2850 matches across 18 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | core/startup.sh | 2 | # ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | core/startup.sh | 24 | # ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | core/startup.sh | 93 | # ── Persistent dirs (workspace + system state) ─────────────────────────────── |
| MEDIUM | core/startup.sh | 136 | # ── Migrate legacy symlinks to real dirs ──────────────────────────────────── |
| MEDIUM | core/startup.sh | 152 | # ── Convenience symlink: opencode → .opencode ─────────────────────────────── |
| MEDIUM | core/startup.sh | 195 | # ── Clean stale browser locks ─────────────────────────────────────────────── |
| MEDIUM | core/startup.sh | 201 | # ── Clean stale legacy dirs ───────────────────────────────────────────────── |
| MEDIUM | core/startup.sh | 205 | # ── Fix ownership (critical after Docker image updates) ───────────────────── |
| MEDIUM | core/startup.sh | 219 | # ── Initialize ocx (marketplace CLI) ──────────────────────────────────────── |
| MEDIUM | core/startup.sh | 228 | # ── Fix malformed opencode.jsonc generated during bootstrap ───────────────── |
| MEDIUM | core/startup.sh | 273 | # ── Clean stale sqlite SHM files ───────────────────────────────────────────── |
| MEDIUM | core/startup.sh | 287 | # ── Stale LSS database cleanup ─────────────────────────────────────────────── |
| MEDIUM | core/startup.sh | 296 | # ── /config symlink (linuxserver base image compat) ───────────────────────── |
| MEDIUM | core/startup.sh | 301 | # ── Verify runtime exists ─────────────────────────────────────────────────── |
| MEDIUM | core/startup.sh | 306 | # ── Self-heal kortix.db schema ────────────────────────────────────────────── |
| MEDIUM | core/startup.sh | 337 | # ── Install Kortix CLI wrappers ───────────────────────────────────────────── |
| MEDIUM | core/docker/docker-compose.yml | 1 | # ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | core/docker/docker-compose.yml | 3 | # ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | core/docker/docker-compose.yml | 6 | # ================= |
| MEDIUM | core/docker/docker-compose.yml | 38 | # ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | core/docker/docker-compose.yml | 70 | # ── Persistent package paths (all under /workspace/) ────────────── |
| MEDIUM | core/docker/docker-compose.yml | 74 | # ── Persistent secret paths (all under /persistent/secrets/) ───── |
| MEDIUM | core/docker/docker-compose.yml | 78 | # ── Sandbox identity (injected by kortix-api or set manually) ───── |
| MEDIUM | core/docker/docker-compose.yml | 91 | # ── THE persistence volume ───────────────────────────────────────── |
| MEDIUM | core/docker/docker-compose.yml | 98 | # ── Docker-in-Docker data root ───────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 2 | # ============================================================================ |
| MEDIUM | core/tests/test-docker-in-docker.sh | 4 | # ============================================================================ |
| MEDIUM | core/tests/test-docker-in-docker.sh | 28 | # ============================================================================ |
| MEDIUM | core/tests/test-docker-in-docker.sh | 53 | # ── 0. Preflight ──────────────────────────────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 71 | # ── 1. dockerd readiness ──────────────────────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 96 | # ── 2. daemon.json + storage driver ───────────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 114 | # ── 3. data-root on sandbox_docker volume ─────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 140 | # ── 4. pull a tiny image ──────────────────────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 150 | # ── 5. run a container and capture output ────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 160 | # ── 6. bind mount into nested container ───────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 175 | # ── 7. container networking ───────────────────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 186 | # ── 8. compose plugin ─────────────────────────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 195 | # ── 9. daemon survives a container run ───────────────────────────────────── |
| MEDIUM | core/tests/test-docker-in-docker.sh | 206 | # ── Summary ──────────────────────────────────────────────────────────────── |
| MEDIUM | core/tests/test-browser-system.sh | 2 | # ============================================================================ |
| MEDIUM | core/tests/test-browser-system.sh | 4 | # ============================================================================ |
| MEDIUM | core/tests/test-browser-system.sh | 119 | # ── Tests ─────────────────────────────────────────────────────────────────── |
| MEDIUM | core/tests/test-browser-system.sh | 127 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 129 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 135 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 138 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 144 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 147 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 228 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 231 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 235 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 238 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 246 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 249 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 25 | # ============================================================================ |
| MEDIUM | core/tests/test-browser-system.sh | 33 | # ── Helpers ───────────────────────────────────────────────────────────────── |
