Home / mvt-project / mvt
AI Slop Code RIsk Monitor

mvt-project/mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

24.1 Elevated pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for mvt-project/mvt, a Python project with 15,297 GitHub stars. SynthScan examined 42,531 lines of code across 313 source files, recording 757 pattern matches distributed across 16 syntactic categories. The legacy adjusted pattern signal is 24.1 (Elevated pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

24.1
Adjusted Signal
24.1
Raw Pattern Score
100%
Time Factor
2026-10-09
Last Push
15.3K
Stars
Python
Language
42.5K
Lines of Code
313
Files
757
Pattern Hits
2026-10-12
Scan Date
0.08
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 47.5/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 561 finding(s).

Hallucinated Dependency & Supply Chain Risk 4.4/100 · LOW

Are imports declared and package/API names verified? 36 finding(s).

Agent Over-Engineering Ratio 64.4/100 · HIGH

Are wrappers, guards, and repeated structures necessary? 622 finding(s).

PR Review Velocity Impact 70.9/100 · HIGH

Which changes need focused human review? 757 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 26MEDIUM 82LOW 649

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 757 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers452 hits · 429 pts
SeverityFileLineSnippetContext
LOWtests/test_check_android_androidqf.py27 def test_log_timestamps_module_is_registered(self):CODE
LOWtests/test_check_android_androidqf.py36 def test_check_stores_nested_sms_urls(self, tmp_path):CODE
LOWtests/test_check_android_androidqf.py54 def test_acquisition_context_is_passed_to_bugreport(self, tmp_path, mocker):CODE
LOWtests/test_check_android_androidqf.py85 def test_acquisition_context_falls_back_to_public_key_file(self, tmp_path):CODE
LOWtests/test_check_android_androidqf.py97 def test_check_encrypted_backup_prompt_valid(self, mocker):CODE
LOWtests/test_check_android_androidqf.py113 def test_check_encrypted_backup_cli(self, mocker):CODE
LOWtests/test_check_android_androidqf.py129 def test_check_encrypted_backup_env(self, mocker):CODE
LOWtests/test_check_android_androidqf.py148 def test_check_malformed_backup_skips_backup_modules(self, tmp_path, caplog):CODE
LOWtests/test_check_android_androidqf.py163 def test_intrusion_log_zip_rejects_path_traversal(self, tmp_path, mocker, caplog):CODE
LOWtests/test_check_android_adb_removed.py12 def test_check_adb_exits_nonzero(self):CODE
LOWtests/test_cmd_check_sysdiagnose.py29def _create_sysdiagnose_folder(tmp_path):CODE
LOWtests/test_cmd_check_sysdiagnose.py41def _create_sysdiagnose_archive(tmp_path, folder):CODE
LOWtests/test_cmd_check_sysdiagnose.py62def test_check_sysdiagnose_from_folder(tmp_path):CODE
LOWtests/test_cmd_check_sysdiagnose.py74def test_check_sysdiagnose_from_archive_closes_archive(tmp_path):CODE
LOWtests/test_cmd_check_sysdiagnose.py91def test_archive_is_extracted_once_and_unsafe_members_are_skipped(tmp_path):CODE
LOWtests/test_ios_versions.py10 def test_is_ios_version_outdated(self):CODE
LOWtests/test_cli_entry_points.py80def _install_fixture_entry_point(monkeypatch, entry_point_group, command):STRING
LOWtests/test_cli_entry_points.py111def test_main_registers_installed_plugins_before_running_the_cli(CODE
LOWtests/test_cli_entry_points.py132def test_main_completes_plugin_command_names(CODE
LOWtests/test_cli_entry_points.py155def test_main_still_loads_commands_from_a_file(CODE
LOWtests/test_cli_entry_points.py178def test_main_loads_commands_from_the_environment_variable(CODE
LOWtests/test_cli_entry_points.py197def test_main_ignores_the_entry_point_groups_of_the_other_programs(CODE
LOWtests/test_cli_entry_points.py216def test_the_console_script_targets_are_importable():CODE
