🤯 LobeHub is your Chief Agent Operator, organizing your agents into 7×24 operations by hiring, scheduling, and reporting on your entire AI team.
This report summarizes scanner evidence for lobehub/lobehub, a TypeScript project with 83,624 GitHub stars. SynthScan examined 3,797,847 lines of code across 20949 source files, recording 2269 pattern matches distributed across 23 syntactic categories. The legacy adjusted pattern signal is 1.3 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 1229 finding(s).
Are imports declared and package/API names verified? 246 finding(s).
Are wrappers, guards, and repeated structures necessary? 1133 finding(s).
Which changes need focused human review? 2269 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2269 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .agents/acceptance/scripts/electron-dev.sh | 113 | # ── Helpers ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/acceptance/scripts/electron-dev.sh | 208 | # ── Login state ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/acceptance/scripts/electron-dev.sh | 362 | # ── Commands ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/acceptance/scripts/electron-dev.sh | 597 | # ── Main ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/acceptance/scripts/record-electron-demo.sh | 34 | # ── Helpers ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/acceptance/scripts/record-electron-demo.sh | 181 | # ── Built-in demo: Queue Edit ──────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/acceptance/scripts/record-electron-demo.sh | 313 | # ── Main ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nts/acceptance/scripts/agent-gateway/analyze-events.ts | 43 | // ── META ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nts/acceptance/scripts/agent-gateway/analyze-events.ts | 49 | // ── 1. STREAM EVENTS (non-chunk) ─────────────────────────────────── | COMMENT |
| MEDIUM | …nts/acceptance/scripts/agent-gateway/analyze-events.ts | 72 | // ── 2. CHUNK SUMMARY ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nts/acceptance/scripts/agent-gateway/analyze-events.ts | 91 | // ── 3. ACTION CALLS ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nts/acceptance/scripts/agent-gateway/analyze-events.ts | 121 | // ── 4. CORRELATION ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nts/acceptance/scripts/agent-gateway/analyze-events.ts | 153 | // ── 5. PER-KEY ASSISTANT GROWTH ─────────────────────────────────── | COMMENT |
| MEDIUM | …nts/acceptance/scripts/agent-gateway/analyze-events.ts | 181 | // ── 6. ROLLBACKS (active-topic msgN / childN / role drops) ───────── | COMMENT |
| MEDIUM | …gents/acceptance/scripts/agent-gateway/probe-events.ts | 35 | // ── Buffers ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …gents/acceptance/scripts/agent-gateway/probe-events.ts | 64 | // ── Helpers ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …gents/acceptance/scripts/agent-gateway/probe-events.ts | 149 | // ── 1. Patch window.WebSocket for gateway WS events ──────────────── | COMMENT |
| MEDIUM | …gents/acceptance/scripts/agent-gateway/probe-events.ts | 563 | // ── 4. Periodic per-key timeline snapshots ───────────────────────── | COMMENT |
| MEDIUM | …gents/acceptance/scripts/agent-gateway/probe-events.ts | 605 | // ── 5. Tab-switch helpers ────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/acceptance/scripts/agent-gateway/run.ts | 131 | // ── Commands ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/acceptance/scripts/agent-gateway/run.ts | 184 | // ── Entry point ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 40 | # ── Output helpers ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 45 | # ── BlueBubbles REST helpers ───────────────────────────────────────── | COMMENT |
| MEDIUM | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 85 | # ── Preflight ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 112 | # ── testConfig: happy path ─────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 119 | # ── testConfig: wrong password rejects ─────────────────────────────── | COMMENT |
| MEDIUM⚡ | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 126 | # ── testConfig: unreachable URL rejects ────────────────────────────── | COMMENT |
| MEDIUM⚡ | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 143 | # ── getStatus: bridge running + config persisted ───────────────────── | COMMENT |
| MEDIUM⚡ | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 151 | # ── BlueBubbles webhook actually registered ────────────────────────── | COMMENT |
| MEDIUM⚡ | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 158 | # ── Local bridge HTTP server: secret enforcement ───────────────────── | COMMENT |
| MEDIUM | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 179 | # ── Cleanup ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 184 | # ── Summary ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/cleanup-git-worktrees/scripts/cleanup.sh | 114 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .agents/skills/cleanup-git-worktrees/scripts/cleanup.sh | 117 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/prompts/e2e-coverage.md | 142 | # ============================================ | COMMENT |
| MEDIUM | .claude/prompts/e2e-coverage.md | 144 | # ============================================ | COMMENT |
| MEDIUM | scripts/create-test-tasks.js | 17 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM | scripts/create-test-tasks.js | 19 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 106 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 108 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 117 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 119 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 129 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 131 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 140 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 142 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 166 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 168 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 177 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | scripts/create-test-tasks.js | 179 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM | scripts/create-test-tasks.js | 201 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM | scripts/create-test-tasks.js | 203 | // ════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/database/src/types/agentQuota.ts | 1 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/database/src/types/agentQuota.ts | 3 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/database/src/models/connector.ts | 520 | // ── Private helpers ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/database/src/models/metric.ts | 75 | // ── Series ────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/database/src/models/metric.ts | 207 | // ── Points ────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/database/src/models/trash.ts | 228 | // ─────────────────────────── writes ─────────────────────────── | COMMENT |
| MEDIUM | packages/database/src/models/trash.ts | 426 | // ─────────────────────────── reads ─────────────────────────── | COMMENT |
| MEDIUM | packages/database/src/models/trash.ts | 539 | // ─────────────────────────── sweep (global, not user-scoped) ─────────────────────────── | COMMENT |
| 724 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | packages/database/src/models/agent/index.ts | 149 | const agent = await this.ctx.db.query.agents.findFirst({ | CODE |
| CRITICAL | packages/database/src/models/agent/index.ts | 165 | (await this.ctx.db.query.agents.findFirst({ | CODE |
| CRITICAL | packages/database/src/models/agent/index.ts | 168 | (await this.ctx.db.query.agents.findFirst({ | CODE |
