1.2

Adjusted Signal

1.2

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

68.8K

Stars

Rust

Language

2.2M

Lines of Code

6.8K

Files

2.2K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1697 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.3/100 · LOW

Are imports declared and package/API names verified? 438 finding(s).

Agent Over-Engineering Ratio 2.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 888 finding(s).

PR Review Velocity Impact 5.9/100 · LOW

Which changes need focused human review? 2246 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 13HIGH 32MEDIUM 88LOW 2113

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 2246 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block793 hits · 775 pts

Severity	File	Line	Snippet	Context
LOW	tools/argument-comment-lint/src/lib.rs	41	UNCOMMENTED_ANONYMOUS_LITERAL_ARGUMENT,	COMMENT
LOW	tools/argument-comment-lint/src/lib.rs	61	///	COMMENT
LOW	tools/argument-comment-lint/src/lib.rs	81	pub ARGUMENT_COMMENT_MISMATCH,	COMMENT
LOW	tools/argument-comment-lint/src/lib.rs	101	/// This lint is opinionated, so it is `allow` by default.	COMMENT
LOW	codex-rs/deny.toml	1	# This template contains all of the possible sections and their default values	COMMENT
LOW	codex-rs/deny.toml	21	# `target_family = "unix"` configuration, that only having windows targets in	COMMENT
LOW	codex-rs/deny.toml	41	#exclude = []	COMMENT
LOW	codex-rs/deny.toml	61		COMMENT
LOW	codex-rs/deny.toml	81	{ id = "RUSTSEC-2025-0141", reason = "bincode is unmaintained; pulled in via syntect v5.3.0 used by codex-tui for sy	COMMENT
LOW	codex-rs/deny.toml	101	allow = [	COMMENT
LOW	codex-rs/deny.toml	121	# Used by: transitive only	COMMENT
LOW	codex-rs/deny.toml	141	# Unlicense - https://opensource.org/license/unlicense/	COMMENT
LOW	codex-rs/deny.toml	161	# Some crates don't have (easily) machine readable licensing information,	COMMENT
LOW	codex-rs/deny.toml	181	# published to private registries.	COMMENT
LOW	codex-rs/deny.toml	201	# with multiple versions	COMMENT
LOW	codex-rs/deny.toml	261	# Each entry the name of a crate and a version range. If version is	COMMENT
LOW	codex-rs/deny.toml	281	#exact = true	COMMENT
LOW	codex-rs/rollout-trace/src/protocol_event.rs	1	//! Mapping from Codex protocol events into raw rollout-trace events.	COMMENT
LOW	codex-rs/rollout-trace/src/payload.rs	1	//! References to heavyweight trace payloads stored outside the reduced graph.	COMMENT
LOW	codex-rs/rollout-trace/src/reducer/mod.rs	101	///	COMMENT
LOW	codex-rs/rollout-trace/src/reducer/mod.rs	121	pending_code_cell_starts: BTreeMap<String, PendingCodeCellStart>,	COMMENT
LOW	codex-rs/rollout-trace/src/reducer/code_cell.rs	1	//! Code-mode reduction.	COMMENT
LOW	codex-rs/rollout-trace/src/model/session.rs	21	Failed,	COMMENT
LOW	codex-rs/rollout-trace/src/model/session.rs	81		COMMENT
LOW	codex-rs/rollout-trace/src/model/runtime.rs	61	/// Initial `exec` returned while JavaScript kept running in the background.	COMMENT
LOW	codex-rs/rollout-trace/src/model/runtime.rs	141	/// Result returned to the immediate requester.	COMMENT
LOW	codex-rs/rollout-trace/src/model/conversation.rs	101	#[serde(rename_all = "snake_case", tag = "type")]	COMMENT
LOW	codex-rs/rollout-trace/src/model/mod.rs	41	/// Process/session ID returned by Codex's terminal runtime.	COMMENT
LOW	codex-rs/rmcp-client/src/oauth_callback.rs	1	//! OAuth callback identity and authorization-server mix-up protection.	COMMENT
LOW	codex-rs/rmcp-client/src/executor_process_transport.rs	1	//! rmcp transport adapter for an executor-managed MCP stdio process.	COMMENT
LOW	codex-rs/rmcp-client/src/executor_process_transport.rs	161	/// `write` forwards stdin bytes. `terminate` stops the child when rmcp	COMMENT
LOW	codex-rs/rmcp-client/src/stdio_server_launcher.rs	1	//! Launch MCP stdio servers and return the transport rmcp should use.	COMMENT
LOW	codex-rs/rmcp-client/src/stdio_server_launcher.rs	541	///	COMMENT
LOW	codex-rs/rmcp-client/src/oauth.rs	1	//! This file handles all logic related to managing MCP OAuth credentials.	COMMENT
LOW	codex-rs/rmcp-client/src/www_authenticate.rs	81	}	COMMENT
LOW	codex-rs/rmcp-client/src/program_resolver.rs	1	//! Platform-specific program resolution for MCP server execution.	COMMENT
LOW	codex-rs/rmcp-client/src/program_resolver.rs	21	/// the program name unchanged.	COMMENT
LOW	codex-rs/rmcp-client/src/oauth/credential_store.rs	1	//! Adapts Codex's pinned credential storage to RMCP-owned OAuth refreshes.	COMMENT
LOW	codex-rs/rmcp-client/src/bin/test_stdio_server.rs	361	/// - Build this binary: `cargo build -p codex-rmcp-client --bin test_stdio_server`	COMMENT
LOW	codex-rs/connectors/src/connector_runtime/mod.rs	1	//! Shared runtime snapshot for connector-backed MCP tools.	COMMENT
LOW	codex-rs/codex-mcp/src/resource_client.rs	41	///	COMMENT
LOW	codex-rs/codex-mcp/src/tools.rs	21		COMMENT
LOW	codex-rs/codex-mcp/src/connection_manager.rs	1	//! Aggregates MCP server connections for Codex.	COMMENT
LOW	codex-rs/codex-mcp/src/mcp/mod.rs	121	/// change independently. Auth remains separate and is supplied explicitly to	COMMENT
LOW	codex-rs/codex-mcp/src/mcp/mod.rs	141	pub auth_keyring_backend_kind: AuthKeyringBackendKind,	COMMENT
LOW	codex-rs/codex-mcp/src/mcp/mod.rs	161	/// Working directories for the exact environment handles used by this runtime.	COMMENT
LOW	codex-rs/network-proxy/README.md	41	# The CA private key remains in proxy memory. When MITM is active, spawned commands receive CA	COMMENT
LOW	codex-rs/network-proxy/src/runtime.rs	721	// Decision order matters:	COMMENT
LOW	codex-rs/network-proxy/src/proxy.rs	481	/// Loopback proxy ports that sandboxed commands may connect to.	COMMENT
LOW	codex-rs/network-proxy/src/config.rs	141	pub unix_sockets: Option<NetworkUnixSocketPermissions>,	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	21	// semantics directly.	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	121		COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	201	// {	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	221	// }	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	281	assert_eq!(schema, JsonSchema::default());	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	361	// Example schema shape:	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	401	// {	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	521	// being rewritten into a different shape.	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	621	// "properties": {	COMMENT
LOW	codex-rs/tools/src/json_schema_tests.rs	661	Some(vec!["nickname".to_string()]),	COMMENT
733 more matches not shown…

