2.2

Adjusted Signal

2.2

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

3.8K

Stars

Language

725.3K

Lines of Code

5.8K

Files

1.0K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 935 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.6/100 · LOW

Are imports declared and package/API names verified? 58 finding(s).

Agent Over-Engineering Ratio 1.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 58 finding(s).

PR Review Velocity Impact 9.5/100 · LOW

Which changes need focused human review? 1041 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 18HIGH 30MEDIUM 44LOW 949

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1041 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block601 hits · 600 pts

Severity	File	Line	Snippet	Context
LOW	eng/tools/ToolMetadataExporter/src/AppConfiguration.cs	21	public string? DatabaseName { get; set; }	COMMENT
LOW	eng/tools/ToolMetadataExporter/src/AppConfiguration.cs	41	/// true if the application should run in dry-run mode. In dry-run mode, no events are published to Kusto	COMMENT
LOW	…/ToolMetadataExporter/src/Models/CommandLineOptions.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	…/ToolMetadataExporter/src/Models/CommandLineOptions.cs	21		COMMENT
LOW	…ools/ToolMetadataExporter/src/Services/AzmcpProgram.cs	61	}	COMMENT
LOW	…ools/ToolMetadataExporter/src/Services/AzmcpProgram.cs	81	/// </summary>	COMMENT
LOW	…g/tools/McpToolEvaluator.Core/src/McpServerMetadata.cs	21	public Dictionary<string, List<ToolMetadata>> AssemblyNameToToolsMap { get; } = new Dictionary<string, List<ToolMeta	COMMENT
LOW	…g/tools/McpToolEvaluator.Core/src/McpServerMetadata.cs	121	/// This is a deliberate SHORTCUT, not a general IL decoder. It is correct only for a	COMMENT
LOW	…g/pipelines/templates/jobs/mcpb/pack-and-sign-mcpb.yml	1	# Pipeline template for packaging and signing MCPB bundles via ESRP	COMMENT
LOW	eng/common/pipelines/workflow-eval.yml	41	createDashboardBundle: true	COMMENT
LOW	eng/common/pipelines/live-eval.yml	41	# Live scenarios are end-to-end, so give each shard more headroom than the report-only tiers.	COMMENT
LOW	…es/templates/stages/archetype-auto-release-prepare.yml	21	# eng/common tree). Runs after the Signing stage: it resolves the merged PR for Build.SourceVersion,	COMMENT
LOW	…common/pipelines/templates/steps/eval-hook-example.yml	1	# Example pre/post-eval hook (a steps template).	COMMENT
LOW	eng/common/pipelines/templates/steps/check-spelling.yml	1	# Checks spelling of files that changed between the current state of the repo	COMMENT
LOW	…mon/pipelines/templates/steps/upload-llm-artifacts.yml	1	# This template stages test result files into an "llm-artifacts" directory so they can be	COMMENT
LOW	eng/common/pipelines/templates/steps/eval-mcp-setup.yml	1	# MCP setup for azure-sdk-tools' eval CI: builds the in-repo .NET MCP server(s) and publishes each	COMMENT
LOW	eng/common/scripts/allow-relative-links.txt	1	# Files matching patterns listed here are permitted to use relative links even when checkLinkGuidance is enabled.	COMMENT
LOW	eng/common/scripts/eval/lib/exec.ts	101	const { prefix } = options;	COMMENT
LOW	eng/common/testproxy/rotate.sh	1	#!/bin/bash	COMMENT
LOW	eng/common/actions/login-to-github/action.yml	1	# Login to GitHub - Composite Action	COMMENT
LOW	eng/common/actions/login-to-github/action.yml	21	# steps:	COMMENT
LOW	eng/common/actions/login-to-github/action.yml	41	# with:	COMMENT
LOW	eng/common/TestResources/remove-test-resources.yml	1	# Assumes steps in deploy-test-resources.yml was run previously. Requires	COMMENT
LOW	eng/common/TestResources/setup-environments.yml	1	# Cloud Configuration will be splat into parameters of `Add-AzEnvironment`. It	COMMENT
LOW	eng/common/TestResources/deploy-test-resources.yml	21	# "TenantId": "<tenant id>",	COMMENT
LOW	eng/npm/wrapper/index.js	41	// The first choice lives inside this package, so it is tied to this version	COMMENT
LOW	…Mcp.Tools.ServiceBus/src/Services/ServiceBusService.cs	21	/// The fully qualified DNS hostname of the Service Bus namespace, without a scheme, port, path,	COMMENT
LOW	…cp.Tools.ServiceBus/src/Services/IServiceBusService.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	…cp.Tools.ServiceBus/src/Services/IServiceBusService.cs	41		COMMENT
LOW	…cp.Tools.ServiceBus/src/Services/IServiceBusService.cs	61	/// <param name="maxMessages">Maximum number of messages to peek (default: 1)</param>	COMMENT
LOW	…ls/Azure.Mcp.Tools.StorageSync/src/StorageSyncSetup.cs	21	/// <summary>	COMMENT
LOW	…Endpoint/CloudEndpointTriggerChangeDetectionOptions.cs	21	/// Gets or sets the sync group name.	COMMENT
LOW	…rc/Options/CloudEndpoint/CloudEndpointCreateOptions.cs	21	/// Gets or sets the sync group name.	COMMENT
LOW	…/Options/ServerEndpoint/ServerEndpointCreateOptions.cs	21	/// Gets or sets the sync group name.	COMMENT
LOW	…/Options/ServerEndpoint/ServerEndpointUpdateOptions.cs	21	/// Gets or sets the sync group name.	COMMENT
LOW	…rate/src/Options/PlatformLandingZone/RequestOptions.cs	21	/// Gets or sets the region type (single or multi).	COMMENT
LOW	…rate/src/Options/PlatformLandingZone/RequestOptions.cs	81	/// Gets or sets the migrate project name from context.	COMMENT
LOW	…eMigrate/src/Constants/PlatformLandingZoneConstants.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	…ate/src/Models/PlatformLandingZoneGenerationPayload.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	…ate/src/Models/PlatformLandingZoneGenerationPayload.cs	21	/// <summary>	COMMENT
LOW	…ate/src/Models/PlatformLandingZoneGenerationPayload.cs	41	/// <summary>	COMMENT
LOW	…ureMigrate/src/Models/PlatformLandingZoneParameters.cs	61	/// <summary>	COMMENT
LOW	…ureMigrate/src/Services/IPlatformLandingZoneService.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	…ureMigrate/src/Services/IPlatformLandingZoneService.cs	41	CancellationToken cancellationToken = default);	COMMENT
LOW	…ureMigrate/src/Services/IPlatformLandingZoneService.cs	61	CancellationToken cancellationToken = default);	COMMENT
LOW	…ureMigrate/src/Services/IPlatformLandingZoneService.cs	81		COMMENT
LOW	…te/src/Services/IPlatformLandingZoneGuidanceService.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	…te/src/Services/IPlatformLandingZoneGuidanceService.cs	21	/// <summary>	COMMENT
LOW	…zureMigrate/src/Services/PlatformLandingZoneService.cs	161		COMMENT
LOW	…Shares/src/Options/FileShare/FileShareCreateOptions.cs	21	/// Gets or sets the location for the file share.	COMMENT
LOW	…Shares/src/Options/FileShare/FileShareUpdateOptions.cs	21	/// Gets or sets the provisioned storage size in GiB.	COMMENT
LOW	…ools.FileShares/src/Models/FileShareUsageDataResult.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	…Mcp.Tools.AzureBackup.Tests/AzureBackupCommandTests.cs	1981	Assert.False(string.IsNullOrEmpty(inquiry.AssertProperty("container").GetString()));	COMMENT
LOW	…/Services/RsvBackupOperationsEnumerateTolerantTests.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	….AzureBackup.Tests/Services/AzureBackupServiceTests.cs	641	#endregion	COMMENT
LOW	…vices/RsvBackupOperationsProtectableItemFilterTests.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	…zureBackup.Tests/Services/DppGovernancePayloadTests.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	…zureBackup.Tests/Services/RsvGovernancePayloadTests.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	….AzureBackup/src/Models/AzureBackupImmutabilityType.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
LOW	….Mcp.Tools.AzureBackup/src/Models/DiskExclusionSpec.cs	1	// Copyright (c) Microsoft Corporation.	COMMENT
541 more matches not shown…

