …e-cleanup/skills/cleanup-code/references/dimensions.md | 33 | **What:** Low-value comments generated by AI assistants — restating obvious code, adding filler. | CODE |
| HIGH | …ting-ai-ethics-and-fairness/scripts/generate_report.py | 140 | report.append(f"*Report generated by AI Ethics Validator on {datetime.now().isoformat()}*") | CODE |
| HIGH | …ntribute-prepare/scripts/gates/d03-no-ai-pr-reviews.sh | 2 | # Catalog: D3 — Block AI-generated review comments on someone else's PR | COMMENT |
| HIGH | plugins/productivity/prettier-markdown-hook/README.md | 134 | # Enable AI-generated commit messages (requires `claude` CLI) | COMMENT |
| HIGH | …vity/prettier-markdown-hook/scripts/format-markdown.sh | 4 | # Auto-commits with optional AI-generated messages (opt-in) | COMMENT |
| HIGH | …vity/prettier-markdown-hook/scripts/format-markdown.sh | 294 | # Validate AI-generated message | COMMENT |
| HIGH | …ack/skills/audit-tests/shared-refs/security-testing.md | 87 | ### AI-generated code concerns | COMMENT |
| HIGH | plugins/productivity/ai-commit-gen/README.md | 25 | # ✨ Get 3 AI-generated options instantly | COMMENT |
| HIGH | 000-docs/251-AA-AACR-metrics-canonicalization-aar.md | 226 | _Generated by Claude Opus 4.5 | 2025-12-26 20:30 CST_ | CODE |
| HIGH | …ntribute-prepare/scripts/gates/d03-no-ai-pr-reviews.sh | 2 | # Catalog: D3 — Block AI-generated review comments on someone else's PR | COMMENT |
| HIGH | skills/.curated/gamma-performance-tuning/SKILL.md | 160 | // "brief" text = fewer AI-generated words per card = faster | COMMENT |
| HIGH | …ting-ai-ethics-and-fairness/scripts/generate_report.py | 140 | report.append(f"*Report generated by AI Ethics Validator on {datetime.now().isoformat()}*") | CODE |
| HIGH | skills/.curated/cleanup-code/references/dimensions.md | 33 | **What:** Low-value comments generated by AI assistants — restating obvious code, adding filler. | CODE |
| HIGH | …b-issues-from-web-research/assets/config_template.json | 24 | "body": "## Summary\n{{summary}}\n\n## Source URL\n{{url}}\n\n---\nThis issue was automatically generated by Claude | CODE |
| HIGH | skills/.curated/running-mutation-tests/SKILL.md | 46 | - Exclude auto-generated code, third-party wrappers, and test utilities. | CODE |
| HIGH | …s/.curated/audit-tests/shared-refs/security-testing.md | 87 | ### AI-generated code concerns | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ills/tracking-token-launches/scripts/launch_tracker.py | 125 | # Create a mock pair for display | COMMENT |
| MEDIUM | …ills/simulating-flash-loans/scripts/flash_simulator.py | 326 | # Create a minimal result for JSON output | COMMENT |
| MEDIUM | …ging-deployment-rollbacks/assets/rollback_template.yml | 2 | # This file defines the configuration for a deployment rollback. | COMMENT |
| MEDIUM | …ng-kubernetes-deployments/assets/service_template.yaml | 2 | # This file defines a Kubernetes Service, which exposes your application to the network. | COMMENT |
| MEDIUM | …ng-kubernetes-deployments/assets/ingress_template.yaml | 2 | # This file defines a basic Ingress resource for Kubernetes. | COMMENT |
| MEDIUM | …toring-stacks/assets/datadog_agent_config_template.yml | 3 | # This file provides a template for configuring the Datadog agent. | COMMENT |
| MEDIUM | …ting-secrets-managers/assets/vault_config_template.hcl | 3 | # This file provides a basic template for configuring Vault. | COMMENT |
| MEDIUM | …ing-deployment-pipelines/assets/pipeline_template.yaml | 2 | # This file is a template for defining deployment pipelines. | COMMENT |
| MEDIUM | …ing-deployment-pipelines/assets/pipeline_template.yaml | 22 | # Define the stages of the deployment pipeline | COMMENT |
| MEDIUM⚡ | …on-tester/tests/test_cluster5_engagement_governance.py | 233 | # Create an existing manifest — should be excluded by default | COMMENT |
| MEDIUM | …kills/skill-adapter/assets/example_api_definition.yaml | 224 | bearerAuth: # Define a security scheme for JWT authentication | CODE |
| MEDIUM | …ator/skills/skill-adapter/assets/openapi_template.yaml | 18 | # Define the servers where the API is hosted. | COMMENT |
| MEDIUM | …lls/skill-adapter/assets/example_dashboard_config.yaml | 109 | layout: # Define the layout of the dashboard (example only) | CODE |
| MEDIUM | …/skills/skill-adapter/assets/mock_server_template.yaml | 5 | # This file defines the API endpoints, request parameters, and response schemas. | COMMENT |
