1.0

Adjusted Signal

1.0

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

132.2K

Stars

Rust

Language

2.5M

Lines of Code

7.5K

Files

2.3K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1738 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.1/100 · LOW

Are imports declared and package/API names verified? 442 finding(s).

Agent Over-Engineering Ratio 1.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 824 finding(s).

PR Review Velocity Impact 5.0/100 · LOW

Which changes need focused human review? 2253 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 9HIGH 32MEDIUM 47LOW 2165

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 2253 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block863 hits · 845 pts

Severity	File	Line	Snippet	Context
LOW	tools/argument-comment-lint/src/lib.rs	41	ARGUMENT_COMMENT_MISMATCH,	COMMENT
LOW	tools/argument-comment-lint/src/lib.rs	61	/// method with available parameter names.	COMMENT
LOW	tools/argument-comment-lint/src/lib.rs	81	/// ```	COMMENT
LOW	tools/argument-comment-lint/src/lib.rs	101	///	COMMENT
LOW	codex-rs/deny.toml	1	# This template contains all of the possible sections and their default values	COMMENT
LOW	codex-rs/deny.toml	21	# `target_family = "unix"` configuration, that only having windows targets in	COMMENT
LOW	codex-rs/deny.toml	41	#exclude = []	COMMENT
LOW	codex-rs/deny.toml	61		COMMENT
LOW	codex-rs/deny.toml	101	# If this is false, then it uses a built-in git library.	COMMENT
LOW	codex-rs/deny.toml	121	# Used by: transitive only	COMMENT
LOW	codex-rs/deny.toml	141	# MIT-0 - https://opensource.org/license/mit-0	COMMENT
LOW	codex-rs/deny.toml	161	# The higher the value, the more closely the license text must be to the	COMMENT
LOW	codex-rs/deny.toml	181	# One or more files in the crate's source used as the "source of truth" for	COMMENT
LOW	codex-rs/deny.toml	201	#"https://sekretz.com/registry	COMMENT
LOW	codex-rs/deny.toml	221	workspace-default-features = "allow"	COMMENT
LOW	codex-rs/deny.toml	261	# Third-party crates that own their reqwest integration. These are not part of the	COMMENT
LOW	codex-rs/deny.toml	281	# "rustls",	COMMENT
LOW	codex-rs/deny.toml	301	# detection. Unlike skip, it also includes the entire tree of transitive	COMMENT
LOW	codex-rs/rollout-trace/src/protocol_event.rs	1	//! Mapping from Codex protocol events into raw rollout-trace events.	COMMENT
LOW	codex-rs/rollout-trace/src/payload.rs	1	//! References to heavyweight trace payloads stored outside the reduced graph.	COMMENT
LOW	codex-rs/rollout-trace/src/reducer/mod.rs	201	pending_compaction_replacement_item_ids: BTreeMap<String, Vec<String>>,	COMMENT
LOW	codex-rs/rollout-trace/src/reducer/code_cell.rs	1	//! Code-mode reduction.	COMMENT
LOW	codex-rs/rollout-trace/src/model/session.rs	21	Failed,	COMMENT
LOW	codex-rs/rollout-trace/src/model/session.rs	41	///	COMMENT
LOW	codex-rs/rollout-trace/src/model/runtime.rs	61	Starting,	COMMENT
LOW	codex-rs/rollout-trace/src/model/runtime.rs	141	/// Runtime protocol events are deliberately kept separate below because	COMMENT
LOW	codex-rs/rollout-trace/src/model/conversation.rs	21	/// response payloads. Runtime objects can be listed in `produced_by`, but they	COMMENT
LOW	codex-rs/rollout-trace/src/model/conversation.rs	101	}	COMMENT
LOW	codex-rs/rollout-trace/src/model/mod.rs	41	/// Process/session ID returned by Codex's terminal runtime.	COMMENT
LOW	codex-rs/rmcp-client/src/oauth_callback.rs	1	//! OAuth callback identity and authorization-server mix-up protection.	COMMENT
LOW	codex-rs/rmcp-client/src/executor_process_transport.rs	1	//! rmcp transport adapter for an executor-managed MCP stdio process.	COMMENT
LOW	codex-rs/rmcp-client/src/executor_process_transport.rs	161	/// `write` forwards stdin bytes. `terminate` stops the child when rmcp	COMMENT
LOW	codex-rs/rmcp-client/src/stdio_server_launcher.rs	1	//! Launch MCP stdio servers and return the transport rmcp should use.	COMMENT
LOW	codex-rs/rmcp-client/src/oauth.rs	1	//! This file handles all logic related to managing MCP OAuth credentials.	COMMENT
LOW	codex-rs/rmcp-client/src/www_authenticate.rs	81	}	COMMENT
LOW	codex-rs/rmcp-client/src/program_resolver.rs	1	//! Platform-specific program resolution for MCP server execution.	COMMENT
LOW	codex-rs/rmcp-client/src/program_resolver.rs	21	/// the program name unchanged.	COMMENT
LOW	codex-rs/rmcp-client/src/oauth/credential_store.rs	1	//! Adapts Codex's pinned credential storage to RMCP-owned OAuth refreshes.	COMMENT
LOW	codex-rs/rmcp-client/src/bin/test_stdio_server.rs	381		COMMENT
LOW	codex-rs/connectors/src/connector_runtime/mod.rs	1	//! Shared runtime snapshot for connector-backed MCP tools.	COMMENT
LOW	codex-rs/codex-mcp/src/resource_client.rs	41	///	COMMENT
LOW	codex-rs/codex-mcp/src/tools.rs	21		COMMENT
LOW	codex-rs/codex-mcp/src/rmcp_client.rs	1	//! RMCP client lifecycle for MCP server connections.	COMMENT
LOW	codex-rs/codex-mcp/src/connection_manager.rs	1	//! Aggregates MCP server connections for Codex.	COMMENT
LOW	codex-rs/codex-mcp/src/sandbox_metadata.rs	21	pub const MCP_SANDBOX_LAUNCHER_META_KEY: &str = "codex/sandbox-launcher";	COMMENT
LOW	codex-rs/codex-mcp/src/mcp/mod.rs	121	/// change independently. Auth remains separate and is supplied explicitly to	COMMENT
LOW	codex-rs/codex-mcp/src/mcp/mod.rs	141	pub mcp_oauth_credentials_store_mode: OAuthCredentialsStoreMode,	COMMENT
LOW	codex-rs/codex-mcp/src/mcp/mod.rs	161	/// Configuration layers used to evaluate Apps tool policy and reviewer selection.	COMMENT
LOW	codex-rs/codex-mcp/src/mcp/mod.rs	181	/// Whether the app MCP integration is enabled by config.	COMMENT
LOW	codex-rs/network-proxy/README.md	41	# The CA private key remains in proxy memory. When MITM is active, spawned commands receive CA	COMMENT
LOW	codex-rs/network-proxy/src/proxy.rs	481	http_addr: SocketAddr,	COMMENT
LOW	codex-rs/network-proxy/src/config.rs	141	pub socks_url: String,	COMMENT
LOW	codex-rs/network-proxy/src/config.rs	161	pub allow_local_binding: Option<bool>,	COMMENT
LOW	codex-rs/network-proxy/src/remote_config.rs	121	}	COMMENT
LOW	codex-rs/tools/src/tool_spec.rs	21	#[serde(tag = "type")]	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	41	#[test]	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	101		COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	301	// Example schema shape:	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	381	JsonSchema::string(/description/ None),	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	421	/additional_properties/ None	COMMENT
803 more matches not shown…