Structural Annotation Overuse251 hits · 424 pts

Severity	File	Line	Snippet	Context
LOW	…ons/azsdk-tools/validate-service-label.instructions.md	9	## Step 1: Provide Information	COMMENT
LOW⚡	…ons/azsdk-tools/validate-service-label.instructions.md	23	## Step 2: Get Service Label	COMMENT
LOW⚡	…ons/azsdk-tools/validate-service-label.instructions.md	31	## Step 3: Validate Label	COMMENT
LOW⚡	…ons/azsdk-tools/validate-service-label.instructions.md	40	## Step 4: Create New Service Label	COMMENT
LOW⚡	eng/common/actions/login-to-github/action.yml	22	# # Step 1: Authenticate to Azure (required before this action)	COMMENT
LOW⚡	eng/common/actions/login-to-github/action.yml	29	# # Step 2: Mint GitHub App token	COMMENT
LOW⚡	eng/common/actions/login-to-github/action.yml	34	# # Step 3: Use the token (available as env var in all subsequent steps)	COMMENT
LOW	…ureBackup/skills/azurebackup-telemetry-report/SKILL.md	35	### Step 1: Query Telemetry Data	COMMENT
LOW	…ureBackup/skills/azurebackup-telemetry-report/SKILL.md	73	### Step 2: Gather Git Context	COMMENT
LOW	…ureBackup/skills/azurebackup-telemetry-report/SKILL.md	109	### Step 3: Analyze and Classify	COMMENT
LOW	…ureBackup/skills/azurebackup-telemetry-report/SKILL.md	127	### Step 4: Generate the Report	COMMENT
LOW	…ureBackup/skills/azurebackup-telemetry-report/SKILL.md	146	### Step 5: Outlook-Compatible Version	COMMENT
LOW	…p.Tools.AzureBackup/src/Services/AzureBackupService.cs	695	// Step 1: List all vaults (RSV + DPP) in the subscription (parallelized)	COMMENT
LOW	…p.Tools.AzureBackup/src/Services/AzureBackupService.cs	733	// Step 2: Collect all protected datasource ARM IDs from every vault	COMMENT
LOW	…p.Tools.AzureBackup/src/Services/AzureBackupService.cs	800	// Step 3: List all resources of protectable types in the subscription	COMMENT
LOW	…p.Tools.AzureBackup/src/Services/AzureBackupService.cs	860	// Step 4: Enrich with RSV protectable items (sub-resources like SQL DBs, file shares)	COMMENT
LOW	…BestPractices/src/Resources/ai-best-practices-core.txt	67	#### Step 1: Fetch common quickstart pages	COMMENT
LOW	…BestPractices/src/Resources/ai-best-practices-core.txt	70	#### Step 2: Search for feature guidelines	COMMENT
LOW⚡	…BestPractices/src/Resources/ai-best-practices-core.txt	99	#### Step 1: Fetch models catalog documentation	COMMENT
LOW⚡	…BestPractices/src/Resources/ai-best-practices-core.txt	107	#### Step 2: Fetch model selection guide	COMMENT
LOW⚡	…BestPractices/src/Resources/ai-best-practices-core.txt	112	#### Step 3: Get available models from Foundry catalog	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_1.md	70	#### Step 1: Selecting a Suitable Location	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_1.md	75	#### Step 2: Unpacking and Organizing Components	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_1.md	80	#### Step 3: Assembling the Tent Poles	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_1.md	85	#### Step 4: Setting up the Tent Body	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_1.md	91	#### Step 5: Attaching the Rainfly (if applicable)	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_1.md	97	#### Step 6: Securing the Tent	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_1.md	104	#### Step 1: Removing Stakes and Guy Lines	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_1.md	109	#### Step 2: Taking Down the Tent Body	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_1.md	115	#### Step 3: Disassembling the Tent Poles	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_1.md	120	#### Step 4: Packing the Tent	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_5.md	74	#### Step 1: Unfolding the Table	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_5.md	80	#### Step 2: Attaching the Legs	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_5.md	86	#### Step 3: Adjusting the Table Height (if applicable)	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_5.md	96	#### Step 1: Detaching the Legs	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_5.md	102	#### Step 2: Folding the Table	COMMENT
LOW⚡	…zure.Mcp.Tools.Monitor/tests/samples/product_info_5.md	107	#### Step 3: Storing the Table	COMMENT
LOW	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	31	// Step 1: Detect language	COMMENT
LOW	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	44	// Step 2: Detect projects	COMMENT
LOW	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	57	// Step 3: Detect instrumentation state (greenfield/brownfield)	COMMENT
LOW	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	75	// Step 4: Check for multiple instrumentable projects	COMMENT
LOW⚡	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	120	// Step 5: Find appropriate generator	COMMENT
LOW⚡	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	127	// Step 6: Generate spec	COMMENT
LOW	…tation/Resources/examples/nodejs/langchain-js-setup.md	12	## Step 1: Install Package	COMMENT
LOW	…tation/Resources/examples/nodejs/langchain-js-setup.md	18	## Step 2: Create Tracing File	COMMENT
LOW	…tation/Resources/examples/nodejs/langchain-js-setup.md	50	## Step 3: Import Tracing First	COMMENT
LOW	…tation/Resources/examples/nodejs/langchain-js-setup.md	112	## Step 4: Configure Connection String	COMMENT
LOW	…tation/Resources/examples/nodejs/langchain-js-setup.md	135	## Step 5: Add Custom Telemetry (Optional)	COMMENT
LOW	…strumentation/Resources/examples/nodejs/redis-setup.md	12	## Step 1: Install Package	COMMENT
LOW	…strumentation/Resources/examples/nodejs/redis-setup.md	18	## Step 2: Initialize at Startup	COMMENT
LOW	…strumentation/Resources/examples/nodejs/redis-setup.md	75	## Step 3: Configure Connection String	COMMENT
LOW	…strumentation/Resources/examples/nodejs/redis-setup.md	135	## Step 4: Add Custom Telemetry (Optional)	COMMENT
LOW	…umentation/Resources/examples/nodejs/postgres-setup.md	12	## Step 1: Install Package	COMMENT
LOW	…umentation/Resources/examples/nodejs/postgres-setup.md	18	## Step 2: Initialize at Startup	COMMENT
LOW	…umentation/Resources/examples/nodejs/postgres-setup.md	58	## Step 3: Configure Connection String	COMMENT
LOW	…umentation/Resources/examples/nodejs/postgres-setup.md	91	## Step 4: Add Custom Telemetry (Optional)	COMMENT
LOW	…rumentation/Resources/examples/nodejs/mongodb-setup.md	12	## Step 1: Install Package	COMMENT
LOW	…rumentation/Resources/examples/nodejs/mongodb-setup.md	18	## Step 2: Initialize at Startup	COMMENT
LOW	…rumentation/Resources/examples/nodejs/mongodb-setup.md	67	## Step 3: Configure Connection String	COMMENT
LOW	…rumentation/Resources/examples/nodejs/mongodb-setup.md	102	## Step 4: Add Custom Telemetry (Optional)	COMMENT
191 more matches not shown…