| MEDIUM | …erver/skills/skill-adapter/assets/openapi_example.yaml | 2 | # This file defines an example OpenAPI specification for the API Mock Server plugin. | COMMENT |
| MEDIUM | …tool/skills/skill-adapter/assets/migration_template.py | 135 | # Create a dummy input file | COMMENT |
| MEDIUM | plugins/ai-agency/hyperflow/scripts/queue-commit.sh | 59 | # Create the staging branch from user's current HEAD if it doesn't exist. | COMMENT |
| MEDIUM | …ting-visual-regression/assets/example_percy_config.yml | 2 | # This file defines the settings for running visual regression tests using Percy. | COMMENT |
| MEDIUM | …s/validating-api-contracts/assets/openapi_example.yaml | 2 | # This file defines the structure of an example API for testing purposes. | COMMENT |
| MEDIUM | …achine-learning/assets/feature_engineering_template.py | 15 | # Import necessary libraries and load the dataset. | COMMENT |
| MEDIUM | …security-code-review/assets/example_code_vulnerable.py | 165 | # Create a dummy file for the path traversal example. | COMMENT |
| MEDIUM | …security-code-review/assets/example_code_vulnerable.py | 181 | # Create a malicious object and serialize it. | COMMENT |
| MEDIUM | …ting-secrets-managers/assets/vault_config_template.hcl | 3 | # This file provides a basic template for configuring Vault. | COMMENT |
| MEDIUM | …ting-visual-regression/assets/example_percy_config.yml | 2 | # This file defines the settings for running visual regression tests using Percy. | COMMENT |
| MEDIUM | …ated/simulating-flash-loans/scripts/flash_simulator.py | 326 | # Create a minimal result for JSON output | COMMENT |
| MEDIUM | …ated/tracking-token-launches/scripts/launch_tracker.py | 125 | # Create a mock pair for display | COMMENT |
| MEDIUM | …ng-kubernetes-deployments/assets/service_template.yaml | 2 | # This file defines a Kubernetes Service, which exposes your application to the network. | COMMENT |
| MEDIUM | …ng-kubernetes-deployments/assets/ingress_template.yaml | 2 | # This file defines a basic Ingress resource for Kubernetes. | COMMENT |
| MEDIUM | …ging-deployment-rollbacks/assets/rollback_template.yml | 2 | # This file defines the configuration for a deployment rollback. | COMMENT |
| MEDIUM | …security-code-review/assets/example_code_vulnerable.py | 165 | # Create a dummy file for the path traversal example. | COMMENT |
| MEDIUM | …security-code-review/assets/example_code_vulnerable.py | 181 | # Create a malicious object and serialize it. | COMMENT |
| MEDIUM | …ing-deployment-pipelines/assets/pipeline_template.yaml | 2 | # This file is a template for defining deployment pipelines. | COMMENT |
| MEDIUM | …ing-deployment-pipelines/assets/pipeline_template.yaml | 22 | # Define the stages of the deployment pipeline | COMMENT |
| MEDIUM | …achine-learning/assets/feature_engineering_template.py | 15 | # Import necessary libraries and load the dataset. | COMMENT |
| MEDIUM | …toring-stacks/assets/datadog_agent_config_template.yml | 3 | # This file provides a template for configuring the Datadog agent. | COMMENT |
| MEDIUM | …d/validating-api-contracts/assets/openapi_example.yaml | 2 | # This file defines the structure of an example API for testing purposes. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …lls/managing-database-recovery/scripts/pitr_restore.sh | 9 | # Usage: | COMMENT |
| LOW | …/managing-database-recovery/scripts/validate_backup.sh | 9 | # Usage: | COMMENT |
| LOW | …ls/managing-database-recovery/scripts/test_recovery.sh | 10 | # Usage: | COMMENT |
| LOW | …/skills/managing-database-recovery/scripts/failover.sh | 11 | # Usage: | COMMENT |
| LOW | …crypto/aomi/skills/transact/templates/aomi-workflow.sh | 6 | # Usage: | COMMENT |
| LOW | …ating-docker-compose-files/scripts/validate_compose.sh | 8 | # Usage: | COMMENT |
| LOW | …ting-docker-compose-files/scripts/generate_env_file.py | 9 | # Usage: | COMMENT |
| LOW | …ills/generating-docker-compose-files/scripts/deploy.sh | 8 | # Usage: | COMMENT |
| LOW | …ng-kubernetes-deployments/scripts/validate_manifest.sh | 8 | # Usage: | COMMENT |
| LOW | …ating-kubernetes-deployments/scripts/apply_manifest.sh | 8 | # Usage: | COMMENT |
| LOW | …-kubernetes-deployments/scripts/get_resource_status.sh | 8 | # Usage: | COMMENT |
| LOW | …ting-kubernetes-deployments/scripts/delete_manifest.sh | 8 | # Usage: | COMMENT |