| CRITICAL | packages/database/src/models/agent/index.ts | 194 | const documentsData = await this.ctx.db.query.documents.findMany({ | CODE |
| CRITICAL | packages/database/src/models/agent/index.ts | 226 | const item = await this.ctx.db.query.agentsToSessions.findFirst({ | CODE |
| CRITICAL | packages/database/src/models/agent/index.ts | 269 | const agent = await this.ctx.db.query.agents.findFirst({ | CODE |
| CRITICAL | packages/agent-runtime/src/core/runtime.ts | 965 | result.newState.usage.tools.byTool.forEach((toolStats) => { | CODE |
| CRITICAL | packages/agent-runtime/src/core/runtime.ts | 983 | result.newState.cost.tools.byTool.forEach((toolCost) => { | CODE |
| CRITICAL | …kages/agent-runtime/src/core/__tests__/runtime.test.ts | 2434 | const analyticsTool = result.newState.usage.tools.byTool.find( | CODE |
| CRITICAL | …kages/agent-runtime/src/core/__tests__/runtime.test.ts | 2437 | const loggingTool = result.newState.usage.tools.byTool.find((t) => t.name === 'logging_tool'); | CODE |
| CRITICAL | …esktop/src/main/core/browser/__tests__/Browser.test.ts | 254 | const handler = mockBrowserWindow.webContents.on.mock.calls.find( | CODE |
| CRITICAL | …esktop/src/main/core/browser/__tests__/Browser.test.ts | 270 | const handler = mockBrowserWindow.webContents.on.mock.calls.find( | CODE |
| CRITICAL | …esktop/src/main/core/browser/__tests__/Browser.test.ts | 338 | loadingScreenPainted: mockBrowserWindow.webContents.ipc.once.mock.calls.findLast( | CODE |
| CRITICAL | …esktop/src/main/core/browser/__tests__/Browser.test.ts | 928 | willPreventUnloadHandler = mockBrowserWindow.webContents.on.mock.calls.find( | CODE |
| CRITICAL | …esktop/src/main/core/browser/__tests__/Browser.test.ts | 984 | const loadingHandler = mockBrowserWindow.webContents.on.mock.calls.find( | CODE |
| CRITICAL | …esktop/src/main/core/browser/__tests__/Browser.test.ts | 994 | mockBrowserWindow.webContents.send.mock.calls.filter( | CODE |
| CRITICAL | …esktop/src/main/core/browser/__tests__/Browser.test.ts | 1064 | const loadingHandler = mockBrowserWindow.webContents.on.mock.calls.find( | CODE |
| CRITICAL | …esktop/src/main/core/browser/__tests__/Browser.test.ts | 1098 | willNavigateHandler = mockBrowserWindow.webContents.on.mock.calls.find( | CODE |
| CRITICAL | …esktop/src/main/core/browser/__tests__/Browser.test.ts | 1132 | windowOpenHandler = mockBrowserWindow.webContents.setWindowOpenHandler.mock.calls.at(-1)?.[0]; | CODE |
| CRITICAL | …/__tests__/CoreUpdateManager.appliedNotice.int.test.ts | 69 | app.browserManager.broadcastToAllWindows.mock.calls.filter( | CODE |
| CRITICAL | …ucture/coreOta/__tests__/CoreUpdateManager.int.test.ts | 934 | const focus = electronMock.app.on.mock.calls.find( | CODE |
| CRITICAL | …ucture/coreOta/__tests__/CoreUpdateManager.int.test.ts | 937 | const blur = electronMock.app.on.mock.calls.find( | CODE |
| CRITICAL | …ain/core/infrastructure/coreOta/__tests__/testUtils.ts | 178 | const renderer = app.rendererUrlManager.setActiveRenderer.mock.calls.at(-1)?.[0]; | CODE |
| CRITICAL | …desktop/src/main/controllers/__tests__/AuthCtr.test.ts | 724 | const successCall = mockWindow.webContents.send.mock.calls.find( | CODE |
| CRITICAL | …odules/AgentRuntime/__tests__/RuntimeExecutors.test.ts | 4937 | const searchTool = result.newState.usage.tools.byTool.find( | CODE |
| CRITICAL | …odules/AgentRuntime/__tests__/RuntimeExecutors.test.ts | 4940 | const crawlTool = result.newState.usage.tools.byTool.find( | CODE |
| CRITICAL | …erver/src/services/understanding/service/index.test.ts | 507 | expect(harness.sourceStore.get.mock.invocationCallOrder.at(-1)).toBeLessThan( | CODE |
| CRITICAL | apps/server/src/services/ftsSearchSync/service.test.ts | 461 | harness.client.bulk.mock.calls.flatMap((_, call) => bulkActions(harness.client, call)), | CODE |
| CRITICAL | apps/server/src/services/ftsSearchSync/service.test.ts | 504 | harness.client.bulk.mock.calls.map(([body]) => Buffer.byteLength(body as string)), | CODE |
| CRITICAL | apps/server/src/services/ftsSearchSync/service.test.ts | 507 | harness.client.bulk.mock.calls.every(([body]) => Buffer.byteLength(body as string) <= 300), | CODE |
| CRITICAL | …/services/agentRuntime/__tests__/clientLlmWait.test.ts | 301 | const noticeWrites = t.messageModel.update.mock.calls.filter( | CODE |
| CRITICAL | …/services/agentRuntime/__tests__/clientLlmWait.test.ts | 919 | const writes = t.messageModel.update.mock.calls.filter( | CODE |
| CRITICAL | …/services/agentRuntime/__tests__/clientLlmWait.test.ts | 944 | rowWritesAtEnd = t.messageModel.update.mock.calls.filter( | CODE |
| CRITICAL | …rogeneousPersistenceHandler/index.replicaState.test.ts | 245 | const usageWrite = h.messageModel.update.mock.calls.find( | CODE |
| CRITICAL | …rogeneousPersistenceHandler/index.replicaState.test.ts | 326 | const seedUsageWrite = h.messageModel.update.mock.calls.find( | CODE |
| CRITICAL | …rogeneousPersistenceHandler/index.replicaState.test.ts | 394 | const subUsageWrite = h.messageModel.update.mock.calls.find( | CODE |
| CRITICAL | …ogeneousPersistenceHandler/index.eventBranches.test.ts | 81 | const newAssistantCall = h.messageModel.create.mock.calls.find( | CODE |
| CRITICAL | …ogeneousPersistenceHandler/index.eventBranches.test.ts | 281 | const stateWrites = h.messageModel.updateToolMessage.mock.calls.filter( | CODE |
| CRITICAL | apps/cli/src/commands/artifact.test.ts | 43 | mockTrpcClient.market.deployments.prepareWorkspaceHtmlUpload.mutate.mockReset(); | CODE |
| CRITICAL | apps/cli/src/commands/artifact.test.ts | 64 | mockTrpcClient.market.deployments.prepareWorkspaceHtmlUpload.mutate.mockResolvedValue({ | CODE |
| CRITICAL | apps/cli/src/commands/artifact.test.ts | 238 | mockTrpcClient.market.deployments.prepareWorkspaceHtmlUpload.mutate.mockRejectedValueOnce( | CODE |
| CRITICAL | apps/cli/src/commands/artifact.test.ts | 251 | mockTrpcClient.market.deployments.prepareWorkspaceHtmlUpload.mutate.mockRejectedValueOnce( | CODE |
| CRITICAL | apps/cli/src/commands/topic/send.test.ts | 109 | const [first, second] = client.agentSteerQueue.append.mutate.mock.calls.map(([input]) => input); | CODE |
| CRITICAL | apps/cli/src/commands/migrate/openclaw.test.ts | 265 | const filenames = mockTrpcClient.agentDocument.upsertDocument.mutate.mock.calls.map( | CODE |
| CRITICAL | apps/cli/src/commands/acceptance/run/ingest.test.ts | 110 | const ingested = verify.ingestResult.mutate.mock.calls.map( | CODE |
| CRITICAL | apps/cli/src/commands/acceptance/run/index.test.ts | 558 | client.verify.ingestResult.mutate.mock.calls.map(([input]) => input.checkItemId), | CODE |
| CRITICAL | apps/cli/src/commands/acceptance/run/index.test.ts | 740 | expect(client.verify.uploadEvidence.mutate.mock.calls.at(-1)![0]).toMatchObject({ | CODE |
| CRITICAL | apps/cli/src/commands/acceptance/run/testUtils.ts | 106 | const finalCheck = () => client.verify.ingestResult.mutate.mock.calls.at(-1)![0]; | CODE |
| CRITICAL | apps/cli/src/commands/acceptance/run/testUtils.ts | 107 | const finalReport = () => client.verify.upsertReport.mutate.mock.calls.at(-1)![0]; | CODE |
| CRITICAL | …nts/__tests__/clientRuntimeExecutors/call-tool.test.ts | 1290 | const toolUsage = result.newState.usage.tools.byTool.find( | CODE |
| CRITICAL | …nts/__tests__/clientRuntimeExecutors/call-tool.test.ts | 1320 | const toolUsage = result.newState.usage.tools.byTool.find( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | alint.config.toml | 1 | # alint: model-backed rules that eslint cannot express. | COMMENT |
| LOW | alint.audit.toml | 1 | # alint: model-backed rules that eslint cannot express. | COMMENT |
| LOW | plugins/vite/sharedRendererConfig.ts | 401 | test?: RegExp | ((id: string) => boolean); | COMMENT |
| LOW | .agents/acceptance/references/agent-gateway.md | 41 | # too, and another session may already own it. Check first, and take your own | COMMENT |