| MEDIUM | core/tests/test-browser-system.sh | 163 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 166 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 209 | # -------------------------------------------------------------------------- |
| MEDIUM | core/tests/test-browser-system.sh | 212 | # -------------------------------------------------------------------------- |
| 2055 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …e/kortix-master/triggers/src/opencode-http-dispatch.ts | 15 | export function buildCronTriggerEventText(trigger: CronTriggerRecord, event: { type: "cron.tick"; manual: boolean; times |
| LOW | …e/kortix-master/triggers/src/opencode-http-dispatch.ts | 25 | export async function dispatchCronTriggerViaHttp( |
| LOW | core/kortix-master/triggers/src/plugin.ts | 12 | function getTriggerManagerRegistry(): TriggerManagerRegistry { |
| LOW | core/kortix-master/triggers/src/parser.ts | 125 | export function discoverAgentsWithTriggers(options: AgentTriggersPluginOptions = {}): DiscoveredAgent[] { |
| LOW | core/kortix-master/triggers/src/index.ts | 20 | export function buildCronTriggerEventText(trigger: any, event: any): string { |
| LOW | core/kortix-master/triggers/src/index.ts | 30 | export async function dispatchCronTriggerViaHttp(trigger: any, event: any, options: { baseUrl: string; timeoutMs?: numbe |
| LOW | …ix-master/triggers/src/actions/ticket-create-action.ts | 45 | export async function executeTicketCreateAction( |
| LOW | core/kortix-master/opencode/tools/show.ts | 113 | function validateAndBuildEntry(item: Record<string, unknown>): string | ShowEntry { |
| LOW | …/plugin/opencode-morph-plugin/opencode-morph-plugin.ts | 283 | function buildMorphSystemRoutingHint(): string | null { |
| LOW | …/plugin/opencode-morph-plugin/opencode-morph-plugin.ts | 404 | function buildGitHubSuggestionQueries( |
| LOW | …/plugin/opencode-morph-plugin/opencode-morph-plugin.ts | 422 | function formatPublicRepoResolutionFailure( |
| LOW | …/plugin/opencode-morph-plugin/opencode-morph-plugin.ts | 586 | async function fetchGitHubRepoSuggestions( |
| LOW | …ortix-master/opencode/plugin/kortix-system/projects.ts | 349 | export function shouldInjectUnboundProjectStatus(_messageText: string): boolean { |
| LOW | …x-master/opencode/plugin/kortix-system/ticket-tools.ts | 235 | async function maybePingPmOnMilestoneCompletion( |
| LOW | …-master/opencode/plugin/kortix-system/kortix-system.ts | 45 | export function selectLingeringBusySessionIds(options: { |
| LOW | …-master/opencode/plugin/kortix-system/kortix-system.ts | 59 | async function cleanupLingeringBusySessions(client: any, db: Database, cleanupStartedAt: number): Promise<void> { |
| LOW | …-master/opencode/plugin/kortix-system/kortix-system.ts | 117 | function scheduleStartupBusySessionCleanup(client: any, db: Database, cleanupStartedAt: number): void { |
| LOW | …ix-master/opencode/plugin/kortix-system/agent-tasks.ts | 508 | export async function handleAgentTaskSessionEvent( |
| LOW | …rtix-system/pty/opencode-pty/src/plugin/pty/manager.ts | 22 | export function registerSessionUpdateCallback(callback: SessionUpdateCallback) { |
| LOW | …rtix-system/pty/opencode-pty/src/plugin/pty/manager.ts | 26 | export function removeSessionUpdateCallback(callback: SessionUpdateCallback) { |
| LOW | …rtix-system/pty/opencode-pty/src/plugin/pty/manager.ts | 31 | export function registerRawOutputCallback(callback: RawOutputCallback): void { |
| LOW | …rtix-system/pty/opencode-pty/src/plugin/pty/manager.ts | 431 | export async function ensurePtyBackendAvailable(): Promise<void> { |
| LOW | …kortix-system/pty/opencode-pty/src/plugin/pty/utils.ts | 1 | export function buildSessionNotFoundError(id: string): Error { |
| LOW | …x-system/pty/opencode-pty/src/plugin/pty/tools/read.ts | 44 | function validateAndCreateRegex(pattern: string, ignoreCase?: boolean): RegExp { |
| LOW | …ter/opencode/plugin/kortix-system/worktree/terminal.ts | 547 | function detectCurrentLinuxTerminal(): LinuxTerminal | null { |
| LOW | …opencode/plugin/kortix-system/lib/message-transform.ts | 73 | export function extractKortixSystemContent(text: string): string[] { |
| LOW | …opencode/plugin/kortix-system/lib/message-transform.ts | 95 | export function wrapLinesInKortixSystemTags( |
| LOW | …opencode/plugin/kortix-system/lib/message-transform.ts | 133 | function stripExistingMemoryContext(messages: ChatMessage[]): void { |
| LOW | …opencode/plugin/kortix-system/lib/message-transform.ts | 150 | export function upsertMemoryContextAtPromptEnd(messages: ChatMessage[], syntheticText: string, sessionID?: string): void |
| LOW | …e/plugin/kortix-system/lib/startup-aborted-sessions.ts | 3 | export function markStartupAbortedSession(sessionId: string): void { |
| LOW | …e/plugin/kortix-system/lib/startup-aborted-sessions.ts | 13 | export function clearStartupAbortedSession(sessionId: string): void { |
| LOW | …e/plugin/kortix-system/lib/startup-aborted-sessions.ts | 18 | export function clearAllStartupAbortedSessions(): void { |
| LOW | …rtix-master/opencode/plugin/kortix-system/lib/paths.ts | 19 | export function resolveKortixWorkspaceRoot(anchorDir?: string): string { |
| LOW | …rtix-master/opencode/plugin/kortix-system/lib/paths.ts | 147 | export function renderMergedMemoryContext(anchorDir?: string): string { |
| LOW | …ix-master/opencode/plugin/kortix-system/goal/engine.ts | 90 | function buildCompletionRejectionPrompt(state: GoalState, reason: string, details: string): string { |
| LOW | …ix-master/opencode/plugin/kortix-system/goal/engine.ts | 108 | function validateCompletionRequest(signals: GoalTranscriptSignals): { ok: true } | { ok: false; reason: string; details: |
| LOW | …aster/opencode/plugin/kortix-system/goal/transcript.ts | 64 | export function collectGoalTranscriptSignals( |