Hallucination Indicators18 hits · 180 pts

Severity	File	Line	Snippet	Context
CRITICAL	…ent.Tests/Services/ResilienceManagementServiceTests.cs	1341	DrillProperties properties = Azure.Mcp.Tools.ResilienceManagement.Commands.Drills.DrillConfiguration.Create(	STRING
CRITICAL	…ent.Tests/Services/ResilienceManagementServiceTests.cs	1358	Azure.Mcp.Tools.ResilienceManagement.Commands.Drills.DrillConfiguration.Create(DrillKind.Zonal, null, null,	STRING
CRITICAL	…ent.Tests/Services/ResilienceManagementServiceTests.cs	1366	DrillUpdateProperties properties = Azure.Mcp.Tools.ResilienceManagement.Commands.Drills.DrillConfiguration.Updat	STRING
CRITICAL	…ent.Tests/Services/ResilienceManagementServiceTests.cs	1380	ManagedServiceIdentity? identity = Azure.Mcp.Tools.ResilienceManagement.Commands.Drills.DrillConfiguration.Parse	STRING
CRITICAL	…ent.Tests/Services/ResilienceManagementServiceTests.cs	1396	Azure.Mcp.Tools.ResilienceManagement.Commands.Drills.DrillConfiguration.ParseManagedIdentity(json));	STRING
CRITICAL	…itor.Tests/HealthModels/HealthModelListCommandTests.cs	44	var array = System.Text.Json.Nodes.JsonNode.Parse(json)!["healthModels"]!.AsArray();	CODE
CRITICAL	….Mcp.Tools.IoTHub/src/Services/IoTHubRoutingService.cs	920	? $"{azureService.CloudConfiguration.ArmEnvironment.Endpoint.AbsoluteUri.TrimEnd('/')}{resourcePathOrNextLin	CODE
CRITICAL	…ts/Fabric.Mcp.Tools.Core.Tests/FabricCoreSetupTests.cs	116	// 2026-10-11 by @vukelich: Microsoft.Mcp.Core.Services.Http.HttpClientFactoryConfigurator.ConfigureDefaultHttpC	COMMENT
CRITICAL	…Azure.Mcp.Tools.Compute/src/Services/ComputeService.cs	839	vmssData.VirtualMachineProfile.OSProfile.LinuxConfiguration.SshPublicKeys.Add(new()	CODE
CRITICAL	…ore.Tests/Areas/Server/Helpers/MockMcpClientBuilder.cs	150	json["ttlMs"] = System.Text.Json.Nodes.JsonValue.Create((long)_timeToLive.Value.TotalMilliseconds);	CODE
CRITICAL	servers/Template.Mcp.Server/src/Program.cs	111	new Microsoft.Mcp.Core.Areas.Server.ServerSetup(),	CODE
CRITICAL	servers/Template.Mcp.Server/src/Program.cs	112	new Microsoft.Mcp.Core.Areas.Tools.ToolsSetup()	CODE
CRITICAL⚡	servers/Azure.Mcp.Server/src/Program.cs	179	new Azure.Mcp.Core.Areas.Group.GroupSetup(),	CODE
CRITICAL⚡	servers/Azure.Mcp.Server/src/Program.cs	180	new Microsoft.Mcp.Core.Areas.Server.ServerSetup(),	CODE
CRITICAL⚡	servers/Azure.Mcp.Server/src/Program.cs	181	new Azure.Mcp.Core.Areas.Subscription.SubscriptionSetup(),	CODE
CRITICAL⚡	servers/Azure.Mcp.Server/src/Program.cs	182	new Microsoft.Mcp.Core.Areas.Tools.ToolsSetup(),	CODE
CRITICAL	servers/Fabric.Mcp.Server/src/Program.cs	111	new Microsoft.Mcp.Core.Areas.Server.ServerSetup(),	CODE
CRITICAL	servers/Fabric.Mcp.Server/src/Program.cs	112	new Microsoft.Mcp.Core.Areas.Tools.ToolsSetup(),	CODE