Hyper-Verbose Identifiers765 hits · 728 pts

Severity	File	Line	Snippet	Context
LOW	codex-cli/bin/codex.js	135	function isVitePlusOwnedCodexInstall(packagesDir) {	CODE
LOW	codex-cli/scripts/build_npm_package.py	326	def compute_platform_package_version(version: str, platform_tag: str) -> str:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	15	def test_defaults_to_workspace_and_all_targets(self) -> None:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	33	def test_forwarded_cargo_args_keep_single_separator(self) -> None:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	54	def test_fix_does_not_add_all_targets(self) -> None:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	72	def test_explicit_manifest_and_workspace_are_preserved(self) -> None:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	99	def test_explicit_package_manifest_does_not_force_workspace(self) -> None:	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	121	def test_default_lint_env_promotes_both_strict_lints(self) -> None:	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	176	def ensure_source_prerequisites(env: MutableMapping[str, str]) -> None:	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	233	def fetch_packaged_entrypoint(	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	248	def find_packaged_cargo_dylint(package_entrypoint: Path) -> Path:	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	258	def normalize_packaged_library(package_entrypoint: Path) -> Path:	CODE
LOW	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	230	def start_loopback_proxy_fixture():	CODE
LOW	codex-rs/scripts/write_model_compatibility_catalog.py	48	def supports_chat_or_responses(metadata: dict) -> bool:	CODE
LOW	codex-rs/scripts/write_model_compatibility_catalog.py	75	def supported_reasoning_efforts(metadata: dict) -> list[dict[str, str]]:	CODE
LOW	codex-rs/scripts/test_write_provider_catalog.py	11	def test_exclusions_apply_after_source_and_additions(self):	CODE
LOW	codex-rs/scripts/test_write_provider_catalog.py	29	def test_offline_refresh_is_deterministic_and_provider_scoped(self):	CODE
LOW	codex-rs/scripts/test_write_provider_catalog.py	73	def test_bundled_choices_and_docs_agree(self):	CODE
LOW	codex-rs/scripts/write_provider_catalog.py	38	def supported_provider_npm_packages(overrides: dict[str, object]) -> set[str]:	CODE
LOW	codex-rs/scripts/write_provider_catalog.py	207	def merge_live_provider_models(	CODE
LOW	codex-rs/scripts/write_provider_catalog.py	326	def apply_provider_model_overrides(	CODE
LOW	codex-rs/scripts/write_provider_catalog.py	346	def apply_provider_model_additions(	CODE
LOW	codex-rs/scripts/write_provider_catalog.py	411	def apply_provider_model_exclusions(	CODE
LOW	codex-rs/scripts/write_provider_catalog.py	430	def additional_provider_entries(overrides: dict[str, object]) -> list[dict]:	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	78	def test_marketplace_reader_accepts_valid_names(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	90	def test_marketplace_reader_rejects_unsafe_names_without_stdout(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	120	def test_marketplace_reader_rejects_missing_and_nonstring_names(self) -> None:	CODE
LOW⚡	codex-rs/skills/tests/test_plugin_creator.py	132	def test_marketplace_reader_rejects_malformed_json(self) -> None:	CODE
LOW⚡	codex-rs/skills/tests/test_plugin_creator.py	142	def test_plugin_validator_accepts_canonical_names(self) -> None:	CODE
LOW⚡	codex-rs/skills/tests/test_plugin_creator.py	147	def test_plugin_validator_rejects_unsafe_names(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	165	def test_cachebuster_rejects_unsafe_plugin_names_without_writing(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	177	def test_cachebuster_accepts_dotted_plugin_names(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	190	def test_scaffold_rejects_invalid_marketplace_before_creating_files(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	206	def test_scaffold_force_preserves_files_when_marketplace_is_invalid(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	243	def test_scaffold_force_preserves_files_when_plugins_field_is_invalid(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	283	def test_scaffold_rejects_duplicate_marketplace_entry_before_creating_files(	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	304	def test_scaffold_accepts_existing_valid_marketplace(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_plugin_creator.py	320	def test_scaffold_creates_missing_personal_marketplace(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_skill_installer.py	109	def test_rejects_symlink_to_file_outside_skill(self) -> None:	CODE
LOW	codex-rs/skills/tests/test_skill_installer.py	120	def test_installs_symlink_to_regular_file_inside_skill(self) -> None:	CODE
LOW	…/samples/skill-creator/scripts/generate_openai_yaml.py	74	def generate_short_description(display_name):	CODE
LOW	…/samples/skill-creator/scripts/generate_openai_yaml.py	133	def parse_interface_overrides(raw_overrides):	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	243	def validate_optional_non_empty_string(	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	270	def validate_optional_https_url(	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	287	def validate_optional_contract_path(	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	301	def validate_manifest_mcp_servers(	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	379	def validate_mcp_server_entries(	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	395	def load_companion_json_object(	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	414	def reject_companion_unknown_fields(	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	486	def validate_skill_agent_manifest(	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	601	def reject_skill_agent_unknown_fields(	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	616	def validate_optional_asset_path(	CODE
LOW	…/samples/plugin-creator/scripts/create_basic_plugin.py	48	def display_name_from_plugin_name(plugin_name: str) -> str:	CODE
LOW⚡	…/samples/plugin-creator/scripts/create_basic_plugin.py	106	def build_default_marketplace(marketplace_name: str) -> dict[str, Any]:	CODE
LOW⚡	…/samples/plugin-creator/scripts/create_basic_plugin.py	116	def validate_marketplace_interface(payload: dict[str, Any]) -> None:	CODE
LOW⚡	…/samples/plugin-creator/scripts/create_basic_plugin.py	122	def load_validated_marketplace(	CODE
LOW	…amples/plugin-creator/scripts/identifier_validation.py	6	def validate_plugin_identifier(plugin_name: str) -> None:	CODE
LOW	…amples/plugin-creator/scripts/identifier_validation.py	14	def validate_marketplace_name(marketplace_name: str) -> None:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	186	def _validate_model_specific_options(	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	205	def _validate_generate_payload(payload: Dict[str, Any]) -> None:	CODE
705 more matches not shown…

