6.6

Adjusted Signal

6.6

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

3.9K

Stars

Shell

Language

83.9K

Lines of Code

209

Files

310

Pattern Hits

2026-10-31

Scan Date

0.25

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 142 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.2/100 · LOW

Are imports declared and package/API names verified? 26 finding(s).

Agent Over-Engineering Ratio 22.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 196 finding(s).

PR Review Velocity Impact 30.8/100 · MEDIUM

Which changes need focused human review? 310 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 52MEDIUM 19LOW 238

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 310 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Empty Error Handlers51 hits · 255 pts

Severity	File	Line	Snippet	Context
HIGH	misc/host-scan-statusd.py	1611	except KeyboardInterrupt:	CODE
HIGH	misc/host-scan-statusd.py	214	except Exception:	CODE
HIGH	misc/host-scan-statusd.py	1616	except OSError:	CODE
HIGH	misc/host-scan-statusd.py	762	except Exception:	CODE
HIGH	misc/op_notes.py	441	except Exception:	CODE
HIGH	misc/op_notes.py	66	except OSError:	CODE
HIGH	misc/op_notes.py	403	except Exception:	CODE
HIGH	misc/op_notes.py	415	except Exception:	CODE
HIGH	misc/op_notes.py	437	except Exception:	CODE
HIGH	misc/op_notes.py	489	except Exception:	CODE
HIGH	misc/op_notes.py	57	except OSError:	CODE
HIGH	parsers/social.py	162	except Exception:	CODE
HIGH	dev/lib/sensitive-scanner/engine.py	354	except requests.RequestException:	CODE
HIGH	dev/lib/sensitive-scanner/engine.py	429	except requests.RequestException:	CODE
HIGH	dev/lib/sensitive-scanner/engine.py	452	except requests.RequestException:	CODE
HIGH	dev/lib/waf-detect/wafw00f_run.py	27	except Exception:	CODE
HIGH	dev/lib/open-redirect-scanner/engine.py	806	except Exception:	CODE
HIGH	recon/active-tech.py	3083	except Exception:	CODE
HIGH	recon/active-tech.py	2616	except OSError:	CODE
HIGH	recon/active-tech.py	1450	except ValueError:	CODE
HIGH	recon/active-tech.py	2610	except OSError:	CODE
HIGH	recon/shodan-enrich.py	695	except OSError:	CODE
HIGH	recon/shodan-enrich.py	701	except OSError:	CODE
HIGH	recon/shodan-enrich.py	720	except (OSError, subprocess.TimeoutExpired):	CODE
HIGH	recon/shodan-enrich.py	1061	except Exception:	CODE
HIGH	recon/shodan-enrich.py	440	except OSError:	CODE
HIGH	recon/shodan-enrich.py	449	except OSError:	CODE
HIGH	recon/shodan-enrich.py	633	except Exception:	CODE
HIGH	recon/shodan-enrich.py	258	except OSError:	CODE
HIGH	recon/import-operator-package.py	597	except OSError:	CODE
HIGH	recon/import-operator-package.py	792	except Exception:	CODE
HIGH	recon/audit-build.py	1203	except Exception:	CODE
HIGH	recon/threat-feed.py	115	except OSError:	CODE
HIGH	recon/threat-feed.py	1139	except OSError:	CODE
HIGH	recon/threat-feed.py	1276	except OSError:	CODE
HIGH	recon/threat-feed.py	1264	except OSError:	CODE
HIGH	recon/discover-config.py	104	except OSError:	CODE
HIGH	recon/discover-config.py	162	except OSError:	CODE
HIGH	recon/discover-config.py	241	except OSError:	CODE
HIGH	recon/discover-config.py	282	except OSError:	CODE
HIGH	recon/discover-config.py	422	except OSError:	CODE
HIGH	recon/discover-config.py	457	except OSError:	CODE
HIGH	recon/discover-config.py	511	except OSError:	CODE
HIGH	recon/discover-config.py	505	except FileNotFoundError:	CODE
HIGH	recon/software-cve.py	458	except Exception:	CODE
HIGH	recon/software-cve.py	425	except OSError:	CODE
HIGH	recon/software-cve.py	441	except OSError:	CODE
HIGH	recon/software-cve.py	777	except OSError:	CODE
HIGH	recon/software-cve.py	404	except OSError:	CODE
HIGH	recon/software-cve.py	432	except OSError:	CODE
HIGH	recon/software-cve.py	769	except OSError:	CODE

