mukul975/Anthropic-Cybersecurity-Skills

16.1

Adjusted Score

16.1

Raw Score

100%

Time Factor

2026-06-26

Last Push

25.5K

Stars

Python

Language

582.4K

Lines of Code

3.7K

Files

6.8K

Pattern Hits

2026-07-14

Scan Date

0.02

HC Hit Rate

What These Metrics Mean

Adjusted Score: Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score: The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor: The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits: Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate: High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files: Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 78MEDIUM 398LOW 6293

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 6769 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Structural Annotation Overuse2886 hits · 4564 pts

Severity	File	Line	Snippet	Context
LOW	…rming-malware-hash-enrichment-with-virustotal/SKILL.md	70	### Step 1: Query VirusTotal for Hash Report	COMMENT
LOW	…rming-malware-hash-enrichment-with-virustotal/SKILL.md	163	### Step 2: Batch Hash Enrichment with Rate Limiting	COMMENT
LOW	…rming-malware-hash-enrichment-with-virustotal/SKILL.md	203	### Step 3: Extract Network Indicators for Pivoting	COMMENT
LOW	…rming-malware-hash-enrichment-with-virustotal/SKILL.md	255	### Step 4: YARA Rule Matching and Threat Classification	COMMENT
LOW	…rming-malware-hash-enrichment-with-virustotal/SKILL.md	295	### Step 5: Generate Enrichment Report	COMMENT
LOW	skills/analyzing-uefi-bootkit-persistence/SKILL.md	68	### Step 1: Dump SPI Flash Firmware	COMMENT
LOW	skills/analyzing-uefi-bootkit-persistence/SKILL.md	95	### Step 2: Inspect UEFI Variables	COMMENT
LOW	skills/analyzing-uefi-bootkit-persistence/SKILL.md	120	### Step 3: Analyze EFI System Partition (ESP)	COMMENT
LOW	skills/analyzing-uefi-bootkit-persistence/SKILL.md	151	### Step 4: Scan Firmware for Known Bootkit Signatures	COMMENT
LOW	skills/analyzing-uefi-bootkit-persistence/SKILL.md	175	### Step 5: Detect Secure Boot Bypass Mechanisms	COMMENT
LOW	skills/analyzing-uefi-bootkit-persistence/SKILL.md	204	### Step 6: Perform Boot Chain Integrity Verification	COMMENT
LOW	skills/analyzing-uefi-bootkit-persistence/SKILL.md	229	### Step 7: Document UEFI Bootkit Analysis Findings	COMMENT
LOW⚡	…implementing-just-in-time-access-provisioning/SKILL.md	74	### Step 1: Identify Eligible Access Types	COMMENT
LOW⚡	…implementing-just-in-time-access-provisioning/SKILL.md	81	### Step 2: Design Approval Workflows	COMMENT
LOW⚡	…implementing-just-in-time-access-provisioning/SKILL.md	88	### Step 3: Implement Time-Bound Access	COMMENT
LOW⚡	…implementing-just-in-time-access-provisioning/SKILL.md	95	### Step 4: Integration Architecture	COMMENT
LOW⚡	…implementing-just-in-time-access-provisioning/SKILL.md	102	### Step 5: Monitoring and Compliance	COMMENT
LOW	…nting-security-information-sharing-with-stix2/SKILL.md	64	### Step 1: Install Dependencies	COMMENT
LOW	…nting-security-information-sharing-with-stix2/SKILL.md	70	### Step 2: Create STIX 2.1 Domain Objects (SDOs)	COMMENT
LOW	…nting-security-information-sharing-with-stix2/SKILL.md	138	### Step 3: Create STIX Indicators with Patterns	COMMENT
LOW	…nting-security-information-sharing-with-stix2/SKILL.md	193	### Step 4: Build Relationships Between Objects	COMMENT
LOW	…nting-security-information-sharing-with-stix2/SKILL.md	244	### Step 5: Assemble and Serialize a STIX Bundle	COMMENT
LOW	…nting-security-information-sharing-with-stix2/SKILL.md	286	### Step 6: Consume Intelligence from a TAXII 2.1 Server	COMMENT
LOW	…nting-security-information-sharing-with-stix2/SKILL.md	332	### Step 7: Publish Intelligence to a TAXII 2.1 Server	COMMENT
LOW	…nting-security-information-sharing-with-stix2/SKILL.md	371	### Step 8: Validate and Lint STIX Objects	COMMENT
LOW	…mplementing-dragos-platform-for-ot-monitoring/SKILL.md	66	### Step 1: Deploy Dragos Sensors and Configure Monitoring	COMMENT
LOW	…mplementing-dragos-platform-for-ot-monitoring/SKILL.md	244	### Step 2: Configure Detection Analytics and Knowledge Packs	COMMENT
LOW	…implementing-security-monitoring-with-datadog/SKILL.md	73	### Step 1: Deploy and Configure the Datadog Agent for Security	COMMENT
LOW	…implementing-security-monitoring-with-datadog/SKILL.md	147	### Step 2: Configure Cloud Log Sources for SIEM	COMMENT
LOW	…implementing-security-monitoring-with-datadog/SKILL.md	184	### Step 3: Enable and Customize Detection Rules	COMMENT
LOW	…implementing-security-monitoring-with-datadog/SKILL.md	248	### Step 4: Configure Workload Protection (CSM Threats)	COMMENT
LOW	…implementing-security-monitoring-with-datadog/SKILL.md	283	### Step 5: Build Security Dashboards	COMMENT
LOW	…implementing-security-monitoring-with-datadog/SKILL.md	319	### Step 6: Configure Notification Workflows	COMMENT
LOW	…implementing-security-monitoring-with-datadog/SKILL.md	352	### Step 7: Validate and Tune Detection Coverage	COMMENT
LOW	…xploiting-broken-function-level-authorization/SKILL.md	59	### Step 1: Administrative Endpoint Discovery	COMMENT
LOW	…xploiting-broken-function-level-authorization/SKILL.md	124	### Step 2: Role-Based Function Testing	COMMENT
LOW	…xploiting-broken-function-level-authorization/SKILL.md	174	### Step 3: HTTP Method Manipulation	COMMENT
LOW	…xploiting-broken-function-level-authorization/SKILL.md	201	### Step 4: Parameter-Based Privilege Escalation	COMMENT
LOW	…xploiting-broken-function-level-authorization/SKILL.md	264	### Step 5: API Version and Path Traversal for Admin Access	COMMENT
LOW⚡	…nction-level-authorization/references/api-reference.md	19	### Step 1: Discover Endpoints	COMMENT
LOW⚡	…nction-level-authorization/references/api-reference.md	28	### Step 2: Test with Low-Priv Token	COMMENT
LOW⚡	…nction-level-authorization/references/api-reference.md	34	### Step 3: Test HTTP Method Switching	COMMENT
LOW	…mplementing-honeypot-for-ransomware-detection/SKILL.md	93	### Step 1: Deploy Canary Files on File Shares	COMMENT
LOW	…mplementing-honeypot-for-ransomware-detection/SKILL.md	134	### Step 2: Configure File Integrity Monitoring on Canary Files	COMMENT
LOW	…mplementing-honeypot-for-ransomware-detection/SKILL.md	210	### Step 3: Deploy Honeypot Network Shares	COMMENT
LOW	…mplementing-honeypot-for-ransomware-detection/SKILL.md	252	### Step 4: Deploy Thinkst Canary Tokens	COMMENT
LOW	…mplementing-honeypot-for-ransomware-detection/SKILL.md	287	### Step 5: Integrate Alerts with SIEM and Automated Response	COMMENT
LOW	…ills/implementing-aws-security-hub-compliance/SKILL.md	55	### Step 1: Enable Security Hub with Compliance Standards	COMMENT
LOW	…ills/implementing-aws-security-hub-compliance/SKILL.md	79	### Step 2: Configure Multi-Account Aggregation	COMMENT
LOW	…ills/implementing-aws-security-hub-compliance/SKILL.md	102	### Step 3: Review Compliance Scores and Failed Controls	COMMENT
LOW	…ills/implementing-aws-security-hub-compliance/SKILL.md	130	### Step 4: Create Custom Security Insights	COMMENT
LOW	…ills/implementing-aws-security-hub-compliance/SKILL.md	159	### Step 5: Configure Automated Remediation with EventBridge	COMMENT
LOW	…ills/implementing-aws-security-hub-compliance/SKILL.md	218	### Step 6: Export Findings and Generate Compliance Reports	COMMENT
LOW	…analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md	75	### Step 1: Query ATT&CK Data Programmatically	COMMENT
LOW	…analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md	101	### Step 2: Map Threat Actor to ATT&CK Techniques	COMMENT
LOW	…analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md	132	### Step 3: Generate ATT&CK Navigator Layer	COMMENT
LOW	…analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md	200	### Step 4: Identify Detection Gaps	COMMENT
LOW	…analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md	238	### Step 5: Cross-Group Technique Comparison	COMMENT
LOW	skills/analyzing-dns-logs-for-exfiltration/SKILL.md	59	### Step 1: Detect DNS Tunneling via Subdomain Length Analysis	COMMENT
LOW	skills/analyzing-dns-logs-for-exfiltration/SKILL.md	82	### Step 2: Detect High-Entropy Domain Queries (DGA Detection)	COMMENT
2826 more matches not shown…