| LOW | …KER/webapp/template/client/src/components/ui/chart.tsx | 320 | function getPayloadConfigFromPayload( |
| LOW | …encode/skills/GENERAL-KNOWLEDGE-WORKER/pdf/formfill.py | 101 | def _extract_checkbox_on_value(resolved: dict, cb: CheckboxField) -> None: |
| LOW | …ing/webapp/template/client/src/components/ui/chart.tsx | 320 | function getPayloadConfigFromPayload( |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 138 | def _remove_unreferenced_resources(unpacked_dir: Path, referenced: set[Path]) -> list[str]: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 190 | def _strip_stale_content_types(unpacked_dir: Path, removed_parts: list[str]) -> None: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 280 | def _register_presentation_rel(unpacked_dir: Path, slide_filename: str) -> str: |
| LOW | …kills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/comment.py | 172 | def _build_extensible_element(durable_hex: str, timestamp: str) -> etree._Element: |
| LOW | …kills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/comment.py | 182 | def _resolve_parent_paragraph(comments_path: Path, parent_cid: int) -> str | None: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/unpack.py | 221 | def _coalesce_tracked_changes(doc_xml: Path) -> int: |
| LOW | core/kortix-master/channels/channel-db.ts | 352 | export function cleanupLegacyChannelConnectors(): number { |
| LOW | core/kortix-master/src/index.ts | 153 | function syncAgentOverlayForProjectFlag() { |
| LOW | core/kortix-master/src/routes/marketplace.ts | 46 | async function ensureRealWorkspaceOpencodeDir(): Promise<void> { |
| LOW | core/kortix-master/src/routes/marketplace.ts | 81 | async function ensureWorkspaceConfigFiles(): Promise<void> { |
| LOW | core/kortix-master/src/routes/marketplace.ts | 112 | async function ensureMarketplaceWorkspaceReady(): Promise<void> { |
| LOW | core/kortix-master/src/routes/marketplace.ts | 118 | async function listInstalledMarketplaceComponents(): Promise<string[]> { |
| LOW | core/kortix-master/src/routes/tickets.ts | 89 | function ensureGlobalBoardDefaults(db: Database, projectId: string): void { |
| LOW | core/kortix-master/src/routes/tickets.ts | 152 | async function maybePingPmOnMilestoneCompletion( |
| LOW | core/kortix-master/src/routes/pipedream.ts | 613 | export async function syncExistingConnectorsFromApi(): Promise<void> { |
| LOW | core/kortix-master/src/services/credential-service.ts | 47 | function workspaceDbPathForKeyCheck(): string { |
| LOW | core/kortix-master/src/services/credential-service.ts | 65 | function hasExistingCredentialRows(): boolean { |
| LOW | …e/kortix-master/src/services/kortix-user-middleware.ts | 31 | export function kortixUserContextMiddleware() { |
| LOW | core/kortix-master/src/services/project-v2-seed.ts | 1001 | async function pokeTriggerManagerWriteThrough(): Promise<void> { |
| LOW | core/kortix-master/src/services/project-v2-seed.ts | 1025 | function seedDefaultBoardSweepTrigger( |
| 367 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …-KNOWLEDGE-WORKER/logo-creator/scripts/compose_logo.py | 45 | print("Error: playwright required. Install: pip install playwright && playwright install chromium") |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 101 | if (cs.backgroundImage && cs.backgroundImage !== 'none') return true; |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 103 | if (bg && bg !== 'rgba(0, 0, 0, 0)' && bg !== 'transparent') return true; |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 104 | if (cs.borderStyle && cs.borderStyle !== 'none' && cs.borderWidth !== '0px') return true; |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 105 | if (cs.boxShadow && cs.boxShadow !== 'none') return true; |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 115 | if (!el || el.nodeType !== 1) return []; |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 118 | if (r.width === 0 || r.height === 0) return []; |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 124 | out.push({type:'visual', captureId:cid, x:r.left, y:r.top, width:r.width, height:r.height, tag:el.tagName.to |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 126 | for (const ch of el.children) out.push(...walk(ch, depth+1)); |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 132 | if (el.textContent && el.textContent.trim()) { |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 149 | if (!el || el.nodeType !== 1) return []; |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 153 | if (r.width === 0 || r.height === 0) return []; |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 161 | out.push({ |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 173 | for (const ch of el.children) out.push(...extract(ch)); |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 212 | if (!root && orig.tagName !== 'svg' && orig.tagName !== 'SVG' && |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 216 | for (let j=0; j<orig.children.length && j<cl.children.length; j++) |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 304 | if (el.textContent && el.textContent.trim()) { |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 316 | if (Math.abs(r.left-v.x)<5 && Math.abs(r.top-v.y)<5 && |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 317 | Math.abs(r.width-v.width)<5 && Math.abs(r.height-v.height)<5) { |
| HIGH | packages/voice/server.py | 16 | cd voice && pip install -r requirements.txt && python server.py |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | core/tests/test-browser-system.sh | 112 | except Exception: |
| MEDIUM | …DGE-WORKER/paper-creator/scripts/openalex_to_bibtex.py | 180 | print(f"Error: Invalid JSON input: {e}", file=sys.stderr) |
