pewdiepie-archdaemon/odysseus

29.8

Adjusted Score

29.8

Raw Score

100%

Time Factor

2026-08-27

Last Push

86.5K

Stars

Python

Language

461.7K

Lines of Code

1.5K

Files

9.8K

Pattern Hits

2026-08-29

Scan Date

0.30

HC Hit Rate

What These Metrics Mean

Adjusted Score: Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score: The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor: The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits: Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate: High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files: Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 2HIGH 443MEDIUM 879LOW 8441

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 9765 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers5103 hits · 5372 pts

Severity	File	Line	Snippet	Context
LOW	setup.py	54	def _prompt_admin_credentials():	CODE
LOW⚡	app.py	617	async def session_not_found_handler(request: Request, exc: SessionNotFoundError):	CODE
LOW⚡	app.py	621	async def invalid_file_upload_handler(request: Request, exc: InvalidFileUploadError):	CODE
LOW⚡	app.py	625	async def llm_service_error_handler(request: Request, exc: LLMServiceError):	CODE
LOW	app.py	18	def register_static_mime_types() -> None:	CODE
LOW	app.py	1237	async def _skill_audit_nightly_loop():	CODE
LOW	core/auth.py	185	def _drop_reserved_loaded_users(self):	CODE
LOW	core/auth.py	210	def _migrate_legacy_admin_role(self):	CODE
LOW	core/auth.py	499	def totp_get_provisioning_uri(self, username: str, secret: str) -> str:	CODE
LOW⚡	core/models.py	23	def set_session_manager_instance(manager: "SessionManager"):	CODE
LOW⚡	core/models.py	29	def get_session_manager_instance() -> Optional["SessionManager"]:	CODE
LOW⚡	core/models.py	39	def _history_grants_chat_session_approval(	CODE
LOW⚡	core/platform_compat.py	338	def get_wsl_windows_user_profile() -> Optional[str]:	CODE
LOW	core/platform_compat.py	435	def run_wsl_windows_powershell(	CODE
LOW⚡	core/database.py	913	def _migrate_add_document_archived_column():	CODE
LOW⚡	core/database.py	937	def _migrate_add_owner_column():	CODE
LOW⚡	core/database.py	984	def _migrate_add_hidden_models_column():	CODE
LOW⚡	core/database.py	1007	def _migrate_add_model_endpoint_owner_column():	CODE
LOW⚡	core/database.py	1039	def _migrate_add_provider_auth_id_column():	CODE
LOW⚡	core/database.py	1064	def _migrate_add_model_type_column():	CODE
LOW⚡	core/database.py	1087	def _migrate_add_model_endpoint_refresh_columns():	CODE
LOW⚡	core/database.py	1115	def _migrate_add_task_run_model_column():	CODE
LOW⚡	core/database.py	1138	def _migrate_add_supports_tools_column():	CODE
LOW⚡	core/database.py	1162	def _migrate_add_cached_models_column():	CODE
LOW⚡	core/database.py	1184	def _migrate_add_pinned_models_column():	CODE
LOW⚡	core/database.py	1207	def _migrate_add_notes_sort_order():	CODE
LOW⚡	core/database.py	1262	def _migrate_add_folder_column():	CODE
LOW⚡	core/database.py	1285	def _migrate_add_token_columns():	CODE
LOW⚡	core/database.py	1309	def _migrate_add_owner_to_table(table_name: str, index_name: str):	CODE
LOW⚡	core/database.py	1333	def _migrate_add_multiuser_owner_columns():	CODE
LOW⚡	core/database.py	1368	def _migrate_add_api_token_scopes_column():	CODE
LOW⚡	core/database.py	1396	def _migrate_assign_legacy_owner():	CODE
LOW⚡	core/database.py	1547	def _migrate_add_tidy_verdict():	CODE
LOW⚡	core/database.py	1560	def _migrate_add_doc_source_email_cols():	CODE
LOW⚡	core/database.py	1676	def _migrate_add_oauth_config():	CODE
LOW⚡	core/database.py	1688	def _migrate_add_disabled_tools():	CODE
LOW⚡	core/database.py	1700	def _migrate_add_mcp_oauth_tokens_column():	CODE
LOW⚡	core/database.py	1758	def _migrate_add_notifications_enabled():	CODE
LOW⚡	core/database.py	1771	def _migrate_add_crew_member_id():	CODE
LOW⚡	core/database.py	2326	def _migrate_encrypt_endpoint_keys():	CODE
LOW⚡	core/database.py	2350	def _migrate_encrypt_signatures():	CODE
LOW⚡	core/database.py	2382	def _migrate_encrypt_email_passwords():	CODE
LOW⚡	core/database.py	2442	def _migrate_add_calendar_origin():	CODE
LOW⚡	core/database.py	2469	def _migrate_add_calendar_account_id():	CODE
LOW⚡	core/database.py	2495	def _migrate_add_caldav_sync_columns():	CODE
LOW⚡	core/database.py	2547	def _migrate_add_calendar_recurrence_exdates():	CODE
LOW	core/database.py	474	def lock_email_account_owner_mutations(db, *owners: str) -> None:	CODE
LOW	core/database.py	868	def _migrate_add_last_message_at_column():	CODE
LOW	core/database.py	1345	def _migrate_add_gallery_caption_column():	CODE
LOW	core/database.py	1520	def _migrate_backfill_document_owner_from_session():	CODE
LOW	core/database.py	1584	def _migrate_add_task_automation_columns():	CODE
LOW	core/database.py	1737	def _migrate_drop_ping_notes_tasks():	CODE
LOW	core/database.py	1788	def _migrate_add_assistant_columns():	CODE
LOW	core/database.py	1919	def _migrate_email_account_default_invariant():	CODE
LOW	core/database.py	2295	def _migrate_add_email_smtp_security():	CODE
LOW	core/database.py	2416	def _migrate_add_calendar_is_utc():	CODE
LOW	core/database.py	2520	def _migrate_add_calendar_metadata():	CODE
LOW	core/database.py	2656	def update_session_last_accessed(session_id: str):	CODE
LOW⚡	core/database.py	2264	def _scrub_legacy_chat_message_fts_media(conn) -> None:	STRING
LOW	core/database.py	1657	def _migrate_add_email_oauth_columns():	STRING
5043 more matches not shown…