Fake / Example Data244 hits · 280 pts

Severity	File	Line	Snippet	Context
LOW	codex-rs/rmcp-client/tests/mcp_2026_stdio.rs	111	"name": {"type": "string", "default": "John Doe"},	CODE
LOW	codex-rs/rmcp-client/tests/mcp_2026_stdio.rs	125	"name": "John Doe",	CODE
LOW	codex-rs/rmcp-client/src/elicitation_client_service.rs	493	"name": {"type": "string", "default": "John Doe"},	CODE
LOW	codex-rs/rmcp-client/src/elicitation_client_service.rs	526	"name": {"type": "string", "default": "John Doe"},	CODE
LOW	…x-rs/rmcp-client/src/bin/test_mcp_2026_stdio_server.rs	32	"name": "John Doe",	CODE
LOW	…x-rs/rmcp-client/src/bin/test_mcp_2026_stdio_server.rs	169	"name": {"type": "string", "default": "John Doe"},	CODE
LOW	…er-transport/src/transport/remote_control/websocket.rs	2025	"email": "user@example.com",	CODE
LOW	…server-transport/src/transport/remote_control/tests.rs	103	"email": "user@example.com",	CODE
LOW	codex-rs/agent-identity/src/lib.rs	655	"email": "user@example.com",	CODE
LOW	codex-rs/agent-identity/src/lib.rs	673	email: Some("user@example.com".to_string()),	CODE
LOW	codex-rs/agent-identity/src/lib.rs	711	"email": "user@example.com",	CODE
LOW	codex-rs/agent-identity/src/lib.rs	733	email: Some("user@example.com".to_string()),	CODE
LOW	codex-rs/agent-identity/src/lib.rs	765	email: Some("user@example.com".to_string()),	CODE
LOW	codex-rs/agent-identity/src/lib.rs	790	"email": "user@example.com",	CODE
LOW	codex-rs/agent-identity/src/lib.rs	813	"email": "user@example.com",	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker_tests.rs	35	fn assert_credential_shape(real_value: &str, dummy_value: &str, prefix: &str) {	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker_tests.rs	36	assert_ne!(dummy_value, real_value);	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker_tests.rs	37	assert_eq!(dummy_value.len(), real_value.len());	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker_tests.rs	38	assert_eq!(&dummy_value[..prefix.len()], prefix);	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker_tests.rs	41	.zip(dummy_value.bytes())	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	107	.find(\|source\| source.dummy_value == value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	110	\|\| value == self.dummy_value	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	114	env_contains_credential_value(env, &self.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	592	&& carried_dummies.contains(&credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	598	credential.dummy_value.clone(),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	608	.any(\|(dummy_value, _)\| credential.dummy_value == *dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	616	&& carried_dummies.contains(&credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	618	.map(\|credential\| credential.dummy_value.clone())	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	625	&& !owned_dummies.contains(&credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	626	&& env_contains_credential_value(env, &credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	631	credential.dummy_value.clone(),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	643	&& !owned_dummies.contains(&credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	644	&& carried_dummies.contains(&credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	653	credential.dummy_value.clone(),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	960	for original in [&credential.real_value, &credential.dummy_value] {	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	963	&credential.dummy_value,	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	971	dummy_value: value.clone(),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	978	&& existing.dummy_value == alias.dummy_value	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1158	if text == credential.dummy_value	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1159	\|\| credential.contains_embedded_value(text, &credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1164	credential.dummy_value.clone(),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1365	credential.dummy_value == dummy	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1375	if let Some(dummy_value) = state.register(	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1384	&& previous_dummy != dummy_value	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1386	state.replace_child_env_dummies(env, &[(previous_dummy, dummy_value.clone())]);	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1388	set_env_value(env, env_var, dummy_value);	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1458	credential.value_match_ranges(value, &credential.dummy_value),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1466	credential.value_match_ranges(value, &credential.dummy_value),	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1467	&credential.dummy_value,	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1535	if !env_contains_credential_value(existing_env, &existing.dummy_value) {	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1538	return Some(existing.dummy_value.clone());	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1541	is_builtin_shaped_credential(real_value) && credential.dummy_value.contains(real_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1542	\|\| provider.contains_embedded_value(&credential.dummy_value, real_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1551	let Some(dummy_value) = (0..64).find_map(\|_\| {	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1552	let candidate = provider.dummy_value(real_value)?;	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1561	credential.dummy_value == candidate	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1563	\|\| credential.contains_embedded_value(&candidate, &credential.dummy_value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1585	vec![real_value.to_string(), dummy_value.clone()]	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1589	.find(\|source\| source.dummy_value == value)	CODE
LOW⚡	codex-rs/network-proxy/src/credential_broker.rs	1591	vec![source.real_value.clone(), source.dummy_value.clone()]	CODE
184 more matches not shown…