| MEDIUM | …-KNOWLEDGE-WORKER/logo-creator/scripts/compose_logo.py | 45 | print("Error: playwright required. Install: pip install playwright && playwright install chromium") |
| MEDIUM | …RAL-KNOWLEDGE-WORKER/logo-creator/scripts/remove_bg.py | 35 | print("Error: rembg not installed. Run: pip install rembg pillow onnxruntime") |
| MEDIUM | …RAL-KNOWLEDGE-WORKER/logo-creator/scripts/remove_bg.py | 39 | print(f"Error: File not found: {input_path}") |
| MEDIUM | …RAL-KNOWLEDGE-WORKER/logo-creator/scripts/remove_bg.py | 78 | print("Error: rembg not installed.") |
| MEDIUM | …LEDGE-WORKER/logo-creator/scripts/create_logo_sheet.py | 238 | print(f"Error: '{args.image_dir}' is not a directory") |
| MEDIUM | …LEDGE-WORKER/logo-creator/scripts/create_logo_sheet.py | 243 | print(f"Error: No images found in '{args.image_dir}'") |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/recalc.py | 61 | except Exception: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/recalc.py | 95 | except Exception: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/recalc.py | 141 | except Exception: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/recalc.py | 154 | except Exception: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/recalc.py | 175 | except Exception as e: |
| LOW | …s/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/pivot_table.py | 92 | except Exception: |
| LOW | …s/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/pivot_table.py | 105 | except Exception: |
| LOW | …s/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/pivot_table.py | 314 | except Exception as e: |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 85 | except Exception: |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 96 | except Exception: |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 117 | except Exception: |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 202 | except Exception: |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 225 | except Exception: |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 381 | except Exception: |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 638 | except Exception: |
| LOW | …lls/GENERAL-KNOWLEDGE-WORKER/elevenlabs/scripts/tts.py | 75 | except Exception: |
| LOW | …-KNOWLEDGE-WORKER/legal-writer/scripts/verify-legal.py | 469 | except Exception as e: |
| LOW | …-KNOWLEDGE-WORKER/presentations/scripts/convert_pdf.py | 78 | except Exception as e: |
| LOW | …-KNOWLEDGE-WORKER/presentations/scripts/convert_pdf.py | 95 | except Exception: |
| LOW | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 269 | except Exception: |
| LOW | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 277 | except Exception: |
| LOW | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 286 | except Exception: |
| LOW | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 332 | except Exception: |
| LOW | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 384 | except Exception: |
| LOW | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 436 | except Exception: |
| LOW | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 455 | except Exception as e: |
| LOW | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 482 | except Exception: |
| MEDIUM | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/repair.py | 23 | print(f"Error: {src} not found", file=sys.stderr) |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/repair.py | 64 | except Exception: |
| LOW | …e/skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/pack.py | 64 | except Exception as exc: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/unpack.py | 71 | except Exception: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/unpack.py | 82 | except Exception: |
| MEDIUM | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 315 | print(f"Error: {layout_path} not found", file=sys.stderr) |
| MEDIUM | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 343 | print(f"Error: {source_path} not found", file=sys.stderr) |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 474 | except Exception: |
| MEDIUM | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 511 | print("Error: No slides found", file=sys.stderr) |
| MEDIUM | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 543 | print(f"Error: {unpacked} not found", file=sys.stderr) |
| MEDIUM | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 557 | print(f"Error: {unpacked} not found", file=sys.stderr) |
| MEDIUM | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 565 | print(f"Error: Invalid PowerPoint file: {args.input}", file=sys.stderr) |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 575 | except Exception as e: |
| MEDIUM | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 576 | print(f"Error: {e}", file=sys.stderr) |
| LOW | …t-youtube-transcript/scripts/get_youtube_transcript.py | 74 | except Exception: |
| LOW | …t-youtube-transcript/scripts/get_youtube_transcript.py | 81 | except Exception: |
| LOW | …t-youtube-transcript/scripts/get_youtube_transcript.py | 93 | except Exception: |
| MEDIUM | …t-youtube-transcript/scripts/get_youtube_transcript.py | 13 | def ensure_dependency(): |
| LOW | …e/skills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/pack.py | 69 | except Exception as e: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/unpack.py | 103 | except Exception: |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/unpack.py | 116 | except Exception: |
| LOW | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 261 | except Exception as e: |
| MEDIUM | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 25 | def get_role_name(accessible): |
| LOW | packages/voice/server.py | 159 | except Exception as e: |
| LOW | packages/voice/server.py | 242 | except Exception: |