| LOW | .agents/acceptance/scripts/electron-dev.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/acceptance/scripts/electron-dev.sh | 21 | # userData = $POOL_DIR/ud-<id> (login state seeded from the saved snapshot) | COMMENT |
| LOW | .agents/acceptance/scripts/electron-dev.sh | 41 | # CDP_BASE — pool CDP base (default: 9222 → instance id adds on top) | COMMENT |
| LOW | .agents/acceptance/scripts/init-dev-env.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/acceptance/scripts/init-dev-env.sh | 21 | # init-dev-env.sh s3 # run local s3rver object storage | COMMENT |
| LOW | .agents/acceptance/scripts/record-electron-demo.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/acceptance/scripts/acceptance-guard.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/acceptance/scripts/acceptance-guard.sh | 21 | # by this tag or by an explicit claim, so it has to be | COMMENT |
| LOW | .agents/acceptance/scripts/setup-auth.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/acceptance/scripts/record-gif.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/acceptance/scripts/record-app-screen.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/acceptance/scripts/record-app-screen.sh | 21 | # - ffmpeg installed (bun add -g ffmpeg-static, or brew install ffmpeg) | COMMENT |
| LOW | .agents/acceptance/scripts/app-probe.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/acceptance/scripts/capture-app-window.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/acceptance/scripts/report-init.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/acceptance/scripts/report-init.sh | 101 | COMMENT | |
| LOW | …cceptance/scripts/agent-gateway/local-gateway-setup.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …nts/acceptance/scripts/agent-gateway/analyze-events.ts | 1 | // Analyzer for probe-events dumps. Reads a JSON file produced by `run.ts dump` | COMMENT |
| LOW | .agents/acceptance/scripts/agent-gateway/tab-switch.js | 1 | // Run N round-trip tab switches with event markers timed against the probe. | COMMENT |
| LOW | …gents/acceptance/scripts/agent-gateway/probe-events.ts | 1 | // LobeHub gateway raw-event-stream probe. | COMMENT |
| LOW | .agents/acceptance/scripts/agent-gateway/run.ts | 1 | // CLI for the agent-gateway probe. | COMMENT |
| LOW | .agents/acceptance/scripts/agent-gateway/probe.js | 1 | // LobeHub chat streaming time-series probe. | COMMENT |
| LOW | …s/skills/agent-testing-bot/discord/test-discord-bot.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/agent-testing-bot/lark/test-lark-bot.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …nts/skills/agent-testing-bot/wechat/test-wechat-bot.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …skills/agent-testing-bot/telegram/test-telegram-bot.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …gents/skills/agent-testing-bot/slack/test-slack-bot.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …kills/agent-testing-bot/imessage/send-imessage-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/agent-testing-bot/qq/test-qq-bot.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/acceptance/scripts/resource-guard.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/acceptance/scripts/resource-guard.sh | 21 | # --yellow SPEC yellow-tier thresholds (default swap=70,free=25) | COMMENT |
| LOW | …ed-tool-ui/src/AskUserQuestion/AskUserQuestionView.tsx | 141 | COMMENT | |
| LOW | packages/database/src/repositories/home/index.ts | 161 | // in processAgentList so the list can render tags / group by label. | COMMENT |
| LOW | …kages/database/src/repositories/agentDeletion/index.ts | 41 | COMMENT | |
| LOW | …s/database/src/repositories/dataExporter/index.test.ts | 221 | // expect(result.globalFiles[0]).toHaveProperty('hashId', testIds.fileHash); | COMMENT |
| LOW | …ckages/database/src/repositories/dataExporter/index.ts | 61 | // { table: 'agentsKnowledgeBases' }, | COMMENT |
| LOW | …kages/database/src/repositories/agentTransfer/index.ts | 101 | // Step 14 below drops every chat-group link the moved agents hold, which | COMMENT |
| LOW | …kages/database/src/repositories/agentTransfer/index.ts | 281 | .where(topicCondition!) | COMMENT |
| LOW | …ckages/database/src/repositories/dataImporter/index.ts | 221 | sourceTable: 'chunks', | COMMENT |
| LOW | …ckages/database/src/repositories/dataImporter/index.ts | 241 | preserveId: true, // Uses message ID as primary key | COMMENT |
| LOW | …kages/database/src/repositories/agentGroup/transfer.ts | 161 | // A share row keeps the agent bound to its current owner and workspace, | COMMENT |
| LOW | …kages/database/src/repositories/agentGroup/transfer.ts | 181 | // Refuse rather than clone a redacted shell: a member that answers with | COMMENT |
| LOW | …kages/database/src/repositories/agentGroup/transfer.ts | 441 | // to the same rows it rewrites, topic by topic. | COMMENT |
| LOW | packages/database/src/repositories/agentGroup/index.ts | 481 | // 3. Delete virtual agents if requested | COMMENT |
| LOW | packages/database/src/models/document.ts | 541 | // page's title to every member, and the page behind it refuses to open. | COMMENT |
| LOW | packages/database/src/models/device.ts | 201 | // `devices.visibility`. | COMMENT |
| LOW | packages/database/src/models/agentOperation.ts | 1021 | // ============================================ | COMMENT |
| LOW | …ase/src/models/agentDocuments/agentDocument/context.ts | 21 | * Workspace-aware ownership predicate for the `agent_documents` binding table. | COMMENT |
| LOW | …/database/src/models/userMemory/model/queryMemories.ts | 121 | const candidateIds = candidateResult?.candidates.map(({ id }) => id); | COMMENT |
| LOW | packages/database/src/models/message/spine.ts | 101 | eq(messages.topicId, topicId), | COMMENT |
| LOW | packages/database/src/models/message/plugin.ts | 281 | const withinWindow = and( | COMMENT |
| LOW | packages/database/src/models/message/plugin.ts | 301 | // single-table and the fetch is a pure PK access. | COMMENT |
| LOW | packages/database/src/models/message/cursorWindow.ts | 281 | // by the same `[lowerBound, cursor)` window as mainline rows, so each group is | COMMENT |
| LOW | packages/database/src/models/message/queryWithWhere.ts | 181 | // Restore ascending (createdAt, id) order so downstream assembly — the | COMMENT |
| LOW | packages/database/src/models/agent/knowledge.ts | 1 | import { and, desc, eq, inArray } from 'drizzle-orm'; | COMMENT |
| 404 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/vite/stylexDevCss.ts | 72 | export function stylexProxiedDevCssPlugin(): Plugin { | CODE |
| LOW | plugins/vite/markdownImport.ts | 15 | function matchesMarkdownImportQuery(id: string) { | CODE |
| LOW | .agents/acceptance/scripts/agent-gateway/run.ts | 95 | function unquoteAgentBrowserResult(raw: string): string { | CODE |
| LOW | .agents/skills/run-eval-harbor/scripts/lh/agent.py | 88 | def populate_context_post_run(self, context: AgentContext) -> None: | CODE |
| LOW | .agents/skills/run-eval-harbor/scripts/lh/pier_agent.py | 114 | def populate_context_post_run(self, context: AgentContext) -> None: | CODE |
| LOW | scripts/releaseWorkflow/index.ts | 58 | async function selectVersionTypeInteractive(): Promise<VersionType> { | CODE |
| LOW | scripts/_shared/checkGatewayConfig.js | 76 | function collectGatewayConfigIssues(env = process.env) { | CODE |
| LOW | scripts/clerk-to-betterauth/verify.ts | 105 | async function loadActualTwoFactorUserIds() { | CODE |
| LOW | scripts/i18nWorkflow/cleanUnusedKeys.ts | 241 | function generateTypeScriptContent(obj: any): string { | CODE |
| LOW⚡ | packages/database/src/utils/inboxAgent.ts | 31 | export function normalizeInboxAgentAvatar( | CODE |
| LOW⚡ | packages/database/src/utils/inboxAgent.ts | 35 | export function normalizeInboxAgentAvatar( | CODE |