Deep Nesting972 hits · 948 pts

Severity	File	Line	Context
LOW	…implementing-gcp-binary-authorization/scripts/agent.py	137	CODE
LOW	…-identity-verification-for-zero-trust/scripts/agent.py	101	CODE
LOW	…dentity-verification-for-zero-trust/scripts/process.py	234	CODE
LOW	…dentity-verification-for-zero-trust/scripts/process.py	340	CODE
LOW	…lware-hash-enrichment-with-virustotal/scripts/agent.py	108	CODE
LOW	…g-gcp-organization-policy-constraints/scripts/agent.py	145	CODE
LOW	…gcp-organization-policy-constraints/scripts/process.py	112	CODE
LOW	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	189	CODE
LOW	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	419	CODE
LOW	…ng-just-in-time-access-provisioning/scripts/process.py	220	CODE
LOW	…ing-honeypot-for-ransomware-detection/scripts/agent.py	98	CODE
LOW	…g-honeypot-for-ransomware-detection/scripts/process.py	240	CODE
LOW	…g-honeypot-for-ransomware-detection/scripts/process.py	222	CODE
LOW	…lementing-aws-security-hub-compliance/scripts/agent.py	88	CODE
LOW	…g-threat-actor-ttps-with-mitre-attack/scripts/agent.py	33	CODE
LOW	…g-threat-actor-ttps-with-mitre-attack/scripts/agent.py	52	CODE
LOW	…threat-actor-ttps-with-mitre-attack/scripts/process.py	301	CODE
LOW	skills/escaping-containers-to-host/scripts/agent.py	35	CODE
LOW	skills/escaping-containers-to-host/scripts/agent.py	69	CODE
LOW	…tracting-credentials-from-memory-dump/scripts/agent.py	72	CODE
LOW	…ills/analyzing-linux-system-artifacts/scripts/agent.py	48	CODE
LOW	…ills/analyzing-linux-system-artifacts/scripts/agent.py	106	CODE
LOW	…ills/analyzing-linux-system-artifacts/scripts/agent.py	207	CODE
LOW	…core-for-vulnerability-prioritization/scripts/agent.py	46	CODE
LOW	…re-for-vulnerability-prioritization/scripts/process.py	52	CODE
LOW	…001-information-security-management/scripts/process.py	163	CODE
LOW	…s/hunting-for-dns-tunneling-with-zeek/scripts/agent.py	29	CODE
LOW	…hunting-for-dns-tunneling-with-zeek/scripts/process.py	33	CODE
LOW	…scanning-infrastructure-with-nessus/scripts/process.py	396	CODE
LOW	…scanning-infrastructure-with-nessus/scripts/process.py	143	CODE
LOW	…scanning-infrastructure-with-nessus/scripts/process.py	225	CODE
LOW	…ing-anomalous-authentication-patterns/scripts/agent.py	123	CODE
LOW	…mplementing-patch-management-workflow/scripts/agent.py	216	CODE
LOW	…lementing-patch-management-workflow/scripts/process.py	277	CODE
LOW	…nting-mobile-application-management/scripts/process.py	41	CODE
LOW	…/performing-jwt-none-algorithm-attack/scripts/agent.py	132	CODE
LOW	…ills/performing-service-account-audit/scripts/agent.py	58	CODE
LOW	…ls/performing-service-account-audit/scripts/process.py	83	CODE
LOW	…ls/performing-service-account-audit/scripts/process.py	110	CODE
LOW	…s/performing-api-rate-limiting-bypass/scripts/agent.py	54	CODE
LOW	…ting-for-process-injection-techniques/scripts/agent.py	52	CODE
LOW	…ing-vulnerabilities-with-cvss-scoring/scripts/agent.py	75	CODE
LOW	…g-vulnerabilities-with-cvss-scoring/scripts/process.py	309	CODE
LOW	…g-vulnerabilities-with-cvss-scoring/scripts/process.py	128	CODE
LOW	…g-vulnerabilities-with-cvss-scoring/scripts/process.py	271	CODE
LOW	…s/abusing-dpapi-for-credential-access/scripts/agent.py	96	CODE
LOW	…ilding-patch-tuesday-response-process/scripts/agent.py	74	CODE
LOW	…ilding-patch-tuesday-response-process/scripts/agent.py	104	CODE
LOW	…ding-patch-tuesday-response-process/scripts/process.py	72	CODE
LOW	…ding-patch-tuesday-response-process/scripts/process.py	90	CODE
LOW	…t-modeling-with-owasp-threat-dragon/scripts/process.py	45	CODE
LOW	…ting-network-deception-with-honeypots/scripts/agent.py	86	CODE
LOW	…ementing-immutable-backup-with-restic/scripts/agent.py	106	CODE
LOW	…ementing-immutable-backup-with-restic/scripts/agent.py	228	CODE
LOW	…ementing-immutable-backup-with-restic/scripts/agent.py	353	CODE
LOW	…ing-wireless-network-penetration-test/scripts/agent.py	55	CODE
LOW	…lls/securing-api-gateway-with-aws-waf/scripts/agent.py	136	CODE
LOW	…forming-log-source-onboarding-in-siem/scripts/agent.py	135	CODE
LOW	…rming-log-source-onboarding-in-siem/scripts/process.py	99	CODE
LOW	…ls/analyzing-indicators-of-compromise/scripts/agent.py	142	CODE
912 more matches not shown…

Hyper-Verbose Identifiers862 hits · 851 pts

Severity	File	Line	Snippet	Context
LOW	…-identity-verification-for-zero-trust/scripts/agent.py	30	def assess_authentication_methods(auth_config):	CODE
LOW	…-identity-verification-for-zero-trust/scripts/agent.py	62	def assess_conditional_access(policies_path):	CODE
LOW	…dentity-verification-for-zero-trust/scripts/process.py	91	def assess_conditional_access(policies: list) -> dict:	CODE
LOW	…dentity-verification-for-zero-trust/scripts/process.py	292	def generate_identity_maturity_report(config: dict) -> dict:	CODE
LOW	…rming-malware-hash-enrichment-with-virustotal/SKILL.md	298	def generate_enrichment_report(hash_report, behavior, network, yara_data):	CODE
LOW	…ng-cobaltstrike-malleable-c2-profiles/scripts/agent.py	36	def parse_profile_with_dissect(profile_path):	CODE
LOW	…g-gcp-organization-policy-constraints/scripts/agent.py	45	def audit_baseline_compliance(org_id):	CODE
LOW	…g-gcp-organization-policy-constraints/scripts/agent.py	89	def check_resource_location_constraint(org_id):	CODE
LOW	…g-gcp-organization-policy-constraints/scripts/agent.py	101	def generate_terraform_policies(org_id, constraints=None):	CODE
LOW	…g-gcp-organization-policy-constraints/scripts/agent.py	129	def generate_compliance_report(findings):	CODE
LOW	…gcp-organization-policy-constraints/scripts/process.py	187	def generate_compliance_report(audit_results, org_id):	CODE
LOW	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	361	def run_firmware_security_audit():	CODE
LOW	…ting-just-in-time-access-provisioning/scripts/agent.py	63	def audit_standing_privileges(privileges_path):	CODE
LOW	…mplementing-dragos-platform-for-ot-monitoring/SKILL.md	183	def generate_siem_integration_config(self, siem_type: str = "splunk"):	CODE
LOW	…ing-dragos-platform-for-ot-monitoring/scripts/agent.py	77	def generate_monitoring_config():	CODE
LOW	…g-broken-function-level-authorization/scripts/agent.py	54	def test_privilege_escalation(base_url, low_priv_token, endpoints=None):	CODE
LOW	…ing-honeypot-for-ransomware-detection/scripts/agent.py	98	def detect_ransomware_indicators(watch_dir, window_seconds=60):	CODE
LOW	…ing-honeypot-for-ransomware-detection/scripts/agent.py	142	def generate_honeypot_share_config(share_name="FinanceArchive", share_path="/srv/honeypot"):	CODE
LOW	…lementing-aws-security-hub-compliance/scripts/agent.py	108	def create_compliance_insight(hub_client, name, group_by_attr, severity_filter=None):	CODE
LOW	…s/analyzing-dns-logs-for-exfiltration/scripts/agent.py	29	def extract_registered_domain(fqdn):	CODE
LOW	…nting-api-security-posture-management/scripts/agent.py	11	def discover_apis_from_traffic(log_path):	CODE
LOW	…nting-api-security-posture-management/scripts/agent.py	94	def check_api_security_controls(apis, spec_path=None):	CODE
LOW	…lls/detecting-pass-the-ticket-attacks/scripts/agent.py	63	def detect_cross_host_ticket_reuse(events):	CODE
LOW	…lls/detecting-pass-the-ticket-attacks/scripts/agent.py	90	def detect_anomalous_tgs_volume(events, threshold=50):	CODE
LOW	…ills/analyzing-linux-system-artifacts/scripts/agent.py	155	def check_systemd_persistence(evidence_root):	CODE
LOW	…ills/analyzing-linux-system-artifacts/scripts/agent.py	207	def find_suspicious_tmp_files(evidence_root):	CODE
LOW	…uilding-identity-governance-lifecycle-process/SKILL.md	616	def generate_remediation_plan(self, orphaned_accounts):	CODE
LOW	…identity-governance-lifecycle-process/scripts/agent.py	126	def generate_lifecycle_report(token):	CODE
LOW	…g-epss-score-for-vulnerability-prioritization/SKILL.md	153	def prioritize_vulnerabilities(scan_results_csv, output_csv):	CODE
LOW	…core-for-vulnerability-prioritization/scripts/agent.py	46	def prioritize_vulnerabilities(cve_scores, epss_threshold=0.1, percentile_threshold=0.9):	CODE
LOW	…001-information-security-management/scripts/process.py	511	def generate_compliance_dashboard(self) -> dict:	CODE
LOW	…ls/implementing-endpoint-dlp-controls/scripts/agent.py	26	def scan_file_for_sensitive_data(file_path):	CODE
LOW	…s/hunting-for-dns-tunneling-with-zeek/scripts/agent.py	55	def analyze_domain_statistics(entries):	CODE
LOW	…ing-role-mining-for-rbac-optimization/scripts/agent.py	27	def build_user_permission_matrix(assignments):	CODE
LOW	…ing-role-mining-for-rbac-optimization/scripts/agent.py	106	def calculate_optimization_metrics(user_matrix, candidate_roles):	CODE
LOW	…ls/conducting-cloud-incident-response/scripts/agent.py	109	def aws_list_attacker_resources(username, events):	CODE
LOW	…ls/conducting-cloud-incident-response/scripts/agent.py	119	def aws_check_all_regions_instances():	CODE
LOW	…s/detecting-anomalous-authentication-patterns/SKILL.md	430	def detect_behavioral_anomalies(event, baseline):	CODE
LOW	…s/detecting-anomalous-authentication-patterns/SKILL.md	491	def isolation_forest_anomaly_detection(df):	CODE
LOW	…s/detecting-anomalous-authentication-patterns/SKILL.md	599	def calculate_auth_risk_score(user, alerts, baseline):	CODE
LOW	skills/implementing-patch-management-workflow/SKILL.md	121	def get_windows_pending_patches():	CODE
LOW	skills/implementing-patch-management-workflow/SKILL.md	144	def get_linux_pending_patches():	STRING
LOW	…-patch-management-workflow/references/api-reference.md	46	def get_tenable_missing_patches(scan_id):	CODE
LOW	…lementing-patch-management-workflow/scripts/process.py	220	def generate_compliance_report(summary: dict, compliance_df: pd.DataFrame,	CODE
LOW	…menting-mobile-application-management/scripts/agent.py	40	def get_app_protection_policies(base_url, token):	CODE
LOW	…menting-mobile-application-management/scripts/agent.py	84	def audit_protection_policies(policies):	CODE
LOW	skills/performing-jwt-none-algorithm-attack/SKILL.md	165	def craft_privilege_escalation(self, role_field: str = "role",	CODE
LOW	skills/performing-jwt-none-algorithm-attack/SKILL.md	228	def test_empty_signature_variants(self) -> list:	CODE
LOW	…ills/performing-service-account-audit/scripts/agent.py	28	def discover_ad_service_accounts(self):	CODE
LOW	…ls/performing-service-account-audit/scripts/process.py	162	def _check_password_never_expires(self):	CODE
LOW	…figuring-aws-verified-access-for-ztna/scripts/agent.py	16	def list_verified_access_instances(session):	CODE
LOW	…figuring-aws-verified-access-for-ztna/scripts/agent.py	32	def list_verified_access_groups(session):	CODE
LOW	…figuring-aws-verified-access-for-ztna/scripts/agent.py	48	def list_verified_access_endpoints(session):	CODE
LOW	…guring-aws-verified-access-for-ztna/scripts/process.py	48	def permit_group_with_device_trust(self, group: str, min_score: int = 50) -> str:	CODE
LOW	skills/performing-api-rate-limiting-bypass/SKILL.md	154	def test_path_variation_bypass(base_endpoint, token):	CODE
LOW	skills/performing-api-rate-limiting-bypass/SKILL.md	251	def test_account_rotation_bypass(login_endpoint, target_password_list):	CODE
LOW	skills/performing-api-rate-limiting-bypass/SKILL.md	281	def test_parameter_pollution_bypass(endpoint):	CODE
LOW	skills/performing-api-rate-limiting-bypass/SKILL.md	303	async def distributed_rate_limit_test(endpoint, total_requests=1000, concurrency=50):	CODE
LOW	…s/performing-api-rate-limiting-bypass/scripts/agent.py	31	def detect_rate_limit_headers(url, auth_header=None):	CODE
LOW	…ting-for-process-injection-techniques/scripts/agent.py	74	def detect_remote_thread_injection(events):	CODE
802 more matches not shown…