| 1 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | core/startup.sh | 1 | #!/bin/bash |
| LOW | core/docker/docker-compose.dev.yml | 1 | # Dev mode overlay — bind-mounts local source into the running container. |
| LOW | core/docker/docker-compose.yml | 1 | # ───────────────────────────────────────────────────────────────────────────── |
| LOW | core/docker/docker-compose.yml | 21 | # Rebuilt from scratch on every `docker pull` + recreate. |
| LOW | core/tests/test-docker-in-docker.sh | 1 | #!/bin/bash |
| LOW | core/tests/test-browser-system.sh | 1 | #!/bin/bash |
| LOW | core/kortix-master/triggers/src/trigger-manager.ts | 41 | const port = options.webhookPort ?? 8099 |
| LOW | core/kortix-master/tests/e2e/comprehensive-paradigm.sh | 1 | #!/usr/bin/env bash |
| LOW | core/kortix-master/tests/e2e/single-project-paradigm.sh | 1 | #!/usr/bin/env bash |
| LOW | core/kortix-master/tests/e2e/user-flow-perf.sh | 1 | #!/usr/bin/env bash |
| LOW | core/kortix-master/tests/e2e/web-paradigm.sh | 1 | #!/usr/bin/env bash |
| LOW | core/kortix-master/scripts/install-channel-clis.sh | 1 | #!/bin/sh |
| LOW | …x-master/opencode/plugin/kortix-system/ticket-tools.ts | 81 | } from '../../../src/services/credential-service' |
| LOW | …x-master/opencode/plugin/kortix-system/ticket-tools.ts | 161 | // Tool "credential_set" requires tool_group "project_manage". |
| LOW | …x-master/opencode/plugin/kortix-system/ticket-tools.ts | 901 | if (!pid) return 'Error: no session context.' |
| LOW | …opencode/plugin/kortix-system/lib/message-transform.ts | 1 | // ============================================================================ |
| LOW | …ERAL-KNOWLEDGE-WORKER/paper-creator/scripts/compile.sh | 1 | #!/usr/bin/env bash |
| LOW | …NERAL-KNOWLEDGE-WORKER/paper-creator/scripts/verify.sh | 1 | #!/usr/bin/env bash |
| LOW | …TIX-system/agent-browser/templates/capture-workflow.sh | 1 | #!/bin/bash |
| LOW | …RTIX-system/agent-browser/templates/form-automation.sh | 1 | #!/bin/bash |
| LOW | …RTIX-system/agent-browser/templates/form-automation.sh | 21 | agent-browser open "$FORM_URL" |
| LOW | …ystem/agent-browser/templates/authenticated-session.sh | 1 | #!/bin/bash |
| LOW | …ystem/agent-browser/templates/authenticated-session.sh | 81 | # |
| LOW | …ystem/agent-browser/templates/authenticated-session.sh | 101 | # # Save state for future runs |
| LOW | core/kortix-master/src/index.ts | 141 | // disable JUST the per-project Project Manager agent (`project-manager`) |
| LOW | core/kortix-master/src/index.ts | 241 | // Protects ALL routes with bearer token or ?token= query param. |
| LOW | core/kortix-master/src/config.ts | 41 | // |
| LOW | core/kortix-master/src/services/project-v2-seed.ts | 961 | // Seed a default hourly board-sweep cron bound to the dashboard ticket. |
| LOW | core/kortix-master/src/services/ticket-triggers.ts | 261 | |
| LOW | core/init-scripts/99-restore-packages.sh | 1 | #!/usr/bin/with-contenv bash |
| LOW | core/init-scripts/99-restore-packages.sh | 81 | # ── 2. Restore pip packages ───────────────────────────────────────────────── |
| LOW | core/init-scripts/95-setup-sshd.sh | 41 | # |
| LOW | core/init-scripts/97-secrets-to-s6-env.sh | 1 | #!/usr/bin/with-contenv bash |
| LOW | core/init-scripts/kortix-env-setup.sh | 1 | #!/usr/bin/with-contenv bash |
| LOW | tests/shell/run-all.sh | 1 | #!/usr/bin/env bash |
| LOW | tests/shell/vps/test-proxy-e2e.sh | 1 | #!/usr/bin/env bash |
| LOW | tests/shell/vps/test-ssh-e2e.sh | 1 | #!/usr/bin/env bash |
| LOW | tests/shell/vps/test-full-vps-e2e.sh | 1 | #!/usr/bin/env bash |
| LOW | tests/shell/vps/test-vps-e2e.sh | 1 | #!/usr/bin/env bash |
| LOW | tests/e2e/self-hosted-e2e.sh | 1 | #!/usr/bin/env bash |
| LOW | supabase/config.toml | 1 | # ╔══════════════════════════════════════════════════════════════════════════════╗ |
| LOW | scripts/deploy-zero-downtime.sh | 1 | #!/usr/bin/env bash |
| LOW | scripts/get-kortix.sh | 1 | #!/usr/bin/env bash |
| LOW | scripts/nuke-local.sh | 1 | #!/usr/bin/env bash |
| LOW | apps/frontend/next-env.d.ts | 1 | /// <reference types="next" /> |
| LOW | apps/web/docker-entrypoint.sh | 1 | #!/bin/sh |
| LOW | apps/web/src/middleware.ts | 301 | // Desktop shell never shows the marketing homepage. The Tauri window already |
| LOW | apps/web/src/stores/opencode-sync-store.ts | 121 | // These mirror the old store shapes so external components can migrate gradually |
| LOW | apps/web/src/components/kortix/mention-textarea.tsx | 41 | // Recognised patterns (flat, no nesting): |
| LOW | apps/web/src/components/file-editors/code-editor.tsx | 21 | TooltipTrigger, |
| LOW | apps/web/src/components/markdown/unified-markdown.tsx | 21 | import { stripKortixSystemTags } from '@/lib/utils/kortix-system-tags'; |
| LOW | apps/web/src/components/markdown/unified-markdown.tsx | 201 | // Also acts as a coalescing mechanism: only one Shiki call per unique |
| LOW | apps/web/src/components/dashboard/layout-content.tsx | 661 | // Check ONBOARDING_COMPLETE — enter onboarding mode or pass through. |
| LOW | apps/web/src/components/session/session-chat.tsx | 3241 | // Normal mode rendering — 1:1 port of SolidJS session-turn.tsx |
| LOW | apps/web/src/components/session/session-chat.tsx | 4641 | // back-to-back in the same JS tick BEFORE any await yields, React |
| LOW | apps/web/src/hooks/opencode/use-opencode-events.ts | 361 | // Using only "last event" causes hydrate storms when the server rotates |
| LOW | apps/desktop/src-tauri/src/lib.rs | 21 | if url.is_empty() { |
| LOW | apps/desktop/src-tauri/src/lib.rs | 221 | // dragenter/dragover/drop events reach the webview. Without this |
| LOW | apps/mobile/ios/Kortix/Kortix-Bridging-Header.h | 1 | // |
| LOW | apps/mobile/lib/haptics.ts | 1 | import * as Haptics from 'expo-haptics'; |