| LOW⚡ | packages/database/src/utils/inboxAgent.ts | 39 | export function normalizeInboxAgentAvatar( | CODE |
| LOW | …atabase/src/repositories/ftsSearch/postgres/context.ts | 72 | export function createPostgresFtsSearchContext( | CODE |
| LOW | …abase/src/repositories/ftsSearch/postgres/documents.ts | 215 | export async function searchKnowledgeBaseDocuments( | CODE |
| LOW | packages/database/src/models/pushToken.ts | 183 | export async function deletePushTokensByExpoTokens( | CODE |
| LOW | packages/database/src/models/pushToken.ts | 198 | export async function deletePushTokenByExpoTokenAndDevice( | CODE |
| LOW | …e/src/models/agentDocuments/agentDocument/lifecycle.ts | 35 | export async function deleteSubtreeByDocumentId( | CODE |
| LOW | …e/src/models/agentDocuments/agentDocument/lifecycle.ts | 98 | export async function restoreSubtreeByDocumentId( | CODE |
| LOW | …abase/src/models/agentDocuments/agentDocument/edits.ts | 44 | export async function updateEditorSnapshotIfUnchanged( | CODE |
| LOW | …abase/src/models/agentDocuments/agentDocument/edits.ts | 87 | export function buildBindingSettingsUpdate( | CODE |
| LOW | …abase/src/models/agentDocuments/agentDocument/edits.ts | 129 | export function buildBackingDocumentUpdate( | CODE |
| LOW | …se/src/models/agentDocuments/agentDocument/creation.ts | 274 | export async function updateBackingDocumentAsSkillIndex( | CODE |
| LOW | …/database/src/models/userMemory/query/searchFilters.ts | 50 | export function collectCandidateMemoryIds(item: { | CODE |
| LOW | …/database/src/models/userMemory/query/searchFilters.ts | 146 | export function buildExactTagFilterCondition( | CODE |
| LOW | …kages/database/src/models/userMemory/query/taxonomy.ts | 267 | export async function aggregateBaseMemoryOptions( | CODE |
| LOW | …kages/database/src/models/userMemory/query/taxonomy.ts | 310 | export async function aggregateBaseArrayOptions( | CODE |
| LOW | …kages/database/src/models/userMemory/query/taxonomy.ts | 364 | export async function aggregateLayerArrayValues( | CODE |
| LOW | …kages/database/src/models/userMemory/query/taxonomy.ts | 431 | export async function aggregateTypedLayerValues( | CODE |
| LOW | …kages/database/src/models/userMemory/query/taxonomy.ts | 477 | export async function aggregateScalarLayerValues( | CODE |
| LOW | …kages/database/src/models/userMemory/query/taxonomy.ts | 627 | export async function aggregateIdentityValueOptions( | CODE |
| LOW | …kages/database/src/models/userMemory/query/semantic.ts | 192 | export async function searchExperiencesSemantic( | CODE |
| LOW | …kages/database/src/models/userMemory/query/semantic.ts | 242 | export async function searchPreferencesSemantic( | CODE |
| LOW | packages/database/src/models/topic/scheduledRun.ts | 224 | export async function repointScheduledRunFailedMessage( | CODE |
| LOW | …ges/database/src/models/__tests__/userMemories.test.ts | 77 | function generateRandomCreateUserMemoryParams( | CODE |
| LOW | …ges/database/src/models/__tests__/userMemories.test.ts | 91 | function generateRandomCreateUserMemoryExperienceParams() { | CODE |
| LOW | …ges/database/src/models/__tests__/userMemories.test.ts | 112 | function generateRandomCreateUserMemoryIdentityParams() { | CODE |
| LOW | …ges/database/src/models/__tests__/userMemories.test.ts | 131 | function generateRandomCreateUserMemoryContextParams() { | CODE |
| LOW | …ges/database/src/models/__tests__/userMemories.test.ts | 153 | function generateRandomCreateUserMemoryPreferenceParams() { | CODE |
| LOW | packages/chat-adapter-imessage/src/adapter.ts | 65 | export function extractAttachmentMetadata(message: BlueBubblesMessage): Attachment[] { | CODE |
| LOW | packages/types/src/agentHookResponse.ts | 17 | export function parseToolCallHookResponse(body: string): ToolCallHookParseResult { | CODE |
| LOW | packages/types/src/agentHookResponse.ts | 45 | export function resolveToolCallHookErrorPolicy( | CODE |
| LOW | packages/connector-data/src/github/client.ts | 80 | export function createGitHubConnectorClient({ | CODE |
| LOW | …/model-runtime/src/core/contextBuilders/huggingface.ts | 9 | export function convertOpenAIMessagesToHFFormat(messages: OpenAIChatMessage[]): Array<{ | CODE |
| LOW | packages/model-runtime/src/core/streams/spark.ts | 20 | export function transformSparkResponseToStream(data: OpenAI.ChatCompletion) { | CODE |
| LOW | packages/model-runtime/src/core/streams/protocol.ts | 443 | export function createCallbacksTransformer( | CODE |
| LOW | …ime/src/core/usageConverters/utils/estimateChatCost.ts | 132 | export function estimateOpenAIChatInputTokens( | CODE |
| LOW | …ime/src/core/usageConverters/utils/estimateChatCost.ts | 209 | export function estimateChatCostFromTokens( | CODE |
| LOW | …ime/src/core/usageConverters/utils/estimateChatCost.ts | 264 | export function estimateChatCostFromMessages( | CODE |
| LOW | …untime/src/core/openaiCompatibleFactory/createVideo.ts | 41 | export async function queryOpenAICompatibleVideoStatus( | CODE |
| LOW | …untime/src/core/openaiCompatibleFactory/createVideo.ts | 72 | export async function pollOpenAICompatibleVideoStatus( | CODE |
| LOW | …untime/src/core/openaiCompatibleFactory/createVideo.ts | 126 | export async function createOpenAICompatibleVideo( | CODE |
| LOW | …untime/src/core/openaiCompatibleFactory/createImage.ts | 264 | export async function createOpenAICompatibleImage( | CODE |
| LOW | …ages/model-runtime/src/providers/google/createVideo.ts | 304 | async function pollGoogleOmniInteraction(client: GoogleGenAI, inferenceId: string, apiKey: string) { | CODE |
| LOW | …ckages/model-runtime/src/providers/cloudflare/index.ts | 42 | function extractProviderErrorMessage(err: unknown): string | undefined { | CODE |
| LOW | …providers/volcengine/video/handleCreateVideoWebhook.ts | 28 | export async function handleVolcengineVideoWebhook( | CODE |
| LOW | …ckages/model-runtime/src/providers/qwen/createImage.ts | 54 | function extractImageUrlFromTaskResult(taskStatus: QwenImageTaskResponse): string | undefined { | CODE |
| LOW | …ckages/model-runtime/src/providers/qwen/createImage.ts | 69 | async function createLegacySynthesisTask( | CODE |
| LOW | …ckages/model-runtime/src/providers/qwen/createImage.ts | 145 | async function createHTTPAsyncGenerationTask( | CODE |
| LOW | …odel-runtime/src/providers/siliconcloud/createVideo.ts | 30 | export async function querySiliconCloudVideoStatus( | CODE |
| LOW | …odel-runtime/src/providers/siliconcloud/createVideo.ts | 61 | export async function pollSiliconCloudVideoStatus( | CODE |
| 277 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/desktop/references/local-tools.md | 12 | ## Step 1: Define Tool Interface (Manifest) | COMMENT |
| LOW | .agents/skills/desktop/references/local-tools.md | 41 | ## Step 2: Define Types | COMMENT |
| LOW | .agents/skills/desktop/references/local-tools.md | 59 | ## Step 3: Implement Store Action | COMMENT |
| LOW | .agents/skills/desktop/references/local-tools.md | 90 | ## Step 4: Implement Service Layer | COMMENT |
| LOW | .agents/skills/desktop/references/local-tools.md | 103 | ## Step 5: Implement Controller | COMMENT |
| LOW | .agents/skills/desktop/references/local-tools.md | 129 | ## Step 6: Update Agent Documentation | COMMENT |
| LOW | .agents/skills/db-migrations/SKILL.md | 160 | ## Step 1: Generate Migrations | COMMENT |
| LOW | .agents/skills/db-migrations/SKILL.md | 196 | ## Step 2: Optimize Migration SQL Filename | COMMENT |
| LOW | .agents/skills/db-migrations/SKILL.md | 202 | ## Step 3: Use Idempotent Clauses (Defensive Programming) | COMMENT |
| LOW | .agents/skills/db-migrations/SKILL.md | 259 | ## Step 4: Update Journal Tag | COMMENT |
| LOW⚡ | .claude/prompts/pr-assign.md | 7 | ### Step 1: Get PR Details and Changed Files | COMMENT |