Cross-File Repetition24 hits · 120 pts

Severity	File	Snippet	Context
HIGH	…Agent/src/Commands/Terraform/TerraformReviewCommand.cs	corrected bicep files are authoritative backend output. do not independently run bicep build, arm validate/what-if, or a	STRING
HIGH	…s.ResiliencyAgent/src/Commands/Arm/ArmReviewCommand.cs	corrected bicep files are authoritative backend output. do not independently run bicep build, arm validate/what-if, or a	STRING
HIGH	…siliencyAgent/src/Commands/Bicep/BicepReviewCommand.cs	corrected bicep files are authoritative backend output. do not independently run bicep build, arm validate/what-if, or a	STRING
HIGH	…/Areas/Server/Commands/ToolLoading/ServerToolLoader.cs	{ "type": "object", "properties": { "command": { "type": "string", "description": "the name of the tool to call." }, "pa	STRING
HIGH	…eas/Server/Commands/ToolLoading/NamespaceToolLoader.cs	{ "type": "object", "properties": { "command": { "type": "string", "description": "the name of the tool to call." }, "pa	STRING
HIGH	…s/Server/Commands/ToolLoading/SingleProxyToolLoader.cs	{ "type": "object", "properties": { "command": { "type": "string", "description": "the name of the tool to call." }, "pa	STRING
HIGH	…/Areas/Server/Commands/ToolLoading/ServerToolLoader.cs	{ "type": "object", "properties": { "intent": { "type": "string", "description": "the intent of the {{toolname}} operati	STRING
HIGH	…eas/Server/Commands/ToolLoading/NamespaceToolLoader.cs	{ "type": "object", "properties": { "intent": { "type": "string", "description": "the intent of the {{toolname}} operati	STRING
HIGH	…s/Server/Commands/ToolLoading/SingleProxyToolLoader.cs	{ "type": "object", "properties": { "intent": { "type": "string", "description": "the intent of the {{toolname}} operati	STRING
HIGH	…/Areas/Server/Commands/ToolLoading/ServerToolLoader.cs	{errormessage} - review the following command spec and identify the required arguments from the input schema. - omit any	STRING
HIGH	…eas/Server/Commands/ToolLoading/NamespaceToolLoader.cs	{errormessage} - review the following command spec and identify the required arguments from the input schema. - omit any	STRING
HIGH	…s/Server/Commands/ToolLoading/SingleProxyToolLoader.cs	{errormessage} - review the following command spec and identify the required arguments from the input schema. - omit any	STRING
HIGH	…/Areas/Server/Commands/ToolLoading/ServerToolLoader.cs	there was an error finding or calling tool and command. failed to call namespace: {namespacename}, command: {command} er	STRING
HIGH	…s/Server/Commands/ToolLoading/SingleProxyToolLoader.cs	there was an error finding or calling tool and command. failed to call namespace: {namespacename}, command: {command} er	STRING
HIGH	…eas/Server/Commands/ToolLoading/NamespaceToolLoader.cs	there was an error finding or calling tool and command. failed to call namespace: {namespacename}, command: {command} er	STRING
HIGH	…/Areas/Server/Commands/ToolLoading/ServerToolLoader.cs	here are the available commands and their input schema for '{namespacename}' tool. if you do not find a suitable "comman	STRING
HIGH	…eas/Server/Commands/ToolLoading/NamespaceToolLoader.cs	here are the available commands and their input schema for '{namespacename}' tool. if you do not find a suitable "comman	STRING
HIGH	…erver/Commands/ToolLoading/NamespaceToolLoaderTests.cs	here are the available commands and their input schema for '{namespacename}' tool. if you do not find a suitable "comman	STRING
HIGH	…/Areas/Server/Commands/ToolLoading/ServerToolLoader.cs	your task: - select the single command that best matches the user's intent. - return a valid json object that matches th	STRING
HIGH	…eas/Server/Commands/ToolLoading/NamespaceToolLoader.cs	your task: - select the single command that best matches the user's intent. - return a valid json object that matches th	STRING
HIGH	…s/Server/Commands/ToolLoading/SingleProxyToolLoader.cs	your task: - select the single command that best matches the user's intent. - return a valid json object that matches th	STRING
HIGH	…p.Server.Tests/Infrastructure/ConsolidatedModeTests.cs	{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}	STRING
HIGH	…Server.Tests/Infrastructure/ServerModeCoverageTests.cs	{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}	STRING
HIGH	….Mcp.Server.Tests/Infrastructure/ServerStartupTests.cs	{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}	STRING