Decorative Section Separators731 hits · 2705 pts

Severity	File	Line	Snippet	Context
MEDIUM	core/auth.py	251	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/auth.py	253	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/auth.py	479	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/auth.py	481	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/auth.py	564	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/auth.py	566	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/platform_compat.py	39	# ── File permissions ────────────────────────────────────────────────────────	COMMENT
MEDIUM	core/platform_compat.py	57	# ── Process detach / liveness / teardown ────────────────────────────────────	COMMENT
MEDIUM⚡	core/platform_compat.py	144	# ── Shell / executable resolution ───────────────────────────────────────────	COMMENT
MEDIUM⚡	core/session_manager.py	417	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	core/session_manager.py	419	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	core/session_manager.py	631	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	core/session_manager.py	633	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	core/session_manager.py	696	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	core/session_manager.py	698	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	82	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	84	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	221	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	223	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	727	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	729	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/test_redos_xml_tool_parsers.py	45	# ── correctness is preserved ────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_redos_xml_tool_parsers.py	118	# ── pathological inputs no longer blow up ───────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_workspace_confine.py	77	# ── the central binding: the safety net ─────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_workspace_confine.py	277	# ── get_workspace tool ──────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_workspace_confine.py	287	# ── no leak across calls ────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_workspace_confine.py	295	# ── tool selection: an active workspace is the file-work signal ─────────	COMMENT
MEDIUM⚡	tests/test_workspace_confine.py	452	# ── bind-time vetting of the workspace root ─────────────────────────────	COMMENT
MEDIUM	tests/test_workspace_confine.py	58	# ── the resolver helper ────────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_workspace_confine.py	102	# ── end-to-end via execute_tool_block (sets + resets the binding) ───────	COMMENT
MEDIUM	tests/test_workspace_confine.py	431	# ── browse route is admin-gated ─────────────────────────────────────────	COMMENT
MEDIUM	tests/test_workspace_confine.py	510	# ── send-time privilege gate (no path oracle for non-admins) ────────────	COMMENT
MEDIUM	tests/test_skill_index_toolset_gating.py	15	# ── module-load stubbing (matches other tests in this repo) ──────────	COMMENT
MEDIUM⚡	tests/test_imap_leak_fixes.py	42	# ── email_helpers ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_imap_leak_fixes.py	109	# ── email_server ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_imap_leak_fixes.py	234	# ── connect-time leak: _imap_connect / _open_imap_connection (#3174) ──────────	COMMENT
MEDIUM⚡	tests/test_calendar_recurrence.py	16	# ── _resolve_base_uid ──────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_calendar_recurrence.py	45	# ── _expand_rrule ──────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_security_regressions.py	117	# ── secure-by-default deployment + integration storage ─────────	COMMENT
MEDIUM⚡	tests/test_security_regressions.py	247	# ── provider auth error normalization ──────────────────────────	COMMENT
MEDIUM⚡	tests/test_security_regressions.py	284	# ── compose-upload path traversal block ─────────────────────────	COMMENT
MEDIUM⚡	tests/test_security_regressions.py	872	# ── web_fetch SSRF guard (PR #111 merge gate) ───────────────────────	COMMENT
MEDIUM	tests/test_security_regressions.py	23	# ── prompt-injection context wrapper ────────────────────────────	COMMENT
MEDIUM	tests/test_security_regressions.py	45	# ── secret_storage ─────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_security_regressions.py	209	# ── _q IMAP mailbox quoter ─────────────────────────────────────	COMMENT
MEDIUM	tests/test_security_regressions.py	512	# ── require_user dependency rejects anon callers ────────────────	COMMENT
MEDIUM	tests/test_security_regressions.py	1278	# ── DNS rebinding (audit finding 8.1) ────────────────────────────────	COMMENT
MEDIUM	tests/test_skill_index_prompt_injection.py	29	# ── module-load stubbing ─────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_email_oauth.py	37	# ── OAuth state signing ──────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_email_oauth.py	774	# ── Password-account regression ───────────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	137	# ── XOAUTH2 SASL framing ─────────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	151	# ── Helpers for in-memory DB fixtures ────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	191	# ── Token encryption at rest ─────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	259	# ── Real OAuth callback route ─────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	425	# ── Redirect URI scheme ───────────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	698	# ── Token refresh scenarios ───────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_test_connection_oauth.py	19	# ── Helpers ───────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_test_connection_oauth.py	56	# ── test_connection route: OAuth awareness ────────────────────────────────────	COMMENT
MEDIUM	tests/test_tool_path_confinement.py	27	# ── Unit tests on _is_sensitive_path ──────────────────────────────────	COMMENT
MEDIUM	tests/test_tool_path_confinement.py	81	# ── Unit tests on _resolve_tool_path ─────────────────────────────────	COMMENT
671 more matches not shown…