Excessive Try-Catch Wrapping82 hits · 90 pts

Severity	File	Line	Snippet	Context
LOW	misc/host-scan-statusd.py	175	except Exception:	CODE
LOW	misc/host-scan-statusd.py	193	except Exception:	CODE
LOW	misc/host-scan-statusd.py	214	except Exception:	CODE
LOW	misc/host-scan-statusd.py	686	except Exception as exc:	CODE
LOW	misc/host-scan-statusd.py	762	except Exception:	CODE
LOW	misc/host-scan-statusd.py	1180	except Exception as exc:	CODE
LOW	misc/host-scan-statusd.py	1522	except Exception:	CODE
LOW	misc/host-scan-statusd.py	1547	except Exception as exc:	CODE
MEDIUM⚡	misc/op_notes.py	75	print("Error: ~/.discover/client_secret.json not found.", file=sys.stderr)	CODE
MEDIUM⚡	misc/op_notes.py	93	print("Error refreshing token.", file=sys.stderr)	CODE
MEDIUM	misc/op_notes.py	452	print("Error syncing to Google Sheet: bad row.", file=sys.stderr)	CODE
MEDIUM	misc/op_notes.py	463	print("Error syncing to Google Sheet: row has no date.", file=sys.stderr)	CODE
MEDIUM	misc/op_notes.py	546	print(f"Error syncing to Google Sheet: {exc}", file=sys.stderr)	CODE
LOW⚡	misc/op_notes.py	84	except Exception:	CODE
LOW⚡	misc/op_notes.py	92	except Exception:	CODE
LOW	misc/op_notes.py	54	except Exception:	CODE
LOW	misc/op_notes.py	403	except Exception:	CODE
LOW	misc/op_notes.py	415	except Exception:	CODE
LOW	misc/op_notes.py	437	except Exception:	CODE
LOW	misc/op_notes.py	441	except Exception:	CODE
LOW	misc/op_notes.py	489	except Exception:	CODE
LOW	misc/op_notes.py	545	except Exception as exc:	CODE
LOW	misc/open-ffuf-tabs.sh	110	except Exception:	CODE
LOW	misc/open-ffuf-tabs.sh	144	except Exception:	CODE
LOW	misc/update.sh	456	except Exception:	CODE
LOW	misc/run-host-scan.sh	231	except Exception:	CODE
LOW	misc/run-host-scan.sh	249	except Exception:	CODE
LOW	misc/run-host-scan.sh	1819	except Exception:	CODE
LOW	misc/run-host-scan.sh	2102	except Exception:	CODE
LOW	misc/run-host-scan.sh	2354	except Exception:	CODE
LOW	misc/run-host-scan.sh	2450	except Exception:	CODE
LOW	misc/run-host-scan.sh	2611	except Exception:	CODE
LOW	misc/run-host-scan.sh	2633	except Exception:	CODE
LOW	misc/run-host-scan.sh	2656	except Exception:	CODE
LOW	parsers/parse-burp.py	30	except Exception as ex:	CODE
LOW	parsers/social.py	162	except Exception:	CODE
MEDIUM	parsers/parse-nessus-feed.py	63	print("Error writing CSV file. Check for permissions and/or path.\n")	CODE
MEDIUM	parsers/parse-nessus-feed.py	76	print("Error writing remainder of the column data to file. Check for permissions and/or path.")	CODE
MEDIUM	parsers/parse-nessus-feed.py	93	print("Error reading/parsing XML file. Its likely that the XML file is mangled in some way.")	CODE
LOW	dev/lib/sensitive-scanner/engine.py	398	except Exception as exc:	CODE
LOW	dev/lib/waf-detect/wafw00f_run.py	27	except Exception:	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	234	except Exception as exc:	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	258	except Exception as exc:	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	395	except Exception:	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	424	except Exception:	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	452	except Exception:	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	585	except Exception as exc:	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	680	except Exception as exc:	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	697	except Exception as exc:	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	806	except Exception:	CODE
LOW	recon/import-subdomains.sh	310	except Exception as exc:	CODE
LOW	recon/passive.sh	522	except Exception as exc:	CODE
LOW	recon/active-tech.py	1216	except Exception:	CODE
LOW	recon/active-tech.py	1688	except Exception:	CODE
LOW	recon/active-tech.py	1781	except Exception:	CODE
LOW	recon/active-tech.py	1807	except Exception:	CODE
LOW	recon/active-tech.py	2948	except Exception as exc:	CODE
LOW	recon/active-tech.py	3083	except Exception:	CODE
LOW	recon/write_web_links.py	51	except Exception:	CODE
LOW	recon/write_web_links.py	83	except Exception:	CODE
22 more matches not shown…