Hyper-Verbose Identifiers738 hits · 701 pts

Severity	File	Line	Snippet	Context
LOW	codex-cli/bin/codex.js	130	function isVitePlusOwnedCodexInstall(packagesDir) {	CODE
LOW	codex-cli/tests/test_build_npm_package.py	19	def test_npm_archives_preserve_cli_runtime_without_standalone_executor(	CODE
LOW	codex-cli/scripts/build_npm_package.py	326	def compute_platform_package_version(version: str, platform_tag: str) -> str:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	15	def test_defaults_to_workspace_and_all_targets(self) -> None:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	33	def test_forwarded_cargo_args_keep_single_separator(self) -> None:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	54	def test_fix_does_not_add_all_targets(self) -> None:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	72	def test_explicit_manifest_and_workspace_are_preserved(self) -> None:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	99	def test_explicit_package_manifest_does_not_force_workspace(self) -> None:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	121	def test_default_lint_env_promotes_both_strict_lints(self) -> None:	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	176	def ensure_source_prerequisites(env: MutableMapping[str, str]) -> None:	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	236	def fetch_packaged_entrypoint(	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	251	def find_packaged_cargo_dylint(package_entrypoint: Path) -> Path:	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	261	def normalize_packaged_library(package_entrypoint: Path) -> Path:	CODE
LOW	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	230	def start_loopback_proxy_fixture():	CODE
LOW	codex-rs/skills/tests/test_skill_installer.py	109	def test_rejects_symlink_to_file_outside_skill(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_skill_installer.py	120	def test_installs_symlink_to_regular_file_inside_skill(self) -> None:	CODE
LOW	…/samples/skill-creator/scripts/generate_openai_yaml.py	74	def generate_short_description(display_name):	CODE
LOW	…/samples/skill-creator/scripts/generate_openai_yaml.py	133	def parse_interface_overrides(raw_overrides):	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	186	def _validate_model_specific_options(	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	205	def _validate_generate_payload(payload: Dict[str, Any]) -> None:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	376	def _decode_write_and_downscale(	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	522	def _extract_retry_after_seconds(exc: Exception) -> Optional[float]:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	556	async def _generate_one_with_retries(	CODE
LOW	third_party/voice/test_build_native.py	51	def test_cli_entrypoint_imports_its_sibling_with_safe_path_enabled(self):	CODE
LOW	third_party/voice/test_build_native.py	67	def test_rejects_cross_host_and_musl_builds(self):	CODE
LOW⚡	third_party/voice/test_build_native.py	78	def test_requires_explicit_macos_deployment_target(self):	CODE
LOW⚡	third_party/voice/test_build_native.py	82	def test_missing_tool_does_not_create_output(self):	CODE
LOW⚡	third_party/voice/test_build_native.py	89	def test_bootstrap_links_cpp_runtime_through_compiler_symlink(self):	CODE
LOW	third_party/voice/test_build_native.py	149	def test_libffi_rejects_quoted_archive_tool_paths(self):	CODE
LOW	third_party/voice/test_build_native.py	171	def test_libffi_compiler_receives_literal_defines_without_shell_quotes(self):	CODE
LOW	third_party/voice/test_build_native.py	237	def test_cmake_installs_relative_library_paths(self):	CODE
LOW	third_party/voice/test_build_native.py	275	def test_build_refuses_existing_output_before_reading_sources(self):	CODE
LOW	third_party/voice/test_build_native.py	285	def test_failure_retains_log_and_state_without_completion_marker(self):	CODE
LOW	third_party/voice/test_build_native.py	310	def test_ambient_native_discovery_variables_are_not_inherited(self):	CODE
LOW	third_party/voice/test_build_native.py	323	def test_meson_receives_private_link_inputs_with_spaces(self):	CODE
LOW	third_party/voice/test_build_native.py	385	def test_windows_paths_use_cygpath_and_propagate_failure(self):	CODE
LOW	third_party/voice/test_build_native.py	405	def test_windows_rejects_unix_overrides_before_creating_output(self):	CODE
LOW	third_party/voice/test_build_native.py	418	def test_windows_recipes_use_explicit_targets_and_posix_paths(self):	CODE
LOW	third_party/voice/test_build_native.py	539	def test_explicit_windows_inputs_replace_ambient_sdk_and_search_paths(self):	CODE
LOW	third_party/voice/test_bazel_windows.py	19	def test_adapter_preserves_host_architecture_without_developer_path(self):	CODE
LOW	third_party/voice/test_bazel_windows.py	105	def test_paths_are_anchored_before_recipe_changes_directory(self):	CODE
LOW	third_party/voice/test_bazel_windows.py	122	def test_manifest_cannot_select_a_file_omitted_from_action_inputs(self):	CODE
LOW	third_party/voice/test_bazel_windows.py	127	def test_manifest_cannot_escape_installed_tree(self):	CODE
LOW	third_party/voice/test_bazel_windows.py	143	def test_manifest_cannot_replace_the_build_script_executable(self):	CODE
LOW⚡	third_party/voice/test_bazel_windows.py	155	def test_wrong_target_or_emulation_contract_is_rejected(self):	CODE
LOW⚡	third_party/voice/test_bazel_windows.py	165	def test_missing_declared_executable_does_not_fall_back_to_path(self):	CODE
LOW⚡	third_party/voice/test_bazel_windows.py	172	def test_import_library_and_dll_bytes_remain_distinct(self):	CODE
LOW	third_party/voice/test_bazel_windows.py	202	def test_missing_payload_fails_the_action(self):	CODE
LOW	third_party/voice/test_windows_build_inputs.py	79	def test_msvc_link_precedes_same_named_cygwin_tool(self):	CODE
LOW	third_party/voice/test_windows_build_inputs.py	97	def test_subprocess_uses_selected_tool_without_ambient_path(self):	CODE
LOW	third_party/voice/test_windows_build_inputs.py	114	def test_missing_or_wrong_architecture_assembler_is_rejected(self):	CODE
LOW⚡	third_party/voice/test_windows_build_inputs.py	128	def test_shadowed_sdk_tool_is_rejected(self):	CODE
LOW⚡	third_party/voice/test_windows_build_inputs.py	133	def test_cli_tool_must_match_recorded_selection(self):	CODE
LOW⚡	third_party/voice/test_windows_build_inputs.py	138	def test_missing_sdk_and_relative_paths_are_rejected(self):	CODE
LOW⚡	third_party/voice/test_windows_build_inputs.py	145	def test_target_mismatch_cannot_reuse_other_inputs(self):	CODE
LOW	third_party/voice/test_macos_runtime.py	104	def test_relocated_payload_loads_after_original_prefix_is_removed(self):	CODE
LOW	third_party/voice/test_macos_runtime.py	146	def test_input_digest_target_and_receipt_must_match(self):	CODE
LOW	third_party/voice/test_macos_runtime.py	164	def test_case_alias_cannot_place_output_inside_inputs(self):	CODE
LOW	third_party/voice/test_macos_runtime.py	176	def test_case_colliding_library_destinations_are_rejected(self):	CODE
LOW	third_party/voice/test_macos_runtime.py	201	def test_changed_source_at_copy_is_rejected(self):	CODE
678 more matches not shown…