Verbosity Indicators38 hits · 74 pts

Severity	File	Line	Snippet	Context
LOW⚡	eng/common/actions/login-to-github/action.yml	22	# # Step 1: Authenticate to Azure (required before this action)	COMMENT
LOW⚡	eng/common/actions/login-to-github/action.yml	29	# # Step 2: Mint GitHub App token	COMMENT
LOW⚡	eng/common/actions/login-to-github/action.yml	34	# # Step 3: Use the token (available as env var in all subsequent steps)	COMMENT
LOW	…p.Tools.AzureBackup/src/Services/AzureBackupService.cs	695	// Step 1: List all vaults (RSV + DPP) in the subscription (parallelized)	COMMENT
LOW	…p.Tools.AzureBackup/src/Services/AzureBackupService.cs	733	// Step 2: Collect all protected datasource ARM IDs from every vault	COMMENT
LOW	…p.Tools.AzureBackup/src/Services/AzureBackupService.cs	800	// Step 3: List all resources of protectable types in the subscription	COMMENT
LOW	…p.Tools.AzureBackup/src/Services/AzureBackupService.cs	860	// Step 4: Enrich with RSV protectable items (sub-resources like SQL DBs, file shares)	COMMENT
LOW	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	31	// Step 1: Detect language	COMMENT
LOW	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	44	// Step 2: Detect projects	COMMENT
LOW	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	57	// Step 3: Detect instrumentation state (greenfield/brownfield)	COMMENT
LOW	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	75	// Step 4: Check for multiple instrumentable projects	COMMENT
LOW⚡	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	120	// Step 5: Find appropriate generator	COMMENT
LOW⚡	…itor/src/Instrumentation/Pipeline/WorkspaceAnalyzer.cs	127	// Step 6: Generate spec	COMMENT
LOW⚡	…nstrumentation/Generators/PythonGreenfieldGenerator.cs	54	// Step 1: Review educational materials	COMMENT
LOW⚡	…nstrumentation/Generators/PythonGreenfieldGenerator.cs	60	// Step 2: Add azure-monitor-opentelemetry package	COMMENT
LOW	…nstrumentation/Generators/PythonGreenfieldGenerator.cs	111	// Step 3: Add instrumentation code to entry point	COMMENT
LOW⚡	…nstrumentation/Generators/PythonGreenfieldGenerator.cs	136	// Step 4: Configure connection string with full .env.example content	COMMENT
LOW⚡	…nstrumentation/Generators/PythonGreenfieldGenerator.cs	145	// Step 5: Add PowerShell script for setting environment variables	COMMENT
LOW⚡	…Mcp.Tools.Docs.Tests/Commands/CombinedWorkflowTests.cs	58	// Step 1: List all item types using the real service	COMMENT
LOW⚡	…Mcp.Tools.Docs.Tests/Commands/CombinedWorkflowTests.cs	64	// Step 2: For each item type, get its API spec	COMMENT
LOW⚡	…Mcp.Tools.Docs.Tests/Commands/CombinedWorkflowTests.cs	77	// Step 1: List all item types	COMMENT
LOW⚡	…Mcp.Tools.Docs.Tests/Commands/CombinedWorkflowTests.cs	82	// Step 2: For each item type, get its item definition.	COMMENT
LOW⚡	…Mcp.Tools.Docs.Tests/Commands/CombinedWorkflowTests.cs	146	// Step 1: List all item types	COMMENT
LOW⚡	…Mcp.Tools.Docs.Tests/Commands/CombinedWorkflowTests.cs	151	// Step 2: For each item type, get both API spec and item definition	COMMENT
LOW⚡	…Mcp.Tools.Docs.Tests/Commands/CombinedWorkflowTests.cs	171	// Step 1: List item types	COMMENT
LOW⚡	…Mcp.Tools.Docs.Tests/Commands/CombinedWorkflowTests.cs	176	// Step 2: For each item type, get APIs, definitions, and examples	COMMENT
LOW⚡	…Mcp.Tools.Docs.Tests/Commands/CombinedWorkflowTests.cs	232	// Step 1: List item types	COMMENT
LOW⚡	…Mcp.Tools.Docs.Tests/Commands/CombinedWorkflowTests.cs	237	// Step 2: For each item type, verify the API spec result contains parseable JSON content	COMMENT
LOW⚡	…Azure.Mcp.Tools.AppLens/src/Services/AppLensService.cs	42	// Step 1: Find the resource using ARG	COMMENT
LOW⚡	…Azure.Mcp.Tools.AppLens/src/Services/AppLensService.cs	52	// Step 2: Get AppLens session	COMMENT
LOW⚡	…Azure.Mcp.Tools.AppLens/src/Services/AppLensService.cs	62	// Step 3: Ask AppLens the diagnostic question	COMMENT
LOW	…s/Azure.Mcp.Tools.Compute.Tests/ComputeCommandTests.cs	603	// Step 1: Stop the VM (assumes VM starts in running state from test-resources deployment)	COMMENT
LOW	…s/Azure.Mcp.Tools.Compute.Tests/ComputeCommandTests.cs	621	// Step 2: Start the VM from stopped state	COMMENT
LOW	…s/Azure.Mcp.Tools.Compute.Tests/ComputeCommandTests.cs	637	// Step 3: Restart the VM (requires running state)	COMMENT
LOW	…s/Azure.Mcp.Tools.Compute.Tests/ComputeCommandTests.cs	653	// Step 4: Stop with skip-shutdown (VM is running after restart)	COMMENT
LOW	…s/Azure.Mcp.Tools.Compute.Tests/ComputeCommandTests.cs	670	// Step 5: Deallocate the VM (VM is stopped)	COMMENT
LOW	…s/Azure.Mcp.Tools.Compute.Tests/ComputeCommandTests.cs	686	// Step 6: Start with no-wait (VM is deallocated, restore to running state)	COMMENT
LOW	…Azure/Authentication/AuthenticationIntegrationTests.cs	68	// Step 2: Now test the subscription service which will use our CustomChainedCredential internally	COMMENT