Excessive Try-Catch Wrapping697 hits · 756 pts

Severity	File	Line	Snippet	Context
LOW	…rming-malware-hash-enrichment-with-virustotal/SKILL.md	149	except Exception as e:	CODE
LOW	…rming-malware-hash-enrichment-with-virustotal/SKILL.md	244	except Exception as e:	CODE
LOW	…lware-hash-enrichment-with-virustotal/scripts/agent.py	81	except Exception as e:	CODE
LOW	…curity-information-sharing-with-stix2/scripts/agent.py	131	except Exception as e:	CODE
LOW	…curity-information-sharing-with-stix2/scripts/agent.py	143	except Exception as e:	CODE
LOW	…nting-api-security-posture-management/scripts/agent.py	104	except Exception:	CODE
LOW	…s/detecting-anomalous-authentication-patterns/SKILL.md	179	except Exception:	CODE
LOW	…ing-anomalous-authentication-patterns/scripts/agent.py	63	except Exception:	CODE
LOW	…ing-anomalous-authentication-patterns/scripts/agent.py	102	except Exception:	CODE
LOW	…ing-anomalous-authentication-patterns/scripts/agent.py	140	except Exception:	CODE
LOW	…ing-anomalous-authentication-patterns/scripts/agent.py	178	except Exception:	CODE
LOW	…mplementing-patch-management-workflow/scripts/agent.py	143	except Exception:	CODE
LOW	…/performing-jwt-none-algorithm-attack/scripts/agent.py	86	except Exception as e:	CODE
LOW	…/performing-jwt-none-algorithm-attack/scripts/agent.py	115	except Exception as e:	CODE
LOW	…/performing-jwt-none-algorithm-attack/scripts/agent.py	121	except Exception:	CODE
LOW	…g-build-provenance-with-slsa-sigstore/scripts/agent.py	85	except Exception:	CODE
LOW	skills/performing-api-rate-limiting-bypass/SKILL.md	187	except Exception:	CODE
LOW	skills/performing-api-rate-limiting-bypass/SKILL.md	325	except Exception:	CODE
MEDIUM	skills/performing-api-rate-limiting-bypass/SKILL.md	307	def make_request(session, request_num):	CODE
LOW	…s/performing-api-rate-limiting-bypass/scripts/agent.py	50	except Exception as e:	CODE
LOW	…s/performing-api-rate-limiting-bypass/scripts/agent.py	67	except Exception:	CODE
LOW	…s/performing-api-rate-limiting-bypass/scripts/agent.py	88	except Exception:	CODE
LOW	…s/performing-api-rate-limiting-bypass/scripts/agent.py	114	except Exception:	CODE
LOW	…s/performing-api-rate-limiting-bypass/scripts/agent.py	167	except Exception:	CODE
LOW	…s/performing-api-rate-limiting-bypass/scripts/agent.py	192	except Exception:	CODE
LOW	…g-vulnerabilities-with-cvss-scoring/scripts/process.py	172	except Exception as e:	CODE
LOW	…g-vulnerabilities-with-cvss-scoring/scripts/process.py	190	except Exception as e:	CODE
LOW	…g-vulnerabilities-with-cvss-scoring/scripts/process.py	208	except Exception as e:	CODE
LOW	…ls/detecting-attacks-on-scada-systems/scripts/agent.py	93	except Exception as e:	CODE
LOW	…ls/detecting-attacks-on-scada-systems/scripts/agent.py	125	except Exception as e:	CODE
LOW	…ls/detecting-attacks-on-scada-systems/scripts/agent.py	150	except Exception as e:	CODE
LOW	…ding-patch-tuesday-response-process/scripts/process.py	69	except Exception as e:	CODE
LOW	…ding-patch-tuesday-response-process/scripts/process.py	86	except Exception as e:	CODE
LOW	…omalies-in-industrial-control-systems/scripts/agent.py	49	except Exception as e:	CODE
LOW	…omalies-in-industrial-control-systems/scripts/agent.py	127	except Exception as e:	CODE
MEDIUM	…ementing-immutable-backup-with-restic/scripts/agent.py	388	print("Error: --source required for backup")	CODE
MEDIUM	…ementing-immutable-backup-with-restic/scripts/agent.py	418	print("Error: --bucket required for Object Lock configuration")	CODE
MEDIUM	…ementing-immutable-backup-with-restic/scripts/agent.py	431	print("Error: --source required for full pipeline")	CODE
LOW	…lls/securing-api-gateway-with-aws-waf/scripts/agent.py	73	except Exception as e:	CODE
LOW	…lls/securing-api-gateway-with-aws-waf/scripts/agent.py	90	except Exception as e:	CODE
LOW	…forming-log-source-onboarding-in-siem/scripts/agent.py	71	except Exception as e:	CODE
LOW	…ing-for-unusual-service-installations/scripts/agent.py	84	except Exception:	CODE
LOW	…ing-tls-certificate-transparency-logs/scripts/agent.py	268	except Exception:	CODE
LOW	…ing-tls-certificate-transparency-logs/scripts/agent.py	282	except Exception as exc:	CODE
LOW	…ing-tls-certificate-transparency-logs/scripts/agent.py	651	except Exception as exc:	CODE
LOW	…enting-runtime-security-with-tetragon/scripts/agent.py	37	except Exception as e:	CODE
LOW	skills/performing-kerberoasting-attack/scripts/agent.py	41	except Exception as e:	CODE
LOW	skills/performing-kerberoasting-attack/scripts/agent.py	59	except Exception as e:	CODE
LOW	skills/performing-kerberoasting-attack/scripts/agent.py	86	except Exception as e:	CODE
LOW	skills/performing-kerberoasting-attack/scripts/agent.py	143	except Exception as e:	CODE
LOW	…lls/performing-kerberoasting-attack/scripts/process.py	111	except Exception as e:	CODE
LOW	…lls/performing-kerberoasting-attack/scripts/process.py	217	except Exception as e:	CODE
LOW	…ssing-vector-and-embedding-weaknesses/scripts/agent.py	147	except Exception as exc:	CODE
MEDIUM	…ssing-vector-and-embedding-weaknesses/scripts/agent.py	30	def get_embedder(model_name):	CODE
LOW	…zing-packed-malware-with-upx-unpacker/scripts/agent.py	187	except Exception as e:	CODE
LOW	…lls/deploying-ransomware-canary-files/scripts/agent.py	211	except Exception as e:	CODE
LOW	…lls/deploying-ransomware-canary-files/scripts/agent.py	253	except Exception as e:	CODE
LOW	…lls/deploying-ransomware-canary-files/scripts/agent.py	276	except Exception as e:	CODE
LOW	…lls/deploying-ransomware-canary-files/scripts/agent.py	487	except Exception as e:	CODE
LOW	…lementing-pci-dss-compliance-controls/scripts/agent.py	55	except Exception as e:	CODE
637 more matches not shown…

Decorative Section Separators222 hits · 688 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	28	# ---------------------------------------------------------------------------	STRING
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	30	# ---------------------------------------------------------------------------	STRING
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	106	# ---------------------------------------------------------------------------	STRING
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	108	# ---------------------------------------------------------------------------	STRING
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	181	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	183	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	286	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	288	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	324	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	326	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	381	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	383	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	415	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	417	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ing-tls-certificate-transparency-logs/scripts/agent.py	40	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ing-tls-certificate-transparency-logs/scripts/agent.py	42	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ing-tls-certificate-transparency-logs/scripts/agent.py	166	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ing-tls-certificate-transparency-logs/scripts/agent.py	168	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ing-tls-certificate-transparency-logs/scripts/agent.py	501	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ing-tls-certificate-transparency-logs/scripts/agent.py	503	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ing-tls-certificate-transparency-logs/scripts/agent.py	689	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ing-tls-certificate-transparency-logs/scripts/agent.py	691	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	252	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	254	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	315	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	317	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	582	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	584	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	785	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	787	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	813	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	815	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	104	# ---------------------------------------------------------------------------	STRING
MEDIUM	…ing-tls-certificate-transparency-logs/scripts/agent.py	106	# ---------------------------------------------------------------------------	STRING
MEDIUM⚡	…lementing-llm-guardrails-for-security/scripts/agent.py	29	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…lementing-llm-guardrails-for-security/scripts/agent.py	31	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…g-post-quantum-cryptography-migration/scripts/agent.py	28	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…g-post-quantum-cryptography-migration/scripts/agent.py	30	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…g-post-quantum-cryptography-migration/scripts/agent.py	35	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…g-post-quantum-cryptography-migration/scripts/agent.py	37	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…g-post-quantum-cryptography-migration/scripts/agent.py	1027	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…g-post-quantum-cryptography-migration/scripts/agent.py	1029	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…g-post-quantum-cryptography-migration/scripts/agent.py	1234	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…g-post-quantum-cryptography-migration/scripts/agent.py	1236	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	167	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	169	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	470	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	472	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	619	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	621	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	730	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	732	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	898	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	900	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	1361	# ---------------------------------------------------------------------------	STRING
MEDIUM	…g-post-quantum-cryptography-migration/scripts/agent.py	1363	# ---------------------------------------------------------------------------	STRING
MEDIUM	…etecting-command-and-control-over-dns/scripts/agent.py	51	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…etecting-command-and-control-over-dns/scripts/agent.py	53	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…etecting-command-and-control-over-dns/scripts/agent.py	125	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…etecting-command-and-control-over-dns/scripts/agent.py	127	# ---------------------------------------------------------------------------	COMMENT
162 more matches not shown…

Unused Imports565 hits · 550 pts

Severity	File	Line	Context
LOW	…plementing-gcp-binary-authorization/scripts/process.py	11	CODE
LOW	…dentity-verification-for-zero-trust/scripts/process.py	10	CODE
LOW	…dentity-verification-for-zero-trust/scripts/process.py	11	CODE
LOW	…dentity-verification-for-zero-trust/scripts/process.py	12	CODE
LOW	…dentity-verification-for-zero-trust/scripts/process.py	15	CODE
LOW	…gcp-organization-policy-constraints/scripts/process.py	11	CODE
LOW	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	13	CODE
LOW	…ng-just-in-time-access-provisioning/scripts/process.py	10	CODE
LOW	…g-honeypot-for-ransomware-detection/scripts/process.py	19	CODE
LOW	…g-threat-actor-ttps-with-mitre-attack/scripts/agent.py	11	CODE
LOW	…re-for-vulnerability-prioritization/scripts/process.py	13	CODE
LOW	…re-for-vulnerability-prioritization/scripts/process.py	15	CODE
LOW	…re-for-vulnerability-prioritization/scripts/process.py	15	CODE
LOW	…re-for-vulnerability-prioritization/scripts/process.py	16	CODE
LOW	…001-information-security-management/scripts/process.py	11	CODE
LOW	…001-information-security-management/scripts/process.py	12	CODE
LOW	…g-role-mining-for-rbac-optimization/scripts/process.py	13	CODE
LOW	…g-role-mining-for-rbac-optimization/scripts/process.py	16	CODE
LOW	…g-role-mining-for-rbac-optimization/scripts/process.py	17	CODE
LOW	…scanning-infrastructure-with-nessus/scripts/process.py	24	CODE
LOW	…mplementing-patch-management-workflow/scripts/agent.py	14	CODE
LOW	…lementing-patch-management-workflow/scripts/process.py	18	CODE
LOW	…lementing-patch-management-workflow/scripts/process.py	20	CODE
LOW	…lementing-patch-management-workflow/scripts/process.py	21	CODE
LOW	…lementing-patch-management-workflow/scripts/process.py	23	CODE
LOW	…nting-mobile-application-management/scripts/process.py	13	CODE
LOW	…nting-mobile-application-management/scripts/process.py	15	CODE
LOW	…ls/performing-service-account-audit/scripts/process.py	10	CODE
LOW	…guring-aws-verified-access-for-ztna/scripts/process.py	9	CODE
LOW	…guring-aws-verified-access-for-ztna/scripts/process.py	10	CODE
LOW	…g-vulnerabilities-with-cvss-scoring/scripts/process.py	19	CODE
LOW	…g-vulnerabilities-with-cvss-scoring/scripts/process.py	21	CODE
LOW	…ding-patch-tuesday-response-process/scripts/process.py	19	CODE
LOW	…ding-patch-tuesday-response-process/scripts/process.py	20	CODE
LOW	…ing-wireless-network-penetration-test/scripts/agent.py	11	CODE
LOW	…rming-log-source-onboarding-in-siem/scripts/process.py	9	CODE
LOW	…rming-log-source-onboarding-in-siem/scripts/process.py	10	CODE
LOW	…rming-log-source-onboarding-in-siem/scripts/process.py	11	CODE
LOW	…ing-tls-certificate-transparency-logs/scripts/agent.py	9	CODE
LOW	…ing-tls-certificate-transparency-logs/scripts/agent.py	12	CODE
LOW	…ing-tls-certificate-transparency-logs/scripts/agent.py	21	CODE
LOW	…ing-tls-certificate-transparency-logs/scripts/agent.py	22	CODE
LOW	…ing-tls-certificate-transparency-logs/scripts/agent.py	22	CODE
LOW	…ting-runtime-security-with-tetragon/scripts/process.py	14	CODE
LOW	…ting-runtime-security-with-tetragon/scripts/process.py	15	CODE
LOW	…loiting-kerberoasting-with-impacket/scripts/process.py	9	CODE
LOW	…loiting-kerberoasting-with-impacket/scripts/process.py	10	CODE
LOW	…loiting-kerberoasting-with-impacket/scripts/process.py	11	CODE
LOW	…loiting-kerberoasting-with-impacket/scripts/process.py	12	CODE
LOW	…loiting-kerberoasting-with-impacket/scripts/process.py	16	CODE
LOW	…menting-zero-trust-dns-with-nextdns/scripts/process.py	13	CODE
LOW	…lls/performing-kerberoasting-attack/scripts/process.py	21	CODE
LOW	…lls/performing-kerberoasting-attack/scripts/process.py	120	CODE
LOW	…lls/performing-kerberoasting-attack/scripts/process.py	120	CODE
LOW	…lls/performing-kerberoasting-attack/scripts/process.py	121	CODE
LOW	…lls/performing-kerberoasting-attack/scripts/process.py	122	CODE
LOW	…lls/performing-kerberoasting-attack/scripts/process.py	122	CODE
LOW	…lls/performing-kerberoasting-attack/scripts/process.py	123	CODE
LOW	…lls/performing-kerberoasting-attack/scripts/process.py	124	CODE
LOW	…ming-alert-triage-with-elastic-siem/scripts/process.py	9	CODE
505 more matches not shown…