Fake / Example Data260 hits · 293 pts

Severity	File	Line	Snippet	Context
LOW	codex-rs/rmcp-client/tests/mcp_2026_stdio.rs	111	"name": {"type": "string", "default": "John Doe"},	CODE
LOW	codex-rs/rmcp-client/tests/mcp_2026_stdio.rs	125	"name": "John Doe",	CODE
LOW	codex-rs/rmcp-client/src/elicitation_client_service.rs	513	"name": {"type": "string", "default": "John Doe"},	CODE
LOW	codex-rs/rmcp-client/src/elicitation_client_service.rs	546	"name": {"type": "string", "default": "John Doe"},	CODE
LOW	…x-rs/rmcp-client/src/bin/test_mcp_2026_stdio_server.rs	33	"name": "John Doe",	CODE
LOW	…x-rs/rmcp-client/src/bin/test_mcp_2026_stdio_server.rs	258	"name": {"type": "string", "default": "John Doe"},	CODE
LOW	…er-transport/src/transport/remote_control/websocket.rs	2056	"email": "user@example.com",	CODE
LOW	…server-transport/src/transport/remote_control/tests.rs	103	"email": "user@example.com",	CODE
LOW	codex-rs/agent-identity/src/lib.rs	655	"email": "user@example.com",	CODE
LOW	codex-rs/agent-identity/src/lib.rs	673	email: Some("user@example.com".to_string()),	CODE
LOW	codex-rs/agent-identity/src/lib.rs	711	"email": "user@example.com",	CODE
LOW	codex-rs/agent-identity/src/lib.rs	733	email: Some("user@example.com".to_string()),	CODE
LOW	codex-rs/agent-identity/src/lib.rs	765	email: Some("user@example.com".to_string()),	CODE
LOW	codex-rs/agent-identity/src/lib.rs	790	"email": "user@example.com",	CODE
LOW	codex-rs/agent-identity/src/lib.rs	813	"email": "user@example.com",	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker_tests.rs	35	fn assert_credential_shape(real_value: &str, dummy_value: &str, prefix: &str) {	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker_tests.rs	36	assert_ne!(dummy_value, real_value);	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker_tests.rs	37	assert!(dummy_value.len() >= real_value.len());	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker_tests.rs	39	let suffix = dummy_value	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	118	.find(\|source\| source.dummy_value == value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	121	\|\| value == self.dummy_value	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	125	env_contains_credential_value(env, &self.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	603	&& carried_dummies.contains(&credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	609	credential.dummy_value.clone(),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	619	.any(\|(dummy_value, _)\| credential.dummy_value == *dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	627	&& carried_dummies.contains(&credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	629	.map(\|credential\| credential.dummy_value.clone())	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	636	&& !owned_dummies.contains(&credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	637	&& env_contains_credential_value(env, &credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	642	credential.dummy_value.clone(),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	654	&& !owned_dummies.contains(&credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	655	&& carried_dummies.contains(&credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	664	credential.dummy_value.clone(),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	971	for original in [&credential.real_value, &credential.dummy_value] {	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	974	&credential.dummy_value,	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	982	dummy_value: value.clone(),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	989	&& existing.dummy_value == alias.dummy_value	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1222	if text == credential.dummy_value	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1223	\|\| credential.contains_embedded_value(text, &credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1228	credential.dummy_value.clone(),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1459	credential.dummy_value == dummy	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1469	if let Some(dummy_value) = state.register(	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1478	&& previous_dummy != dummy_value	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1480	state.replace_child_env_dummies(env, &[(previous_dummy, dummy_value.clone())]);	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1482	set_env_value(env, env_var, dummy_value);	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1552	credential.value_match_ranges(value, &credential.dummy_value),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1560	credential.value_match_ranges(value, &credential.dummy_value),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1561	&credential.dummy_value,	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1629	if !env_contains_credential_value(existing_env, &existing.dummy_value) {	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1632	return Some(existing.dummy_value.clone());	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1635	is_builtin_shaped_credential(real_value) && credential.dummy_value.contains(real_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1636	\|\| provider.contains_embedded_value(&credential.dummy_value, real_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1683	let Some(dummy_value) = (0..64).find_map(\|_\| {	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1684	let candidate = provider.dummy_value(real_value)?;	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1693	credential.dummy_value == candidate	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1695	\|\| credential.contains_embedded_value(&candidate, &credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1698	&& credential.dummy_value.contains(&candidate)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1699	\|\| provider.contains_embedded_value(&credential.dummy_value, &candidate)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1758	vec![real_value.to_string(), dummy_value.clone()]	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1762	.find(\|source\| source.dummy_value == value)	CODE
200 more matches not shown…

Unused Imports167 hits · 142 pts

Severity	File	Line	Context
LOW	tools/argument-comment-lint/run.py	3	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	3	CODE
LOW	tools/argument-comment-lint/run-prebuilt-linter.py	3	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	3	CODE
LOW	…assets/samples/skill-installer/scripts/github_utils.py	4	CODE
LOW	…/assets/samples/skill-installer/scripts/list-skills.py	4	CODE
LOW	…s/skill-installer/scripts/install-skill-from-github.py	4	CODE
LOW	…c/assets/samples/imagegen/scripts/remove_chroma_key.py	8	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	10	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	426	CODE
LOW	third_party/voice/macos_runtime.py	13	CODE
LOW	sdk/python/tests/conftest.py	1	CODE
LOW	sdk/python/tests/test_app_server_login.py	1	CODE
LOW	sdk/python/tests/app_server_helpers.py	1	CODE
LOW	sdk/python/tests/test_app_server_run.py	1	CODE
LOW	sdk/python/tests/test_async_client_behavior.py	1	CODE
LOW	sdk/python/tests/test_client_rpc_methods.py	1	CODE
LOW	sdk/python/tests/test_app_server_inputs.py	1	CODE
LOW	sdk/python/tests/test_real_app_server_integration.py	1	CODE
LOW	sdk/python/tests/test_app_server_approvals.py	1	CODE
LOW	sdk/python/tests/test_app_server_turn_controls.py	1	CODE
LOW	sdk/python/tests/test_app_server_streaming.py	1	CODE
LOW	sdk/python/tests/test_contract_generation.py	1	CODE
LOW	sdk/python/tests/test_public_api_runtime_behavior.py	1	CODE
LOW	sdk/python/tests/test_public_api_signatures.py	1	CODE
LOW	sdk/python/tests/app_server_harness.py	1	CODE
LOW	sdk/python/tests/test_app_server_lifecycle.py	1	CODE
LOW	sdk/python/examples/_bootstrap.py	1	CODE
LOW	sdk/python/src/openai_codex/_initialize_metadata.py	1	CODE
LOW	sdk/python/src/openai_codex/models.py	1	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
107 more matches not shown…