Hyper-Verbose Identifiers54 hits · 50 pts

Severity	File	Line	Snippet	Context
LOW	misc/host-scan-statusd.py	179	def load_discover_config_module(discover_root: Path):	CODE
LOW	misc/host-scan-statusd.py	197	def shodan_api_key_configured(discover_root: Path) -> bool:	CODE
LOW	parsers/parse-burp.py	119	def parse_vulnerability_classifications(html_content):	CODE
LOW	parsers/company.py	153	def extract_contact_from_html(html: str) -> tuple[list[str], str] \| None:	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	315	def location_points_to_canary(location: str, canary: str, base_url: str) -> bool:	CODE
LOW	report/assets/javascript/inc-host-scan.js	1684	function hostScanArtifactAbsolutePath(relFromPages) {	CODE
LOW	report/assets/javascript/inc-active-align.js	106	function matchTechnologiesWidthToWebservers() {	CODE
LOW	report/assets/javascript/inc-active-align.js	191	function alignTechnologiesWithStatus() {	CODE
LOW	recon/import-subdomains.sh	1058	def rows_from_subdomain_objects(rows):	CODE
LOW	recon/active-tech.py	125	def normalize_tech_separators(value):	CODE
LOW	recon/active-tech.py	277	def whatweb_has_password_field(plugins) -> bool:	CODE
LOW	recon/active-tech.py	537	def strip_redundant_technology_labels(technologies, webserver):	CODE
LOW	recon/active-tech.py	559	def strip_noise_technology_labels(technologies):	CODE
LOW	recon/active-tech.py	594	def strip_runtime_when_product(technologies, extra: str = ""):	CODE
LOW	recon/active-tech.py	612	def strip_generic_when_specific(technologies):	CODE
LOW	recon/active-tech.py	652	def append_control_m_from_row(technologies, title: str = "", host: str = "") -> str:	CODE
LOW	recon/active-tech.py	665	def strip_redundant_webserver_tokens(webserver, technologies):	CODE
LOW	recon/active-tech.py	1160	def _load_software_cve_module():	CODE
LOW	recon/active-tech.py	1168	def enrich_software_rows_for_report(	CODE
LOW	recon/active-tech.py	1570	def is_generic_http_auth_title(title: str) -> bool:	CODE
LOW	recon/active-tech.py	1639	def is_microsoft_login_redirect(tech: dict \| None) -> bool:	CODE
LOW	recon/active-tech.py	1692	def citrix_gateway_uses_microsoft_sso(host: str, timeout: float = 12.0) -> bool:	CODE
LOW	recon/active-tech.py	2156	def is_software_version_label(label):	CODE
LOW	recon/active-tech.py	2250	def transom_finding_software_label(check_id, message):	CODE
LOW	recon/active-tech.py	2281	def transom_finding_sheet_line(check_id, message):	CODE
LOW	recon/active-tech.py	2323	def load_transom_software_by_host(report_dir):	CODE