Cross-Language Confusion35 hits · 200 pts

Severity	File	Line	Snippet	Context
HIGH	…tracting-credentials-from-memory-dump/scripts/agent.py	146	if not username or username == "(null)":	CODE
HIGH	…mplementing-cloud-workload-protection/scripts/agent.py	82	"ls -la /dev/tcp 2>/dev/null; ls -la /proc/*/fd 2>/dev/null \| grep socket \| head -20",	CODE
HIGH	…ng-agentless-vulnerability-scanning/scripts/process.py	105	out, _ = self._exec(client, "ss -tlnp 2>/dev/null \|\| netstat -tlnp 2>/dev/null")	CODE
HIGH	…everse-engineering-ios-app-with-frida/scripts/agent.py	58	var SSLSetPeerDomainName = Module.findExportByName(null, 'SSLSetPeerDomainName');	CODE
HIGH⚡	…erse-engineering-ios-app-with-frida/scripts/process.py	23	if (name.indexOf("Auth") !== -1 \|\| name.indexOf("Crypto") !== -1 \|\|	CODE
HIGH⚡	…erse-engineering-ios-app-with-frida/scripts/process.py	24	name.indexOf("Token") !== -1 \|\| name.indexOf("Key") !== -1 \|\|	CODE
HIGH⚡	…erse-engineering-ios-app-with-frida/scripts/process.py	25	name.indexOf("Secret") !== -1 \|\| name.indexOf("Login") !== -1) {	CODE
HIGH⚡	…erse-engineering-ios-app-with-frida/scripts/process.py	27	results.classes.push({name: name, method_count: methods.length});	CODE
HIGH⚡	…erse-engineering-ios-app-with-frida/scripts/process.py	29	if (m.toLowerCase().indexOf("auth") !== -1 \|\| m.toLowerCase().indexOf("login") !== -1) {	CODE
HIGH⚡	…erse-engineering-ios-app-with-frida/scripts/process.py	30	results.auth_methods.push(name + " " + m);	CODE
HIGH⚡	…erse-engineering-ios-app-with-frida/scripts/process.py	32	if (m.toLowerCase().indexOf("encrypt") !== -1 \|\| m.toLowerCase().indexOf("decrypt") !== -1 \|\|	CODE
HIGH⚡	…erse-engineering-ios-app-with-frida/scripts/process.py	33	m.toLowerCase().indexOf("key") !== -1 \|\| m.toLowerCase().indexOf("cipher") !== -1) {	CODE
HIGH⚡	…erse-engineering-ios-app-with-frida/scripts/process.py	34	results.crypto_methods.push(name + " " + m);	CODE
HIGH	…erse-engineering-ios-app-with-frida/scripts/process.py	71	base: main.base.toString(),	CODE
HIGH	…-network-traffic-analysis-with-tshark/scripts/agent.py	142	["tshark", "-r", pcap_path, "-Y", "tcp.flags.syn==1 && tcp.flags.ack==0",	CODE
HIGH	…ploiting-constrained-delegation-abuse/scripts/agent.py	45	"\| Where-Object {$_.'msDS-AllowedToActOnBehalfOfOtherIdentity' -ne $null} "	CODE
HIGH	…erforming-ios-app-security-assessment/scripts/agent.py	157	send({type: 'keychain_error', class: classNames[kSecClasses[i]], error: e.toString()});	CODE
HIGH	…erforming-ios-app-security-assessment/scripts/agent.py	204	if (this.url.indexOf('cydia://') !== -1 \|\| this.url.indexOf('sileo://') !== -1) {	CODE
HIGH	…erforming-ios-app-security-assessment/scripts/agent.py	212	var fork = Module.findExportByName(null, 'fork');	CODE
HIGH	…alyzing-network-traffic-for-incidents/scripts/agent.py	45	connections = run_tshark(pcap_path, "tcp.flags.syn==1 && tcp.flags.ack==0",	CODE
HIGH	…rming-dynamic-analysis-of-android-app/scripts/agent.py	46	results.methods.push('TrustManagerImpl.verifyChain');	CODE
HIGH	…rming-dynamic-analysis-of-android-app/scripts/agent.py	54	results.methods.push('OkHostnameVerifier.verify');	CODE
HIGH	skills/detecting-stuxnet-style-attacks/scripts/agent.py	45	["tshark", "-r", pcap_path, "-Y", "modbus \|\| s7comm",	CODE
HIGH	…menting-privileged-access-workstation/scripts/agent.py	76	"Select-Object DisplayName,Publisher,InstallDate \| Where-Object {$_.DisplayName -ne $null} \| "	CODE
HIGH⚡	…forming-lateral-movement-with-wmiexec/scripts/agent.py	90	"dcerpc.cn_bind_uuid == 4d9f4ab8-7d1c-11cf-861e-0020af6e7c57 \|\| tcp.port == 135 \|\| dcom",	CODE
HIGH	…ls/performing-packet-injection-attack/scripts/agent.py	144	print("Tests: syn, xmas, null, flags, spoof, land, frag, icmp, all")	CODE
HIGH	…plementing-aws-nitro-enclave-security/scripts/agent.py	216	"commands": ["cat /etc/nitro_enclaves/allocator.yaml 2>/dev/null \|\| echo 'NOT_FOUND'"]	CODE
HIGH	…-hardware-security-key-authentication/scripts/agent.py	434	const displayName = document.getElementById('reg-display').value \|\| username;	CODE
HIGH	…-hardware-security-key-authentication/scripts/agent.py	487	body: JSON.stringify({username: username \|\| null})	CODE
HIGH	…-hardware-security-key-authentication/scripts/agent.py	487	body: JSON.stringify({username: username \|\| null})	CODE
HIGH	…-hardware-security-key-authentication/scripts/agent.py	512	b64encode(assertion.response.userHandle) : null,	CODE
HIGH	…yzing-persistence-mechanisms-in-linux/scripts/agent.py	46	["bash", "-c", "for u in $(cut -d: -f1 /etc/passwd); do crontab -l -u $u 2>/dev/null && echo \"__USER:$u\"; done	CODE
HIGH	…ng-authenticated-vulnerability-scan/scripts/process.py	94	_, stdout, stderr = client.exec_command("id && uname -a", timeout=10)	CODE
HIGH	…lyzing-network-traffic-with-wireshark/scripts/agent.py	123	stdout, _, rc = run_tshark(pcap_path, '-Y "icmp && frame.len > 100" -T fields -e ip.src -e ip.dst -e frame.len')	CODE
HIGH	…lyzing-network-traffic-with-wireshark/scripts/agent.py	143	'-Y "http && tcp.port != 80 && tcp.port != 443 && tcp.port != 8080" '	CODE

Magic Placeholder Names32 hits · 189 pts

Severity	File	Line	Snippet	Context
HIGH	…rming-malware-hash-enrichment-with-virustotal/SKILL.md	200	batch_enrich("YOUR_API_KEY", "hashes.txt", "enrichment_results.csv")	CODE
HIGH	…mplementing-dragos-platform-for-ot-monitoring/SKILL.md	227	api_key="your-api-key",	CODE
HIGH⚡	…ills/implementing-zero-trust-dns-with-nextdns/SKILL.md	310	curl -H "X-Api-Key: your-api-key" \	CODE
HIGH⚡	…ills/implementing-zero-trust-dns-with-nextdns/SKILL.md	314	curl -H "X-Api-Key: your-api-key" \	CODE
HIGH⚡	…ills/implementing-zero-trust-dns-with-nextdns/SKILL.md	318	curl -H "X-Api-Key: your-api-key" \	CODE
HIGH	…ero-trust-dns-with-nextdns/references/api-reference.md	7	Header: X-Api-Key: <your-api-key>	CODE
HIGH	skills/extracting-iocs-from-malware-samples/SKILL.md	236	VT_API_KEY = "your_api_key"	CODE
HIGH⚡	skills/analyzing-malicious-url-with-urlscan/SKILL.md	78	Header: API-Key: your-api-key	CODE
HIGH	…malicious-url-with-urlscan/references/api-reference.md	10	API-Key: YOUR_API_KEY	CODE
HIGH	…elationships-with-malpedia/references/api-reference.md	10	Authorization: apitoken YOUR_API_KEY	CODE
HIGH	…s/performing-ot-vulnerability-scanning-safely/SKILL.md	250	api_key="your-api-key-here",	CODE
HIGH	…s/performing-network-forensics-with-wireshark/SKILL.md	148	-H "x-apikey: YOUR_API_KEY" \| python3 -c "	CODE
HIGH	…s/performing-threat-hunting-with-elastic-siem/SKILL.md	196	-H "Authorization: ApiKey YOUR_API_KEY" \	CODE
HIGH	…pply-chain-vulnerabilities/references/api-reference.md	12	Header: apiKey: <your-api-key>	CODE
HIGH⚡	…eat-intelligence-platforms/references/api-reference.md	8	-H "Authorization: YOUR_API_KEY" -H "Accept: application/json"	CODE
HIGH⚡	…eat-intelligence-platforms/references/api-reference.md	12	-H "Authorization: YOUR_API_KEY" -H "Content-Type: application/json" \	CODE
HIGH⚡	…eat-intelligence-platforms/references/api-reference.md	17	-H "Authorization: YOUR_API_KEY" -H "Accept: application/json" \	CODE
HIGH⚡	…eat-intelligence-platforms/references/api-reference.md	21	curl "https://misp.example.com/feeds/index.json" -H "Authorization: YOUR_API_KEY"	CODE
HIGH	…zing-email-headers-for-phishing-investigation/SKILL.md	197	-H "Key: YOUR_API_KEY" -H "Accept: application/json" \| python3 -m json.tool	CODE
HIGH	…for-phishing-investigation/references/api-reference.md	82	-H "Key: YOUR_API_KEY" \	CODE
HIGH⚡	…rrelating-threat-campaigns/references/api-reference.md	8	-H "Authorization: YOUR_API_KEY" -H "Content-Type: application/json" \	CODE
HIGH⚡	…rrelating-threat-campaigns/references/api-reference.md	13	-H "Authorization: YOUR_API_KEY" -H "Content-Type: application/json" \	CODE
HIGH⚡	…rrelating-threat-campaigns/references/api-reference.md	18	-H "Authorization: YOUR_API_KEY" -H "Accept: application/json"	CODE
HIGH⚡	…rrelating-threat-campaigns/references/api-reference.md	22	-H "Authorization: YOUR_API_KEY" -H "Content-Type: application/json" \	CODE
HIGH⚡	…ills/collecting-threat-intelligence-with-misp/SKILL.md	90	misp = PyMISP('https://misp.local', 'YOUR_API_KEY', ssl=False)	CODE
HIGH	…ills/collecting-threat-intelligence-with-misp/SKILL.md	132	misp = PyMISP('https://misp.local', 'YOUR_API_KEY', ssl=False)	CODE
HIGH⚡	…cting-threat-intelligence-with-misp/scripts/process.py	16	python process.py --url https://misp.local --key YOUR_API_KEY --action collect	STRING
HIGH⚡	…cting-threat-intelligence-with-misp/scripts/process.py	17	python process.py --url https://misp.local --key YOUR_API_KEY --action export --format stix2	STRING
HIGH⚡	…cting-threat-intelligence-with-misp/scripts/process.py	18	python process.py --url https://misp.local --key YOUR_API_KEY --action feeds --enable-defaults	STRING
HIGH	…kens-for-network-intrusion/references/api-reference.md	112	console = canarytools.Console(domain="yourcompany", api_key="YOUR_API_KEY")	CODE
HIGH	…lligence-sharing-with-misp/references/api-reference.md	16	key="YOUR_API_KEY",	CODE
HIGH	…ath-analysis-with-xm-cyber/references/api-reference.md	14	--api-key YOUR_API_KEY \	CODE