| 9 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | core/docker/general_skill_inventory.json | 86 | "### Step 2: Identify Required Elements", |
| LOW | core/kortix-master/tests/unit/auth-sync.test.ts | 242 | // Step 1: "OpenCode writes auth.json" (simulated) |
| LOW | core/kortix-master/tests/unit/auth-sync.test.ts | 247 | // Step 2: "auth-sync reads auth.json and syncs to SecretStore" (simulated) |
| LOW | core/kortix-master/tests/unit/auth-sync.test.ts | 258 | // Step 3: Verify the key is now available where lss-sync would read it |
| LOW | core/kortix-master/tests/unit/auth-sync.test.ts | 264 | // Step 1: User sets key via /env API (simulated by direct SecretStore call) |
| LOW | core/kortix-master/tests/unit/auth-sync.test.ts | 267 | // Step 2: The /env route would call syncSecretToAuth('OPENAI_API_KEY', 'sk-from-secrets-manager') |
| LOW | core/kortix-master/tests/unit/auth-sync.test.ts | 270 | // Step 3: Verify the key is in SecretStore |
| LOW | core/kortix-master/tests/unit/auth-sync.test.ts | 280 | // Step 1: OpenCode writes empty key to auth.json (disconnect) |
| LOW | core/kortix-master/tests/unit/auth-sync.test.ts | 281 | // Step 2: auth-sync detects the change, clears SecretStore |
| LOW | …RTIX-system/agent-browser/templates/form-automation.sh | 20 | # Step 1: Navigate to form |
| LOW | …RTIX-system/agent-browser/templates/form-automation.sh | 24 | # Step 2: Snapshot to discover form elements |
| LOW | …RTIX-system/agent-browser/templates/form-automation.sh | 29 | # Step 3: Fill form fields (customize these refs based on snapshot output) |
| LOW | …RTIX-system/agent-browser/templates/form-automation.sh | 46 | # Step 4: Wait for submission |
| LOW | …RTIX-system/agent-browser/templates/form-automation.sh | 50 | # Step 5: Verify result |
| LOW | core/kortix-master/channels/slack.ts | 104 | // Step 1: Get upload URL (requires form-urlencoded, not JSON) |
| LOW | core/kortix-master/channels/slack.ts | 116 | // Step 2: Upload the file bytes to the presigned URL |
| LOW | core/kortix-master/channels/slack.ts | 124 | // Step 3: Complete the upload and share to channel |
| LOW | packages/agent-tunnel/src/agent/cli.ts | 169 | // Step 1: Create device auth request |
| LOW | packages/agent-tunnel/src/agent/cli.ts | 199 | // Step 2: Display code and open browser |
| LOW | packages/agent-tunnel/src/agent/cli.ts | 208 | // Step 3: Poll for approval |
| LOW | …s/web/src/components/file-editors/markdown-toolbar.tsx | 342 | // Step 1: Upload the file via OpenCode |
| LOW | …s/web/src/components/file-editors/markdown-toolbar.tsx | 346 | // Step 2: Read back the uploaded image and create blob URL |
| LOW | …ts/auth/phone-verification/phone-verification-page.tsx | 127 | // Step 1: Enroll the phone number |
| LOW | …ts/auth/phone-verification/phone-verification-page.tsx | 133 | // Step 2: Create a challenge (sends SMS) |
| LOW | apps/mobile/components/pages/ChannelsPage.tsx | 1116 | // Step 1: Configure |
| LOW | apps/mobile/components/pages/ChannelsPage.tsx | 1121 | // Step 2: Manifest |
| LOW | apps/mobile/components/pages/ChannelsPage.tsx | 1125 | // Step 3: Credentials |
| LOW | apps/api/src/ensure-schema.ts | 41 | // Step 1: Run bootstrap migration (schemas, extensions, grants) |
| LOW | apps/api/src/ensure-schema.ts | 45 | // Step 2: drizzle-kit push (tables, indexes, enums) |
| LOW | apps/api/src/ensure-schema.ts | 87 | // Step 3: Run all post-push migrations (table grants, atomic functions) |
| LOW | …ps/api/src/__tests__/e2e-pipedream-credentials.test.ts | 513 | // Step 1: sandbox pushes creds to API (simulates kortix-master boot push) |
| LOW | …ps/api/src/__tests__/e2e-pipedream-credentials.test.ts | 521 | // Step 2: frontend checks status |
| LOW | …ps/api/src/__tests__/e2e-pipedream-credentials.test.ts | 527 | // Step 3: verify DB directly |
| LOW | apps/api/src/pool/env-injector.ts | 71 | // Step 1: Inject into the running container |
| LOW | apps/api/src/pool/env-injector.ts | 86 | // Step 2: Persist to host env file so restarts preserve the real token. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 20 | print(json.dumps({"ok": False, "error": "python3-gi and gir1.2-atspi-2.0 required. Install: sudo apt install python3 |
| HIGH | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 89 | return None |
| HIGH | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 206 | print(json.dumps({"ok": False, "error": "Invalid JSON input"})) |
| HIGH | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 222 | print(json.dumps({"ok": True, "root": tree, "elementCount": element_count})) |
| HIGH | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 224 | elif action == "ax_action": |
| HIGH | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 246 | print(json.dumps({"ok": True})) |
| HIGH | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 248 | elif action == "ax_search": |
| HIGH | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 257 | print(json.dumps({"ok": True, "elements": results})) |
| HIGH | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 260 | print(json.dumps({"ok": False, "error": f"Unknown action: {action}"})) |
| HIGH | …-tunnel/src/agent/capabilities/desktop/atspi-helper.ts | 262 | print(json.dumps({"ok": False, "error": str(e)})) |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | core/kortix-master/tests/e2e/comprehensive-paradigm.sh | 2 | # Comprehensive paradigm e2e — covers the surfaces the existing suites skip: |
| MEDIUM | core/kortix-master/tests/e2e/comprehensive-paradigm.sh | 8 | # E. SQLite schema integrity — every project-paradigm table + index exists. |
| MEDIUM | core/kortix-master/tests/e2e/single-project-paradigm.sh | 2 | # E2E test: single-project paradigm in the kortix sandbox. |