Empty Error Handlers25 hits · 125 pts

Severity	File	Line	Snippet	Context
HIGH	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	146	except Exception:	CODE
HIGH	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	899	except Exception:	CODE
HIGH	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	173	except OSError:	CODE
HIGH	…kills/src/assets/samples/imagegen/scripts/image_gen.py	905	except Exception:	CODE
HIGH	…kills/src/assets/samples/imagegen/scripts/image_gen.py	923	except Exception:	CODE
HIGH	third_party/voice/prepare_built_runtime.py	115	except FileNotFoundError:	CODE
HIGH	third_party/voice/prepare_built_runtime.py	120	except FileNotFoundError:	CODE
HIGH	third_party/voice/test_assemble_package.py	235	except OSError:	CODE
HIGH	sdk/python/_runtime_setup.py	194	except urllib.error.HTTPError:	CODE
HIGH	sdk/python/_runtime_setup.py	228	except urllib.error.HTTPError:	CODE
HIGH	sdk/python/src/openai_codex/client.py	576	except Exception:	CODE
HIGH	sdk/python/src/openai_codex/client.py	596	except Exception:	CODE
HIGH	sdk/python/src/openai_codex/client.py	594	except Exception:	CODE
HIGH	sdk/python/src/openai_codex/_runtime_requirements.py	23	except InvalidVersion:	CODE
HIGH	scripts/codex_package/v8.py	85	except (OSError, RuntimeError, ValueError):	CODE
HIGH	scripts/mcp_conformance/run_codex_compliance.py	1100	except json.JSONDecodeError:	CODE
HIGH	scripts/mcp_conformance/run_codex_compliance.py	1036	except json.JSONDecodeError:	CODE
HIGH	scripts/mcp_conformance/server.py	1736	except KeyboardInterrupt:	CODE
HIGH	scripts/mcp_conformance/official_conformance.py	302	except (OSError, ProcessLookupError):	CODE
HIGH	scripts/mcp_conformance/official_conformance.py	289	except OSError:	CODE
HIGH	scripts/mcp_conformance/official_conformance.py	296	except (OSError, ProcessLookupError):	CODE
HIGH	scripts/mcp_conformance/official_conformance.py	517	except OSError:	CODE
HIGH	scripts/mcp_conformance/codex_conformance_adapter.py	499	except AdapterFailure:	CODE
HIGH	scripts/mcp_conformance/codex_conformance_adapter.py	574	except AdapterFailure:	CODE
HIGH	scripts/mcp_conformance/codex_conformance_adapter.py	835	except json.JSONDecodeError:	CODE

Hallucination Indicators9 hits · 90 pts

Severity	File	Line	Snippet	Context
CRITICAL	codex-rs/core/src/thread_manager_tests.rs	218	(policy, source_requirements) = runtime.thread.session.services.exec_policy.snapshot();	CODE
CRITICAL	codex-rs/core/src/thread_manager_tests.rs	1743	runtime: parent.thread.session.services.local_agent_runtime.clone(),	CODE
CRITICAL	codex-rs/tui/src/app/config_persistence.rs	2138	app.chat_widget.local_settings.tui.theme.as_deref(),	CODE
CRITICAL	codex-rs/tui/src/app/config_persistence.rs	2183	app.chat_widget.local_settings.tui.pet.as_deref(),	CODE
CRITICAL	codex-rs/tui/src/app/config_persistence.rs	2199	app.chat_widget.local_settings.tui.pet.as_deref(),	CODE
CRITICAL	codex-rs/tui/src/app/tests/quick_dials_tests.rs	29	app.chat_widget.local_settings.tui.quick_dials.get("3"),	CODE
CRITICAL	codex-rs/tui/src/app/tests/quick_dials_tests.rs	56	assert!(app.chat_widget.local_settings.tui.quick_dials.is_empty());	CODE
CRITICAL	codex-rs/tui/src/transcript_view/disclosure.rs	184	if self.disclosure.keymap.app.focus_activity.is_pressed(key) {	CODE
CRITICAL	codex-rs/tui/src/transcript_view/text_tabs.rs	230	self.current.wrapped.line.spans.extend(line.spans);	CODE