| LOW | …ng-dependencies/scripts/vulnerability_report_parser.py | 15 | # Usage: | COMMENT |
| LOW | …lls/analyzing-dependencies/scripts/dependency_check.sh | 15 | # Usage: | COMMENT |
| LOW | …ing-dependencies/scripts/license_compliance_checker.py | 11 | # Usage: | COMMENT |
| LOW | …rming-penetration-testing/scripts/setup_pentest_env.sh | 5 | # Usage: | COMMENT |
| LOW | …tool/skills/skill-adapter/assets/migration_template.py | 134 | # Example usage: | COMMENT |
| LOW | plugins/ai-agency/hyperflow/scripts/flush-commits.sh | 25 | # Usage: | COMMENT |
| LOW | plugins/ai-agency/hyperflow/scripts/queue-commit.sh | 11 | # Usage: | COMMENT |
| LOW | plugins/mcp/dolt-mcp-vcs/scripts/dolt-idle-reaper.sh | 14 | # Usage: | COMMENT |
| LOW⚡ | plugins/mcp/pr-to-spec/examples/bash-agent.sh | 4 | # Usage: | COMMENT |
| LOW | …ricks-streaming-guardian/scripts/pre-optimize-check.sh | 12 | # Usage: | COMMENT |
| LOW | …naging-test-environments/assets/example_test_script.py | 88 | # Example usage: | COMMENT |
| LOW⚡ | …ing-security-code-review/assets/example_code_secure.py | 189 | # Example usage | COMMENT |
| LOW | …er/skills/contribute-prepare/scripts/lint-candidate.sh | 18 | # Usage: | COMMENT |
| LOW | …lanker/skills/contribute-prepare/scripts/transition.sh | 7 | # Usage: | COMMENT |
| LOW | …/skills/contribute-prepare/scripts/researcher-build.sh | 4 | # Usage: | COMMENT |
| LOW | …r/skills/contribute-prepare/scripts/audit-overrides.sh | 18 | # Usage: | COMMENT |
| LOW⚡ | …bs-pack/skills/audit-tests/shared-refs/harness-hash.sh | 8 | # Usage: | COMMENT |
| LOW | …ent-labs-pack/skills/audit-tests/scripts/arch-check.sh | 13 | # Usage: | COMMENT |
| LOW | …t-labs-pack/skills/audit-tests/scripts/gherkin-lint.sh | 11 | # Usage: | COMMENT |
| LOW | …nt-labs-pack/skills/audit-tests/scripts/escape-scan.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/run-jrig-eval.sh | 18 | # Usage: | COMMENT |
| LOW | …/.curated/contribute-prepare/scripts/lint-candidate.sh | 18 | # Usage: | COMMENT |
| LOW | …ills/.curated/contribute-prepare/scripts/transition.sh | 7 | # Usage: | COMMENT |
| LOW | …curated/contribute-prepare/scripts/researcher-build.sh | 4 | # Usage: | COMMENT |
| LOW | ….curated/contribute-prepare/scripts/audit-overrides.sh | 18 | # Usage: | COMMENT |
| LOW | …naging-test-environments/assets/example_test_script.py | 88 | # Example usage: | COMMENT |
| LOW | …ted/managing-database-recovery/scripts/pitr_restore.sh | 9 | # Usage: | COMMENT |
| LOW | …/managing-database-recovery/scripts/validate_backup.sh | 9 | # Usage: | COMMENT |
| LOW | …ed/managing-database-recovery/scripts/test_recovery.sh | 10 | # Usage: | COMMENT |
| LOW | …curated/managing-database-recovery/scripts/failover.sh | 11 | # Usage: | COMMENT |
| LOW | …ricks-streaming-guardian/scripts/pre-optimize-check.sh | 12 | # Usage: | COMMENT |
| LOW | …ng-dependencies/scripts/vulnerability_report_parser.py | 15 | # Usage: | COMMENT |
| LOW | …ted/analyzing-dependencies/scripts/dependency_check.sh | 15 | # Usage: | COMMENT |
| LOW | …ing-dependencies/scripts/license_compliance_checker.py | 11 | # Usage: | COMMENT |
| LOW | …rming-penetration-testing/scripts/setup_pentest_env.sh | 5 | # Usage: | COMMENT |
| LOW | …ng-kubernetes-deployments/scripts/validate_manifest.sh | 8 | # Usage: | COMMENT |
| LOW | …ating-kubernetes-deployments/scripts/apply_manifest.sh | 8 | # Usage: | COMMENT |
| LOW | …-kubernetes-deployments/scripts/get_resource_status.sh | 8 | # Usage: | COMMENT |
| LOW | …ting-kubernetes-deployments/scripts/delete_manifest.sh | 8 | # Usage: | COMMENT |
| LOW | …ating-docker-compose-files/scripts/validate_compose.sh | 8 | # Usage: | COMMENT |
| LOW | …ting-docker-compose-files/scripts/generate_env_file.py | 9 | # Usage: | COMMENT |
| LOW | …ated/generating-docker-compose-files/scripts/deploy.sh | 8 | # Usage: | COMMENT |
| LOW⚡ | …ing-security-code-review/assets/example_code_secure.py | 189 | # Example usage | COMMENT |
| LOW⚡ | skills/.curated/audit-tests/shared-refs/harness-hash.sh | 8 | # Usage: | COMMENT |
| LOW | skills/.curated/audit-tests/scripts/arch-check.sh | 13 | # Usage: | COMMENT |
| LOW | skills/.curated/audit-tests/scripts/gherkin-lint.sh | 11 | # Usage: | COMMENT |
| LOW | skills/.curated/audit-tests/scripts/escape-scan.sh | 17 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | freshie/scripts/doltlite-sync.py | 1008 | CODE | |