LOW	recon/active-tech.py	2352	def merge_transom_software_labels(host_tech, report_dir):	CODE
LOW	recon/active-tech.py	2657	def write_subdomains_active_page(report_dir: str) -> dict:	CODE
LOW	recon/active-tech.py	2899	def _load_shodan_enrich_module():	CODE
LOW	recon/write_web_links.py	194	def prepare_client_subdomains(stage: Path) -> None:	CODE
LOW	recon/shodan-enrich.py	63	def _load_software_cve_module() -> Any \| None:	CODE
LOW	recon/shodan-enrich.py	404	def report_has_shodan_artifacts(report_dir: str) -> bool:	CODE
LOW	recon/import-operator-package.py	526	def count_operator_audit_lines(source: Path, operator: str) -> int:	CODE
LOW	recon/audit-build.py	98	def normalize_audit_display_ts(s: str) -> str:	CODE
LOW	recon/audit-build.py	183	def _extract_command_from_output_text(text: str) -> str:	CODE
LOW	recon/audit-build.py	310	def _duration_for_finished_scan(	CODE
LOW	recon/audit-build.py	438	def _is_finished_host_scan_action(action: str) -> bool:	CODE
LOW	recon/audit-build.py	450	def _audit_action_hides_operator_ip(action: str) -> bool:	CODE
LOW	recon/audit-build.py	536	def delete_audit_line_by_hash(report_root: Path, line_hash: str) -> dict:	CODE
LOW	recon/audit-build.py	611	def _newest_host_scan_tool_meta(tool_dir: Path) -> dict:	CODE
LOW	recon/audit-build.py	799	def _robots_disallow_has_dirs(list_disk: Path) -> bool:	CODE
LOW	recon/audit-build.py	817	def _host_scan_finding_url_count(json_disk: Path) -> int:	CODE
LOW	recon/audit-build.py	945	def build_host_scan_output_index(report_root: Path) -> dict[str, dict[str, dict]]:	CODE
LOW	recon/audit-build.py	1138	def _software_product_from_action(action: str) -> str:	CODE
LOW	recon/audit-build.py	1265	def _operator_performed_counts(	CODE
LOW	recon/audit-build.py	1551	def _metrics_range_select_html(selected: str) -> str:	CODE
LOW	recon/audit-build.py	1569	def _render_metrics_panel_body(metrics: dict) -> str:	CODE
LOW	recon/discover-config.py	287	def rewrite_audit_operator_name(report_root: Path, old_name: str, new_name: str) -> int:	CODE
LOW	recon/software-cve.py	358	def migrate_legacy_api_key_files() -> list[str]:	CODE
LOW	recon/software-cve.py	512	def _parse_nvd_vulnerabilities(payload: dict[str, Any]) -> list[dict[str, Any]]:	CODE
LOW	recon/software-cve.py	789	def download_cisa_kev_catalog(	CODE
LOW	recon/software-cve.py	992	def enrich_software_version_rows(	CODE
LOW	recon/software-cve.py	1211	def write_cve_software_index_js(cache_path: str) -> str:	CODE
LOW	recon/import-names-titles-emails.sh	393	def format_names_report_lines(contacts):	CODE