Deep Nesting69 hits · 66 pts

Severity	File	Line	Context
LOW	codex-cli/tests/test_build_npm_package.py	19	CODE
LOW	codex-cli/scripts/build_npm_package.py	137	CODE
LOW	codex-cli/scripts/build_npm_package.py	232	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	53	CODE
LOW	…src/assets/samples/skill-creator/scripts/init_skill.py	126	CODE
LOW	…assets/samples/skill-creator/scripts/quick_validate.py	15	CODE
LOW	…s/skill-installer/scripts/install-skill-from-github.py	169	CODE
LOW	…s/skill-installer/scripts/install-skill-from-github.py	316	CODE
LOW	…c/assets/samples/imagegen/scripts/remove_chroma_key.py	266	CODE
LOW	…c/assets/samples/imagegen/scripts/remove_chroma_key.py	285	CODE
LOW	third_party/voice/bazel_windows.py	55	CODE
LOW	third_party/voice/test_build_native.py	149	CODE
LOW	third_party/voice/test_build_native.py	171	CODE
LOW	third_party/voice/test_bazel_windows.py	19	CODE
LOW	third_party/voice/linux_runtime.py	28	CODE
LOW	third_party/voice/bazel_native.py	17	CODE
LOW	third_party/voice/build_native.py	324	CODE
LOW	sdk/python/_runtime_setup.py	99	CODE
LOW	sdk/python/_runtime_setup.py	178	CODE
LOW	sdk/python/tests/test_real_app_server_integration.py	513	CODE
LOW	sdk/python/tests/app_server_harness.py	39	CODE
LOW	sdk/python/examples/_bootstrap.py	66	CODE
LOW	sdk/python/scripts/update_sdk_artifacts.py	525	CODE
LOW	sdk/python/scripts/update_sdk_artifacts.py	1102	CODE
LOW	sdk/python/src/openai_codex/_goal.py	55	CODE
LOW	sdk/python/src/openai_codex/client.py	327	CODE
LOW	sdk/python/src/openai_codex/client.py	863	CODE
LOW	sdk/python/src/openai_codex/_runtime_requirements.py	40	CODE
LOW	sdk/python/src/openai_codex/errors.py	61	CODE
LOW	sdk/python/src/openai_codex/_message_router.py	145	CODE
LOW	sdk/python/src/openai_codex/_message_router.py	283	CODE
LOW	scripts/stage_npm_packages.py	497	CODE
LOW	scripts/install/test_install_sh.py	367	CODE
LOW	scripts/codex_package/version.py	11	CODE
LOW	scripts/codex_package/dotslash.py	180	CODE
LOW	scripts/codex_package/test_v8.py	165	CODE
LOW	scripts/codex_package/test_layout.py	28	CODE
LOW	scripts/codex_package/test_layout.py	161	CODE
LOW	scripts/codex_package/smoke_tests/test_codex_package.py	74	CODE
LOW	scripts/codex_package/smoke_tests/fixtures.py	206	CODE
LOW	scripts/mcp_conformance/run_codex_compliance.py	976	CODE
LOW	scripts/mcp_conformance/run_codex_compliance.py	1306	CODE
LOW	scripts/mcp_conformance/run_codex_compliance.py	1459	CODE
LOW	scripts/mcp_conformance/run_codex_compliance.py	1744	CODE
LOW	scripts/mcp_conformance/run_codex_compliance.py	1840	CODE
LOW	scripts/mcp_conformance/server.py	1253	CODE
LOW	scripts/mcp_conformance/server.py	574	CODE
LOW	scripts/mcp_conformance/server.py	625	CODE
LOW	scripts/mcp_conformance/review_regressions.py	669	CODE
LOW	scripts/mcp_conformance/review_regressions.py	774	CODE
LOW	scripts/mcp_conformance/review_regressions.py	859	CODE
LOW	scripts/mcp_conformance/review_regressions.py	1151	CODE
LOW	scripts/mcp_conformance/official_conformance.py	138	CODE
LOW	scripts/mcp_conformance/codex_conformance_adapter.py	702	CODE
LOW	.github/scripts/voice-cygwin-inputs.py	36	CODE
LOW	.github/scripts/verify_pypi_release.py	24	CODE
LOW	.github/scripts/verify_cargo_workspace_manifests.py	104	CODE
LOW	.github/scripts/publish_r2_release.py	368	CODE
LOW	.github/scripts/test_releases.py	72	CODE
LOW	.github/scripts/test_releases.py	160	CODE
9 more matches not shown…

AI Slop Vocabulary14 hits · 40 pts

Severity	File	Line	Snippet	Context
MEDIUM	codex-rs/core/tests/suite/unified_exec.rs	565	r#set: harness	CODE
MEDIUM	codex-rs/core/src/compact_tests.rs	548	#[test_case(2, Some(vec![ContentItemMetadata::user(), ContentItemMetadata::harness()]); "mixed sources")]	COMMENT