Cross-Language Confusion423 hits · 2413 pts

Severity	File	Line	Snippet	Context
HIGH	core/database.py	548	# is the historical default. When non-null, the model picker only shows	COMMENT
HIGH⚡	tests/test_document_ai_preview_refresh_js.py	44	refresh = "markdownPreviewWasVisible && _refreshMarkdownPreviewIfVisible(docId, newContent)"	CODE
HIGH	tests/test_preset_local_storage_js.py	21	}}[key] ?? null;	CODE
HIGH	tests/test_local_endpoint_api_key_js.py	59	class FormData {{ append(k, v) {{ appended.push([k, String(v)]); }} }}	CODE
HIGH	tests/test_local_endpoint_api_key_js.py	62	if (!(id in FIELDS)) return null;	CODE
HIGH	tests/test_local_endpoint_api_key_js.py	75	let _recentlyAddedEpId = null;	CODE
HIGH⚡	tests/test_startup_shell_js.py	37	addElement(id, { statusText = null } = {}) {	CODE
HIGH⚡	tests/test_startup_shell_js.py	44	status: null,	CODE
HIGH⚡	tests/test_startup_shell_js.py	49	return sel === '[data-session-list-status]' ? this.status : null;	CODE
HIGH⚡	tests/test_startup_shell_js.py	52	if (statusText !== null) el.status = { textContent: statusText };	CODE
HIGH⚡	tests/test_startup_shell_js.py	70	globalThis.document = { getElementById: (id) => byId.get(id) \|\| null };	CODE
HIGH⚡	tests/test_startup_shell_js.py	72	globalThis.requestAnimationFrame = (fn) => { frames.push(fn); return frames.length; };	CODE
HIGH⚡	tests/test_startup_shell_js.py	73	globalThis.setTimeout = (fn, ms) => { timers.push({ fn, ms }); return timers.length; };	CODE
HIGH⚡	tests/test_startup_shell_js.py	87	opacity: loader.style.opacity ?? null,	CODE
HIGH⚡	tests/test_startup_shell_js.py	88	pointerEvents: loader.style.pointerEvents ?? null,	CODE
HIGH⚡	tests/test_startup_shell_js.py	89	ariaHidden: loader.getAttribute('aria-hidden') ?? null,	CODE
HIGH	tests/test_startup_shell_js.py	238	const succeeded = await shell.settleSessionHydration(null);	CODE
HIGH⚡	tests/test_calendar_utils_dates_js.py	29	addNull: _addDays(null, 1),	STRING
HIGH⚡	tests/test_calendar_utils_dates_js.py	31	shiftNull: _shiftDT(null, 1),	STRING
HIGH⚡	tests/test_calendar_utils_dates_js.py	33	localNull: _localDateOf(null),	STRING
HIGH	tests/test_llm_core_usage_finish_delta.py	5	{"delta": {"role": "assistant", "content": null}, "finish_reason": "stop"}).	STRING
HIGH	tests/test_llm_core_usage_finish_delta.py	109	# Some providers emit {"choices": [null]} as a heartbeat/keepalive chunk.	COMMENT
HIGH	tests/test_llm_core_usage_finish_delta.py	121	# Chunk with both choices:[null] and usage:null is a keepalive, not a real	COMMENT
HIGH	tests/test_markdown_rendering_js.py	26	globalThis.window = { location: { origin: 'http://localhost' }, katex: null };	CODE
HIGH	tests/test_markdown_rendering_js.py	32	const display = !!(opts && opts.displayMode);	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	56	const a = computeProgressSignal('1.81G', null, '73', 'Downloading 73%\| 1.81G/2.49G [eta 0:05:11]');	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	57	const b = computeProgressSignal('1.81G', null, '73', 'Downloading 73%\| 1.81G/2.49G [eta 0:09:42] -');	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	59	const c = computeProgressSignal('2.10G', null, '84', 'Downloading 84%\| 2.10G/2.49G');	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	74	const s1 = computeProgressSignal(null, null, null, 'Building wheel for vllm ... compiling csrc/attention.cu');	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	75	const s2 = computeProgressSignal(null, null, null, 'Building wheel for vllm ... compiling csrc/cache_kernels.cu'	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	76	const hung1 = computeProgressSignal(null, null, null, 'Building wheel for vllm ... (no output)');	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	77	const hung2 = computeProgressSignal(null, null, null, 'Building wheel for vllm ... (no output)');	CODE