| LOW⚡ | .claude/prompts/pr-assign.md | 13 | ### Step 2: Map Changed Files to Feature Areas | COMMENT |
| LOW⚡ | .claude/prompts/pr-assign.md | 23 | ### Step 3: Check Related Issues | COMMENT |
| LOW⚡ | .claude/prompts/pr-assign.md | 33 | ### Step 4: Determine Reviewer(s) | COMMENT |
| LOW⚡ | .claude/prompts/pr-assign.md | 43 | ### Step 5: Post Comment | COMMENT |
| LOW | .claude/prompts/migration-support.md | 21 | ## Step 1: Check for Sensitive Information Leaks | COMMENT |
| LOW | .claude/prompts/migration-support.md | 48 | ## Step 2: Handle Success Feedback | COMMENT |
| LOW | .claude/prompts/migration-support.md | 60 | ## Step 3: Check Required Information | COMMENT |
| LOW | .claude/prompts/migration-support.md | 70 | ## Step 4: Common Issues and Solutions | COMMENT |
| LOW | scripts/mobileSpaWorkflow/index.ts | 35 | // Step 1: Build mobile SPA with CDN base | COMMENT |
| LOW | scripts/mobileSpaWorkflow/index.ts | 52 | // Step 2: Upload assets to S3 | COMMENT |
| LOW | scripts/mobileSpaWorkflow/index.ts | 64 | // Step 3: Generate mobile HTML template source file | COMMENT |
| LOW | scripts/docsWorkflow/utils.ts | 86 | // Step 1: Fetch the image | COMMENT |
| LOW | scripts/docsWorkflow/utils.ts | 101 | // Step 2: Create a blob from the response data | COMMENT |
| LOW | scripts/docsWorkflow/utils.ts | 116 | // Step 3: Create a file from the blob | COMMENT |
| LOW⚡ | scripts/cdnWorkflow/utils.ts | 64 | // Step 1: Fetch the image | COMMENT |
| LOW⚡ | scripts/cdnWorkflow/utils.ts | 70 | // Step 2: Create a blob from the response data | COMMENT |
| LOW | scripts/cdnWorkflow/utils.ts | 84 | // Step 3: Create a file from the blob | COMMENT |
| LOW⚡ | scripts/i18nWorkflow/analyzeUnusedKeys.ts | 486 | // Step 1: Load all defined keys | COMMENT |
| LOW⚡ | scripts/i18nWorkflow/analyzeUnusedKeys.ts | 492 | // Step 2: Find all translation calls | COMMENT |
| LOW⚡ | scripts/i18nWorkflow/analyzeUnusedKeys.ts | 497 | // Step 3: Find unused keys | COMMENT |
| LOW⚡ | scripts/i18nWorkflow/analyzeUnusedKeys.ts | 502 | // Step 4: Generate report | COMMENT |
| LOW | …w/src/transformation/__tests__/FlatListBuilder.test.ts | 1106 | // Step 0: assistant with Monitor tool | COMMENT |
| LOW | packages/model-runtime/docs/test-coverage.md | 335 | #### Step 0: Use Subagents for Parallel Execution (Recommended) | COMMENT |
| LOW | packages/model-runtime/docs/test-coverage.md | 379 | #### Step 1: Development and Testing | COMMENT |
| LOW | packages/model-runtime/docs/test-coverage.md | 387 | #### Step 2: Type and Lint Checks | COMMENT |
| LOW | packages/model-runtime/docs/test-coverage.md | 411 | #### Step 3: Run Coverage Report | COMMENT |
| LOW | packages/model-runtime/docs/test-coverage.md | 418 | #### Step 4: Summarize Development Work | COMMENT |
| LOW | packages/model-runtime/docs/test-coverage.md | 448 | #### Step 5: Update This Document | COMMENT |
| LOW | packages/model-runtime/docs/test-coverage.md | 471 | #### Step 6: Final Verification | COMMENT |
| LOW⚡ | …es/model-runtime/src/utils/getFallbackModelProperty.ts | 39 | // Step 1: If providerId is provided, prioritize an exact match (same provider + same id) | COMMENT |
| LOW⚡ | …es/model-runtime/src/utils/getFallbackModelProperty.ts | 48 | // Step 2: Fallback to a match ignoring the provider (match id only) | COMMENT |
| LOW⚡ | …es/model-runtime/src/utils/getFallbackModelProperty.ts | 55 | // Step 3: Return a default value | COMMENT |
| LOW⚡ | packages/eval-rubric/src/evaluate.ts | 75 | // Step 1: Extract answer if extractor is configured | COMMENT |
| LOW⚡ | packages/eval-rubric/src/evaluate.ts | 79 | // Step 2: Resolve expected value | COMMENT |
| LOW⚡ | packages/eval-rubric/src/evaluate.ts | 82 | // Step 3: Handle multi-candidate (JSON array string in expected) | COMMENT |
| LOW | packages/chat-adapter-wechat/src/api.ts | 235 | // Step 1: request upload_param | COMMENT |
| LOW⚡ | packages/chat-adapter-wechat/src/api.test.ts | 284 | // Step 1: getuploadurl response | COMMENT |
| LOW⚡ | packages/chat-adapter-wechat/src/api.test.ts | 286 | // Step 2: CDN upload — returns x-encrypted-param header | COMMENT |
| LOW | …-agents/src/adapters/claudeCode.externalSignal.test.ts | 58 | // Step 0: Monitor tool_use | COMMENT |
| LOW⚡ | …-agents/src/adapters/claudeCode.externalSignal.test.ts | 75 | // Step 1: natural confirmation turn — opens AFTER the user event, | COMMENT |
| LOW⚡ | …-agents/src/adapters/claudeCode.externalSignal.test.ts | 81 | // Step 2: Monitor pushed an event → CC re-invokes the LLM without | COMMENT |
| LOW⚡ | …/builtin-skills/src/lobehub/references/bot-telegram.ts | 16 | ### Step 1: Create a Bot via BotFather | COMMENT |
| LOW⚡ | …/builtin-skills/src/lobehub/references/bot-telegram.ts | 36 | ### Step 3: Get the Bot's Numeric ID (for --app-id) | COMMENT |
| LOW⚡ | …/builtin-skills/src/lobehub/references/bot-telegram.ts | 42 | ### Step 4: Connect via CLI | COMMENT |
| LOW⚡ | …s/builtin-skills/src/lobehub/references/bot-discord.ts | 17 | ### Step 1: Create a Discord Application | COMMENT |
| LOW⚡ | …s/builtin-skills/src/lobehub/references/bot-discord.ts | 26 | ### Step 2: Create the Bot and Get Token | COMMENT |
| LOW⚡ | …s/builtin-skills/src/lobehub/references/bot-discord.ts | 36 | ### Step 3: Set Bot Permissions and Invite to Server | COMMENT |
| LOW | …s/builtin-skills/src/lobehub/references/bot-discord.ts | 50 | ### Step 4: Connect via CLI | COMMENT |
| LOW⚡ | …ckages/builtin-skills/src/lobehub/references/bot-qq.ts | 26 | ### Step 1: Register as a Developer | COMMENT |
| 135 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/mobileSpaWorkflow/index.ts | 35 | // Step 1: Build mobile SPA with CDN base | COMMENT |
| LOW | scripts/mobileSpaWorkflow/index.ts | 52 | // Step 2: Upload assets to S3 | COMMENT |
| LOW | scripts/mobileSpaWorkflow/index.ts | 64 | // Step 3: Generate mobile HTML template source file | COMMENT |
| LOW | scripts/docsWorkflow/utils.ts | 86 | // Step 1: Fetch the image | COMMENT |
| LOW | scripts/docsWorkflow/utils.ts | 101 | // Step 2: Create a blob from the response data | COMMENT |
| LOW | scripts/docsWorkflow/utils.ts | 116 | // Step 3: Create a file from the blob | COMMENT |
| LOW⚡ | scripts/cdnWorkflow/utils.ts | 64 | // Step 1: Fetch the image | COMMENT |
| LOW⚡ | scripts/cdnWorkflow/utils.ts | 70 | // Step 2: Create a blob from the response data | COMMENT |
| LOW | scripts/cdnWorkflow/utils.ts | 84 | // Step 3: Create a file from the blob | COMMENT |
| LOW⚡ | scripts/i18nWorkflow/analyzeUnusedKeys.ts | 486 | // Step 1: Load all defined keys | COMMENT |
| LOW⚡ | scripts/i18nWorkflow/analyzeUnusedKeys.ts | 492 | // Step 2: Find all translation calls | COMMENT |
| LOW⚡ | scripts/i18nWorkflow/analyzeUnusedKeys.ts | 497 | // Step 3: Find unused keys | COMMENT |
| LOW⚡ | scripts/i18nWorkflow/analyzeUnusedKeys.ts | 502 | // Step 4: Generate report | COMMENT |
| LOW | …w/src/transformation/__tests__/FlatListBuilder.test.ts | 1106 | // Step 0: assistant with Monitor tool | COMMENT |
| LOW⚡ | …es/model-runtime/src/utils/getFallbackModelProperty.ts | 39 | // Step 1: If providerId is provided, prioritize an exact match (same provider + same id) | COMMENT |
| LOW⚡ | …es/model-runtime/src/utils/getFallbackModelProperty.ts | 48 | // Step 2: Fallback to a match ignoring the provider (match id only) | COMMENT |
| LOW⚡ | …es/model-runtime/src/utils/getFallbackModelProperty.ts | 55 | // Step 3: Return a default value | COMMENT |
| LOW⚡ | packages/eval-rubric/src/evaluate.ts | 75 | // Step 1: Extract answer if extractor is configured | COMMENT |
| LOW⚡ | packages/eval-rubric/src/evaluate.ts | 79 | // Step 2: Resolve expected value | COMMENT |
| LOW⚡ | packages/eval-rubric/src/evaluate.ts | 82 | // Step 3: Handle multi-candidate (JSON array string in expected) | COMMENT |