LOWtests/test_cli_entry_points.py223def test_importing_mvt_does_not_import_a_cli(tmp_path):CODE
LOWtests/test_cli_entry_points.py237def test_importing_mvt_does_not_run_installed_plugins(tmp_path):CODE
LOWtests/test_cli_entry_points.py255def test_registering_the_plugins_runs_the_entry_point(tmp_path):CODE
LOWtests/test_check_ios_sysdiagnose.py30def _create_sysdiagnose_folder(tmp_path):STRING
LOWtests/test_check_ios_sysdiagnose.py37def test_check_sysdiagnose_runs_explicitly_scoped_custom_module(tmp_path):STRING
LOWtests/test_check_ios_sysdiagnose.py57def test_check_sysdiagnose_warns_without_a_custom_module(tmp_path, caplog):STRING
LOWtests/test_check_ios_sysdiagnose.py69def _create_truncated_sysdiagnose_archive(tmp_path):STRING
LOWtests/test_check_ios_sysdiagnose.py81def test_check_sysdiagnose_reports_a_truncated_archive(tmp_path, caplog):STRING
LOWtests/plugin_fixtures.py26def write_cli_plugin_distribution(CODE
LOWtests/utils.py29def get_android_backup_folder():CODE
LOWtests/utils.py41def add_backup_manifest_entry(backup_path, file_id, domain, relative_path):CODE
LOW⚡tests/test_check_ios_backup.py22 def test_check_logs_the_backup_path_to_the_command_log(self, tmp_path):CODE
LOW⚡tests/test_check_ios_backup.py30 def test_check_finds_backup_in_subfolder(self, tmp_path, caplog):CODE
LOW⚡tests/test_check_ios_backup.py39 def test_check_rejects_non_backup_folder(self, tmp_path, caplog):CODE
LOWtests/test_cli_startup.py19def test_importing_a_cli_does_not_import_the_module_machinery(cli_module, tmp_path):CODE
LOW⚡tests/test_cli_verbose.py40 def test_verbose_before_the_command_name_turns_on_debug(self, program):CODE
LOW⚡tests/test_cli_verbose.py49 def test_a_run_without_verbose_goes_back_to_info(self, program):CODE
LOW⚡tests/test_cli_verbose.py58 def test_mvt_verbose_without_a_command_prints_the_help(self):CODE
LOW⚡tests/test_cli_verbose.py67 def test_ios_command_default_does_not_undo_the_cli_choice(self, tmp_path):CODE
LOW⚡tests/test_cli_verbose.py76 def test_ios_verbose_after_the_command_name_still_works(self, tmp_path):CODE
LOW⚡tests/test_cli_verbose.py85 def test_android_command_default_does_not_undo_the_cli_choice(self, tmp_path):CODE
LOW⚡tests/test_cli_verbose.py94 def test_android_verbose_after_the_command_name_still_works(self, tmp_path):CODE
LOW⚡tests/test_cli_verbose.py103 def test_the_command_option_says_it_is_kept_for_compatibility(self):CODE
LOW⚡tests/test_cli.py17 def test_running_mvt_alone_shows_the_logo_and_the_commands(self):CODE
LOW⚡tests/test_cli.py26 def test_help_reminds_where_the_analysis_runs(self):CODE
LOW⚡tests/test_cli.py33 def test_version_prints_the_installed_version(self):CODE
LOW⚡tests/test_cli.py39 def test_download_iocs_updates_the_indicators(self, monkeypatch):CODE
LOWtests/test_check_android_backup.py20 def test_check_encrypted_backup_prompt_valid(self, mocker):CODE
LOWtests/test_check_android_backup.py33 def test_check_encrypted_backup_cli(self, mocker):CODE
LOWtests/test_check_android_backup.py49 def test_check_encrypted_backup_cli_invalid(self, mocker, caplog):CODE
LOWtests/test_check_android_backup.py62 def test_check_encrypted_backup_env(self, mocker):CODE
LOWtests/test_completion.py14 def test_completion_prints_instructions_by_default(self):CODE
LOWtests/test_completion.py23 def test_completion_bash_script_covers_every_cli(self):CODE
LOWtests/test_completion.py34 def test_completion_fish_script_covers_every_cli(self):CODE
LOWtests/test_completion.py44 def test_completion_install_updates_bashrc_once(self, tmp_path, monkeypatch):CODE
LOWtests/test_completion.py67 def test_completion_install_fish_does_not_update_shell_rc(CODE
LOWtests/test_completion.py87 def test_completion_install_without_shell_is_a_usage_error(self):CODE
392 more matches not shown…
Decorative Section Separators64 hits · 237 pts