MEDIUM	codex-rs/app-server-protocol/schema_generator.rs	4	//! while Rust omits `#[test]` functions and the libtest harness.	COMMENT
MEDIUM⚡	codex-rs/models-manager/models.json	76	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	76	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	250	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	250	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	425	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	425	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	600	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	600	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	767	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	767	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM	codex-rs/models-manager/models.json	1584	"instructions_template": "You are Codex, a coding agent based on GPT-5. You and the user share one workspace, an	CODE

Excessive Try-Catch Wrapping32 hits · 40 pts

Severity	File	Line	Snippet	Context
LOW	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	146	except Exception:	CODE
LOW	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	215	except Exception as err:	CODE
LOW	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	899	except Exception:	CODE
LOW	…src/assets/samples/skill-creator/scripts/init_skill.py	183	except Exception as e:	CODE
LOW⚡	…src/assets/samples/skill-creator/scripts/init_skill.py	197	except Exception as e:	CODE
LOW⚡	…src/assets/samples/skill-creator/scripts/init_skill.py	206	except Exception as e:	CODE
LOW⚡	…src/assets/samples/skill-creator/scripts/init_skill.py	216	except Exception as e:	CODE
MEDIUM	…/assets/samples/skill-installer/scripts/list-skills.py	101	print(f"Error: {exc}", file=sys.stderr)	CODE
MEDIUM	…s/skill-installer/scripts/install-skill-from-github.py	350	print(f"Error: {exc}", file=sys.stderr)	CODE
MEDIUM	…c/assets/samples/imagegen/scripts/remove_chroma_key.py	25	print(f"Error: {message}", file=sys.stderr)	CODE
MEDIUM	…kills/src/assets/samples/imagegen/scripts/image_gen.py	50	print(f"Error: {message}", file=sys.stderr)	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	339	except Exception:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	533	except Exception:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	567	except Exception as exc:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	706	except Exception as exc:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	719	except Exception:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	905	except Exception:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	923	except Exception:	CODE
MEDIUM	…kills/src/assets/samples/imagegen/scripts/image_gen.py	411	def _create_client():	CODE
LOW	third_party/voice/bazel_windows.py	163	except Exception:	CODE
LOW	third_party/voice/bazel_native.py	55	except Exception:	CODE
LOW	…k/python/examples/10_error_handling_and_retry/async.py	45	except Exception as exc: # noqa: BLE001	CODE
LOW	sdk/python/src/openai_codex/client.py	296	except Exception:	CODE
LOW	sdk/python/src/openai_codex/client.py	576	except Exception:	CODE
LOW	sdk/python/src/openai_codex/client.py	594	except Exception:	CODE
LOW	sdk/python/src/openai_codex/client.py	596	except Exception:	CODE
LOW	sdk/python/src/openai_codex/client.py	819	except Exception: # noqa: BLE001	CODE
LOW	sdk/python/src/openai_codex/retry.py	31	except Exception as exc:	CODE
LOW	sdk/python/src/openai_codex/api.py	90	except Exception:	CODE
LOW	sdk/python/src/openai_codex/api.py	340	except Exception:	CODE
MEDIUM	scripts/readme_toc.py	73	print(f"Error: file not found: {readme_path}", file=sys.stderr)	CODE
LOW	scripts/mcp_conformance/codex_conformance_adapter.py	980	except Exception as exc: # Preserve a diagnostic artifact for the parent.	CODE