HIGH⚡	tests/test_slash_setup_provider_aliases.py	19	assert(zenFromCommand && zenFromCommand.url === 'https://opencode.ai/zen/v1', 'opencode zen command alias failed');	CODE
HIGH⚡	tests/test_slash_setup_provider_aliases.py	21	assert(goFromCommand && goFromCommand.url === 'https://opencode.ai/zen/go/v1', 'opencode-go command alias failed');	CODE
HIGH⚡	tests/test_slash_setup_provider_aliases.py	23	assert(zenCredential && zenCredential.provider.name === 'OpenCode Zen', 'opencode-zen credential provider failed');	CODE
HIGH⚡	tests/test_slash_setup_provider_aliases.py	26	assert(goCredential && goCredential.provider.name === 'OpenCode Go', 'opencode go credential provider failed');	CODE
HIGH	tests/test_note_reminder_email_oauth.py	61	assert "account.has_smtp_password \|\| account.oauth_provider === 'google'" in helper	CODE
HIGH	tests/test_resend_message_nondestructive.py	27	assert "const replaceFromHere = Boolean(opts && opts.replaceFromHere);" in body	CODE
HIGH	tests/test_compare_js.py	138	bad.push({name, type: typeof val, head: String(val).slice(0, 40)});	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	153	getElementById() {{ return null; }},	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	154	querySelector() {{ return null; }},	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	161	globalThis.localStorage = {{ getItem() {{ return null; }}, setItem() {{}}, removeItem() {{}} }};	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	590	let currentAbort = null;	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	592	let currentHolder = null;	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	602	_activeStreams.set('session-1', {{ abortCtrl: oldCtrl, holder: null, lastActivity: 1 }});	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	665	let currentAbort = null;	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	667	let currentHolder = null;	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	678	let abortCtrl = null;	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	686	const staleState = {{ generation: 1, abortCtrl: null }};	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	690	appendChild(node) {{ this.notes.push(node.textContent); }},	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	694	const currentState = {{ generation: 2, abortCtrl: null }};	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	698	appendChild(node) {{ this.notes.push(node.textContent); }},	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	702	staleBailed: staleResult === undefined,	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	703	staleControllerNever: staleState.abortCtrl === null,	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	706	currentWired: currentState.abortCtrl === currentResult && currentAbort === currentResult,	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	744	let currentAbort = null;	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	746	let currentHolder = null;	CODE
HIGH⚡	tests/test_pr6020_browser_review_regressions.py	750	const fetch = async (url, options) => {{ calls.push({{ url, options }}); return {{ ok: true }}; }};	CODE
HIGH	tests/test_pr6020_browser_review_regressions.py	126	headers: {{ get() {{ return null; }} }},	CODE
HIGH	tests/test_pr6020_browser_review_regressions.py	137	querySelector() {{ return null; }}	CODE
363 more matches not shown…