SeverityFileLineSnippetContext
MEDIUMsrc/mvt/cli.py32# ==============================================================================COMMENT
MEDIUMsrc/mvt/cli.py34# ==============================================================================COMMENT
MEDIUM⚡src/mvt/cli.py67# ==============================================================================COMMENT
MEDIUM⚡src/mvt/cli.py69# ==============================================================================COMMENT
MEDIUM⚡src/mvt/cli.py76# ==============================================================================COMMENT
MEDIUM⚡src/mvt/cli.py78# ==============================================================================COMMENT
MEDIUM⚡src/mvt/cli.py82# ==============================================================================COMMENT
MEDIUM⚡src/mvt/cli.py84# ==============================================================================COMMENT
MEDIUMsrc/mvt/cli.py95# ==============================================================================COMMENT
MEDIUMsrc/mvt/cli.py97# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py91# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py93# ==============================================================================COMMENT
MEDIUM⚡src/mvt/ios/cli.py121# ==============================================================================COMMENT
MEDIUM⚡src/mvt/ios/cli.py123# ==============================================================================COMMENT
MEDIUM⚡src/mvt/ios/cli.py129# ==============================================================================COMMENT
MEDIUM⚡src/mvt/ios/cli.py131# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py211# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py213# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py255# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py257# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py326# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py328# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py392# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py394# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py467# ==============================================================================COMMENT
MEDIUMsrc/mvt/ios/cli.py469# ==============================================================================COMMENT
MEDIUM⚡src/mvt/ios/cli.py516# ==============================================================================COMMENT
MEDIUM⚡src/mvt/ios/cli.py518# ==============================================================================COMMENT
MEDIUM⚡src/mvt/ios/cli.py527# ==============================================================================COMMENT
MEDIUM⚡src/mvt/ios/cli.py529# ==============================================================================COMMENT
MEDIUMsrc/mvt/android/cli.py79# ==============================================================================COMMENT
MEDIUMsrc/mvt/android/cli.py81# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/cli.py109# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/cli.py111# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/cli.py117# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/cli.py119# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/cli.py129# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/cli.py131# ==============================================================================COMMENT
MEDIUMsrc/mvt/android/cli.py211# ==============================================================================COMMENT
MEDIUMsrc/mvt/android/cli.py213# ==============================================================================COMMENT
MEDIUMsrc/mvt/android/cli.py282# ==============================================================================COMMENT