Decorative Section Separators14 hits · 42 pts

Severity	File	Line	Snippet	Context
MEDIUM	eng/common/testproxy/rotate.sh	2	# =============================================================================	COMMENT
MEDIUM	eng/common/testproxy/rotate.sh	18	# =============================================================================	COMMENT
MEDIUM	…/Instrumentation/Generators/BrownfieldGeneratorBase.cs	17	// ── Subclass contracts ──────────────────────────────────────────────	COMMENT
MEDIUM	…/Instrumentation/Generators/BrownfieldGeneratorBase.cs	66	// ── Shared implementation ───────────────────────────────────────────	COMMENT
MEDIUM	…/Instrumentation/Generators/BrownfieldGeneratorBase.cs	182	// ── Shared helpers ──────────────────────────────────────────────────	COMMENT
MEDIUM	…/Instrumentation/Generators/BrownfieldGeneratorBase.cs	304	// ── TelemetryClient ─────────────────────────────────────────────────	COMMENT
MEDIUM	…/Instrumentation/Generators/BrownfieldGeneratorBase.cs	388	// ── Initializers ────────────────────────────────────────────────────	COMMENT
MEDIUM	…/Instrumentation/Generators/BrownfieldGeneratorBase.cs	469	// ── Processors ──────────────────────────────────────────────────────	COMMENT
MEDIUM	…/Instrumentation/Generators/BrownfieldGeneratorBase.cs	506	// ── Sampling ────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/Instrumentation/Generators/BrownfieldGeneratorBase.cs	526	// ── Shared service-options helpers ───────────────────────────────────	COMMENT
MEDIUM	…/Instrumentation/Generators/BrownfieldGeneratorBase.cs	605	// ── TelemetryChannel / TelemetrySinks ───────────────────────────────	COMMENT
MEDIUM	…/Instrumentation/Generators/BrownfieldGeneratorBase.cs	649	// ── Logging ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	…Core.Tests/Services/Telemetry/TelemetryServiceTests.cs	588	// ── SetClientNameAndVersion tests ──────────────────────────────────────────	COMMENT
MEDIUM	…Tests/Areas/Server/Commands/Runtime/McpRuntimeTests.cs	600	// ── W3C trace context capture tests ───────────────────────────────────────	COMMENT

Fake / Example Data38 hits · 38 pts

Severity	File	Line	Snippet	Context
LOW	…Services/MySqlServiceConnectionStringInjectionTests.cs	28	"fake-token");	CODE
LOW	…Services/MySqlServiceConnectionStringInjectionTests.cs	47	"fake-token");	CODE
LOW	…Services/MySqlServiceConnectionStringInjectionTests.cs	82	"fake-token");	CODE
LOW	…rumentation/Resources/examples/nodejs/console-setup.md	130	log('info', 'User created', { userId: 123, email: 'user@example.com' });	CODE
LOW	…Tests/Services/IoTHubRoutingServiceDiagnosticsTests.cs	417	Assert.Equal("fake-token", request.Headers.Authorization?.Parameter);	CODE
LOW	…Tests/Services/IoTHubRoutingServiceDiagnosticsTests.cs	727	.Returns(new AccessToken("fake-token", DateTimeOffset.UtcNow.AddHours(1)));	CODE
LOW	….Mcp.Tools.IoTHub.Tests/Services/IoTHubServiceTests.cs	75	.Returns(new AccessToken("fake-token", DateTimeOffset.UtcNow.AddHours(1)));	CODE
LOW	…ols.IoTHub.Tests/Services/IoTHubRoutingServiceTests.cs	307	.Returns(new AccessToken("fake-token", DateTimeOffset.UtcNow.AddHours(1)));	CODE
LOW	…sts/Services/PostgresServiceParameterizedQueryTests.cs	37	.Returns(new AccessToken("fake-token", DateTime.UtcNow.AddHours(1)));	CODE
LOW	…ostgres.Tests/Services/PostgresServiceRowLimitTests.cs	38	.Returns(new Azure.Core.AccessToken("fake-token", DateTime.UtcNow.AddHours(1)));	CODE
LOW	….Tools.Postgres.Tests/Services/PostgresServiceTests.cs	42	.Returns(new Azure.Core.AccessToken("fake-token", DateTime.UtcNow.AddHours(1)));	CODE
LOW	…vices/PostgresServiceConnectionStringInjectionTests.cs	36	.Returns(new AccessToken("fake-token", DateTime.UtcNow.AddHours(1)));	CODE
LOW	…s/Services/PostgresServiceServerNameValidationTests.cs	41	.Returns(new AccessToken("fake-token", DateTime.UtcNow.AddHours(1)));	CODE
LOW	…sts/Azure.Mcp.Tools.Cosmos.Tests/CosmosServiceTests.cs	417	var token = new AccessToken("fake-token", DateTimeOffset.UtcNow.AddHours(1));	CODE
LOW	…loymentPipelines/ListDeploymentPipelineOperations.json	41	"content": "Lorem ipsum odor amet, consectetuer adipiscing elit. Himenaeos litora volutpat s	CODE
LOW	…/ListDeploymentPipelineOperationsWithContinuation.json	41	"content": "Lorem ipsum odor amet, consectetuer adipiscing elit. Himenaeos litora volutpat s	CODE
LOW	…s/Azure.Mcp.Tools.Adme.Tests/AdmeServiceHelperTests.cs	164	.Returns(new AccessToken("fake-token", DateTimeOffset.UtcNow.AddHours(1)));	CODE
LOW	…re.Mcp.Tools.Adme.Tests/Services/SearchServiceTests.cs	158	.Returns(new AccessToken("fake-token", DateTimeOffset.UtcNow.AddHours(1)));	CODE
LOW	…re.Mcp.Tools.Adme.Tests/Services/SchemaServiceTests.cs	167	private static IAzureTokenCredentialProvider CreateCredentialProvider(string token = "fake-token")	CODE
LOW	…re.Mcp.Tools.Adme.Tests/Services/HealthServiceTests.cs	159	private static IAzureTokenCredentialProvider CreateCredentialProvider(string token = "fake-token")	CODE
LOW	…e.Mcp.Tools.Adme.Tests/Services/StorageServiceTests.cs	361	string token = "fake-token", string? tenant = null)	CODE
LOW	…Tools.OneLake.Tests/TestSupport/FakeTokenCredential.cs	8	internal sealed class FakeTokenCredential(string token = "fake-token") : TokenCredential	CODE
LOW	…ts/Services/WorkspaceCapacityAssignmentServiceTests.cs	47	Assert.Equal("fake-token", request.Headers.Authorization?.Parameter);	CODE
LOW	…ts/Services/WorkspaceCapacityAssignmentServiceTests.cs	254	return new ValueTask<AccessToken>(new AccessToken("fake-token", DateTimeOffset.MaxValue));	CODE
LOW	…ts/Services/WorkspaceCapacityAssignmentServiceTests.cs	296	.Returns(new ValueTask<AccessToken>(new AccessToken("fake-token", DateTimeOffset.MaxValue)));	CODE
LOW⚡	…s/Server/Commands/ToolLoading/ServerToolLoaderTests.cs	329	[InlineData("user@example.com", "account_list", TagConstants.Unknown, TagConstants.Unknown)]	CODE
LOW⚡	…s/Server/Commands/ToolLoading/ServerToolLoaderTests.cs	330	[InlineData("storage", "user@example.com", TagConstants.Unknown, "storage")]	CODE
LOW⚡	…s/Server/Commands/ToolLoading/ServerToolLoaderTests.cs	334	[InlineData("STORAGE", "user@example.com", TagConstants.Unknown, "storage")]	CODE
LOW	…Server/Commands/ToolLoading/RegistryToolLoaderTests.cs	683	[InlineData("user@example.com")]	CODE
LOW	…Server/Commands/ToolLoading/RegistryToolLoaderTests.cs	712	[InlineData("user@example.com")]	CODE
LOW	…erver/Commands/ToolLoading/CompositeToolLoaderTests.cs	210	[InlineData("user@example.com")]	STRING
LOW	…erver/Commands/ToolLoading/NamespaceToolLoaderTests.cs	241	[InlineData("user@example.com", TagConstants.Unknown, false)]	CODE
LOW	…erver/Commands/ToolLoading/NamespaceToolLoaderTests.cs	242	[InlineData("user@example.com", TagConstants.Unknown, true)]	CODE
LOW	…erver/Commands/ToolLoading/NamespaceToolLoaderTests.cs	256	["command"] = "user@example.com",	CODE
LOW	…ver/Commands/ToolLoading/SingleProxyToolLoaderTests.cs	316	["tool"] = "user@example.com",	STRING
LOW	…ver/Commands/ToolLoading/SingleProxyToolLoaderTests.cs	317	["command"] = "user@example.com",	STRING
LOW	…ver/Commands/ToolLoading/SingleProxyToolLoaderTests.cs	1051	[InlineData("user@example.com")]	CODE
LOW	…/Commands/ToolLoading/CommandFactoryToolLoaderTests.cs	477	[InlineData("user@example.com")]	CODE