Excessive Try-Catch Wrapping1881 hits · 1563 pts

Severity	File	Line	Snippet	Context
LOW	setup.py	220	except Exception:	CODE
LOW	setup.py	267	except Exception as e:	CODE
LOW	setup.py	277	except Exception as e:	CODE
MEDIUM	app.py	215	def _stop_background():	CODE
MEDIUM	app.py	653	def _stop_background():	CODE
MEDIUM	app.py	1068	def _startup_mcp_connections():	CODE
LOW⚡	app.py	1168	except Exception as e:	CODE
LOW⚡	app.py	1175	except Exception as e:	CODE
LOW⚡	app.py	1177	except Exception as e:	CODE
LOW⚡	app.py	1284	except Exception:	CODE
LOW⚡	app.py	1289	except Exception as e:	CODE
LOW⚡	app.py	1294	except Exception as e:	CODE
LOW	app.py	119	except Exception as e:	CODE
LOW	app.py	218	except Exception:	CODE
LOW	app.py	237	except Exception:	CODE
LOW	app.py	397	except Exception as _e:	CODE
LOW	app.py	454	except Exception as _e:	CODE
LOW	app.py	464	except Exception:	CODE
LOW	app.py	535	except Exception as _e:	CODE
LOW	app.py	658	except Exception:	CODE
LOW	app.py	964	except Exception:	CODE
LOW	app.py	983	except Exception:	CODE
LOW	app.py	1006	except Exception:	CODE
LOW	app.py	1051	except Exception as e:	CODE
LOW	app.py	1064	except Exception as _e:	CODE
LOW	app.py	1095	except Exception as e:	CODE
LOW	app.py	1112	except Exception as e:	CODE
LOW	app.py	1114	except Exception as e:	CODE
LOW	app.py	1131	except Exception as e:	CODE
LOW	app.py	1146	except Exception as e:	CODE
LOW	app.py	1203	except Exception as e:	CODE
LOW	app.py	1226	except Exception as e:	CODE
LOW	app.py	1243	except Exception:	CODE
LOW	app.py	1257	except Exception as e:	CODE
LOW	launcher.py	62	except Exception:	CODE
LOW	launcher.py	108	except Exception:	CODE
LOW	launcher.py	121	except Exception:	CODE
MEDIUM	launcher.py	93	def setup_system_tray(url):	CODE
LOW	core/auth.py	132	except Exception as e:	CODE
LOW	core/auth.py	148	except Exception as e:	CODE
LOW	core/auth.py	158	except Exception as e:	CODE
LOW	core/auth.py	314	except Exception:	CODE
MEDIUM	core/auth.py	114	def _load(self):	CODE
LOW⚡	core/platform_compat.py	130	except Exception:	CODE
LOW⚡	core/platform_compat.py	137	except Exception:	CODE
LOW⚡	core/platform_compat.py	140	except Exception:	CODE
LOW	core/platform_compat.py	306	except Exception:	CODE
LOW⚡	core/platform_compat.py	334	except Exception:	CODE
LOW⚡	core/platform_compat.py	346	except Exception:	CODE
LOW	core/platform_compat.py	357	except Exception:	CODE
LOW⚡	core/database.py	905	except Exception as e:	CODE
LOW⚡	core/database.py	910	except Exception:	CODE
LOW⚡	core/database.py	928	except Exception as e:	CODE
LOW⚡	core/database.py	933	except Exception:	CODE
LOW⚡	core/database.py	976	except Exception as e:	CODE
LOW⚡	core/database.py	981	except Exception:	CODE
LOW⚡	core/database.py	999	except Exception as e:	CODE
LOW⚡	core/database.py	1004	except Exception:	CODE
LOW⚡	core/database.py	1030	except Exception as e:	CODE
LOW⚡	core/database.py	1035	except Exception:	CODE
1821 more matches not shown…