MEDIUMsrc/mvt/android/cli.py284# ==============================================================================COMMENT
MEDIUMsrc/mvt/android/cli.py364# ==============================================================================COMMENT
MEDIUMsrc/mvt/android/cli.py366# ==============================================================================COMMENT
MEDIUMsrc/mvt/android/cli.py443# ==============================================================================COMMENT
MEDIUMsrc/mvt/android/cli.py445# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/cli.py492# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/cli.py494# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/cli.py503# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/cli.py505# ==============================================================================COMMENT
MEDIUM⚡src/mvt/android/modules/intrusion_logs/base.py330 # ------------------------------------------------------------------COMMENT
MEDIUM⚡src/mvt/android/modules/intrusion_logs/base.py332 # ------------------------------------------------------------------COMMENT
MEDIUM⚡src/mvt/android/modules/intrusion_logs/base.py342 # ------------------------------------------------------------------COMMENT
MEDIUM⚡src/mvt/android/modules/intrusion_logs/base.py344 # ------------------------------------------------------------------COMMENT
MEDIUM⚡src/mvt/android/modules/intrusion_logs/base.py389 # ------------------------------------------------------------------COMMENT
MEDIUM⚡src/mvt/android/modules/intrusion_logs/base.py391 # ------------------------------------------------------------------COMMENT
MEDIUMsrc/mvt/android/modules/intrusion_logs/base.py71 # ------------------------------------------------------------------COMMENT
MEDIUMsrc/mvt/android/modules/intrusion_logs/base.py73 # ------------------------------------------------------------------COMMENT
MEDIUMsrc/mvt/android/modules/intrusion_logs/base.py84 # ------------------------------------------------------------------COMMENT
MEDIUMsrc/mvt/android/modules/intrusion_logs/base.py86 # ------------------------------------------------------------------COMMENT
4 more matches not shown…
Excessive Try-Catch Wrapping65 hits · 71 pts
SeverityFileLineSnippetContext
LOWtests/android_androidqf/test_mounts.py63 except Exception:CODE
LOWsrc/mvt/ios/decrypt.py249 except Exception as exc:CODE
LOWsrc/mvt/ios/decrypt.py323 except Exception as exc:CODE
LOWsrc/mvt/ios/decrypt.py391 except Exception as exc:CODE
LOWsrc/mvt/ios/decrypt.py449 except Exception as exc:CODE
LOWsrc/mvt/ios/decrypt.py481 except Exception as exc:CODE
LOWsrc/mvt/ios/modules/base.py140 except Exception:CODE
LOWsrc/mvt/ios/modules/base.py194 except Exception as exc:CODE
MEDIUMsrc/mvt/ios/modules/base.py29def close(self) -> None:CODE
LOW…c/mvt/ios/modules/mixed/webkit_session_resource_log.py154 except Exception:CODE
LOW…c/mvt/ios/modules/mixed/webkit_session_resource_log.py161 except Exception:CODE
LOWsrc/mvt/ios/modules/mixed/safari_history.py80 except Exception:CODE
LOWsrc/mvt/ios/modules/mixed/safari_history.py93 except Exception:CODE
LOW…t/ios/modules/mixed/webkit_resource_load_statistics.py161 except Exception as exc:CODE
LOWsrc/mvt/ios/modules/backup/manifest.py116 except Exception:CODE
LOWsrc/mvt/ios/modules/backup/manifest.py208 except Exception:CODE
LOWsrc/mvt/ios/modules/backup/configuration_profiles.py142 except Exception:CODE
LOWsrc/mvt/ios/modules/fs/filesystem.py90 except Exception:CODE
LOWsrc/mvt/ios/modules/fs/filesystem.py104 except Exception:CODE
LOWsrc/mvt/ios/modules/fs/shutdownlog.py113 except Exception:CODE
LOWsrc/mvt/common/alerts.py65 except Exception:CODE
LOWsrc/mvt/common/command.py104 except Exception as exc:CODE