| LOW | packages/chat-adapter-wechat/src/api.ts | 235 | // Step 1: request upload_param | COMMENT |
| LOW⚡ | packages/chat-adapter-wechat/src/api.test.ts | 284 | // Step 1: getuploadurl response | COMMENT |
| LOW⚡ | packages/chat-adapter-wechat/src/api.test.ts | 286 | // Step 2: CDN upload — returns x-encrypted-param header | COMMENT |
| LOW | …-agents/src/adapters/claudeCode.externalSignal.test.ts | 58 | // Step 0: Monitor tool_use | COMMENT |
| LOW⚡ | …-agents/src/adapters/claudeCode.externalSignal.test.ts | 75 | // Step 1: natural confirmation turn — opens AFTER the user event, | COMMENT |
| LOW⚡ | …-agents/src/adapters/claudeCode.externalSignal.test.ts | 81 | // Step 2: Monitor pushed an event → CC re-invokes the LLM without | COMMENT |
| LOW⚡ | …/builtin-skills/src/lobehub/references/bot-telegram.ts | 16 | ### Step 1: Create a Bot via BotFather | COMMENT |
| LOW⚡ | …/builtin-skills/src/lobehub/references/bot-telegram.ts | 26 | ### Step 2: (Optional) Configure Bot Behavior | COMMENT |
| LOW⚡ | …/builtin-skills/src/lobehub/references/bot-telegram.ts | 36 | ### Step 3: Get the Bot's Numeric ID (for --app-id) | COMMENT |
| LOW⚡ | …/builtin-skills/src/lobehub/references/bot-telegram.ts | 42 | ### Step 4: Connect via CLI | COMMENT |
| LOW⚡ | …s/builtin-skills/src/lobehub/references/bot-discord.ts | 17 | ### Step 1: Create a Discord Application | COMMENT |
| LOW⚡ | …s/builtin-skills/src/lobehub/references/bot-discord.ts | 26 | ### Step 2: Create the Bot and Get Token | COMMENT |
| LOW⚡ | …s/builtin-skills/src/lobehub/references/bot-discord.ts | 36 | ### Step 3: Set Bot Permissions and Invite to Server | COMMENT |
| LOW | …s/builtin-skills/src/lobehub/references/bot-discord.ts | 50 | ### Step 4: Connect via CLI | COMMENT |
| LOW⚡ | …ckages/builtin-skills/src/lobehub/references/bot-qq.ts | 26 | ### Step 1: Register as a Developer | COMMENT |
| LOW⚡ | …ckages/builtin-skills/src/lobehub/references/bot-qq.ts | 35 | ### Step 2: Create a Bot Application | COMMENT |
| LOW⚡ | …ckages/builtin-skills/src/lobehub/references/bot-qq.ts | 45 | ### Step 3: Get App ID and App Secret | COMMENT |
| LOW⚡ | …ckages/builtin-skills/src/lobehub/references/bot-qq.ts | 53 | ### Step 4: Configure Permissions (Intents) | COMMENT |
| LOW | …ckages/builtin-skills/src/lobehub/references/bot-qq.ts | 67 | ### Step 5: Configure Webhook or WebSocket | COMMENT |
| LOW⚡ | …ckages/builtin-skills/src/lobehub/references/bot-qq.ts | 80 | ### Step 6: Configure IP Whitelist | COMMENT |
| LOW⚡ | …ckages/builtin-skills/src/lobehub/references/bot-qq.ts | 86 | ### Step 7: Test in Sandbox, Then Submit for Review | COMMENT |
| LOW⚡ | …ckages/builtin-skills/src/lobehub/references/bot-qq.ts | 94 | ### Step 8: Connect via CLI | COMMENT |
| LOW⚡ | …ages/builtin-skills/src/lobehub/references/bot-lark.ts | 23 | ### Step 1: Create a Custom App | COMMENT |
| LOW⚡ | …ages/builtin-skills/src/lobehub/references/bot-lark.ts | 30 | ### Step 2: Get App ID and App Secret | COMMENT |
| LOW⚡ | …ages/builtin-skills/src/lobehub/references/bot-lark.ts | 37 | ### Step 3: Enable Bot Capability | COMMENT |
| LOW⚡ | …ages/builtin-skills/src/lobehub/references/bot-lark.ts | 43 | ### Step 4: Configure Event Subscriptions | COMMENT |
| LOW⚡ | …ages/builtin-skills/src/lobehub/references/bot-lark.ts | 61 | ### Step 5: Get Verification Token and Encrypt Key (Webhook Only) | COMMENT |
| LOW⚡ | …ages/builtin-skills/src/lobehub/references/bot-lark.ts | 68 | ### Step 6: Add Required Permissions | COMMENT |
| LOW⚡ | …ages/builtin-skills/src/lobehub/references/bot-lark.ts | 79 | ### Step 7: Publish the App | COMMENT |
| LOW⚡ | …ages/builtin-skills/src/lobehub/references/bot-lark.ts | 87 | ### Step 8: Connect via CLI | COMMENT |
| LOW⚡ | …es/builtin-skills/src/lobehub/references/bot-feishu.ts | 23 | ### Step 1: Create a Custom App | COMMENT |
| LOW⚡ | …es/builtin-skills/src/lobehub/references/bot-feishu.ts | 30 | ### Step 2: Get App ID and App Secret | COMMENT |
| LOW⚡ | …es/builtin-skills/src/lobehub/references/bot-feishu.ts | 37 | ### Step 3: Enable Bot Capability | COMMENT |
| LOW⚡ | …es/builtin-skills/src/lobehub/references/bot-feishu.ts | 43 | ### Step 4: Configure Event Subscriptions | COMMENT |
| LOW⚡ | …es/builtin-skills/src/lobehub/references/bot-feishu.ts | 62 | ### Step 5: Get Verification Token and Encrypt Key (Webhook Only) | COMMENT |
| LOW⚡ | …es/builtin-skills/src/lobehub/references/bot-feishu.ts | 69 | ### Step 6: Add Required Permissions | COMMENT |
| LOW⚡ | …es/builtin-skills/src/lobehub/references/bot-feishu.ts | 81 | ### Step 7: Publish the App | COMMENT |
| LOW⚡ | …es/builtin-skills/src/lobehub/references/bot-feishu.ts | 90 | ### Step 8: Connect via CLI | COMMENT |
| LOW⚡ | …ges/builtin-skills/src/lobehub/references/bot-slack.ts | 23 | ### Step 1: Create a Slack App | COMMENT |
| LOW⚡ | …ges/builtin-skills/src/lobehub/references/bot-slack.ts | 32 | ### Step 2: Configure Bot Token Scopes | COMMENT |
| 98 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/acceptance/references/agent-browser.md | 36 | agent-browser fill @e1 "user@example.com" | CODE |
| LOW | .agents/skills/lobe-design/references/craft.md | 35 | | 内容 | 「Lorem ipsum」「示例数据」「功能名称」 | 占位文案掩盖了真实信息密度 | 用贴近真实业务的示例数据,长度也要接近真实 | | CODE |
| LOW | .agents/skills/lobe-design/references/aesthetics.md | 70 | | A-04.12 | 「Lorem ipsum」「示例数据」「功能名称」等占位文案 | L `LOBE-PLACEHOLDER-COPY` | 贴近真实业务、长度相近的数据 | | CODE |
| LOW | …/src/client/components/activityMemoryViewModel.test.ts | 17 | associatedLocations: [{ address: '123 Main St', name: 'ACME HQ' }], | CODE |
| LOW | …ages/database/src/server/models/__tests__/user.test.ts | 19 | const userEmail = 'user@example.com'; | CODE |
| LOW | …database/src/models/userMemory/__tests__/model.test.ts | 302 | { address: '123 Main St', name: 'Home', type: 'residential' }, | CODE |
| LOW | …database/src/models/userMemory/__tests__/model.test.ts | 306 | address: '123 Main St', | CODE |
| LOW | …atabase/src/models/linear/__tests__/connection.test.ts | 69 | organizationName: 'Acme Inc', | CODE |
| LOW | …atabase/src/models/linear/__tests__/connection.test.ts | 75 | expect(second.organizationName).toBe('Acme Inc'); | CODE |
| LOW⚡ | packages/secret-channel/test/vectors/redaction.json | 8 | "placeholder": "«secret:sudo-password»" | CODE |
| LOW⚡ | packages/secret-channel/test/vectors/redaction.json | 13 | "placeholder": "«secret:ssh-passphrase»" | CODE |
| LOW⚡ | packages/secret-channel/test/vectors/redaction.json | 18 | "placeholder": "«secret:git-token»" | CODE |
| LOW⚡ | packages/secret-channel/test/vectors/redaction.json | 23 | "placeholder": "«secret:..-..-etc»" | CODE |
| LOW⚡ | packages/secret-channel/test/vectors/redaction.json | 28 | "placeholder": "«secret:secret»" | CODE |
| LOW⚡ | packages/secret-channel/test/vectors/redaction.json | 33 | "placeholder": "«secret:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx»" | CODE |
| LOW⚡ | packages/secret-channel/test/vectors/redaction.json | 38 | "placeholder": "«secret:file-TOKEN»" | CODE |
| LOW | …or-runtime/src/__tests__/liteXMLBlockDiff.real.test.ts | 161 | const history = await setup('placeholder'); | CODE |
| LOW | …ges/device-control/src/__tests__/kimiCodeQuota.test.ts | 42 | return okResponse({ email: 'user@example.com', nickname: 'moonwalker', user_id: 'u_123' }); | CODE |
| LOW | …ges/device-control/src/__tests__/kimiCodeQuota.test.ts | 75 | identity: { email: 'user@example.com', externalAccountId: 'u_123' }, | CODE |
| LOW | packages/model-runtime/src/core/ModelRuntime.test.ts | 228 | const mockResponse = { name: 'John Doe' }; | CODE |
| LOW | …del-runtime/src/providers/deepseek/chatPayload.test.ts | 24 | const huge = 'lorem ipsum dolor '.repeat(560_000); | CODE |
| LOW | …del-runtime/src/providers/deepseek/chatPayload.test.ts | 35 | const huge = 'lorem ipsum dolor '.repeat(560_000); | CODE |