Deep Nesting58 hits · 48 pts

Severity	File	Line	Context
LOW	misc/host-scan-statusd.py	197	CODE
LOW	misc/host-scan-statusd.py	258	CODE
LOW	misc/host-scan-statusd.py	340	CODE
LOW	misc/op_notes.py	154	CODE
LOW	parsers/parse-burp.py	63	CODE
LOW	parsers/parse-burp.py	83	CODE
LOW	parsers/social.py	156	CODE
LOW	parsers/social.py	237	CODE
LOW	parsers/company.py	212	CODE
LOW	parsers/sec_people.py	256	CODE
LOW	parsers/sec_people.py	98	CODE
LOW	parsers/sec_common.py	60	CODE
LOW	parsers/parse-nexpose.py	65	CODE
LOW	parsers/parse-nipper.py	75	CODE
LOW	parsers/parse-nessus-feed.py	85	CODE
LOW	parsers/parse-nmap.py	76	CODE
LOW	notes/build.py	68	CODE
LOW	dev/lib/sensitive-scanner/engine.py	102	CODE
LOW	dev/lib/sensitive-scanner/engine.py	302	CODE
LOW	dev/lib/sensitive-scanner/filescan.py	189	CODE
LOW	dev/lib/sensitive-scanner/filescan.py	239	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	161	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	193	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	206	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	241	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	662	CODE
LOW	recon/active-tech.py	246	CODE
LOW	recon/active-tech.py	326	CODE
LOW	recon/active-tech.py	665	CODE
LOW	recon/active-tech.py	748	CODE
LOW	recon/active-tech.py	852	CODE
LOW	recon/active-tech.py	896	CODE
LOW	recon/active-tech.py	1841	CODE
LOW	recon/active-tech.py	2250	CODE
LOW	recon/active-tech.py	2352	CODE
LOW	recon/active-tech.py	2397	CODE
LOW	recon/write_web_links.py	42	CODE
LOW	recon/write_web_links.py	194	CODE
LOW	recon/shodan-enrich.py	97	CODE
LOW	recon/shodan-enrich.py	421	CODE
LOW	recon/shodan-enrich.py	559	CODE
LOW	recon/shodan-enrich.py	724	CODE
LOW	recon/import-operator-package.py	104	CODE
LOW	recon/audit-build.py	183	CODE
LOW	recon/audit-build.py	310	CODE
LOW	recon/audit-build.py	611	CODE
LOW	recon/audit-build.py	688	CODE
LOW	recon/audit-build.py	817	CODE
LOW	recon/audit-build.py	894	CODE
LOW	recon/audit-build.py	957	CODE
LOW	recon/audit-build.py	1303	CODE
LOW	recon/threat-feed.py	496	CODE
LOW	recon/threat-feed.py	650	CODE
LOW	recon/discover-config.py	579	CODE
LOW	recon/software-cve.py	338	CODE
LOW	recon/software-cve.py	446	CODE
LOW	recon/software-cve.py	992	CODE
LOW	recon/software-cve.py	1263	CODE

Decorative Section Separators8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	old/deploy/main.tf	16	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	old/deploy/main.tf	45	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	recon/import-subdomains.sh	760	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	recon/import-subdomains.sh	762	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	recon/import-subdomains.sh	992	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	recon/import-subdomains.sh	994	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	recon/active.sh	1352	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	recon/active.sh	1355	# ---------------------------------------------------------------------------	COMMENT

Unused Imports23 hits · 22 pts

Severity	File	Line	Context
LOW	misc/host-scan-statusd.py	42	CODE
LOW	misc/op_notes.py	16	CODE
LOW	parsers/social.py	4	CODE
LOW	parsers/company.py	4	CODE
LOW	parsers/sec_people.py	4	CODE
LOW	parsers/sec_common.py	4	CODE
LOW	notes/build.py	4	CODE
LOW	dev/lib/sensitive-scanner/engine.py	4	CODE
LOW	dev/lib/sensitive-scanner/filescan.py	4	CODE
LOW	dev/lib/waf-detect/wafw00f_run.py	4	CODE
LOW	dev/lib/web-api-scanner/msf_parse.py	4	CODE
LOW	dev/lib/web-api-scanner/msf_parse.py	9	CODE
LOW	dev/lib/open-redirect-scanner/engine.py	6	CODE
LOW	recon/write_web_links.py	12	CODE
LOW	recon/shodan-enrich.py	27	CODE
LOW	recon/import-operator-package.py	17	CODE
LOW	recon/touch-report-date.py	13	CODE
LOW	recon/audit-build.py	6	CODE
LOW	recon/threat-feed.py	15	CODE
LOW	recon/threat-feed.py	24	CODE
LOW	recon/threat-feed.py	32	CODE
LOW	recon/discover-config.py	20	CODE
LOW	recon/software-cve.py	18	CODE