Modern Structural Boilerplate153 hits · 155 pts

Severity	File	Line	Snippet	Context
LOW	…/implementing-pam-for-database-access/scripts/agent.py	12	logger = logging.getLogger(__name__)	CODE
LOW	…tracting-credentials-from-memory-dump/scripts/agent.py	15	logger = logging.getLogger(__name__)	CODE
LOW	…/extracting-browser-history-artifacts/scripts/agent.py	14	logger = logging.getLogger(__name__)	CODE
LOW	…ing-role-mining-for-rbac-optimization/scripts/agent.py	12	logger = logging.getLogger(__name__)	CODE
LOW	…ls/conducting-cloud-incident-response/scripts/agent.py	12	logger = logging.getLogger(__name__)	CODE
LOW	…menting-mobile-application-management/scripts/agent.py	12	logger = logging.getLogger(__name__)	CODE
LOW	…enting-siem-correlation-rules-for-apt/scripts/agent.py	15	logger = logging.getLogger(__name__)	CODE
LOW	…ilding-patch-tuesday-response-process/scripts/agent.py	12	logger = logging.getLogger(__name__)	CODE
LOW	…ting-network-deception-with-honeypots/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…ementing-immutable-backup-with-restic/scripts/agent.py	27	logger = logging.getLogger(__name__)	CODE
LOW	…ing-wireless-network-penetration-test/scripts/agent.py	17	logger = logging.getLogger(__name__)	CODE
LOW	…ersary-infrastructure-tracking-system/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW⚡	…ing-tls-certificate-transparency-logs/scripts/agent.py	31	logger = logging.getLogger(__name__)	CODE
LOW	…ng-syslog-centralization-with-rsyslog/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…end-to-end-encryption-for-messaging/scripts/process.py	34	logger = logging.getLogger(__name__)	CODE
LOW	…-network-traffic-analysis-with-nozomi/scripts/agent.py	12	logger = logging.getLogger(__name__)	CODE
LOW	…rk-intrusion-prevention-with-suricata/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…lls/deploying-ransomware-canary-files/scripts/agent.py	49	logger = logging.getLogger(__name__)	CODE
LOW	…nting-network-policies-for-kubernetes/scripts/agent.py	11	logger = logging.getLogger(__name__)	CODE
LOW	…g-cloud-forensics-with-aws-cloudtrail/scripts/agent.py	11	logger = logging.getLogger(__name__)	CODE
LOW	…ementing-nerc-cip-compliance-controls/scripts/agent.py	11	logger = logging.getLogger(__name__)	CODE
LOW	…/extracting-iocs-from-malware-samples/scripts/agent.py	17	logger = logging.getLogger(__name__)	CODE
LOW	…g-smb-vulnerabilities-with-metasploit/scripts/agent.py	19	logger = logging.getLogger(__name__)	CODE
LOW⚡	…lementing-llm-guardrails-for-security/scripts/agent.py	27	logger = logging.getLogger(__name__)	CODE
LOW	…/building-soc-playbook-for-ransomware/scripts/agent.py	14	logger = logging.getLogger(__name__)	CODE
LOW	…/analyzing-malicious-url-with-urlscan/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…plementing-code-signing-for-artifacts/scripts/agent.py	22	logger = logging.getLogger(__name__)	CODE
LOW	…oss-prevention-with-microsoft-purview/scripts/agent.py	15	logger = logging.getLogger(__name__)	CODE
LOW	…lementing-network-segmentation-for-ot/scripts/agent.py	11	logger = logging.getLogger(__name__)	CODE
LOW	…re-family-relationships-with-malpedia/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…er-image-minimal-base-with-distroless/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…s/implementing-bgp-security-with-rpki/scripts/agent.py	18	logger = logging.getLogger(__name__)	CODE
LOW	…ing-malware-persistence-with-autoruns/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…g-authentication-with-forced-browsing/scripts/agent.py	14	logger = logging.getLogger(__name__)	CODE
LOW	…vice-posture-assessment-in-zero-trust/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	skills/detecting-wmi-persistence/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…tack-pattern-library-from-cti-reports/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…enting-jwt-signing-and-verification/scripts/process.py	37	logger = logging.getLogger(__name__)	CODE
LOW	…/exploiting-sql-injection-with-sqlmap/scripts/agent.py	14	logger = logging.getLogger(__name__)	CODE
LOW	…enerating-threat-intelligence-reports/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…etecting-bluetooth-low-energy-attacks/scripts/agent.py	20	logger = logging.getLogger(__name__)	CODE
LOW	…rforming-hash-cracking-with-hashcat/scripts/process.py	30	logger = logging.getLogger(__name__)	CODE
LOW⚡	…ing-ai-model-prompt-injection-attacks/scripts/agent.py	27	logger = logging.getLogger(__name__)	CODE
LOW	…g-tls-1-3-for-secure-communications/scripts/process.py	36	logger = logging.getLogger(__name__)	CODE
LOW	…-aqua-security-for-container-scanning/scripts/agent.py	14	logger = logging.getLogger(__name__)	CODE
LOW	…ing-ntlm-relay-with-event-correlation/scripts/agent.py	15	logger = logging.getLogger(__name__)	CODE
LOW	…loud-vulnerability-posture-management/scripts/agent.py	20	logger = logging.getLogger(__name__)	CODE
LOW	…lls/hunting-for-dcom-lateral-movement/scripts/agent.py	14	logger = logging.getLogger(__name__)	CODE
LOW	…ing-incident-timeline-with-timesketch/scripts/agent.py	12	logger = logging.getLogger(__name__)	CODE
LOW	…/conducting-cloud-penetration-testing/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…work-segmentation-with-firewall-zones/scripts/agent.py	12	logger = logging.getLogger(__name__)	CODE
LOW	…ls/configuring-pfsense-firewall-rules/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…ing-aws-macie-for-data-classification/scripts/agent.py	19	logger = logging.getLogger(__name__)	CODE
LOW	…tecting-serverless-function-injection/scripts/agent.py	25	logger = logging.getLogger(__name__)	CODE
LOW	…/conducting-malware-incident-response/scripts/agent.py	14	logger = logging.getLogger(__name__)	CODE
LOW	…erforming-ios-app-security-assessment/scripts/agent.py	19	logger = logging.getLogger(__name__)	CODE
LOW	…s/conducting-network-penetration-test/scripts/agent.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…menting-mitre-attack-coverage-mapping/scripts/agent.py	11	logger = logging.getLogger(__name__)	CODE
LOW	…loiting-bgp-hijacking-vulnerabilities/scripts/agent.py	18	logger = logging.getLogger(__name__)	CODE
LOW	…lls/exploiting-http-request-smuggling/scripts/agent.py	20	logger = logging.getLogger(__name__)	CODE
93 more matches not shown…