LOW⚡src/mvt/common/cmd_plugins.py46 except Exception as exc:CODE
LOW⚡src/mvt/common/cmd_plugins.py59 except Exception:CODE
LOW⚡src/mvt/common/cmd_plugins.py66 except Exception:CODE
LOWsrc/mvt/common/log.py64 except Exception:CODE
LOWsrc/mvt/common/updates.py79 except Exception as exc:CODE
LOWsrc/mvt/common/updates.py95 except Exception:CODE
LOWsrc/mvt/common/updates.py133 except Exception as e:CODE
LOWsrc/mvt/common/updates.py219 except Exception as e:CODE
LOWsrc/mvt/common/updates.py245 except Exception:CODE
LOWsrc/mvt/common/updates.py310 except Exception as e:CODE
LOWsrc/mvt/common/updates.py423 except Exception as e:CODE
MEDIUMsrc/mvt/common/updates.py52def check(self) -> str:CODE
LOWsrc/mvt/common/indicators.py458 except Exception:CODE
LOWsrc/mvt/common/logo.py30 except Exception as e:CODE
LOWsrc/mvt/common/logo.py70 except Exception as e:CODE
LOWsrc/mvt/common/logo.py124 except Exception as e:CODE
LOW⚡src/mvt/common/cli_plugins.py211 except Exception:CODE
LOW⚡src/mvt/common/cli_plugins.py221 except Exception as exc:CODE
LOWsrc/mvt/common/utils.py99 except Exception:CODE
LOWsrc/mvt/common/module.py161 except Exception as exc:CODE
LOWsrc/mvt/common/module.py249 except Exception as exc:CODE
LOWsrc/mvt/common/module.py263 except Exception as exc:CODE
LOWsrc/mvt/common/module.py278 except Exception as exc:CODE
LOWsrc/mvt/common/module.py289 except Exception as exc:CODE
LOWsrc/mvt/common/module_loader.py168 except Exception as exc:CODE
LOWsrc/mvt/common/module_loader.py233 except Exception:CODE
LOWsrc/mvt/common/module_loader.py261 except Exception:CODE
LOWsrc/mvt/common/module_loader.py271 except Exception:CODE
LOWsrc/mvt/common/module_loader.py294 except Exception:CODE
LOWsrc/mvt/common/module_loader.py315 except Exception as exc:CODE
MEDIUMsrc/mvt/common/module_loader.py268def _packages_distributions() -> dict[str, list[str]]:CODE
LOWsrc/mvt/android/cmd_check_bugreport.py169 except Exception as exc:CODE
LOWsrc/mvt/android/cmd_check_androidqf.py208 except Exception as exc:CODE
LOWsrc/mvt/android/cmd_check_intrusion_logs.py96 except Exception as exc:CODE
LOWsrc/mvt/android/artifacts/tombstone_crashes.py187 except Exception as e:CODE
LOWsrc/mvt/android/artifacts/tombstone_crashes.py266 except Exception as e:CODE
LOWsrc/mvt/android/modules/bugreport/tombstones.py80 except Exception as exc:CODE
LOWsrc/mvt/android/modules/androidqf/mounts.py57 except Exception as exc:CODE
5 more matches not shown…
Cross-File Repetition14 hits · 70 pts
SeverityFileLineSnippetContext
HIGHsrc/mvt/cli.py0register the external commands and run the mvt-android cli. external commands are registered here rather than when this STRING
HIGHsrc/mvt/ios/cli.py0register the external commands and run the mvt-android cli. external commands are registered here rather than when this STRING
HIGHsrc/mvt/android/cli.py0register the external commands and run the mvt-android cli. external commands are registered here rather than when this STRING
HIGHsrc/mvt/ios/modules/fs/webkit_safariviewservice.py0this module looks extracts records from webkit indexeddb folders, and checks them against any provided list of suspiciouSTRING
HIGHsrc/mvt/ios/modules/fs/webkit_localstorage.py0this module looks extracts records from webkit indexeddb folders, and checks them against any provided list of suspiciouSTRING
HIGHsrc/mvt/ios/modules/fs/webkit_indexeddb.py0this module looks extracts records from webkit indexeddb folders, and checks them against any provided list of suspiciouSTRING
HIGHsrc/mvt/android/modules/bugreport/fs_timestamps.py0this module extracts records from battery daily updates.STRING
HIGH…mvt/android/modules/bugreport/dumpsys_battery_daily.py0this module extracts records from battery daily updates.STRING