Decorative Section Separators44 hits · 190 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	194	// ┌─Screen───────────────────────┐	COMMENT
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	195	// │┌╌Scroll region╌╌╌╌╌╌╌╌╌╌╌╌╌╌┐│	COMMENT
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	199	// │█╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┘│	COMMENT
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	200	// │╭─Viewport───────────────────╮│	COMMENT
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	202	// │╰────────────────────────────╯│	COMMENT
MEDIUM⚡	codex-rs/tui/src/insert_history.rs	203	// └──────────────────────────────┘	COMMENT
MEDIUM	codex-rs/tui/src/diff_render.rs	1180	// ┌──────────┬──────┬──────────────────────────────────────────┐	COMMENT
MEDIUM	codex-rs/tui/src/diff_render.rs	1183	// └──────────┴──────┴──────────────────────────────────────────┘	COMMENT
MEDIUM	codex-rs/tui/src/streaming/controller.rs	1642	let source = " ┌───────┬──────────┬────────┐\n │ Name │ Role │ Active │\n ├───────┼──────────┼────────┤\	CODE
MEDIUM	…ell-command/src/command_safety/is_dangerous_command.rs	148	// ── anything else ─────────────────────────────────────────────────	COMMENT
MEDIUM⚡	docs/example-config.md	10	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	12	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	21	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	23	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	29	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	31	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	40	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	42	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	50	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	52	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	63	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	65	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	73	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	75	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	84	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/example-config.md	86	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	9	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	11	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	20	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	22	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	28	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	30	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	39	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	41	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	49	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	51	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	62	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	64	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	72	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	74	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	83	# ---------------------------------------------------------------	COMMENT
MEDIUM⚡	docs/zh/example-config.md	85	# ---------------------------------------------------------------	COMMENT
MEDIUM	.github/workflows/cargo-ci.yml	102	# ─────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	.github/workflows/cargo-ci.yml	140	# ─────────────────────────────────────────────────────────────────────────	COMMENT

Unused Imports175 hits · 150 pts

Severity	File	Line	Context
LOW	tools/argument-comment-lint/run.py	3	CODE
LOW	tools/argument-comment-lint/test_wrapper_common.py	3	CODE
LOW	tools/argument-comment-lint/run-prebuilt-linter.py	3	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	3	CODE
LOW	codex-rs/scripts/write_model_compatibility_catalog.py	3	CODE
LOW	codex-rs/scripts/write_provider_catalog.py	3	CODE
LOW	…sets/samples/plugin-creator/scripts/validate_plugin.py	4	CODE
LOW	…amples/plugin-creator/scripts/read_marketplace_name.py	4	CODE
LOW	…es/plugin-creator/scripts/update_plugin_cachebuster.py	4	CODE
LOW	…/samples/plugin-creator/scripts/create_basic_plugin.py	4	CODE
LOW	…assets/samples/skill-installer/scripts/github_utils.py	4	CODE
LOW	…/assets/samples/skill-installer/scripts/list-skills.py	4	CODE
LOW	…s/skill-installer/scripts/install-skill-from-github.py	4	CODE
LOW	…c/assets/samples/imagegen/scripts/remove_chroma_key.py	8	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	10	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	426	CODE
LOW	third_party/voice/macos_runtime.py	13	CODE
LOW	sdk/python/tests/conftest.py	1	CODE
LOW	sdk/python/tests/test_app_server_login.py	1	CODE
LOW	sdk/python/tests/app_server_helpers.py	1	CODE
LOW	sdk/python/tests/test_app_server_run.py	1	CODE
LOW	sdk/python/tests/test_async_client_behavior.py	1	CODE
LOW	sdk/python/tests/test_client_rpc_methods.py	1	CODE
LOW	sdk/python/tests/test_app_server_inputs.py	1	CODE
LOW	sdk/python/tests/test_real_app_server_integration.py	1	CODE
LOW	sdk/python/tests/test_app_server_approvals.py	1	CODE
LOW	sdk/python/tests/test_app_server_turn_controls.py	1	CODE
LOW	sdk/python/tests/test_app_server_streaming.py	1	CODE
LOW	sdk/python/tests/test_contract_generation.py	1	CODE
LOW	sdk/python/tests/test_public_api_runtime_behavior.py	1	CODE
LOW	sdk/python/tests/test_public_api_signatures.py	1	CODE
LOW	sdk/python/tests/app_server_harness.py	1	CODE
LOW	sdk/python/tests/test_app_server_lifecycle.py	1	CODE
LOW	sdk/python/examples/_bootstrap.py	1	CODE
LOW	sdk/python/src/openai_codex/_initialize_metadata.py	1	CODE
LOW	sdk/python/src/openai_codex/models.py	1	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
LOW	sdk/python/src/openai_codex/models.py	11	CODE
115 more matches not shown…