Over-Commented Block105 hits · 105 pts

Severity	File	Line	Snippet	Context
LOW	…g-epss-score-for-vulnerability-prioritization/SKILL.md	61	# "status-code": 200,	COMMENT
LOW	skills/extracting-browser-history-artifacts/SKILL.md	261	hindsight -i "/cases/case-2024-001/browser/chrome/" \	COMMENT
LOW	…ing-infrastructure-with-nessus/references/workflows.md	61		COMMENT
LOW	…figuring-identity-aware-proxy-with-google-iap/SKILL.md	301		COMMENT
LOW	skills/performing-security-headers-audit/SKILL.md	81	```bash	COMMENT
LOW	skills/performing-security-headers-audit/SKILL.md	221	# Expected: Restrict unused features	COMMENT
LOW	…erforming-web-application-scanning-with-nikto/SKILL.md	101	# 0 - File Upload	COMMENT
LOW	skills/testing-for-host-header-injection/SKILL.md	161	```	COMMENT
LOW	…nting-device-posture-assessment-in-zero-trust/SKILL.md	121	```bash	COMMENT
LOW	…nting-device-posture-assessment-in-zero-trust/SKILL.md	141	# ],	COMMENT
LOW	…s/triaging-security-incident-with-ir-playbook/SKILL.md	101	# Severity matrix factors:	COMMENT
LOW	skills/performing-binary-exploitation-analysis/SKILL.md	321	context.terminal = ["tmux", "splitw", "-h"] # or ["gnome-terminal", "--"]	COMMENT
LOW	skills/deploying-tailscale-for-zero-trust-vpn/SKILL.md	321	# Edit config for your environment	COMMENT
LOW	skills/performing-web-cache-deception-attack/SKILL.md	141	# Test if the CDN uses the full path or normalized path as cache key	COMMENT
LOW	…erforming-cloud-penetration-testing-with-pacu/SKILL.md	101	Pacu > data iam	COMMENT
LOW	…erforming-cloud-penetration-testing-with-pacu/SKILL.md	121	# Method 9: iam:CreateAccessKey	COMMENT
LOW	…rming-log-analysis-for-forensic-investigation/SKILL.md	101	> /cases/case-2024-001/logs/windows/Security_exported.txt	COMMENT
LOW	…s/detecting-ntlm-relay-with-event-correlation/SKILL.md	501		COMMENT
LOW	skills/hunting-for-dcom-lateral-movement/SKILL.md	81	ShellBrowserWindow -- Uses the `Document.Application.ShellExecute` method to execute commands through an existing ex	COMMENT
LOW	skills/hunting-for-dcom-lateral-movement/SKILL.md	581	# -Direction Inbound -LocalPort 135 -Protocol TCP `	COMMENT
LOW	…-source-intelligence-gathering/references/workflows.md	181	# Glassdoor: Target Corporation technology stack	COMMENT
LOW	…-source-intelligence-gathering/references/workflows.md	201	# Google Street View:	COMMENT
LOW	skills/performing-web-cache-poisoning-attack/SKILL.md	61	"(cache-control\|x-cache\|cf-cache\|age\|vary\|x-varnish\|x-served-by\|cdn\|via)"	COMMENT
LOW	skills/performing-web-cache-poisoning-attack/SKILL.md	81	```	COMMENT
LOW	…erforming-aws-privilege-escalation-assessment/SKILL.md	101		COMMENT
LOW	skills/recovering-from-ransomware-attack/SKILL.md	81	### Step 1: Establish Clean Recovery Environment	COMMENT
LOW	skills/testing-for-broken-access-control/SKILL.md	81		COMMENT
LOW	skills/testing-for-broken-access-control/SKILL.md	101	# Row 2 (Unauthenticated):	COMMENT
LOW	…/performing-memory-forensics-with-volatility3/SKILL.md	81	```bash	COMMENT
LOW	…ls/performing-web-application-firewall-bypass/SKILL.md	61	# Look for: 403 Forbidden, custom block page, CAPTCHA challenge	COMMENT
LOW	…s/performing-network-forensics-with-wireshark/SKILL.md	61	# File type: Wireshark/tcpdump/... - pcap	COMMENT
LOW	…s/performing-network-forensics-with-wireshark/SKILL.md	201	# Install NetworkMiner (Mono required on Linux)	COMMENT
LOW	skills/analyzing-pdf-malware-with-pdfid/SKILL.md	61	# Run PDFiD to identify suspicious elements	COMMENT
LOW	skills/performing-file-carving-with-foremost/SKILL.md	141	# Scalpel with file size limits	COMMENT
LOW	skills/exploiting-broken-link-hijacking/SKILL.md	161	# For unclaimed social media: Claim the handle	COMMENT
LOW	skills/testing-for-email-header-injection/SKILL.md	161	```	COMMENT
LOW	skills/detecting-lateral-movement-in-network/SKILL.md	61	```bash	COMMENT
LOW	skills/detecting-lateral-movement-in-network/SKILL.md	121	# index=wineventlog EventCode=7045 ServiceName="PSEXESVC" OR ServiceName="psexec"	COMMENT
LOW	skills/detecting-lateral-movement-in-network/SKILL.md	301		COMMENT
LOW	skills/detecting-lateral-movement-in-network/SKILL.md	321	# SOAR playbook for lateral movement response (pseudocode)	COMMENT
LOW	skills/detecting-lateral-movement-in-network/SKILL.md	341		COMMENT
LOW	skills/detecting-lateral-movement-in-network/SKILL.md	361		COMMENT
LOW	skills/exploiting-http-request-smuggling/SKILL.md	161	# Using smuggler.py	COMMENT
LOW	skills/exploiting-http-request-smuggling/SKILL.md	241	```	COMMENT
LOW	skills/exploiting-ipv6-vulnerabilities/SKILL.md	81		COMMENT
LOW	…rforming-wifi-password-cracking-with-aircrack/SKILL.md	81	# Scan all channels for access points	COMMENT
LOW	…/exploiting-prototype-pollution-in-javascript/SKILL.md	101	// Step 1: Find pollution source (URL parameter, JSON input, postMessage)	COMMENT
LOW	…esting-for-xss-vulnerabilities-with-burpsuite/SKILL.md	161	# Common DOM XSS sinks to monitor:	COMMENT
LOW	…esting-for-xss-vulnerabilities-with-burpsuite/SKILL.md	201	# Case variation: <ScRiPt>alert(1)</ScRiPt>	COMMENT
LOW	skills/testing-for-sensitive-data-exposure/SKILL.md	161		COMMENT
LOW	skills/testing-for-sensitive-data-exposure/SKILL.md	181		COMMENT
LOW	skills/testing-for-sensitive-data-exposure/SKILL.md	241	# - AWS access keys (AKIA...)	COMMENT
LOW	…onfiguring-windows-defender-advanced-settings/SKILL.md	141	# Network Protection leverages Microsoft SmartScreen intelligence	COMMENT
LOW	skills/performing-clickjacking-attack-test/SKILL.md	341		COMMENT
LOW	…nfiguring-windows-event-logging-for-detection/SKILL.md	121		COMMENT
LOW	skills/detecting-network-anomalies-with-zeek/SKILL.md	101	# Zeek generates structured log files in /opt/zeek/logs/current/	COMMENT
LOW	skills/exploiting-deeplink-vulnerabilities/SKILL.md	121	```	COMMENT
LOW	skills/analyzing-disk-image-with-autopsy/SKILL.md	81	# Alternatively, use Sleuth Kit CLI to verify the image first	COMMENT
LOW	skills/testing-jwt-token-security/SKILL.md	61	# Decode header	COMMENT
LOW	…ills/exploiting-type-juggling-vulnerabilities/SKILL.md	101		COMMENT
45 more matches not shown…

AI Slop Vocabulary90 hits · 92 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	index.json	1	{"version":"1.1.0","generated_at":"2026-06-26T14:06:13Z","repository":"https://github.com/mukul975/Anthropic-Cybersecuri	CODE
MEDIUM	…dentity-verification-for-zero-trust/scripts/process.py	293	"""Generate a comprehensive identity maturity assessment."""	STRING
MEDIUM	…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py	362	"""Run a comprehensive set of chipsec security modules."""	STRING
MEDIUM	…identity-governance-lifecycle-process/scripts/agent.py	127	"""Generate comprehensive identity governance report."""	STRING
MEDIUM	…/extracting-browser-history-artifacts/scripts/agent.py	159	"""Generate comprehensive browser forensics report."""	STRING
MEDIUM	…ementing-immutable-backup-with-restic/scripts/agent.py	328	"""Generate comprehensive backup status report."""	STRING
MEDIUM	…ing-for-unusual-service-installations/scripts/agent.py	147	"""Run comprehensive service installation threat hunt."""	STRING
MEDIUM⚡	…ing-tls-certificate-transparency-logs/scripts/agent.py	694	"""Generate a comprehensive CT monitoring report."""	STRING
MEDIUM	…ting-runtime-security-with-tetragon/scripts/process.py	233	"""Generate a comprehensive security report."""	STRING
MEDIUM	…nting-google-workspace-admin-security/scripts/agent.py	142	"""Run comprehensive Google Workspace security audit."""	STRING
MEDIUM	skills/securing-serverless-functions/scripts/agent.py	128	"""Run comprehensive serverless security audit."""	STRING
MEDIUM	…certificate-transparency-for-phishing/scripts/agent.py	150	"""Generate comprehensive CT monitoring report."""	STRING
MEDIUM	skills/profiling-threat-actor-groups/scripts/agent.py	50	"""Build a comprehensive profile for a specific threat actor group."""	STRING
MEDIUM	…asswordless-auth-with-microsoft-entra/scripts/agent.py	146	"""Run comprehensive passwordless authentication audit."""	STRING
MEDIUM	…oss-prevention-with-microsoft-purview/scripts/agent.py	240	"""Generate comprehensive DLP compliance report."""	STRING
MEDIUM	…ng-cloudflare-access-for-zero-trust/scripts/process.py	176	"""Generate comprehensive audit report."""	STRING
MEDIUM	…ills/implementing-zero-trust-in-cloud/scripts/agent.py	157	"""Run comprehensive zero trust assessment."""	STRING
MEDIUM	…detecting-port-scanning-with-fail2ban/scripts/agent.py	196	"""Generate comprehensive Fail2ban security report."""	STRING
MEDIUM	…-supply-chain-security-with-in-toto/scripts/process.py	167	"""Generate a comprehensive verification report."""	STRING
MEDIUM	skills/detecting-wmi-persistence/scripts/agent.py	162	"""Generate comprehensive WMI persistence hunt report."""	STRING
MEDIUM	…ecuring-azure-with-microsoft-defender/scripts/agent.py	135	"""Generate a comprehensive security posture report."""	STRING
MEDIUM	…etecting-bluetooth-low-energy-attacks/scripts/agent.py	502	"""Generate comprehensive BLE security assessment report."""	STRING
MEDIUM	…tion-based-detection-with-canarytoken/scripts/agent.py	156	"""Run comprehensive Canarytoken deployment audit."""	STRING
MEDIUM	…g-kubernetes-etcd-security-assessment/scripts/agent.py	131	"""Run comprehensive etcd security assessment."""	STRING
MEDIUM	…entitlement-review-with-sailpoint-iiq/scripts/agent.py	86	"""Generate a comprehensive entitlement review report."""	STRING
MEDIUM	…g-analysis-for-forensic-investigation/scripts/agent.py	161	"""Generate a comprehensive forensic log analysis report."""	STRING
MEDIUM	…-open-source-intelligence-gathering/scripts/process.py	375	"""Generate comprehensive OSINT report."""	STRING
MEDIUM	…ing-dark-web-monitoring-for-threats/scripts/process.py	139	"""Generate comprehensive dark web monitoring report."""	STRING
MEDIUM	…unting-for-startup-folder-persistence/scripts/agent.py	238	"""Run comprehensive startup persistence threat hunt."""	STRING
MEDIUM	…ng-microsegmentation-for-zero-trust/scripts/process.py	234	"""Generate comprehensive microsegmentation report."""	STRING
MEDIUM	…rforming-soc2-type2-audit-preparation/scripts/agent.py	673	"""Generate a comprehensive audit readiness report."""	STRING
MEDIUM	…ing-memory-forensics-with-volatility3/scripts/agent.py	117	"""Run comprehensive memory analysis and generate report."""	STRING
MEDIUM	…ged-access-management-with-cyberark/scripts/process.py	304	"""Generate comprehensive PAM audit report."""	STRING
MEDIUM	…tecting-serverless-function-injection/scripts/agent.py	477	"""Generate comprehensive serverless injection detection report."""	STRING
MEDIUM	…/implementing-alert-fatigue-reduction/scripts/agent.py	112	"""Build comprehensive alert fatigue reduction report."""	STRING
MEDIUM	…erforming-ios-app-security-assessment/scripts/agent.py	514	"""Generate comprehensive iOS security assessment report."""	STRING
MEDIUM	…ming-network-forensics-with-wireshark/scripts/agent.py	194	"""Generate comprehensive network forensics report."""	STRING
MEDIUM	…lls/implementing-siem-use-case-tuning/scripts/agent.py	125	"""Generate comprehensive tuning report with recommendations."""	STRING
MEDIUM	…performing-file-carving-with-foremost/scripts/agent.py	103	"""Build a comprehensive evidence catalog of carved files."""	STRING
MEDIUM	skills/detecting-rootkit-activity/scripts/agent.py	173	"""Generate comprehensive rootkit detection report."""	STRING
MEDIUM	…detecting-lateral-movement-in-network/scripts/agent.py	178	"""Generate comprehensive lateral movement detection report."""	STRING
MEDIUM	…rming-cloud-log-forensics-with-athena/scripts/agent.py	572	"""Run all forensic queries and compile a comprehensive report."""	STRING
MEDIUM	…s/implementing-gcp-vpc-firewall-rules/scripts/agent.py	135	"""Run a comprehensive firewall audit."""	STRING
MEDIUM	…sbom-for-supply-chain-vulnerabilities/scripts/agent.py	509	"""Generate a comprehensive vulnerability analysis report."""	STRING
MEDIUM	…eploying-software-defined-perimeter/scripts/process.py	216	"""Generate comprehensive SDP deployment report."""	STRING
MEDIUM	…-gcp-security-assessment-with-forseti/scripts/agent.py	144	"""Generate a comprehensive GCP security assessment report."""	STRING
MEDIUM	…/analyzing-golang-malware-with-ghidra/scripts/agent.py	201	"""Generate comprehensive Go malware analysis report."""	STRING
MEDIUM	…-hardware-security-module-integration/scripts/agent.py	154	"""Run comprehensive HSM compliance audit."""	STRING
MEDIUM	…s/performing-malware-triage-with-yara/scripts/agent.py	118	"""Generate comprehensive triage report."""	STRING
MEDIUM	…detecting-network-anomalies-with-zeek/scripts/agent.py	266	"""Generate comprehensive Zeek network analysis report."""	STRING
MEDIUM	…menting-privileged-access-workstation/scripts/agent.py	132	"""Run comprehensive PAW compliance audit."""	STRING
MEDIUM	…-active-directory-forest-trust-attack/scripts/agent.py	178	"""Run comprehensive forest trust security audit."""	STRING
MEDIUM	skills/performing-ransomware-response/scripts/agent.py	189	"""Generate comprehensive ransomware incident report."""	STRING
MEDIUM	…ing-zscaler-private-access-for-ztna/scripts/process.py	242	"""Generate comprehensive ZPA audit report."""	STRING
MEDIUM	…ntity-federation-with-saml-azure-ad/scripts/process.py	152	"""Generate comprehensive federation health report."""	STRING
MEDIUM	…/performing-sqlite-database-forensics/scripts/agent.py	176	"""Generate comprehensive forensic analysis report."""	STRING
MEDIUM	…erforming-sqlite-database-forensics/scripts/process.py	158	"""Generate comprehensive forensic analysis report."""	STRING
MEDIUM	…ng-active-directory-with-bloodhound/scripts/process.py	321	"""Generate comprehensive analysis report."""	STRING
MEDIUM	…nalyzing-android-malware-with-apktool/scripts/agent.py	162	"""Run comprehensive APK malware analysis."""	STRING
MEDIUM	…-beyondcorp-zero-trust-access-model/scripts/process.py	284	"""Generate a comprehensive BeyondCorp compliance report."""	STRING
30 more matches not shown…