Unused Imports546 hits · 482 pts

Severity	File	Line	Context
LOW	core/auth.py	13	CODE
LOW	core/models.py	17	CODE
LOW	core/platform_compat.py	14	CODE
LOW	core/constants.py	11	CODE
LOW	core/constants.py	12	CODE
LOW	core/session_manager.py	25	CODE
LOW	core/session_manager.py	25	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	20	CODE
LOW	core/__init__.py	21	CODE
LOW	core/__init__.py	22	CODE
LOW	core/__init__.py	23	CODE
LOW	core/__init__.py	23	CODE
LOW	core/__init__.py	23	CODE
LOW	core/__init__.py	23	CODE
LOW	core/__init__.py	29	CODE
LOW	core/__init__.py	29	CODE
LOW	core/__init__.py	30	CODE
LOW	core/atomic_io.py	14	CODE
LOW	tests/test_redos_xml_tool_parsers.py	26	CODE
LOW	tests/test_redos_xml_tool_parsers.py	28	CODE
LOW	tests/test_redos_xml_tool_parsers.py	29	CODE
LOW	tests/test_notes_fail_closed_auth.py	27	CODE
LOW	tests/test_webhook_routes_shim.py	5	CODE
LOW	tests/test_plain_ui_control_open_panel.py	1	CODE
LOW	tests/test_imap_leak_fixes.py	17	CODE
LOW	tests/test_session_list_owner_scope.py	12	CODE
LOW	tests/test_session_list_owner_scope.py	33	CODE
LOW	tests/test_calendar_recurrence.py	8	CODE
LOW	tests/test_vault_routes_shim.py	5	CODE
LOW	tests/test_security_regressions.py	1346	CODE
LOW	tests/test_run_order_report.py	9	CODE
LOW	tests/test_email_polly_imap_leak.py	41	CODE
LOW	tests/test_skill_index_prompt_injection.py	20	CODE
LOW	tests/test_skill_index_prompt_injection.py	26	CODE
LOW	tests/test_tool_parsing_hermes_json.py	11	CODE
LOW	tests/test_scheduler_restart_doublefire.py	15	CODE
LOW	tests/test_scheduler_restart_doublefire.py	16	CODE
LOW	tests/test_memory_routes_shim.py	15	CODE
LOW	tests/test_search_routes_shim.py	5	CODE
LOW	tests/test_imap_move_uid.py	9	CODE
LOW	tests/test_imap_move_uid.py	10	CODE
LOW	tests/conftest.py	62	CODE
LOW	tests/conftest.py	26	CODE
LOW	tests/conftest.py	27	CODE
LOW	tests/conftest.py	28	CODE
LOW	tests/conftest.py	29	CODE
LOW	tests/test_mcp_routes_shim.py	13	CODE
LOW	tests/test_skills_manager_owner_isolation.py	24	CODE
LOW	tests/test_skills_manager_owner_isolation.py	43	CODE
LOW	tests/run_focus.py	20	CODE
LOW	tests/test_service_health_email.py	2	CODE
LOW	tests/test_carddav_password_encryption.py	2	CODE
LOW	tests/test_carddav_password_encryption.py	4	CODE
LOW	tests/test_carddav_password_encryption.py	7	CODE
486 more matches not shown…