| LOW | …lls/backtesting-trading-strategies/scripts/backtest.py | 249 | CODE | |
| LOW | …ake-pack/shared/evidence/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …ake-pack/shared/evidence/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …ake-pack/shared/evidence/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …-migration-pilot/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …-migration-pilot/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …-migration-pilot/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …coverage-auditor/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …coverage-auditor/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …coverage-auditor/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …quality-sentinel/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …quality-sentinel/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …quality-sentinel/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …cost-leak-hunter/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …cost-leak-hunter/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …cost-leak-hunter/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …-readiness-drill/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …-readiness-drill/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …-readiness-drill/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …-query-forensics/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …-query-forensics/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …-query-forensics/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …-release-sheriff/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …-release-sheriff/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …-release-sheriff/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …ipeline-guardian/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …ipeline-guardian/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …ipeline-guardian/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …-access-guardian/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …-access-guardian/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …-access-guardian/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …ting-time-series-data/assets/visualization_template.py | 29 | CODE | |
| LOW | …-migration-pilot/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …-migration-pilot/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …-migration-pilot/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …coverage-auditor/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …coverage-auditor/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …coverage-auditor/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …quality-sentinel/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …quality-sentinel/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …quality-sentinel/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …cost-leak-hunter/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …cost-leak-hunter/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …cost-leak-hunter/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …ted/backtesting-trading-strategies/scripts/backtest.py | 249 | CODE | |
| LOW | …-readiness-drill/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …-readiness-drill/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …-readiness-drill/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …-query-forensics/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …-query-forensics/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …-query-forensics/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …-release-sheriff/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …-release-sheriff/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …-release-sheriff/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …ipeline-guardian/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| LOW | …ipeline-guardian/scripts/collect_snowflake_evidence.py | 1901 | CODE | |
| LOW | …ipeline-guardian/scripts/collect_snowflake_evidence.py | 2183 | CODE | |
| LOW | …ting-time-series-data/assets/visualization_template.py | 29 | CODE | |
| LOW | …-access-guardian/scripts/collect_snowflake_evidence.py | 1709 | CODE | |