AI Slop Vocabulary16 hits · 33 pts

Severity	File	Line	Snippet	Context
LOW	eng/pipelines/templates/jobs/integration.yml	14	# On linux, we'd need mono to run nuget, so just use windows	COMMENT
LOW	…pipelines/templates/jobs/nuget/pack-and-sign-nuget.yml	11	# On linux, we'd need mono to run nuget, so just use windows	COMMENT
MEDIUM	…/pipelines/templates/steps/save-package-properties.yml	55	# Instead, we will save the changed services to a file, attach it as an attachment for PiplineWitness to pick up a	COMMENT
MEDIUM	…Deploy/src/Services/Util/DeploymentPlanTemplateUtil.cs	146	var iacRuleTool = parameters.IacType.Equals("bicep", StringComparison.InvariantCultureIgnoreCase) ? "Then call t	CODE
MEDIUM	…rces/fabric-rest-api-specs/contents/admin/swagger.json	1270	"description": "> [!NOTE]\n> This preview API will be deprecated on March 31, 2026, and replaced by a stable ver	CODE
MEDIUM	…rces/fabric-rest-api-specs/contents/admin/swagger.json	1332	"description": "> [!NOTE]\n> This preview API will be deprecated on March 31, 2026, and replaced by a stable ver	CODE
MEDIUM	…rces/fabric-rest-api-specs/contents/admin/swagger.json	1527	"description": "> [!NOTE]\n> This preview API will be deprecated on March 31, 2026, and replaced by a stable ver	CODE
MEDIUM	…rces/fabric-rest-api-specs/contents/admin/swagger.json	1587	"description": "> [!NOTE]\n> This preview API will be deprecated on March 31, 2026, and replaced by a stable ver	CODE
MEDIUM	…abric-rest-api-specs/contents/environment/swagger.json	19	"description": "> [!NOTE]\n> This API is part of a Beta release and is provided for evaluation and development p	CODE
MEDIUM	…abric-rest-api-specs/contents/environment/swagger.json	93	"description": "> [!NOTE]\n> This API is part of a Beta release and is provided for evaluation and development p	CODE
MEDIUM	…abric-rest-api-specs/contents/environment/swagger.json	181	"description": "> [!NOTE]\n> This API is part of a Beta release and is provided for evaluation and development p	CODE
MEDIUM	…abric-rest-api-specs/contents/environment/swagger.json	1265	"description": "> [!NOTE]\n> This API is part of a Beta release and is provided for evaluation and development p	CODE
MEDIUM	…abric-rest-api-specs/contents/environment/swagger.json	1758	"description": "> [!NOTE]\n> This API is part of a Beta release and is provided for evaluation and development p	CODE
MEDIUM	…abric-rest-api-specs/contents/environment/swagger.json	1989	"description": "> [!NOTE]\n> This API is part of a Beta release and is provided for evaluation and development p	CODE
MEDIUM	…rvices/Azure/Authentication/CustomChainedCredential.cs	15	/// InteractiveBrowserCredential to provide a seamless authentication experience.	COMMENT
MEDIUM	servers/Azure.Mcp.Server/mcpb/manifest.json	7	"long_description": "All Azure MCP tools in a single server. The Azure MCP Server implements the [MCP specification](h	CODE