Modern AI Meta-Vocabulary24 hits · 68 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	index.json	1	{"version":"1.1.0","generated_at":"2026-06-26T14:06:13Z","repository":"https://github.com/mukul975/Anthropic-Cybersecuri	CODE
MEDIUM⚡	index.json	1	{"version":"1.1.0","generated_at":"2026-06-26T14:06:13Z","repository":"https://github.com/mukul975/Anthropic-Cybersecuri	CODE
MEDIUM⚡	index.json	1	{"version":"1.1.0","generated_at":"2026-06-26T14:06:13Z","repository":"https://github.com/mukul975/Anthropic-Cybersecuri	CODE
MEDIUM⚡	index.json	1	{"version":"1.1.0","generated_at":"2026-06-26T14:06:13Z","repository":"https://github.com/mukul975/Anthropic-Cybersecuri	CODE
MEDIUM	…lls/assessing-vector-and-embedding-weaknesses/SKILL.md	82	### Step 1: Inventory the RAG pipeline	COMMENT
MEDIUM⚡	…lm-guardrails-for-security/references/api-reference.md	195	- NeMo Guardrails Documentation: https://docs.nvidia.com/nemo/guardrails/latest/index.html	CODE
MEDIUM⚡	…lm-guardrails-for-security/references/api-reference.md	196	- Guardrails AI Framework: https://github.com/guardrails-ai/guardrails	CODE
MEDIUM⚡	…lm-guardrails-for-security/references/api-reference.md	199	- OpenAI Guardrails Python: https://github.com/openai/openai-guardrails-python	CODE
MEDIUM⚡	…lm-guardrails-for-security/references/api-reference.md	200	- Colang 2.0 Guide: https://docs.nvidia.com/nemo/guardrails/latest/configure-rails/colang/index.html	CODE
MEDIUM⚡	…lm-guardrails-for-security/references/api-reference.md	201	- NeMo Guardrails Security Guidelines: https://docs.nvidia.com/nemo/guardrails/latest/security/guidelines.html	CODE
MEDIUM	…g-nist-rmf-authorization-to-operate/scripts/process.py	149	# decision scaffold	COMMENT
MEDIUM	skills/auditing-mcp-servers-for-tool-poisoning/SKILL.md	176	### 7. Enforce runtime guardrails (optional)	COMMENT
MEDIUM	skills/securing-agentic-ai-tool-invocation/SKILL.md	239	\| OWASP Agentic AI Top 10 \| Threats and controls for agents \| https://genai.owasp.org/resource/agentic-ai-threats-and-mi	CODE
MEDIUM	…ing-agentic-ai-tool-invocation/references/standards.md	29	- OWASP Agentic AI threats & mitigations: https://genai.owasp.org/resource/agentic-ai-threats-and-mitigations/	CODE
MEDIUM	…agentic-ai-tool-invocation/references/api-reference.md	47	- NeMo Guardrails docs: https://docs.nvidia.com/nemo/guardrails/	CODE
MEDIUM	…agentic-ai-tool-invocation/references/api-reference.md	49	- OWASP Agentic AI Top 10: https://genai.owasp.org/resource/agentic-ai-threats-and-mitigations/	CODE
MEDIUM	skills/defending-llms-with-guardrails/SKILL.md	269	\| NeMo docs \| Colang + YAML schema reference \| https://docs.nvidia.com/nemo/guardrails/ \|	CODE
MEDIUM	…lls/testing-prompt-injection-in-rag-pipelines/SKILL.md	23	# Testing Prompt Injection in RAG Pipelines	COMMENT
MEDIUM	…lls/testing-prompt-injection-in-rag-pipelines/SKILL.md	90	# Baseline request to the RAG chat endpoint (adjust to the target's API)	COMMENT
MEDIUM	…lls/testing-prompt-injection-in-rag-pipelines/SKILL.md	137	### 3. Build a Promptfoo RAG red-team config	COMMENT
MEDIUM	…lls/testing-prompt-injection-in-rag-pipelines/SKILL.md	190	# Point PyRIT at the RAG app's OpenAI-compatible endpoint	COMMENT
MEDIUM	…mpt-injection-in-rag-pipelines/references/standards.md	1	# Standards and References — Prompt Injection Testing in RAG Pipelines	COMMENT
MEDIUM	…injection-in-rag-pipelines/references/api-reference.md	1	# API Reference — RAG Prompt Injection Testing Tools	COMMENT
MEDIUM⚡	…ting-gdpr-data-subject-access-request/scripts/agent.py	1050	# DSAR Workflow Engine -- orchestrates the full lifecycle	COMMENT

Cross-File Repetition10 hits · 50 pts

Severity	File	Snippet	Context
HIGH	…ing-vulnerabilities-with-cvss-scoring/scripts/agent.py	fetch the cisa known exploited vulnerabilities catalog.	STRING
HIGH	…-endpoint-vulnerability-remediation/scripts/process.py	fetch the cisa known exploited vulnerabilities catalog.	STRING
HIGH	…lding-vulnerability-scanning-workflow/scripts/agent.py	fetch the cisa known exploited vulnerabilities catalog.	STRING
HIGH	…ing-threat-modeling-with-mitre-attack/scripts/agent.py	generate att&ck navigator layer json for heatmap visualization.	STRING
HIGH	skills/mapping-mitre-attack-techniques/scripts/agent.py	generate att&ck navigator layer json for heatmap visualization.	STRING
HIGH	skills/performing-purple-team-atomic-testing/SKILL.md	generate att&ck navigator layer json for heatmap visualization.	STRING
HIGH	skills/testing-jwt-token-security/scripts/agent.py	decode jwt header and payload without verification.	STRING
HIGH	…ng-for-json-web-token-vulnerabilities/scripts/agent.py	decode jwt header and payload without verification.	STRING
HIGH	skills/testing-api-authentication-weaknesses/SKILL.md	decode jwt header and payload without verification.	STRING
HIGH	…testing-api-authentication-weaknesses/scripts/agent.py	decode jwt header and payload without verification.	STRING

Redundant / Tautological Comments28 hits · 42 pts

Severity	File	Line	Snippet	Context
LOW	…loiting-kerberoasting-with-impacket/scripts/process.py	158	# Check if privileged	COMMENT
LOW	…ulti-factor-authentication-with-duo/scripts/process.py	156	# Check if denials happened within a short window	COMMENT
LOW	…-malware-behavior-with-cuckoo-sandbox/scripts/agent.py	199	# Check if argument is a report JSON path	COMMENT
LOW	…ing-insecure-data-storage-in-mobile/scripts/process.py	86	# Check if database is encrypted	COMMENT
LOW	…g-post-quantum-cryptography-migration/scripts/agent.py	702	# Check if connection succeeded with the specified group	COMMENT
LOW	…g-for-command-and-control-beaconing/scripts/process.py	172	# Check if beaconing threshold met	COMMENT
LOW	…etecting-bluetooth-low-energy-attacks/scripts/agent.py	384	# Check if Secure Connections flag is not set	COMMENT
LOW	…lls/hunting-for-dcom-lateral-movement/scripts/agent.py	261	# Check if DCOM is enabled	COMMENT
LOW	…teral-movement/scripts/detect_dcom_lateral_movement.py	165	# Check if this might be interactive (less suspicious) or DCOM (more suspicious)	COMMENT
LOW	…ementing-ransomware-backup-strategy/scripts/process.py	262	# Check if restore test is recent enough	COMMENT
LOW	…orming-soc2-type2-audit-preparation/scripts/process.py	326	# Display results	COMMENT
LOW	…s/detecting-dll-sideloading-attacks/scripts/process.py	93	# Check if DLL is a known sideloading target	COMMENT
LOW	…s/detecting-dll-sideloading-attacks/scripts/process.py	95	# Check if loaded from non-standard path	COMMENT
LOW	…tecting-serverless-function-injection/scripts/agent.py	216	# Check if event data flows into this sink	COMMENT
LOW	…g-dcsync-attack-in-active-directory/scripts/process.py	74	# Check if this is a legitimate domain controller	COMMENT
LOW	…-soar-playbook-with-palo-alto-xsoar/scripts/process.py	111	# Check if preceding task is manual	COMMENT
LOW	…rologon-vulnerability-cve-2020-1472/scripts/process.py	100	# Check if Netlogon is accessible	COMMENT
LOW	…-phishing-reporting-button-workflow/scripts/process.py	137	# Check if it's a known simulation	COMMENT
LOW	…-decoy-files-for-ransomware-detection/scripts/agent.py	126	# Check if file was renamed with ransomware extension	COMMENT
LOW	…detecting-container-escape-attempts/scripts/process.py	329	# Print results	COMMENT
LOW	…tecting-process-hollowing-technique/scripts/process.py	183	# Check if process path is from unexpected location	COMMENT
LOW	…g-business-email-compromise-with-ai/scripts/process.py	155	# Check if first-time sender to this recipient	COMMENT
LOW	…g-business-email-compromise-with-ai/scripts/process.py	167	# Check if request type is unusual for sender	COMMENT
LOW	…g-spearphishing-simulation-campaign/scripts/process.py	336	# Check if domain resolves	COMMENT
LOW	…ng-for-living-off-the-land-binaries/scripts/process.py	399	# Output results	COMMENT
LOW	…d-team-c2-infrastructure-with-havoc/scripts/process.py	227	# Check if domain is too new (WHOIS-based heuristic)	COMMENT
LOW	…menting-sigstore-for-software-signing/scripts/agent.py	231	result = run_cosign(["env"]) # Check if rekor-cli is better	CODE
LOW	…mplementing-usb-device-control-policy/scripts/agent.py	22	# Check if USBGuard is installed and running	COMMENT