Decorative Section Separators10 hits · 38 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	195	// ┌─Screen───────────────────────┐	COMMENT
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	196	// │┌╌Scroll region╌╌╌╌╌╌╌╌╌╌╌╌╌╌┐│	COMMENT
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	200	// │█╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┘│	COMMENT
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	201	// │╭─Viewport───────────────────╮│	COMMENT
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	203	// │╰────────────────────────────╯│	COMMENT
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	204	// └──────────────────────────────┘	COMMENT
MEDIUM	codex-rs/tui/src/diff_render.rs	1180	// ┌──────────┬──────┬──────────────────────────────────────────┐	COMMENT
MEDIUM	codex-rs/tui/src/diff_render.rs	1183	// └──────────┴──────┴──────────────────────────────────────────┘	COMMENT
MEDIUM	codex-rs/tui/src/streaming/controller.rs	1738	let source = " ┌───────┬──────────┬────────┐\n │ Name │ Role │ Active │\n ├───────┼──────────┼────────┤\	CODE
MEDIUM	…ell-command/src/command_safety/is_dangerous_command.rs	157	// ── anything else ─────────────────────────────────────────────────	COMMENT

Modern AI Meta-Vocabulary12 hits · 32 pts

Severity	File	Line	Snippet	Context
MEDIUM	codex-rs/core/tests/suite/subagent_notifications.rs	1504	#[test_case(FullHistoryV2ModelSelection::WorldStateIdentity; "world state appends context window when agent identity cha	COMMENT
MEDIUM	codex-rs/core/tests/suite/subagent_notifications.rs	1506	#[test_case(FullHistoryV2ModelSelection::MultiAgentModeInstructions; "full fork appends child multi-agent mode instructi	COMMENT
MEDIUM	codex-rs/core/src/config/config_tests.rs	12867	toml::from_str(r#"[features.multi_agent_v2]"#).expect("multi-agent v2 config should parse");	CODE
MEDIUM	codex-rs/tui/src/app_event.rs	1778	/// Named profile selection to apply after any required UI guardrails complete.	COMMENT
MEDIUM	codex-rs/tui/src/diff_render.rs	2631	// Should complete quickly (no per-line parser init). If guardrails	COMMENT
MEDIUM	codex-rs/tui/src/diff_render.rs	2635	// The diff rendered without timing out — the guardrails prevented	COMMENT
MEDIUM	codex-rs/tui/src/render/highlight.rs	734	/// input exceeds safety guardrails. Callers can always render the result	COMMENT
MEDIUM	codex-rs/tui/src/render/highlight.rs	764	/// guardrails. The caller (`diff_render`) uses this signal to fall back to	COMMENT
MEDIUM	codex-rs/code-mode-protocol/src/description.rs	23	const EXEC_DESCRIPTION_TEMPLATE: &str = r#"Run JavaScript code to orchestrate/compose tool calls	CODE
MEDIUM	codex-rs/codex-api/src/error.rs	22	#[error("context window exceeded")]	COMMENT
MEDIUM	codex-rs/codex-api/src/sse/responses.rs	1180	let raw_error = r#"{"type":"response.failed","sequence_number":3,"response":{"id":"resp_5c66275b97b9baef1ed95550	CODE
MEDIUM	codex-rs/codex-api/src/sse/responses.rs	1193	let raw_error = r#"{"type":"response.failed","sequence_number":4,"response":{"id":"resp_fatal_newline","object":	CODE

Cross-Language Confusion6 hits · 30 pts

Severity	File	Line	Snippet	Context
HIGH	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	427	["cmd", "/c", "mkdir sub && echo hi > sub\\in_sub.txt"],	CODE
HIGH	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	651	["cmd", "/c", "mkdir deep\\nest && echo ok > deep\\nest\\f.txt"],	CODE
HIGH	scripts/just-shell.py	17	STDERR_NULL_TOKEN = "{stderr-null}"	CODE
HIGH	scripts/just-shell.py	19	POWERSHELL_STDERR_NULL = "2>$null; exit $LASTEXITCODE"	CODE
HIGH	scripts/codex_package/smoke_tests/test_codex_package.py	364	command = "command -v rg && rg --version"	CODE
HIGH	.github/scripts/macos-signing/notarize_with_akv.py	239	raise NotarizationError("ES256 signature must contain 64 JOSE R \|\| S bytes")	CODE