| LOW | …runtime/src/providers/deepseek/__tests__/index.test.ts | 178 | messages: [{ content: 'lorem ipsum dolor '.repeat(400_000), role: 'user' }], | CODE |
| LOW | …kages/model-runtime/src/providers/openai/index.test.ts | 65 | const hugeContent = 'lorem ipsum dolor '.repeat(150_000); | CODE |
| LOW⚡ | packages/openapi/src/helpers/public-fields.test.ts | 95 | email: 'user@example.com', | CODE |
| LOW⚡ | packages/openapi/src/helpers/public-fields.test.ts | 97 | normalizedEmail: 'user@example.com', | CODE |
| LOW⚡ | packages/openapi/src/helpers/public-fields.test.ts | 103 | expect(projected).toMatchObject({ email: 'user@example.com', id: 'user-1' }); | CODE |
| LOW | …geneous-agents/src/quota-sampler/kimiCodeQuota.test.ts | 52 | email: 'user@example.com', | CODE |
| LOW | …geneous-agents/src/quota-sampler/kimiCodeQuota.test.ts | 122 | email: 'user@example.com', | CODE |
| LOW | packages/prompts/src/prompts/speaker/index.ts | 17 | * nickname: 'John Doe', | COMMENT |
| LOW | packages/prompts/src/prompts/speaker/index.ts | 20 | * // Returns: '<speaker id="123456" username="john" nickname="John Doe" avatar="abc123" />' | COMMENT |
| LOW | packages/prompts/src/prompts/speaker/index.ts | 39 | * { id: '123456', username: 'john', nickname: 'John Doe' }, | COMMENT |
| LOW | packages/prompts/src/prompts/speaker/index.ts | 43 | * // '<speaker id="123456" username="john" nickname="John Doe" />\nHello, how are you?' | COMMENT |
| LOW | …rc/prompts/knowledgeBaseQA/formatSearchResults.test.ts | 88 | text: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore e | CODE |
| LOW | …rc/prompts/knowledgeBaseQA/formatSearchResults.test.ts | 88 | text: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore e | CODE |
| LOW | …src/prompts/knowledgeBaseQA/formatFileContents.test.ts | 103 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW | …src/prompts/knowledgeBaseQA/formatFileContents.test.ts | 103 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 233 | "placeholder": "", | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 242 | "placeholder": "", | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 251 | "placeholder": "", | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 260 | "placeholder": "", | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 269 | "placeholder": "", | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 278 | "placeholder": "", | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 287 | "placeholder": "", | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 296 | "placeholder": "", | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 305 | "placeholder": "", | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 314 | "placeholder": "", | CODE |
| LOW⚡ | docker-compose/production/grafana/init_data.json | 323 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 104 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 117 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 130 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 143 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 156 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 169 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 182 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 195 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 208 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 221 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 446 | "placeholder": "", | CODE |
| LOW | docker-compose/production/grafana/init_data.json | 459 | "placeholder": "", | CODE |
| 120 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ntime/src/providers/anthropic/claudeThinkingHistory.ts | 14 | * Determine whether a historical assistant message was generated by Claude and | COMMENT |
| HIGH | apps/server/src/services/agent/index.ts | 276 | // Merge AI-generated welcome data if available | COMMENT |
| HIGH | …eManager/components/Explorer/EmptyPlaceholder.test.tsx | 49 | // Images defaults to AI-generated, so a library of uploads lands here. | COMMENT |
| HIGH | src/features/ResourceManager/store/action.ts | 531 | // default — an "AI generated" choice made under Images must not silently | COMMENT |
| HIGH | …Conversation/WorkingSidebar/Files/useFileOperations.ts | 175 | // ancestors, select and focus it, then open or rename it as requested. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docker-compose/deploy/searxng-settings.yml | 269 | # Alternatively you can use external files for configuring the "Hostnames plugin": | COMMENT |
| MEDIUM | docker-compose/deploy/searxng-settings.yml | 857 | # Or you can use the html non-stable engine, activated by default | COMMENT |
| MEDIUM | docker-compose/deploy/searxng-settings.yml | 1942 | # Or you can use the html non-stable engine, activated by default | COMMENT |
| MEDIUM | docker-compose/deploy/searxng-settings.yml | 2106 | # Or you can use the html non-stable engine, activated by default | COMMENT |
| MEDIUM | docker-compose/production/grafana/searxng-settings.yml | 269 | # Alternatively you can use external files for configuring the "Hostnames plugin": | COMMENT |
| MEDIUM | docker-compose/production/grafana/searxng-settings.yml | 857 | # Or you can use the html non-stable engine, activated by default | COMMENT |
| MEDIUM | docker-compose/production/grafana/searxng-settings.yml | 1942 | # Or you can use the html non-stable engine, activated by default | COMMENT |
| MEDIUM | docker-compose/production/grafana/searxng-settings.yml | 2106 | # Or you can use the html non-stable engine, activated by default | COMMENT |
| MEDIUM | docker-compose/dev/searxng-settings.yml | 269 | # Alternatively you can use external files for configuring the "Hostnames plugin": | COMMENT |
| MEDIUM | docker-compose/dev/searxng-settings.yml | 857 | # Or you can use the html non-stable engine, activated by default | COMMENT |
| MEDIUM | docker-compose/dev/searxng-settings.yml | 1943 | # Or you can use the html non-stable engine, activated by default | COMMENT |
| MEDIUM | docker-compose/dev/searxng-settings.yml | 2107 | # Or you can use the html non-stable engine, activated by default | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/acceptance/scripts/init-dev-env.sh | 12 | # Usage: | COMMENT |
| LOW | .agents/acceptance/scripts/record-electron-demo.sh | 5 | # Usage: | COMMENT |
| LOW | .agents/acceptance/scripts/acceptance-guard.sh | 11 | # Usage: | COMMENT |
| LOW | .agents/acceptance/scripts/setup-auth.sh | 7 | # Usage: | COMMENT |
| LOW | .agents/acceptance/scripts/record-gif.sh | 10 | # Usage: | COMMENT |
| LOW | .agents/acceptance/scripts/record-app-screen.sh | 8 | # Usage: | COMMENT |
| LOW | .agents/acceptance/scripts/app-probe.sh | 6 | # Usage: | COMMENT |
| LOW | .agents/acceptance/scripts/capture-app-window.sh | 9 | # Usage: | COMMENT |
| LOW | .agents/acceptance/scripts/report-init.sh | 7 | # Usage: | COMMENT |
| LOW | …gents/skills/design-prototype/scripts/build-runtime.sh | 7 | # Usage: | COMMENT |
| LOW | …s/skills/agent-testing-bot/discord/test-discord-bot.sh | 5 | # Usage: | COMMENT |
| LOW | .agents/skills/agent-testing-bot/lark/test-lark-bot.sh | 5 | # Usage: | COMMENT |
| LOW | …nts/skills/agent-testing-bot/wechat/test-wechat-bot.sh | 5 | # Usage: | COMMENT |
| LOW | …skills/agent-testing-bot/telegram/test-telegram-bot.sh | 5 | # Usage: | COMMENT |
| LOW | …gents/skills/agent-testing-bot/slack/test-slack-bot.sh | 5 | # Usage: | COMMENT |
| LOW | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 15 | # Usage: | COMMENT |
| LOW | …kills/agent-testing-bot/imessage/send-imessage-test.sh | 16 | # Usage: | COMMENT |
| LOW | .agents/skills/agent-testing-bot/qq/test-qq-bot.sh | 5 | # Usage: | COMMENT |
| LOW | .agents/skills/acceptance/scripts/resource-guard.sh | 6 | # Usage: | COMMENT |
| LOW | packages/openapi/scripts/compliance-test.sh | 5 | # Usage: | COMMENT |