HIGHsrc/mvt/android/modules/bugreport/dumpsys_dbinfo.py0this module extracts records from battery daily updates.STRING
HIGH…t/android/modules/bugreport/dumpsys_battery_history.py0this module extracts records from battery daily updates.STRING
HIGHsrc/mvt/android/modules/bugreport/tombstones.py0this module extracts records from battery daily updates.STRING
HIGHsrc/mvt/android/modules/bugreport/dumpsys_packages.py0this module extracts details on receivers for risky activities.STRING
HIGHsrc/mvt/android/modules/bugreport/dumpsys_activities.py0this module extracts details on receivers for risky activities.STRING
HIGHsrc/mvt/android/modules/bugreport/dumpsys_receivers.py0this module extracts details on receivers for risky activities.STRING
Empty Error Handlers11 hits · 55 pts
SeverityFileLineSnippetContext
HIGHtests/conftest.py39except KeyError:CODE
HIGHsrc/mvt/ios/modules/mixed/safari_browserstate.py139except plistlib.InvalidFileException:CODE
HIGHsrc/mvt/common/alerts.py65except Exception:CODE
HIGHsrc/mvt/common/command.py733except NotImplementedError:CODE
HIGHsrc/mvt/common/command.py786except NotImplementedError:CODE
HIGHsrc/mvt/common/command.py766except NotImplementedError:CODE
HIGHsrc/mvt/common/module.py287except NotImplementedError:CODE
HIGHsrc/mvt/common/module_loader.py261except Exception:CODE
HIGHsrc/mvt/common/module_loader.py294except Exception:CODE
HIGHsrc/mvt/android/artifacts/dumpsys_battery_history.py41except ValueError:CODE
HIGHsrc/mvt/android/parsers/backup.py59except (UnicodeDecodeError, ValueError):CODE
Deep Nesting55 hits · 54 pts
SeverityFileLineSnippetContext
LOWsrc/mvt/ios/decrypt.py271CODE
LOWsrc/mvt/ios/cmd_check_sysdiagnose.py80CODE
LOWsrc/mvt/ios/modules/net_base.py184CODE
LOWsrc/mvt/ios/modules/base.py146CODE
LOWsrc/mvt/ios/modules/base.py219CODE
LOWsrc/mvt/ios/modules/base.py278CODE
LOWsrc/mvt/ios/modules/mixed/whatsapp_contacts.py201CODE
LOW…c/mvt/ios/modules/mixed/webkit_session_resource_log.py69CODE
LOW…c/mvt/ios/modules/mixed/webkit_session_resource_log.py185CODE
LOWsrc/mvt/ios/modules/mixed/safari_history.py170CODE
LOWsrc/mvt/ios/modules/mixed/interactionc.py473CODE
LOWsrc/mvt/ios/modules/mixed/interactionc.py502CODE
LOWsrc/mvt/ios/modules/mixed/calendar.py87CODE
LOWsrc/mvt/ios/modules/mixed/safari_browserstate.py67CODE
LOWsrc/mvt/ios/modules/mixed/safari_browserstate.py94CODE
LOWsrc/mvt/ios/modules/mixed/safari_browserstate.py182CODE
LOW…t/ios/modules/mixed/webkit_resource_load_statistics.py75CODE
LOW…t/ios/modules/mixed/webkit_resource_load_statistics.py147CODE
LOWsrc/mvt/ios/modules/mixed/tcc.py103CODE
LOWsrc/mvt/ios/modules/fs/analytics.py85CODE
LOWsrc/mvt/ios/modules/fs/shutdownlog.py78CODE
LOWsrc/mvt/common/alerts.py40CODE
LOWsrc/mvt/common/alerts.py175CODE
LOWsrc/mvt/common/command.py566CODE
LOWsrc/mvt/common/log.py39CODE
LOWsrc/mvt/common/indicators.py64CODE
LOWsrc/mvt/common/indicators.py122CODE
LOWsrc/mvt/common/indicators.py225CODE
LOWsrc/mvt/common/utils.py205CODE
LOWsrc/mvt/common/password.py115CODE
LOWsrc/mvt/android/cmd_check_androidqf.py307CODE
LOWsrc/mvt/android/cmd_check_backup.py124CODE
LOWsrc/mvt/android/artifacts/tombstone_crashes.py168CODE
LOWsrc/mvt/android/artifacts/tombstone_crashes.py236CODE
LOWsrc/mvt/android/artifacts/dumpsys_adb.py24CODE
LOWsrc/mvt/android/artifacts/mounts.py40CODE
LOWsrc/mvt/android/artifacts/dumpsys_platform_compat.py28CODE
LOWsrc/mvt/android/artifacts/processes.py41CODE
LOWsrc/mvt/android/artifacts/settings.py142CODE
LOWsrc/mvt/android/artifacts/dumpsys_appops.py44CODE
LOWsrc/mvt/android/artifacts/dumpsys_appops.py87CODE
LOWsrc/mvt/android/artifacts/dumpsys_receivers.py21CODE
LOWsrc/mvt/android/parsers/backup.py203CODE
LOWsrc/mvt/android/modules/bugreport/tombstones.py37CODE
LOWsrc/mvt/android/modules/androidqf/aqf_files.py85CODE
LOWsrc/mvt/android/modules/androidqf/aqf_files.py121CODE