Hallucination Indicators13 hits · 130 pts

Severity	File	Line	Snippet	Context
CRITICAL	codex-rs/core/src/thread_manager_tests.rs	1499	agent_control: parent.thread.session.services.agent_control.clone(),	CODE
CRITICAL	…rs/core/src/tools/runtimes/zsh_fork/unix_escalation.rs	144	codex_linux_sandbox_exe: ctx.step_context.turn.config.codex_linux_sandbox_exe.clone(),	CODE
CRITICAL	codex-rs/core/src/tools/handlers/multi_agents_tests.rs	478	session.services.agent_control = root.thread.session.services.agent_control.clone();	CODE
CRITICAL	codex-rs/core/src/tools/handlers/multi_agents_tests.rs	524	session.services.agent_control = root.thread.session.services.agent_control.clone();	CODE
CRITICAL	codex-rs/core/src/tools/handlers/multi_agents_tests.rs	661	session.services.agent_control = root.thread.session.services.agent_control.clone();	CODE
CRITICAL	codex-rs/core/src/tools/handlers/multi_agents_tests.rs	711	session.services.agent_control = root.thread.session.services.agent_control.clone();	CODE
CRITICAL	codex-rs/core/src/tools/handlers/multi_agents_tests.rs	765	session.services.agent_control = root.thread.session.services.agent_control.clone();	CODE
CRITICAL	codex-rs/core/src/agent/control_tests.rs	824	let control = root.thread.session.services.agent_control.clone();	CODE
CRITICAL	codex-rs/tui/src/app/config_persistence.rs	1878	app.chat_widget.local_settings.tui.theme.as_deref(),	CODE
CRITICAL	codex-rs/tui/src/app/config_persistence.rs	1919	app.chat_widget.local_settings.tui.pet.as_deref(),	CODE
CRITICAL	codex-rs/tui/src/app/config_persistence.rs	1935	app.chat_widget.local_settings.tui.pet.as_deref(),	CODE
CRITICAL	codex-rs/tui/src/transcript_view/disclosure.rs	175	if self.disclosure.keymap.app.focus_activity.is_pressed(key) {	CODE
CRITICAL	codex-rs/tui/src/transcript_view/text_tabs.rs	230	self.current.wrapped.line.spans.extend(line.spans);	CODE

Empty Error Handlers25 hits · 125 pts

Severity	File	Line	Snippet	Context
HIGH	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	146	except Exception:	CODE
HIGH	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	899	except Exception:	CODE
HIGH	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	173	except OSError:	CODE
HIGH	…kills/src/assets/samples/imagegen/scripts/image_gen.py	905	except Exception:	CODE
HIGH	…kills/src/assets/samples/imagegen/scripts/image_gen.py	923	except Exception:	CODE
HIGH	third_party/voice/prepare_built_runtime.py	115	except FileNotFoundError:	CODE
HIGH	third_party/voice/prepare_built_runtime.py	120	except FileNotFoundError:	CODE
HIGH	third_party/voice/test_assemble_package.py	235	except OSError:	CODE
HIGH	.codex/skills/babysit-pr/scripts/gh_pr_watch.py	266	except OSError:	CODE
HIGH	sdk/python/_runtime_setup.py	194	except urllib.error.HTTPError:	CODE
HIGH	sdk/python/_runtime_setup.py	228	except urllib.error.HTTPError:	CODE
HIGH	sdk/python/src/openai_codex/client.py	576	except Exception:	CODE
HIGH	sdk/python/src/openai_codex/client.py	596	except Exception:	CODE
HIGH	sdk/python/src/openai_codex/client.py	594	except Exception:	CODE
HIGH	sdk/python/src/openai_codex/_runtime_requirements.py	23	except InvalidVersion:	CODE
HIGH	scripts/mcp_conformance/run_codex_compliance.py	1100	except json.JSONDecodeError:	CODE
HIGH	scripts/mcp_conformance/run_codex_compliance.py	1036	except json.JSONDecodeError:	CODE
HIGH	scripts/mcp_conformance/server.py	1736	except KeyboardInterrupt:	CODE
HIGH	scripts/mcp_conformance/official_conformance.py	302	except (OSError, ProcessLookupError):	CODE
HIGH	scripts/mcp_conformance/official_conformance.py	289	except OSError:	CODE
HIGH	scripts/mcp_conformance/official_conformance.py	296	except (OSError, ProcessLookupError):	CODE
HIGH	scripts/mcp_conformance/official_conformance.py	517	except OSError:	CODE
HIGH	scripts/mcp_conformance/codex_conformance_adapter.py	499	except AdapterFailure:	CODE
HIGH	scripts/mcp_conformance/codex_conformance_adapter.py	574	except AdapterFailure:	CODE
HIGH	scripts/mcp_conformance/codex_conformance_adapter.py	835	except json.JSONDecodeError:	CODE