Slop Phrases13 hits · 20 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	codex-rs/models-manager/models.json	76	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	250	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	425	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW⚡	codex-rs/models-manager/models.json	76	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW⚡	codex-rs/models-manager/models.json	250	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW⚡	codex-rs/models-manager/models.json	425	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW⚡	codex-rs/models-manager/models.json	600	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW⚡	codex-rs/models-manager/models.json	767	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW	codex-rs/models-manager/models.json	943	"instructions_template": "You are Codex, an agent based on GPT-5. You and the user share one workspace, and your	CODE
LOW	codex-rs/models-manager/models.json	1084	"instructions_template": "You are Codex, an agent based on GPT-5. You and the user share one workspace, and your	CODE
LOW	codex-rs/models-manager/models.json	1221	"instructions_template": "You are Codex, an agent based on GPT-5. You and the user share one workspace, and your	CODE
LOW	codex-rs/models-manager/models.json	1584	"instructions_template": "You are Codex, a coding agent based on GPT-5. You and the user share one workspace, an	CODE
LOW	codex-rs/models-manager/models.json	1709	"instructions_template": "You are Codex, an agent based on GPT-5. You and the user share one workspace, and your	CODE

Structural Annotation Overuse8 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	codex-rs/tui/src/live_wrap.rs	20	/// Step 1: plain-text only. ANSI-carry and styled spans will be added later.	COMMENT
LOW	codex-rs/tui/src/chatwidget/slash_dispatch.rs	231	// Step 1: pick a category (UI built in feedback_view)	COMMENT
LOW	codex-rs/protocol/src/shell_environment.rs	113	// Step 1 - determine the starting set of variables based on the	COMMENT
LOW⚡	codex-rs/protocol/src/shell_environment.rs	138	// Step 2 - Apply the default exclude if not disabled.	COMMENT
LOW⚡	codex-rs/protocol/src/shell_environment.rs	148	// Step 3 - Apply custom excludes.	COMMENT
LOW⚡	codex-rs/protocol/src/shell_environment.rs	153	// Step 4 - Apply user-provided overrides.	COMMENT
LOW⚡	codex-rs/protocol/src/shell_environment.rs	160	// Step 5 - If include_only is non-empty, keep only the matching vars.	COMMENT
LOW⚡	codex-rs/protocol/src/shell_environment.rs	165	// Step 6 - Populate the thread ID environment variable when provided.	COMMENT

AI Structural Patterns13 hits · 10 pts

Severity	File	Line	Context
LOW	sdk/python/src/openai_codex/api.py	135	CODE
LOW	sdk/python/src/openai_codex/api.py	175	CODE
LOW	sdk/python/src/openai_codex/api.py	206	CODE
LOW	sdk/python/src/openai_codex/api.py	246	CODE
LOW	sdk/python/src/openai_codex/api.py	393	CODE
LOW	sdk/python/src/openai_codex/api.py	434	CODE
LOW	sdk/python/src/openai_codex/api.py	466	CODE
LOW	sdk/python/src/openai_codex/api.py	507	CODE
LOW	sdk/python/src/openai_codex/api.py	581	CODE
LOW	sdk/python/src/openai_codex/api.py	618	CODE
LOW	sdk/python/src/openai_codex/api.py	687	CODE
LOW	sdk/python/src/openai_codex/api.py	724	CODE
LOW	scripts/install/test_install_sh.py	994	CODE

Modern Structural Boilerplate6 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	tools/argument-comment-lint/wrapper_common.py	132	def set_default_lint_env(env: MutableMapping[str, str]) -> None:	CODE
LOW⚡	sdk/python/_runtime_setup.py	365	__all__ = [	CODE
LOW	sdk/python/src/openai_codex/__init__.py	57	__all__ = [	CODE
LOW	sdk/python/src/openai_codex/types.py	43	__all__ = [	CODE
LOW	sdk/python-runtime/src/codex_cli_bin/__init__.py	33	__all__ = [	CODE
LOW	scripts/codex_package/smoke_tests/conftest.py	6	__all__ = ["code_mode_host_debug_symbols", "package", "responses_server"]	CODE

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	sdk/python/examples/05_existing_thread/sync.py	15	# Create an initial thread and turn so we have a real thread to resume.	COMMENT
MEDIUM	.github/scripts/macos-signing/notarize_with_akv.py	429	# Create the submission before uploading the artifact.	COMMENT

Docstring Block Structure1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…src/assets/samples/skill-creator/scripts/init_skill.py	159	Initialize a new skill directory with template SKILL.md. Args: skill_name: Name of the skill p	STRING

Redundant / Tautological Comments2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	codex-cli/scripts/run_in_container.sh	44	# Check if WORK_DIR is set.	COMMENT
LOW	…src/assets/samples/skill-creator/scripts/init_skill.py	174	# Check if directory already exists	COMMENT

Verbosity Indicators2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	codex-rs/tui/src/live_wrap.rs	20	/// Step 1: plain-text only. ANSI-carry and styled spans will be added later.	COMMENT
LOW	codex-rs/tui/src/chatwidget/slash_dispatch.rs	231	// Step 1: pick a category (UI built in feedback_view)	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	codex-cli/scripts/run_in_container.sh	4	# Usage:	COMMENT

openai/codex

Open-Source Code Quality, Security and Technical Debt Review