LOWsrc/mvt/android/modules/androidqf/aqf_packages.py48CODE
LOWsrc/mvt/android/modules/intrusion_logs/connect_event.py33CODE
LOW…c/mvt/android/modules/intrusion_logs/security_event.py309CODE
LOW…c/mvt/android/modules/intrusion_logs/security_event.py477CODE
LOWsrc/mvt/android/modules/intrusion_logs/dns_event.py33CODE
LOWsrc/mvt/android/modules/intrusion_logs/base.py123CODE
LOWsrc/mvt/android/modules/intrusion_logs/base.py141CODE
LOWsrc/mvt/android/modules/intrusion_logs/base.py161CODE
LOWsrc/mvt/android/modules/intrusion_logs/base.py251CODE
Unused Imports33 hits · 28 pts
SeverityFileLineSnippetContext
LOWsrc/mvt/plugin.py12CODE
LOWsrc/mvt/plugin.py13CODE
LOWsrc/mvt/plugin.py14CODE
LOWsrc/mvt/plugin.py15CODE
LOWsrc/mvt/plugin.py15CODE
LOWsrc/mvt/plugin.py16CODE
LOWsrc/mvt/plugin.py17CODE
LOWsrc/mvt/plugin.py18CODE
LOWsrc/mvt/plugin.py18CODE
LOWsrc/mvt/plugin.py18CODE
LOWsrc/mvt/plugin.py19CODE
LOWsrc/mvt/plugin.py20CODE
LOWsrc/mvt/plugin.py20CODE
LOWsrc/mvt/plugin.py20CODE
LOWsrc/mvt/plugin.py25CODE
LOWsrc/mvt/plugin.py25CODE
LOWsrc/mvt/plugin.py25CODE
LOWsrc/mvt/plugin.py25CODE
LOWsrc/mvt/plugin.py25CODE
LOWsrc/mvt/plugin.py32CODE
LOWsrc/mvt/plugin.py32CODE
LOWsrc/mvt/plugin.py32CODE
LOWsrc/mvt/plugin.py32CODE
LOWsrc/mvt/plugin.py32CODE
LOWsrc/mvt/plugin.py32CODE
LOWsrc/mvt/plugin.py40CODE
LOWsrc/mvt/plugin.py41CODE
LOWsrc/mvt/plugin.py42CODE
LOWsrc/mvt/ios/__init__.py6CODE
LOWsrc/mvt/ios/__init__.py6CODE
LOWsrc/mvt/ios/modules/sysdiagnose/__init__.py8CODE
LOWsrc/mvt/android/__init__.py6CODE
LOWsrc/mvt/android/__init__.py6CODE
Over-Commented Block18 hits · 18 pts
SeverityFileLineSnippetContext
LOWtests/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWtests/artifacts/android_data/dumpsys_battery.txt21 Discharge screen off time: 9d 21h 51m 40s 100ms (from 2 steps)COMMENT
LOWtests/artifacts/androidqf/dumpsys.txt341 #0: +2h21m35s4ms to 75 (screen-off, power-save-off)COMMENT
LOWtests/ios_sysdiagnose/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWtests/ios_fs/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWtests/common/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWtests/android/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWtests/ios_backup/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWtests/android_androidqf/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWsrc/mvt/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWsrc/mvt/ios/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWsrc/mvt/ios/modules/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWsrc/mvt/common/module_types.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWsrc/mvt/common/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWsrc/mvt/android/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWsrc/mvt/android/artifacts/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWsrc/mvt/android/parsers/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
LOWsrc/mvt/android/modules/__init__.py1# Mobile Verification Toolkit (MVT)COMMENT
Self-Referential Comments13 hits · 17 pts
SeverityFileLineSnippetContext
MEDIUMsrc/mvt/ios/decrypt.py184 """This class provides functions to decrypt an encrypted iTunes backupSTRING
MEDIUMsrc/mvt/ios/modules/net_base.py23 """This class provides a base for DataUsage and NetUsage extractionSTRING
MEDIUMsrc/mvt/ios/modules/base.py39 """This class provides a base for all iOS filesystem/backup extractionSTRING
MEDIUMsrc/mvt/ios/modules/fs/webkit_base.py14 """This class is a base for other WebKit-related modules."""STRING
MEDIUMsrc/mvt/common/indicators.py46 """This class is used to parse indicators from a STIX2 file and provideSTRING
MEDIUMsrc/mvt/common/indicators.py422 # Create an Aho-Corasick automaton from the list of urlsCOMMENT