Deep Nesting67 hits · 66 pts

Severity	File	Line	Context
LOW	codex-cli/scripts/build_npm_package.py	137	CODE
LOW	codex-cli/scripts/build_npm_package.py	232	CODE
LOW	tools/argument-comment-lint/wrapper_common.py	53	CODE
LOW	codex-rs/scripts/write_provider_catalog.py	594	CODE
LOW	…src/assets/samples/skill-creator/scripts/init_skill.py	126	CODE
LOW	…assets/samples/skill-creator/scripts/quick_validate.py	15	CODE
LOW	…s/skill-installer/scripts/install-skill-from-github.py	169	CODE
LOW	…s/skill-installer/scripts/install-skill-from-github.py	316	CODE
LOW	…c/assets/samples/imagegen/scripts/remove_chroma_key.py	266	CODE
LOW	…c/assets/samples/imagegen/scripts/remove_chroma_key.py	285	CODE
LOW	third_party/voice/bazel_windows.py	55	CODE
LOW	third_party/voice/test_build_native.py	149	CODE
LOW	third_party/voice/test_build_native.py	171	CODE
LOW	third_party/voice/test_bazel_windows.py	19	CODE
LOW	third_party/voice/linux_runtime.py	28	CODE
LOW	third_party/voice/bazel_native.py	17	CODE
LOW	third_party/voice/build_native.py	324	CODE
LOW	.codex/skills/babysit-pr/scripts/gh_pr_watch.py	565	CODE
LOW	sdk/python/_runtime_setup.py	99	CODE
LOW	sdk/python/_runtime_setup.py	178	CODE
LOW	sdk/python/tests/test_real_app_server_integration.py	513	CODE
LOW	sdk/python/tests/app_server_harness.py	39	CODE
LOW	sdk/python/examples/_bootstrap.py	66	CODE
LOW	sdk/python/scripts/update_sdk_artifacts.py	1074	CODE
LOW	sdk/python/src/openai_codex/_goal.py	55	CODE
LOW	sdk/python/src/openai_codex/client.py	327	CODE
LOW	sdk/python/src/openai_codex/client.py	863	CODE
LOW	sdk/python/src/openai_codex/_runtime_requirements.py	40	CODE
LOW	sdk/python/src/openai_codex/errors.py	61	CODE
LOW	sdk/python/src/openai_codex/_message_router.py	145	CODE
LOW	sdk/python/src/openai_codex/_message_router.py	283	CODE
LOW	scripts/stage_npm_packages.py	497	CODE
LOW	scripts/test_ollama_qwen_smoke.py	45	CODE
LOW	scripts/test_ollama_qwen_smoke.py	100	CODE
LOW	scripts/ollama_qwen_smoke.py	113	CODE
LOW	scripts/ollama_qwen_smoke.py	395	CODE
LOW	scripts/ollama_qwen_smoke.py	577	CODE
LOW	scripts/codex_package/version.py	11	CODE
LOW	scripts/codex_package/dotslash.py	178	CODE
LOW	scripts/codex_package/test_layout.py	131	CODE
LOW	scripts/codex_package/smoke_tests/fixtures.py	189	CODE
LOW	scripts/mcp_conformance/run_codex_compliance.py	976	CODE
LOW	scripts/mcp_conformance/run_codex_compliance.py	1306	CODE
LOW	scripts/mcp_conformance/run_codex_compliance.py	1459	CODE
LOW	scripts/mcp_conformance/run_codex_compliance.py	1744	CODE
LOW	scripts/mcp_conformance/run_codex_compliance.py	1840	CODE
LOW	scripts/mcp_conformance/server.py	1253	CODE
LOW	scripts/mcp_conformance/server.py	574	CODE
LOW	scripts/mcp_conformance/server.py	625	CODE
LOW	scripts/mcp_conformance/review_regressions.py	669	CODE
LOW	scripts/mcp_conformance/review_regressions.py	774	CODE
LOW	scripts/mcp_conformance/review_regressions.py	859	CODE
LOW	scripts/mcp_conformance/review_regressions.py	1151	CODE
LOW	scripts/mcp_conformance/official_conformance.py	138	CODE
LOW	scripts/mcp_conformance/codex_conformance_adapter.py	702	CODE
LOW	.github/scripts/voice-cygwin-inputs.py	36	CODE
LOW	.github/scripts/verify_pypi_release.py	24	CODE
LOW	.github/scripts/verify_cargo_workspace_manifests.py	105	CODE
LOW	.github/scripts/rusty_v8_bazel.py	215	CODE
LOW	.github/scripts/test_resolve_python_cli_release.py	86	CODE
7 more matches not shown…

AI Slop Vocabulary16 hits · 51 pts

Severity	File	Line	Snippet	Context
MEDIUM	codex-rs/core/tests/suite/unified_exec.rs	498	r#set: harness	CODE
MEDIUM⚡	codex-rs/core/src/harness/claude_code.rs	2410	r###"{"name":"Workflow","description":"Execute a workflow script that orchestrates multiple subagents determ	CODE
MEDIUM	codex-rs/core/src/harness/zcode_tools.json	1	[{"name":"Agent","description":"Launch a new agent to handle complex, multi-step tasks. Each agent type has specific cap	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	75	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	75	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	247	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	247	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	422	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	422	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	590	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM⚡	codex-rs/models-manager/models.json	590	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
MEDIUM	codex-rs/models-manager/models.json	1375	"instructions_template": "You are Codex, a coding agent based on GPT-5. You and the user share one workspace, an	CODE
MEDIUM⚡	.github/workflows/cargo-ci.yml	119	# assert branding + manifest strings; they need the harness/binary env (or	COMMENT
MEDIUM⚡	.github/workflows/cargo-ci.yml	125	# codex-core harness::claude_code (4): billing_header_version_* (2),	COMMENT
MEDIUM⚡	.github/workflows/cargo-ci.yml	128	# Cause: oix native-harness Claude emulation; brittle exact version/prompt	COMMENT
MEDIUM⚡	.github/workflows/cargo-ci.yml	133	# upstream / codex (~6), some possibly perturbed by oix model/harness data:	COMMENT