Redundant / Tautological Comments12 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW	old/dns-reverse.sh	21	# Check if class is empty or invalid	COMMENT
LOW	old/dns-reverse.sh	37	# Check if the host command returns a valid PTR record	COMMENT
LOW	old/compare-sites.sh	112	# Check if selected versions are valid	COMMENT
LOW	old/rebrand.sh	39	# Check if index.htm exists	COMMENT
LOW	old/wtf.sh	97	# Check if the interface is in monitor	COMMENT
LOW	old/wtf.sh	131	# Check if the process is still running before trying to kill it	COMMENT
LOW	old/wtf.sh	138	# Check if the scan file exists	COMMENT
LOW	old/dns-transfer.sh	53	# Check if the DNS zone transfer is successful	COMMENT
LOW	dev/lib/container-scanner/k8s.sh	18	# Check if kubectl can connect to a cluster	COMMENT
LOW	dev/lib/container-scanner/docker.sh	33	# Check if there are any images	COMMENT
LOW	dev/lib/container-scanner/docker.sh	407	# Check if there are any containers	COMMENT
LOW	dev/lib/container-scanner/docker.sh	483	# Check if container is running in privileged mode	COMMENT

Over-Commented Block11 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW	discover.sh	1	#!/usr/bin/env bash	COMMENT
LOW	discover.sh	21	# Matt Banick - original development	COMMENT
LOW	misc/open-ffuf-tabs.sh	1	#!/usr/bin/env bash	COMMENT
LOW	misc/run-host-scan.sh	1	#!/usr/bin/env bash	COMMENT
LOW	misc/open-robots-tabs.sh	1	#!/usr/bin/env bash	COMMENT
LOW	misc/patch-droopescan-py314.sh	1	#!/usr/bin/env bash	COMMENT
LOW	parsers/parse-nessus-feed.py	1	#!/usr/bin/env python3	COMMENT
LOW	dev/cloud-scanner.sh	1	#!/usr/bin/env bash	COMMENT
LOW	dev/web-api-scanner.sh	1	#!/usr/bin/env bash	COMMENT
LOW	dev/container-scanner.sh	1	#!/usr/bin/env bash	COMMENT
LOW	resource/user-agent.txt	1	# Discover scanner User-Agent (Microsoft Edge on Windows).	COMMENT

Hallucination Indicators1 hit · 10 pts

Severity	File	Line	Snippet	Context
CRITICAL	report/assets/javascript/jquery.min.js	4	return b?(parseFloat(Sa(a,"marginLeft"))\|\|(n.contains(a.ownerDocument,a)?a.getBoundingClientRect().left-Pa(a,{marginLeft	CODE

Example Usage Blocks4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	misc/open-theharvester-keys.sh	9	# Usage:	COMMENT
LOW	misc/open-ffuf-tabs.sh	9	# Usage:	COMMENT
LOW	misc/open-nmap-web-tabs.sh	8	# Usage:	COMMENT
LOW	misc/open-robots-tabs.sh	9	# Usage:	COMMENT

Modern AI Meta-Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	dev/api-scanner.sh	551	# Scan orchestration	COMMENT
MEDIUM	dev/lib/web-api-scanner/probe.sh	1	# Technology fingerprinting and scan orchestration	COMMENT

Magic Placeholder Names1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	dev/lib/sensitive-scanner/run-tests.sh	31	grep -q 'your-api-key' "$OUT/hits.jsonl" && fail "denylist allows placeholder" \|\| pass "denylist filters placeholder"	CODE

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	dev/lib/container-scanner/k8s.sh	523	# Create comprehensive Kubernetes security summary	COMMENT

Modern Structural Boilerplate1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	misc/op_notes.py	289	def set_row_heights(worksheet: gspread.Worksheet, heights: dict[int, int]) -> None:	CODE

Fake / Example Data1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	dev/lib/sensitive-scanner/run-tests.sh	32	grep -q 'user@example.com' "$OUT/hits.jsonl" && fail "denylist allows example email" \|\| pass "denylist filters example e	CODE

leebaird/discover

Open-Source Code Quality, Security and Technical Debt Review