MEDIUMsrc/mvt/common/cli_plugins.py18# This module is imported by every CLI at start-up, and by shell completion onCOMMENT
MEDIUMsrc/mvt/common/module.py43 """This class provides a base for all extraction modules."""STRING
MEDIUMsrc/mvt/android/cmd_check_bugreport.py69 """This method is used to initialize the bug report analysis from anSTRING
MEDIUMsrc/mvt/android/cmd_check_bugreport.py81 """This method is used to initialize the bug report analysis from aSTRING
MEDIUMsrc/mvt/android/modules/bugreport/base.py28 """This class provides a base for all Android Bug Report modules."""STRING
MEDIUMsrc/mvt/android/modules/androidqf/base.py17 """This class provides a base for all Android Data analysis modules."""STRING
MEDIUMsrc/mvt/android/modules/backup/base.py16 """This class provides a base for all backup extractios modules"""STRING
Redundant / Tautological Comments10 hits · 15 pts
SeverityFileLineSnippetContext
LOWsrc/mvt/ios/versions.py45 # Check if it is a buildCOMMENT
LOWsrc/mvt/ios/modules/mixed/interactionc.py353 # Check if the record has the current timestamp.COMMENT
LOWsrc/mvt/ios/modules/mixed/interactionc.py357 # Check if the timestamp was already processed.COMMENT
LOWsrc/mvt/common/alerts.py61 # Check if it has a get_slug method (MVT modules have this)COMMENT
LOWsrc/mvt/android/artifacts/mounts.py93 # Check if it's a system partitionCOMMENT
LOWsrc/mvt/android/artifacts/mounts.py98 # Check if it's mounted read-writeCOMMENT
LOWsrc/mvt/android/artifacts/mounts.py235 # Check if any mount points match indicatorsCOMMENT
LOWsrc/mvt/android/artifacts/settings.py128 # Check if one of the dangerous settings is using an unsafeCOMMENT
LOWsrc/mvt/android/modules/androidqf/root_binaries.py105 # Check if this matches a known root binary by exact name matchCOMMENT
LOW…c/mvt/android/modules/intrusion_logs/security_event.py378 # Check if command contains any suspicious app IDsCOMMENT
AI Structural Patterns10 hits · 10 pts
SeverityFileLineSnippetContext
LOWtests/conftest.py45CODE
LOWsrc/mvt/ios/cmd_check_fs.py20CODE
LOWsrc/mvt/ios/cmd_check_sysdiagnose.py27CODE
LOWsrc/mvt/ios/cmd_check_backup.py27CODE
LOWsrc/mvt/common/command.py40CODE
LOWsrc/mvt/common/cmd_check_iocs.py19CODE
LOWsrc/mvt/android/cmd_check_bugreport.py29CODE
LOWsrc/mvt/android/cmd_check_androidqf.py42CODE
LOWsrc/mvt/android/cmd_check_intrusion_logs.py26CODE
LOWsrc/mvt/android/cmd_check_backup.py36CODE
Cross-Language Confusion1 hit · 8 pts
SeverityFileLineSnippetContext
HIGH⚡tests/android/test_artifact_settings.py138 assert record["value"] == "{null}"CODE
Modern Structural Boilerplate6 hits · 6 pts
SeverityFileLineSnippetContext
LOWsrc/mvt/plugin.py44__all__ = [CODE
LOWsrc/mvt/common/updates.py202 def set_latest_check(self) -> None:CODE
LOWsrc/mvt/common/updates.py262 def set_findings(self, findings: list[dict]) -> None:CODE
LOWsrc/mvt/common/updates.py486 def set_latest_check(self) -> None:CODE
LOWsrc/mvt/common/updates.py506 def set_latest_update(self) -> None:CODE
LOWsrc/mvt/common/indicators.py26logger = logging.getLogger(__name__)CODE
Slop Phrases1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUM.safety-policy.yml4# Otherwise, you can use the flag `safety check --policy-file <path-to-this-file>` to specify a custom location and nameCOMMENT
AI Slop Vocabulary2 hits · 2 pts
SeverityFileLineSnippetContext
MEDIUMsrc/mvt/ios/modules/fs/analytics_ios_versions.py22 """This module leverages the Analytics module in order to extractSTRING
LOWsrc/mvt/common/indicators.py456 # If it's not shortened, we just use the original URL object.COMMENT
Fake / Example Data2 hits · 2 pts
SeverityFileLineSnippetContext
LOWtests/artifacts/generate_stix.py18 emails = ["foobar@example.org"]CODE
LOWtests/ios_backup/test_calendar.py41 ind.ioc_collections[0]["emails"].append("user@example.org")CODE