| LOW | packages/builtin-skills/src/artifacts/content.ts | 182 | # Example usage | COMMENT |
| LOW | docker-compose/setup.sh | 481 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/builtin-skills/src/artifacts/content.ts | 183 | print(factorial(5)) # Output: 120 | CODE |
| HIGH | apps/server/src/services/sandbox/providers/onlyboxes.ts | 715 | print(json.dumps(value, ensure_ascii=False)) | CODE |
| HIGH⚡ | apps/server/src/services/sandbox/providers/onlyboxes.ts | 800 | return None | CODE |
| HIGH⚡ | apps/server/src/services/sandbox/providers/onlyboxes.ts | 804 | return None | CODE |
| HIGH⚡ | apps/server/src/services/sandbox/providers/onlyboxes.ts | 846 | elif sort_by == 'date': | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .agents/acceptance/scripts/report-init.sh | 2 | # report-init.sh — scaffold a structured test report under the report root | COMMENT |
| MEDIUM | .agents/skills/agent-tracing/SKILL.md | 164 | # Map the context window composition of every LLM call (cm / map are aliases) | COMMENT |
| MEDIUM | …s/context-engine/src/engine/messages/MessagesEngine.ts | 217 | // Chat mode (`enableAgentMode === false`) suppresses agentic-only injectors: | COMMENT |
| MEDIUM | …ngine/messages/__tests__/MessagesEngine.golden.test.ts | 153 | // Fixture system prompt (role + knowledge scaffold) must stay small. The production | COMMENT |
| MEDIUM | …src/services/aiAgent/pipeline/resolveRunAgentConfig.ts | 309 | // kept in sync because the context engine gates agentic-only injectors | COMMENT |
| MEDIUM | …src/services/aiAgent/pipeline/resolveRunAgentConfig.ts | 311 | // on `toolMode` — otherwise `/mode chat` would keep agentic context while | COMMENT |
| MEDIUM | …ices/aiAgent/__tests__/execAgent.modelOverride.test.ts | 714 | // The context engine gates agentic-only injectors on enableAgentMode, so | COMMENT |
| MEDIUM | src/features/CommandMenu/README.md | 23 | ├── index.tsx # Main component & orchestration | CODE |
| MEDIUM | …/ModelSwitchPanel/components/ModelDetailPanel.test.tsx | 387 | // agentic has no data: the dimension is omitted from the radar entirely | COMMENT |
| MEDIUM | …elSwitchPanel/components/BenchmarkModal/index.test.tsx | 178 | // intelligence + agentic rows both come from Artificial Analysis | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ng-heterogeneous-agents/scripts/official-smoke.test.sh | 2 | # Self-test for the official heterogeneous-provider matrix harness. The | COMMENT |
| MEDIUM | …ng-heterogeneous-agents/scripts/official-smoke.test.sh | 315 | # underlying session. The harness must stop before launching another live cell. | COMMENT |
| MEDIUM | packages/openapi/src/helpers/file.ts | 52 | // Prefer formidable (streaming, robust); fall back to native formData() on failure | COMMENT |
| MEDIUM | packages/ssrf-safe-fetch/index.test.ts | 398 | // that triggered the break). Definitely not the full 200 MB. | COMMENT |
| MEDIUM | …ules/AgentRuntime/__tests__/StreamEventManager.test.ts | 184 | // Find the serialized `data` argument inline so this test stays robust | COMMENT |
| MEDIUM | src/features/HomeLayout/style.ts | 4 | // Absolutely positioned container, fills parent | COMMENT |
| MEDIUM | …asks/AgentTaskDetail/TopicChatDrawer/FeedbackInput.tsx | 125 | // Surface the live running-op status flush above the reply affordance (seamless | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/acceptance/scripts/electron-dev.sh | 245 | except Exception: | CODE |
| LOW | …kills/run-eval-harbor/scripts/frontierharness-local.py | 224 | except Exception as error: | CODE |
| LOW | .agents/skills/run-eval-harbor/scripts/lh/adapter.py | 165 | except Exception: | CODE |
| LOW | …lls/agent-testing-bot/imessage/test-imessage-bridge.sh | 56 | except Exception: sys.exit(0) | CODE |
| LOW | …kills/agent-testing-bot/imessage/send-imessage-test.sh | 48 | except Exception as e: | CODE |
| LOW⚡ | apps/server/src/services/sandbox/providers/onlyboxes.ts | 803 | except Exception: | CODE |
| LOW⚡ | apps/server/src/services/sandbox/providers/onlyboxes.ts | 829 | except Exception: | CODE |
| LOW⚡ | apps/server/src/services/sandbox/providers/onlyboxes.ts | 839 | except Exception: | CODE |
| LOW | apps/server/src/services/sandbox/providers/onlyboxes.ts | 864 | except Exception as error: | CODE |
| LOW | apps/server/src/services/sandbox/providers/onlyboxes.ts | 889 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …kills/run-eval-harbor/scripts/frontierharness-runta.py | 257 | + " --no-pager --property=LoadState,ActiveState,SubState,Result,ExecMainStatus 2>/dev/null || true", | STRING |
| HIGH | …kills/run-eval-harbor/scripts/frontierharness-runta.py | 270 | "set -u; set -a; . /work/fh-input/runtime.env || exit $?; set +a; " | STRING |
| HIGH | …kills/run-eval-harbor/scripts/frontierharness-runta.py | 579 | f"systemctl show {quote(unit)} --no-pager > {quote(remote_dir + '/unit-status.txt')} 2>&1 || true; " | STRING |
| HIGH | …kills/run-eval-harbor/scripts/frontierharness-runta.py | 580 | f"journalctl -u {quote(unit)} --no-pager > {quote(remote_dir + '/journal.log')} 2>&1 || true; " | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/sync-main-to-canary.yaml | 49 | # Check if there are actual changes to sync | COMMENT |
| LOW | .conductor/setup.sh | 20 | # Check if CONDUCTOR_ROOT_PATH is set | COMMENT |
| LOW | docker-compose/setup.sh | 603 | # Check if sed is installed | COMMENT |
| LOW | docker-compose/setup.sh | 659 | # Check if env modified success | COMMENT |
| LOW⚡ | docker-compose/setup.sh | 677 | # Check if openssl is installed | COMMENT |
| LOW | docker-compose/setup.sh | 806 | # Check if user has permissions to run Docker by trying to get the status of Docker (docker status). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | packages/builtin-skills/src/lobehub/content.ts | 108 | # Create a document in a knowledge base | COMMENT |
| MEDIUM | .github/workflows/bundle-analyzer.yml | 67 | # Create a summary with build metadata | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …kills/run-eval-harbor/scripts/frontierharness-local.py | 4 | CODE | |
| LOW | …kills/run-eval-harbor/scripts/frontierharness-runta.py | 4 | CODE | |
| LOW | .agents/skills/run-eval-harbor/scripts/lh/adapter.py | 1 | CODE | |
| LOW | .agents/skills/run-eval-harbor/scripts/lh/agent.py | 1 | CODE | |
| LOW | .agents/skills/run-eval-harbor/scripts/lh/pier_agent.py | 1 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/PluginDevModal/MCPManifestForm/QuickImportSection.tsx | 130 | "GITHUB_PERSONAL_ACCESS_TOKEN": "<your-api-key>" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …kills/run-eval-harbor/scripts/frontierharness-local.py | 169 | def run_task(run_dir: Path, record: dict, task: dict, env: dict) -> tuple[int, Path, Path]: | CODE |
| LOW | apps/auth/app/entry.server.tsx | 6 | export default async function handleRequest( | CODE |
| LOW | apps/workbench/app/entry.server.tsx | 6 | export default async function handleRequest( | CODE |
| LOW | apps/share/app/entry.server.tsx | 6 | export default async function handleRequest( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …kills/run-eval-harbor/scripts/frontierharness-local.py | 183 | CODE | |
| LOW | …kills/run-eval-harbor/scripts/frontierharness-runta.py | 131 | CODE | |
| LOW | …kills/run-eval-harbor/scripts/frontierharness-runta.py | 499 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/model-runtime/src/core/streams/cloudflare.ts | 12 | if (!res) return; // TODO: Add test; Handle tool_call parameter. | CODE |
| LOW | …rver/src/services/memory/userMemory/extract/runtime.ts | 334 | // TODO: implement a better cache eviction strategy | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/run-eval-harbor/scripts/lh/agent.py | 12 | CODE | |
| LOW | .agents/skills/run-eval-harbor/scripts/lh/pier_agent.py | 15 | CODE |