| MEDIUM | core/kortix-master/tests/e2e/single-project-paradigm.sh | 9 | # - Feature flag KORTIX_PROJECTS_ENABLED gates the project-paradigm surface |
| MEDIUM | core/kortix-master/tests/e2e/single-project-paradigm.sh | 79 | # Tool registry — zero project-paradigm surface |
| MEDIUM | core/kortix-master/tests/e2e/single-project-paradigm.sh | 96 | # These 4 tools are GONE in the new paradigm — never registered, even with flag on. |
| MEDIUM | core/kortix-master/tests/e2e/user-flow-perf.sh | 2 | # User-flow + perf e2e for the single-project paradigm. |
| MEDIUM | core/kortix-master/tests/e2e/user-flow-perf.sh | 4 | # Goes beyond the gate-correctness suite (single-project-paradigm.sh) to |
| MEDIUM | core/kortix-master/tests/e2e/user-flow-perf.sh | 11 | # 2. Single-project paradigm flow (flag on) — auto-bootstrap, real |
| MEDIUM | core/kortix-master/tests/e2e/web-paradigm.sh | 2 | # Web-side paradigm e2e — verifies the user-flow surfaces independently of |
| MEDIUM | …NERAL-KNOWLEDGE-WORKER/paper-creator/scripts/verify.sh | 4 | # Runs a comprehensive checklist against a compiled paper and reports pass/fail. |
| MEDIUM | test-results/html/index.html | 58 | `).replace(eA,"")}function Wd(t,e){return e=Fd(e),Fd(t)===e}function Dt(t,e,n,a,i,s){switch(n){case"children":typeof a== |
| MEDIUM | apps/web/src/components/kortix/new-ticket-dialog.tsx | 345 | // Auto-size title and body to fit content — the seamless feel requires that |
| MEDIUM | apps/web/src/components/session/session-chat.tsx | 1571 | // Fallback: robust full-template match where placeholders are wildcards. |
| MEDIUM | apps/mobile/components/chat/MarkdownToolbar.tsx | 145 | // Use a more robust check |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …r/opencode/skills/KORTIX-system/agent-browser/SKILL.md | 23 | agent-browser fill @e1 "user@example.com" |
| LOW | …r/opencode/skills/KORTIX-system/agent-browser/SKILL.md | 77 | agent-browser fill @e1 "user@example.com" && agent-browser fill @e2 "password123" && agent-browser click @e3 |
| LOW | …r/opencode/skills/KORTIX-system/agent-browser/SKILL.md | 148 | agent-browser fill @e1 "Jane Doe" |
| LOW | …RTIX-system/agent-browser/references/authentication.md | 31 | agent-browser fill @e1 "user@example.com" |
| LOW | …RTIX-system/agent-browser/references/authentication.md | 50 | agent-browser fill @e1 "user@example.com" |
| LOW | …RTIX-system/agent-browser/references/authentication.md | 107 | agent-browser fill @e1 "user@example.com" |
| LOW | …ORTIX-system/agent-browser/references/snapshot-refs.md | 72 | agent-browser fill @e10 "user@example.com" |
| LOW | …-system/agent-browser/references/session-management.md | 29 | agent-browser --session auth fill @e1 "user@example.com" |
| LOW | …RTIX-system/agent-browser/templates/form-automation.sh | 32 | # agent-browser fill @e1 "John Doe" # Text input |
| LOW | …RTIX-system/agent-browser/templates/form-automation.sh | 33 | # agent-browser fill @e2 "user@example.com" # Email input |
| LOW | …er/opencode/skills/KORTIX-system/computer-use/SKILL.md | 283 | bun run "$TUNNEL" shell '{"command":"agent-click","args":["type","John Doe","-s","@e5"]}' |
| LOW | tests/security-audit/03-jwt-verification.test.ts | 177 | { sub: 'user-1', email: 'test@test.com', exp: Math.floor(Date.now() / 1000) + 3600 }, |
| LOW | tests/security-audit/03-jwt-verification.test.ts | 186 | { sub: 'user-1', email: 'test@test.com', exp: Math.floor(Date.now() / 1000) + 3600 }, |
| LOW | tests/security-audit/03-jwt-verification.test.ts | 195 | { sub: 'user-1', email: 'test@test.com', exp: Math.floor(Date.now() / 1000) + 3600 }, |
| LOW | tests/security-audit/03-jwt-verification.test.ts | 254 | { email: 'test@test.com', exp: Math.floor(Date.now() / 1000) + 3600 }, |
| LOW | tests/security-audit/03-jwt-verification.test.ts | 274 | { sub: 'user-123', email: 'user@example.com', exp: Math.floor(Date.now() / 1000) + 3600 }, |
| LOW | tests/security-audit/03-jwt-verification.test.ts | 280 | expect(result.email).toBe('user@example.com'); |
| LOW | tests/security-audit/09-input-validation.test.ts | 225 | const validEmail = 'user@example.com'; |
| LOW | tests/security-audit/09-input-validation.test.ts | 239 | expect(normalized).toBe('user@example.com'); |
| LOW | tests/security-audit/11-access-control.test.ts | 82 | expect(normalizeEmail('User@Example.COM')).toBe('user@example.com'); |
| LOW | tests/security-audit/11-access-control.test.ts | 86 | expect(normalizeEmail(' user@example.com ')).toBe('user@example.com'); |
| LOW | tests/security-audit/11-access-control.test.ts | 90 | expect(normalizeEmail(' User@Example.COM ')).toBe('user@example.com'); |
| LOW | tests/security-audit/11-access-control.test.ts | 112 | expect(isValidAccessRequestEmail('user@example.com')).toBe(true); |
| LOW | tests/security-audit/11-access-control.test.ts | 143 | expect(cache.canSignUp('user@example.com')).toBe(true); |
| LOW | tests/security-audit/11-access-control.test.ts | 148 | expect(cache.canSignUp('user@example.com')).toBe(true); |
| LOW | …security-audit/scan-04-cloud-injection-attacks.test.ts | 152 | body: JSON.stringify({ email: 'test@test.com' }), |
| LOW | …security-audit/scan-04-cloud-injection-attacks.test.ts | 191 | let obj: any = { email: 'test@test.com' }; |
| LOW | …security-audit/scan-04-cloud-injection-attacks.test.ts | 204 | email: 'test@test.com', |
| LOW | …s/web/src/app/(dashboard)/admin/notifications/page.tsx | 254 | placeholder="user@example.com" |
| LOW | …api/src/__tests__/billing/customers-repository.test.ts | 142 | email: 'user@example.com', |
| LOW | …api/src/__tests__/billing/customers-repository.test.ts | 149 | email: 'user@example.com', |
| LOW | …api/src/__tests__/billing/customers-repository.test.ts | 165 | email: 'user@example.com', |