Modern AI Meta-Vocabulary12 hits · 32 pts

Severity	File	Line	Snippet	Context
MEDIUM	eng/tools/CopilotCliTester/README.md	51	├── Program.cs # CLI entry point, orchestration, report generation	CODE
MEDIUM	…Server.Distributed.Tests/RealServerIntegrationTests.cs	373	#pragma warning disable S1144 // Constructor used via dependency injection	COMMENT
MEDIUM	.github/agents/agentic-workflows.md	45	- Configuration: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/github-agentic-workflows.md`	CODE
MEDIUM⚡	.github/agents/agentic-workflows.md	69	Prompt file: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/create-agentic-workflow.md`	CODE
MEDIUM⚡	.github/agents/agentic-workflows.md	79	Prompt file: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/update-agentic-workflow.md`	CODE
MEDIUM⚡	.github/agents/agentic-workflows.md	89	Prompt file: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/debug-agentic-workflow.md`	CODE
MEDIUM⚡	.github/agents/agentic-workflows.md	99	Prompt file: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/upgrade-agentic-workflows.md`	CODE
MEDIUM	.github/agents/agentic-workflows.md	119	Prompt file: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/create-shared-agentic-workflow.md`	CODE
MEDIUM	.github/agents/agentic-workflows.md	193	# Initialize repository for agentic workflows	COMMENT
MEDIUM	.github/agents/agentic-workflows.md	225	- Always reference the instructions file at `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/github-agent	CODE
MEDIUM	servers/Azure.Mcp.Server/docs/azmcp-commands.md	4105	# Start deterministic instrumentation orchestration for a local workspace	COMMENT
MEDIUM	servers/Azure.Mcp.Server/docs/azmcp-commands.md	4109	# Continue orchestration after completing the previous action	COMMENT

Synthetic Comment Markers4 hits · 30 pts

Severity	File	Line	Snippet	Context
HIGH	…ure.Mcp.Tools.Storage.Tests/StorageDiskCommandTests.cs	1	// Generated by AI (UnitTest MCP)	COMMENT
HIGH	…p.Tools.Storage.Tests/Disk/DiskDiagnoseCommandTests.cs	1	// Generated by AI (UnitTest MCP)	COMMENT
HIGH	…rage.Tests/Services/StorageServiceDiskDiagnoseTests.cs	1	// Generated by AI (UnitTest MCP)	COMMENT
HIGH	…ls.Storage.Tests/Services/AttachedDiskResolverTests.cs	1	// Generated by AI (UnitTest MCP)	COMMENT

Excessive Try-Catch Wrapping10 hits · 13 pts

Severity	File	Line	Snippet	Context
MEDIUM	eng/pypi/__init__.py	65	print(f"Error: Executable not found at {executable_path}", file=sys.stderr)	CODE
MEDIUM	eng/pypi/__init__.py	80	print(f"Error: Permission denied executing {executable_path}", file=sys.stderr)	CODE
MEDIUM	eng/pypi/__init__.py	84	print(f"Error executing {executable_path}: {e}", file=sys.stderr)	CODE
LOW	…/common/pipelines/templates/steps/mashup-doc-index.yml	53	except Exception as e:	CODE
LOW	…/common/pipelines/templates/steps/mashup-doc-index.yml	72	except Exception as e:	CODE
LOW	…n/pipelines/templates/steps/replace-relative-links.yml	211	except Exception as e:	CODE
LOW	…rumentation/Resources/examples/python/generic-setup.md	108	except Exception as e:	CODE
LOW	…rumentation/Resources/examples/python/console-setup.md	292	except Exception as e:	CODE
LOW	…rumentation/Resources/examples/python/fastapi-setup.md	157	except Exception as e:	CODE
LOW	…strumentation/Resources/examples/python/flask-setup.md	114	except Exception as e:	CODE

Hyper-Verbose Identifiers10 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	…common/docgeneration/templates/matthews/styles/main.js	95	function httpGetAsyncFallbackOnFail(targetUrl, successCallback, failureCallback) {	CODE
LOW	…n/pipelines/templates/steps/replace-relative-links.yml	94	def replace_predefined_relative_links(match, readme_location, root_folder, build_sha, repo_id):	CODE
LOW	…n/pipelines/templates/steps/replace-relative-links.yml	123	def transfer_content_to_absolute_references(	CODE
LOW	eng/common/scripts/eval/build-eval-summary.ts	198	export function formatEvalSummaryMarkdown(shards, incompleteShards = []) {	CODE
LOW	…s/Azure.Mcp.Tools.Cosmos/src/Services/CosmosService.cs	854	internal class UserPolicyRequestHandler : RequestHandler	CODE
LOW	…rces/item-definitions/user-data-function-definition.md	415	def query_data_from_warehouse(myWarehouse: fn.FabricSqlConnection) -> list:	CODE
LOW	servers/Template.Mcp.Server/vscode/src/extension.ts	14	function showMcpManualStartNotification() {	CODE
LOW	servers/Azure.Mcp.Server/vscode/src/extension.ts	15	function showMcpManualStartNotification() {	CODE
LOW	…scode/src/test/outerloop/elicitation.outerloop.spec.js	198	async function clearSharedVsCodeDownloadCache() {	CODE
LOW	servers/Fabric.Mcp.Server/vscode/src/extension.ts	14	function showMcpManualStartNotification() {	CODE

Magic Placeholder Names2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	…nstrumentation/Generators/PythonGreenfieldGenerator.cs	555	OPENAI_API_KEY=sk-your-api-key-here");	CODE
HIGH	…nstrumentation/Generators/PythonGreenfieldGenerator.cs	594	$env:OPENAI_API_KEY = ""sk-your-api-key-here""");	CODE

Redundant / Tautological Comments2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	…elines/templates/jobs/archetype-sdk-tests-generate.yml	21	# Set this to false to do a full checkout for private repositories with the azure pipelines service connection	COMMENT
LOW	…ommon/pipelines/templates/jobs/generate-job-matrix.yml	21	# Set this to false to do a full checkout for private repositories with the azure pipelines service connection	COMMENT

Slop Phrases1 hit · 1 pts

Severity	File	Line	Snippet	Context
MEDIUM	…re.Mcp.Tools.Insights.Tests/InsightsGetCommandTests.cs	327	[InlineData("Sorry, I'm unable to comply with these instructions.")] // model refusal (prose)	STRING

microsoft/mcp

Open-Source Code Quality, Security and Technical Debt Review