| 2 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …kills/skill-adapter/assets/example_api_definition.yaml | 8 | description: This is a sample API definition for demonstration purposes. | CODE |
| MEDIUM | …erver/skills/skill-adapter/assets/openapi_example.yaml | 9 | description: A simple example API for demonstration purposes. | CODE |
| MEDIUM | …lls/automating-api-testing/assets/example_openapi.yaml | 7 | description: A sample API for demonstration purposes. | CODE |
| MEDIUM | …achine-learning-models/assets/visualization_styles.css | 8 | Feel free to customize these styles to match your application's design. | CODE |
| MEDIUM⚡ | …security-code-review/assets/example_code_vulnerable.py | 36 | print(f"Generated query: {query}") # For demonstration purposes only | CODE |
| MEDIUM⚡ | …security-code-review/assets/example_code_vulnerable.py | 56 | print(f"Generated HTML: {output}") # For demonstration purposes only | CODE |
| MEDIUM | …achine-learning-models/assets/visualization_styles.css | 8 | Feel free to customize these styles to match your application's design. | CODE |
| MEDIUM⚡ | …security-code-review/assets/example_code_vulnerable.py | 36 | print(f"Generated query: {query}") # For demonstration purposes only | CODE |
| MEDIUM⚡ | …security-code-review/assets/example_code_vulnerable.py | 56 | print(f"Generated HTML: {output}") # For demonstration purposes only | CODE |
| MEDIUM | …ted/automating-api-testing/assets/example_openapi.yaml | 7 | description: A sample API for demonstration purposes. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …i-integration/references/integration-test-structure.md | 25 | const scopes = response.data.app.installation.accessScopes.map( | CODE |
| CRITICAL | …i-integration/references/integration-test-structure.md | 25 | const scopes = response.data.app.installation.accessScopes.map( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …skills/aggregating-crypto-news/scripts/feed_fetcher.py | 158 | def _set_cached(self, url: str, content: str) -> None: | CODE |
| LOW | …skills/tracking-crypto-prices/scripts/cache_manager.py | 192 | def set_spot_price(self, symbol: str, currency: str, data: dict) -> None: | CODE |
| LOW | …skills/tracking-crypto-prices/scripts/cache_manager.py | 233 | def set_historical(self, cache_key: str, data: List[dict]) -> None: | CODE |
| LOW | …kills/podium-webchat-handler/scripts/webchat_ingest.py | 196 | async def set_opted_out(self, phone_e164: str, source_channel: str) -> None: | CODE |
| LOW | plugins/ai-ml/jeremy-adk-orchestrator/agent/__init__.py | 10 | __all__ = ["get_agent", "create_runner", "root_agent"] | CODE |
| LOW | plugins/community/hermes-tweet/hermes_tweet/tools.py | 146 | __all__ = [ | CODE |
| LOW | plugins/community/hermes-tweet/hermes_tweet/__init__.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | plugins/community/hermes-tweet/hermes_tweet/__init__.py | 81 | __all__ = ["register"] | CODE |
| LOW | scripts/pr-classifier/__init__.py | 16 | __all__ = ["RULE_DESCRIPTIONS", "classify_files"] | CODE |
| LOW⚡ | …urated/aggregating-crypto-news/scripts/feed_fetcher.py | 158 | def _set_cached(self, url: str, content: str) -> None: | CODE |
| LOW | …urated/tracking-crypto-prices/scripts/cache_manager.py | 192 | def set_spot_price(self, symbol: str, currency: str, data: dict) -> None: | CODE |
| LOW | …urated/tracking-crypto-prices/scripts/cache_manager.py | 233 | def set_historical(self, cache_key: str, data: List[dict]) -> None: | CODE |
| LOW | …rated/podium-webchat-handler/scripts/webchat_ingest.py | 196 | async def set_opted_out(self, phone_e164: str, source_channel: str) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …lls/cursor-tab-completion/references/best-practices.md | 9 | # TODO: implement binary search on sorted array | COMMENT |
| LOW | …-cleanup-plugin-ships-while-portfolio-cleans-itself.md | 40 | **AI slop removal is second because it touches comments, not logic.** Lines like `// TODO: implement this later` from th | CODE |
| LOW | …ted/cursor-tab-completion/references/best-practices.md | 9 | # TODO: implement binary search on sorted array | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/skill-adapter/assets/templates/django_api_template.py | 54 | def process_data(self, data): | CODE |
| LOW | plugins/mcp/pr-to-spec/tests/semantic-diff.test.ts | 35 | file("app/views.py", "+def handle_request(request):\n+ pass"), | CODE |