Fake / Example Data41 hits · 41 pts

Severity	File	Line	Snippet	Context
LOW	skills/performing-jwt-none-algorithm-attack/SKILL.md	97	# Output: {'sub': '1234567890', 'name': 'John Doe', 'role': 'user', 'iat': 1516239022}	COMMENT
LOW	…eat-modeling-with-owasp-threat-dragon/scripts/agent.py	72	"placeholder": f"New {diagram_type} diagram",	CODE
LOW	…second-order-sql-injection/references/api-reference.md	48	{"id": 1, "username": "admin", "email": "admin@example.com"},	CODE
LOW	…second-order-sql-injection/references/api-reference.md	49	{"id": 2, "username": "' UNION SELECT 1,2,3--", "email": "test@test.com"}	CODE
LOW	skills/exploiting-mass-assignment-in-rest-apis/SKILL.md	79	-d '{"username":"testuser","email":"test@test.com","role":"admin"}'	CODE
LOW	…rce-intelligence-gathering/references/api-reference.md	16	python agent.py social --name "John Doe"	CODE
LOW⚡	…ing-dark-web-monitoring-for-threats/scripts/process.py	15	python process.py --org "Acme Corp" --domains acme.com,acme.io --check-credentials	STRING
LOW⚡	…ing-dark-web-monitoring-for-threats/scripts/process.py	16	python process.py --org "Acme Corp" --check-ransomware	STRING
LOW⚡	…ing-dark-web-monitoring-for-threats/scripts/process.py	17	python process.py --org "Acme Corp" --full-scan --output report.json	STRING
LOW	…nting-gdpr-data-protection-controls/scripts/process.py	466	"data_subject_name": "Jane Doe",	CODE
LOW	skills/testing-for-email-header-injection/SKILL.md	155	-d '{"to":["test@test.com","attacker@evil.com"],"subject":"Test","body":"Test"}'	CODE
LOW	skills/testing-for-email-header-injection/SKILL.md	160	-d '{"to":"test@test.com","subject":"Test","body":"{{constructor.constructor(\"return process.env\")()}}"}'	CODE
LOW	…ls/testing-for-email-header-injection/scripts/agent.py	103	def test_contact_form(self, endpoint="/contact", base_email="test@test.com"):	CODE
LOW	…ls/testing-for-email-header-injection/scripts/agent.py	119	def test_json_api(self, endpoint, base_email="test@test.com"):	CODE
LOW	…ls/testing-for-email-header-injection/scripts/agent.py	142	def test_smtp_commands(self, endpoint, field_name="email", base_email="test@test.com"):	CODE
LOW	…lls/exploiting-jwt-algorithm-confusion-attack/SKILL.md	189	modifications={"role": "admin", "sub": "admin@example.com"})	CODE
LOW	…-authentication-with-fido2/references/api-reference.md	11	user: { id: userId, name: "user@example.com", displayName: "User" },	CODE
LOW	skills/testing-api-security-with-owasp-top-10/SKILL.md	184	-d '{"email":"test@test.com","password":"wrong"}' \	CODE
LOW	…esting-api-security-with-owasp-top-10/scripts/agent.py	44	resp = requests.post(url, json={"email": "test@test.com", "password": f"wrong{i}"},	CODE
LOW	skills/testing-jwt-token-security/SKILL.md	67	# Output: {"sub":"1234567890","name":"John Doe","iat":1516239022}	COMMENT
LOW	skills/testing-jwt-token-security/SKILL.md	93	PAYLOAD=$(echo -n '{"sub":"1234567890","name":"John Doe","role":"admin","iat":1516239022}' \| base64 \| tr -d '=' \| tr '+/	CODE
LOW	…implementing-browser-isolation-for-zero-trust/SKILL.md	101	organization="Acme Corp",	CODE
LOW	…r-isolation-for-zero-trust/references/api-reference.md	13	organization="Acme Corp",	CODE
LOW	…r-isolation-for-zero-trust/references/api-reference.md	260	python agent.py --action demo --org "Acme Corp" --output report.json	CODE
LOW	skills/performing-privacy-impact-assessment/SKILL.md	73	data_controller="Acme Corp",	CODE
LOW	…-privacy-impact-assessment/references/api-reference.md	13	organization_name="Acme Corp",	CODE
LOW	…-privacy-impact-assessment/references/api-reference.md	26	data_controller="Acme Corp", # Controller name	CODE
LOW	…-privacy-impact-assessment/references/api-reference.md	236	python agent.py --action demo --org "Acme Corp" --output report.json	CODE
LOW	…-middle-phishing-detection/references/api-reference.md	55	"mailboxOwner": "user@example.com",	CODE
LOW	…ls/testing-for-business-logic-vulnerabilities/SKILL.md	155	-d '{"cart_id": "abc123", "shipping_address": "123 Main St"}' \	CODE
LOW	…ls/testing-for-business-logic-vulnerabilities/SKILL.md	263	-d '{"email":"test@test.com","password":"Test1234!","role":"admin"}' \	CODE
LOW	…testing-api-for-mass-assignment-vulnerability/SKILL.md	305	2. Register another user with injected role: `POST /api/v1/register {"name":"Admin","email":"admin@example.com","passwor	CODE
LOW	…s/performing-web-application-penetration-test/SKILL.md	198	{"orderId":10452,"customerName":"Jane Smith","email":"jane@...","address":"123 Main St"}	CODE
LOW	…ential-access-with-lazagne/references/api-reference.md	184	"Login": "admin@example.com",	CODE
LOW	…ng-broken-object-property-level-authorization/SKILL.md	66	"name": "John Doe",	CODE
LOW	…implementing-gdpr-data-subject-access-request/SKILL.md	258	requester_name="John Doe",	CODE
LOW	…implementing-gdpr-data-subject-access-request/SKILL.md	274	data_subject="John Doe",	CODE
LOW	…ata-subject-access-request/references/api-reference.md	74	\| `search_identifiers` \| `dict` \| required \| Key-value pairs to search for (e.g., `{"email": "user@example.com"}`) \|	CODE
LOW	skills/testing-mobile-api-authentication/SKILL.md	151	-d '{"email":"test@test.com","password":"pass"}' \| jq -r '.token')	CODE
LOW	…testing-api-authentication-weaknesses/scripts/agent.py	170	{"username": "admin@example.com", "password": "wrong"})	CODE
LOW	…r-spearphishing-indicators/references/api-reference.md	57	result, _, _ = spf.check2(ip="1.2.3.4", sender="user@example.com", helo="mail.example.com")	CODE

Verbosity Indicators20 hits · 35 pts

Severity	File	Line	Snippet	Context
LOW	…ting-bootkits-in-efi-system-partition/scripts/agent.py	127	# Step 2: anomalous root entries	COMMENT
LOW	…ting-bootkits-in-efi-system-partition/scripts/agent.py	152	# Step 6: YARA	COMMENT
LOW⚡	…tecting-serverless-function-injection/scripts/agent.py	540	# Step 1: Enumerate functions	COMMENT
LOW⚡	…tecting-serverless-function-injection/scripts/agent.py	545	# Step 2: Get event source mappings	COMMENT
LOW⚡	…tecting-serverless-function-injection/scripts/agent.py	548	# Step 3: Scan code for injection patterns	COMMENT
LOW⚡	…tecting-serverless-function-injection/scripts/agent.py	564	# Step 4: Audit layers	COMMENT
LOW⚡	…tecting-serverless-function-injection/scripts/agent.py	567	# Step 5: Detect privilege escalation paths	COMMENT
LOW⚡	…tecting-serverless-function-injection/scripts/agent.py	570	# Step 6: Check CloudTrail for suspicious modifications	COMMENT
LOW⚡	…tecting-serverless-function-injection/scripts/agent.py	573	# Step 7: Check function URL security	COMMENT
LOW⚡	…plementing-aws-nitro-enclave-security/scripts/agent.py	447	# Step 1: Find enclave-enabled instances	COMMENT
LOW⚡	…plementing-aws-nitro-enclave-security/scripts/agent.py	450	# Step 2: Audit KMS key policies	COMMENT
LOW⚡	…plementing-aws-nitro-enclave-security/scripts/agent.py	467	# Step 3: Audit IAM roles	COMMENT
LOW⚡	…plementing-aws-nitro-enclave-security/scripts/agent.py	474	# Step 4: Search CloudTrail events	COMMENT
LOW⚡	…plementing-aws-nitro-enclave-security/scripts/agent.py	477	# Step 5: Validate attestation document if provided	COMMENT
LOW⚡	…ting-gdpr-data-subject-access-request/scripts/agent.py	1442	# Step 3: Data Mapping	COMMENT
LOW⚡	…ting-gdpr-data-subject-access-request/scripts/agent.py	1447	# Step 4: Exemption Review	COMMENT
LOW	…ting-gdpr-data-subject-access-request/scripts/agent.py	1398	# Step 1: Register DSAR	COMMENT
LOW	…ting-gdpr-data-subject-access-request/scripts/agent.py	1416	# Step 2: PII Discovery	COMMENT
LOW	…ting-gdpr-data-subject-access-request/scripts/agent.py	1458	# Step 5: Response Generation	COMMENT
LOW	…ting-gdpr-data-subject-access-request/scripts/agent.py	1477	# Step 6: Mark complete	COMMENT

Self-Referential Comments8 hits · 28 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	…eploying-active-directory-honeytokens/scripts/agent.py	120	# Create the honeytoken account	COMMENT
MEDIUM⚡	…eploying-active-directory-honeytokens/scripts/agent.py	257	# Create the GPO folder structure in SYSVOL	COMMENT
MEDIUM⚡	…eploying-active-directory-honeytokens/scripts/agent.py	266	# Create the Groups.xml with a fake cpassword	COMMENT
MEDIUM	…eploying-active-directory-honeytokens/scripts/agent.py	294	# Create a matching real AD account (disabled or with different password)	COMMENT
MEDIUM	…ting-browser-isolation-for-zero-trust/scripts/agent.py	817	# Create a session (which evaluates all policies)	COMMENT
MEDIUM	…rming-deception-technology-deployment/scripts/agent.py	65	content += f"# This file is a decoy. Any access triggers a security alert.\n"	CODE
MEDIUM	…s/testing-mobile-api-authentication/scripts/process.py	136	# Create a JWT with expired timestamp (modifying payload)	COMMENT
MEDIUM	…fuzz-testing-in-cicd-with-aflplusplus/scripts/agent.py	33	# Create a minimal seed if none provided	COMMENT

AI Structural Patterns17 hits · 16 pts

Severity	File	Line	Context
LOW	…ls/analyzing-indicators-of-compromise/scripts/agent.py	41	CODE
LOW	…ls/analyzing-indicators-of-compromise/scripts/agent.py	50	CODE
LOW	…everse-engineering-ios-app-with-frida/scripts/agent.py	88	CODE
LOW	…etecting-cloud-threats-with-guardduty/scripts/agent.py	41	CODE
LOW	…etecting-cloud-threats-with-guardduty/scripts/agent.py	73	CODE
LOW	…zing-lnk-file-and-jump-list-artifacts/scripts/agent.py	111	CODE
LOW	…ng-lnk-file-and-jump-list-artifacts/scripts/process.py	71	CODE
LOW	…sbom-for-supply-chain-vulnerabilities/scripts/agent.py	646	CODE
LOW	…ilding-threat-intelligence-platform/scripts/process.py	41	CODE
LOW	skills/performing-ransomware-response/scripts/agent.py	95	CODE
LOW	…/performing-privacy-impact-assessment/scripts/agent.py	674	CODE
LOW	…/performing-privacy-impact-assessment/scripts/agent.py	907	CODE
LOW	…xecuting-phishing-simulation-campaign/scripts/agent.py	118	CODE
LOW	…nfrastructure-with-sliver-framework/scripts/process.py	76	CODE
LOW	skills/exploiting-idor-vulnerabilities/scripts/agent.py	139	CODE
LOW	…detecting-misconfigured-azure-storage/scripts/agent.py	58	CODE
LOW	…detecting-misconfigured-azure-storage/scripts/agent.py	98	CODE

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH⚡	index.json	1	{"version":"1.1.0","generated_at":"2026-06-26T14:06:13Z","repository":"https://github.com/mukul975/Anthropic-Cybersecuri	CODE

Overly Generic Function Names1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…lls/performing-red-team-with-covenant/scripts/agent.py	131	def execute_task(self, grunt_id, task_name, parameters=None):	CODE