| LOW | …api/src/__tests__/billing/customers-repository.test.ts | 173 | email: 'user@example.com', |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …-KNOWLEDGE-WORKER/logo-creator/scripts/compose_logo.py | 129 | |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/recalc.py | 65 | |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/recalc.py | 82 | |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/recalc.py | 102 | |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/recalc.py | 117 | |
| LOW | …s/GENERAL-KNOWLEDGE-WORKER/xlsx/scripts/pivot_table.py | 109 | |
| LOW | …opencode/skills/GENERAL-KNOWLEDGE-WORKER/pdf/layout.py | 158 | |
| LOW | …encode/skills/GENERAL-KNOWLEDGE-WORKER/pdf/formfill.py | 143 | |
| LOW | …encode/skills/GENERAL-KNOWLEDGE-WORKER/pdf/formfill.py | 300 | |
| LOW | …WLEDGE-WORKER/document-review/scripts/annotate_pptx.py | 212 | |
| LOW | …WLEDGE-WORKER/document-review/scripts/annotate_xlsx.py | 68 | |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 77 | |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 100 | |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 410 | |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 513 | |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 607 | |
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 707 | |
| LOW | …-KNOWLEDGE-WORKER/legal-writer/scripts/verify-legal.py | 52 | |
| LOW | …KNOWLEDGE-WORKER/legal-writer/scripts/courtlistener.py | 182 | |
| LOW | …KNOWLEDGE-WORKER/legal-writer/scripts/courtlistener.py | 235 | |
| LOW | …L-KNOWLEDGE-WORKER/legal-writer/scripts/ecfr_lookup.py | 45 | |
| LOW | …L-KNOWLEDGE-WORKER/legal-writer/scripts/ecfr_lookup.py | 241 | |
| LOW | …-KNOWLEDGE-WORKER/presentations/scripts/convert_pdf.py | 31 | |
| LOW | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 339 | |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/repair.py | 20 | |
| LOW | …e/skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/pack.py | 22 | |
| LOW | …e/skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/pack.py | 47 | |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/pptx/scripts/slides.py | 138 | |
| LOW | …t-youtube-transcript/scripts/get_youtube_transcript.py | 33 | |
| LOW | …t-youtube-transcript/scripts/get_youtube_transcript.py | 68 | |
| LOW | …e/skills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/pack.py | 22 | |
| LOW | …e/skills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/pack.py | 47 | |
| LOW | …kills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/comment.py | 182 | |
| LOW | …kills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/comment.py | 199 | |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/unpack.py | 160 | |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/unpack.py | 198 | |
| LOW | …skills/GENERAL-KNOWLEDGE-WORKER/docx/scripts/unpack.py | 253 | |
| LOW | packages/voice/server.py | 77 | |
| LOW | packages/voice/server.py | 218 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 271 | # Check if we only got TLD-level info with no domain data |
| LOW | …-KNOWLEDGE-WORKER/legal-writer/scripts/verify-legal.py | 150 | # Check if the term appears outside its definition |
| LOW | …-KNOWLEDGE-WORKER/legal-writer/scripts/verify-legal.py | 183 | # Check if it might be a top-level section |
| LOW | tests/e2e/test-self-hosted-install.sh | 93 | # Check if .credentials file was created |
| LOW | packages/voice/server.py | 245 | # Check if superseded |
| LOW | packages/voice/server.py | 290 | # Check if we've been superseded |
| LOW | apps/mobile/scripts/start-android.sh | 20 | # Check if emulator is already running |
| LOW | apps/mobile/scripts/start-android.sh | 26 | # Check if AVD exists |
| LOW | apps/mobile/scripts/start-android.sh | 48 | # Check if dev client is installed |
| LOW | apps/mobile/scripts/setup-android.sh | 16 | # Check if running on macOS |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …-KNOWLEDGE-WORKER/presentations/scripts/convert_pdf.py | 0 | auto-detect chromium executable path for the current platform. |
| HIGH | …OWLEDGE-WORKER/presentations/scripts/validate_slide.py | 0 | auto-detect chromium executable path for the current platform. |
| HIGH | …KNOWLEDGE-WORKER/presentations/scripts/convert_pptx.py | 0 | auto-detect chromium executable path for the current platform. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …/skills/GENERAL-KNOWLEDGE-WORKER/logo-creator/SKILL.md | 96 | round-1/ # AI-generated symbols |
| HIGH | …-KNOWLEDGE-WORKER/logo-creator/scripts/compose_logo.py | 313 | # Auto-crop symbol to remove whitespace padding from AI-generated images |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | core/tests/test-docker-in-docker.sh | 18 | # Usage: |
| LOW | core/tests/test-browser-system.sh | 12 | # Usage: |
| LOW | …ERAL-KNOWLEDGE-WORKER/paper-creator/scripts/compile.sh | 4 | # Usage: |
| LOW | …NERAL-KNOWLEDGE-WORKER/paper-creator/scripts/verify.sh | 7 | # Usage: |
| LOW | scripts/setup-env.sh | 7 | # Usage: |
| LOW | scripts/nuke-local.sh | 13 | # Usage: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | core/kortix-master/triggers/src/trigger-yaml.ts | 195 | return "# Trigger definitions — config only, no runtime state.\n# Runtime state (is_active, last_run, executions) |
| MEDIUM | core/kortix-master/triggers/src/trigger-yaml.ts | 200 | "# This file is the source of truth for what triggers EXIST.", |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | packages/voice/vapi-assistant-config.json | 74 | "Are you still there? Let me know if you need anything.", |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …WLEDGE-WORKER/domain-research/scripts/domain-lookup.py | 28 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …-tunnel/src/agent/capabilities/desktop/swift-helper.ts | 346 | func handleRequest(_ req: Request) { |