Modern AI Meta-Vocabulary18 hits · 46 pts

Severity	File	Line	Snippet	Context
MEDIUM	codex-rs/core/tests/suite/subagent_notifications.rs	1453	#[test_case(FullHistoryV2ModelSelection::WorldStateIdentity; "world state appends context window when agent identity cha	COMMENT
MEDIUM	codex-rs/core/tests/suite/subagent_notifications.rs	1455	#[test_case(FullHistoryV2ModelSelection::MultiAgentModeInstructions; "full fork drops inherited multi-agent mode instruc	COMMENT
MEDIUM	codex-rs/core/src/config/config_tests.rs	12067	toml::from_str(r#"[features.multi_agent_v2]"#).expect("multi-agent v2 config should parse");	CODE
MEDIUM	codex-rs/core/src/harness/zcode.rs	1241	"Write code that reads like the surrounding code: match its comment density, naming, and idiom.\n\nFor actions t	CODE
MEDIUM	codex-rs/core/src/harness/claude_code.rs	2390	r###"{"name":"TaskOutput","description":"DEPRECATED: Background tasks return their output file path in the t	CODE
MEDIUM⚡	codex-rs/core/src/harness/claude_code.rs	2410	r###"{"name":"Workflow","description":"Execute a workflow script that orchestrates multiple subagents determ	CODE
MEDIUM⚡	codex-rs/core/src/harness/claude_code.rs	2410	r###"{"name":"Workflow","description":"Execute a workflow script that orchestrates multiple subagents determ	CODE
MEDIUM	codex-rs/core/src/harness/claude_code_prompt.rs	228	body.push_str("\n\n# Session-specific guidance\n - Use the Agent tool with specialized agents when the task at hand	CODE
MEDIUM	codex-rs/core/src/harness/claude_code_prompt.rs	254	body.push_str(".\n - Assistant knowledge cutoff is August 2025.\n - The most recent Claude model family is Claude 4.	CODE
MEDIUM	codex-rs/tui/src/app_event.rs	1671	/// Named profile selection to apply after any required UI guardrails complete.	COMMENT
MEDIUM	codex-rs/tui/src/diff_render.rs	2631	// Should complete quickly (no per-line parser init). If guardrails	COMMENT
MEDIUM	codex-rs/tui/src/diff_render.rs	2635	// The diff rendered without timing out — the guardrails prevented	COMMENT
MEDIUM	codex-rs/tui/src/render/highlight.rs	734	/// input exceeds safety guardrails. Callers can always render the result	COMMENT
MEDIUM	codex-rs/tui/src/render/highlight.rs	764	/// guardrails. The caller (`diff_render`) uses this signal to fall back to	COMMENT
MEDIUM	codex-rs/code-mode-protocol/src/description.rs	15	const EXEC_DESCRIPTION_TEMPLATE: &str = r#"Run JavaScript code to orchestrate/compose tool calls	CODE
MEDIUM	codex-rs/codex-api/src/error.rs	16	#[error("context window exceeded")]	COMMENT
MEDIUM	codex-rs/codex-api/src/sse/responses.rs	1178	let raw_error = r#"{"type":"response.failed","sequence_number":3,"response":{"id":"resp_5c66275b97b9baef1ed95550	CODE
MEDIUM	codex-rs/codex-api/src/sse/responses.rs	1191	let raw_error = r#"{"type":"response.failed","sequence_number":4,"response":{"id":"resp_fatal_newline","object":	CODE

Excessive Try-Catch Wrapping35 hits · 42 pts

Severity	File	Line	Snippet	Context
LOW	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	146	except Exception:	CODE
LOW	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	215	except Exception as err:	CODE
LOW	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	899	except Exception:	CODE
LOW	…src/assets/samples/skill-creator/scripts/init_skill.py	183	except Exception as e:	CODE
LOW⚡	…src/assets/samples/skill-creator/scripts/init_skill.py	197	except Exception as e:	CODE
LOW⚡	…src/assets/samples/skill-creator/scripts/init_skill.py	206	except Exception as e:	CODE
LOW⚡	…src/assets/samples/skill-creator/scripts/init_skill.py	216	except Exception as e:	CODE
LOW	…amples/plugin-creator/scripts/read_marketplace_name.py	51	except Exception as err: # noqa: BLE001 - CLI should surface a single clear message.	CODE
LOW	…es/plugin-creator/scripts/update_plugin_cachebuster.py	87	except Exception as err: # noqa: BLE001 - CLI should surface a single clear message.	CODE
MEDIUM	…/assets/samples/skill-installer/scripts/list-skills.py	101	print(f"Error: {exc}", file=sys.stderr)	CODE
MEDIUM	…s/skill-installer/scripts/install-skill-from-github.py	350	print(f"Error: {exc}", file=sys.stderr)	CODE
MEDIUM	…c/assets/samples/imagegen/scripts/remove_chroma_key.py	25	print(f"Error: {message}", file=sys.stderr)	CODE
MEDIUM	…kills/src/assets/samples/imagegen/scripts/image_gen.py	50	print(f"Error: {message}", file=sys.stderr)	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	339	except Exception:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	533	except Exception:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	567	except Exception as exc:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	706	except Exception as exc:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	719	except Exception:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	905	except Exception:	CODE
LOW	…kills/src/assets/samples/imagegen/scripts/image_gen.py	923	except Exception:	CODE
MEDIUM	…kills/src/assets/samples/imagegen/scripts/image_gen.py	411	def _create_client():	CODE
LOW	third_party/voice/bazel_windows.py	163	except Exception:	CODE
LOW	third_party/voice/bazel_native.py	55	except Exception:	CODE
LOW	.codex/skills/babysit-pr/scripts/gh_pr_watch.py	263	except Exception:	CODE
LOW	…k/python/examples/10_error_handling_and_retry/async.py	45	except Exception as exc: # noqa: BLE001	CODE
LOW	sdk/python/src/openai_codex/client.py	296	except Exception:	CODE
LOW	sdk/python/src/openai_codex/client.py	576	except Exception:	CODE
LOW	sdk/python/src/openai_codex/client.py	594	except Exception:	CODE
LOW	sdk/python/src/openai_codex/client.py	596	except Exception:	CODE
LOW	sdk/python/src/openai_codex/client.py	819	except Exception: # noqa: BLE001	CODE
LOW	sdk/python/src/openai_codex/retry.py	31	except Exception as exc:	CODE
LOW	sdk/python/src/openai_codex/api.py	90	except Exception:	CODE
LOW	sdk/python/src/openai_codex/api.py	340	except Exception:	CODE
MEDIUM	scripts/readme_toc.py	73	print(f"Error: file not found: {readme_path}", file=sys.stderr)	CODE
LOW	scripts/mcp_conformance/codex_conformance_adapter.py	980	except Exception as exc: # Preserve a diagnostic artifact for the parent.	CODE

Cross-Language Confusion6 hits · 30 pts

Severity	File	Line	Snippet	Context
HIGH	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	427	["cmd", "/c", "mkdir sub && echo hi > sub\\in_sub.txt"],	CODE
HIGH	codex-rs/windows-sandbox-rs/sandbox_smoketests.py	651	["cmd", "/c", "mkdir deep\\nest && echo ok > deep\\nest\\f.txt"],	CODE
HIGH	scripts/just-shell.py	17	STDERR_NULL_TOKEN = "{stderr-null}"	CODE
HIGH	scripts/just-shell.py	19	POWERSHELL_STDERR_NULL = "2>$null; exit $LASTEXITCODE"	CODE
HIGH	scripts/codex_package/smoke_tests/test_codex_package.py	94	command = "command -v rg && rg --version"	CODE
HIGH	.github/scripts/macos-signing/notarize_with_akv.py	239	raise NotarizationError("ES256 signature must contain 64 JOSE R \|\| S bytes")	CODE

Structural Annotation Overuse8 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	codex-rs/tui/src/live_wrap.rs	20	/// Step 1: plain-text only. ANSI-carry and styled spans will be added later.	COMMENT
LOW	codex-rs/tui/src/chatwidget/slash_dispatch.rs	198	// Step 1: pick a category (UI built in feedback_view)	COMMENT
LOW	codex-rs/protocol/src/shell_environment.rs	98	// Step 1 - determine the starting set of variables based on the	COMMENT
LOW⚡	codex-rs/protocol/src/shell_environment.rs	123	// Step 2 - Apply the default exclude if not disabled.	COMMENT
LOW⚡	codex-rs/protocol/src/shell_environment.rs	133	// Step 3 - Apply custom excludes.	COMMENT
LOW⚡	codex-rs/protocol/src/shell_environment.rs	138	// Step 4 - Apply user-provided overrides.	COMMENT
LOW⚡	codex-rs/protocol/src/shell_environment.rs	145	// Step 5 - If include_only is non-empty, keep only the matching vars.	COMMENT
LOW⚡	codex-rs/protocol/src/shell_environment.rs	150	// Step 6 - Populate the thread ID environment variable when provided.	COMMENT

Slop Phrases9 hits · 13 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	codex-rs/models-manager/models.json	75	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW⚡	codex-rs/models-manager/models.json	75	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW⚡	codex-rs/models-manager/models.json	247	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW⚡	codex-rs/models-manager/models.json	422	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW⚡	codex-rs/models-manager/models.json	590	"instructions_template": "You are Codex, an agent based on GPT-6. You and the user share one workspace, and your	CODE
LOW	codex-rs/models-manager/models.json	763	"instructions_template": "You are Codex, an agent based on GPT-5. You and the user share one workspace, and your	CODE
LOW	codex-rs/models-manager/models.json	897	"instructions_template": "You are Codex, an agent based on GPT-5. You and the user share one workspace, and your	CODE
LOW	codex-rs/models-manager/models.json	1022	"instructions_template": "You are Codex, an agent based on GPT-5. You and the user share one workspace, and your	CODE
LOW	codex-rs/models-manager/models.json	1375	"instructions_template": "You are Codex, a coding agent based on GPT-5. You and the user share one workspace, an	CODE

AI Structural Patterns12 hits · 10 pts

Severity	File	Line	Context
LOW	sdk/python/src/openai_codex/api.py	135	CODE
LOW	sdk/python/src/openai_codex/api.py	175	CODE
LOW	sdk/python/src/openai_codex/api.py	206	CODE
LOW	sdk/python/src/openai_codex/api.py	246	CODE
LOW	sdk/python/src/openai_codex/api.py	393	CODE
LOW	sdk/python/src/openai_codex/api.py	434	CODE
LOW	sdk/python/src/openai_codex/api.py	466	CODE
LOW	sdk/python/src/openai_codex/api.py	507	CODE
LOW	sdk/python/src/openai_codex/api.py	581	CODE
LOW	sdk/python/src/openai_codex/api.py	618	CODE
LOW	sdk/python/src/openai_codex/api.py	687	CODE
LOW	sdk/python/src/openai_codex/api.py	724	CODE

Self-Referential Comments3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	codex-rs/core/src/harness/mini_swe_agent.rs	446	### Create a new file:\n\n\	COMMENT
MEDIUM	sdk/python/examples/05_existing_thread/sync.py	15	# Create an initial thread and turn so we have a real thread to resume.	COMMENT
MEDIUM	.github/scripts/macos-signing/notarize_with_akv.py	429	# Create the submission before uploading the artifact.	COMMENT

Modern Structural Boilerplate7 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	tools/argument-comment-lint/wrapper_common.py	132	def set_default_lint_env(env: MutableMapping[str, str]) -> None:	CODE
LOW⚡	sdk/python/_runtime_setup.py	365	__all__ = [	CODE
LOW	sdk/python/scripts/update_sdk_artifacts.py	387	def _set_discriminator_titles(props: dict[str, Any], owner: str) -> None:	CODE
LOW	sdk/python/src/openai_codex/__init__.py	57	__all__ = [	CODE
LOW	sdk/python/src/openai_codex/types.py	43	__all__ = [	CODE
LOW	sdk/python-runtime/src/codex_cli_bin/__init__.py	33	__all__ = [	CODE
LOW	scripts/codex_package/smoke_tests/conftest.py	6	__all__ = ["code_mode_host_debug_symbols", "package", "responses_server"]	CODE

Docstring Block Structure1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…src/assets/samples/skill-creator/scripts/init_skill.py	159	Initialize a new skill directory with template SKILL.md. Args: skill_name: Name of the skill p	STRING

Redundant / Tautological Comments2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	codex-cli/scripts/run_in_container.sh	44	# Check if WORK_DIR is set.	COMMENT
LOW	…src/assets/samples/skill-creator/scripts/init_skill.py	174	# Check if directory already exists	COMMENT

Verbosity Indicators2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	codex-rs/tui/src/live_wrap.rs	20	/// Step 1: plain-text only. ANSI-carry and styled spans will be added later.	COMMENT
LOW	codex-rs/tui/src/chatwidget/slash_dispatch.rs	198	// Step 1: pick a category (UI built in feedback_view)	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	codex-cli/scripts/run_in_container.sh	4	# Usage:	COMMENT

openinterpreter/openinterpreter

Open-Source Code Quality, Security and Technical Debt Review