Deep Nesting480 hits · 330 pts

Severity	File	Line	Context
LOW	setup.py	239	CODE
LOW	app.py	513	CODE
LOW	app.py	1032	CODE
LOW	app.py	364	CODE
LOW	core/platform_compat.py	298	CODE
LOW	core/platform_compat.py	338	CODE
LOW	core/database.py	1396	CODE
LOW	core/database.py	1560	CODE
LOW	core/database.py	1584	CODE
LOW	core/database.py	1657	CODE
LOW	core/database.py	1717	CODE
LOW	core/database.py	1737	CODE
LOW	core/database.py	1919	CODE
LOW	core/database.py	2326	CODE
LOW	core/database.py	2350	CODE
LOW	core/database.py	2382	CODE
LOW	core/session_manager.py	86	CODE
LOW	core/session_manager.py	731	CODE
LOW	tests/test_security_regressions.py	1339	CODE
LOW	tests/test_security_regressions.py	1357	CODE
LOW	tests/test_local_endpoint_api_key_js.py	27	CODE
LOW	tests/test_model_routes.py	1580	CODE
LOW	tests/test_skill_importer_dns_pinning.py	154	CODE
LOW	tests/test_skill_importer_dns_pinning.py	171	CODE
LOW	tests/test_tool_index_schema_parity.py	18	CODE
LOW	tests/test_fenced_inline_args.py	160	CODE
LOW	tests/test_task_scheduler_cancel.py	43	CODE
LOW	tests/test_task_scheduler_cancel.py	59	CODE
LOW	tests/test_null_owner_gates.py	30	CODE
LOW	tests/test_review_regressions.py	1252	CODE
LOW	tests/test_toast_dismiss_pointer_events.py	30	CODE
LOW	tests/test_toast_dismiss_pointer_events.py	51	CODE
LOW	tests/test_toast_dismiss_pointer_events.py	108	CODE
LOW	tests/test_tool_implementations_shim.py	115	CODE
LOW	tests/test_chat_route_tool_policy.py	29	CODE
LOW	tests/test_chat_route_tool_policy.py	57	CODE
LOW	tests/test_app_config_shared_fetch_js.py	215	CODE
LOW	tests/test_document_diff_discard_on_update_js.py	29	CODE
LOW	tests/test_webhook_trigger_auth_exempt.py	30	CODE
LOW	tests/test_email_library_prewarm.py	17	CODE
LOW	tests/test_gallery_endpoint_hardening.py	175	CODE
LOW	tests/test_chat_helpers_bg_tasks_tracked.py	21	CODE
LOW	tests/test_llm_core_reasoning.py	44	CODE
LOW	tests/test_diffusion_server_security.py	41	CODE
LOW	tests/tools/build_oversized_test_split_plan.py	48	CODE
LOW	…rations/claude/skills/odysseus/scripts/odysseus_api.py	52	CODE
LOW	integrations/codex/scripts/odysseus_api.py	52	CODE
LOW	scripts/import_from_vllm_recipes.py	245	CODE
LOW	scripts/diffusion_server.py	258	CODE
LOW	scripts/diffusion_server.py	342	CODE
LOW	scripts/diffusion_server.py	888	CODE
LOW	scripts/mlx_image_server.py	329	CODE
LOW	scripts/mlx_image_server.py	392	CODE
LOW	scripts/update_database.py	73	CODE
LOW	scripts/add_hwfit_models.py	251	CODE
LOW	scripts/pr_blocker_audit.py	297	CODE
LOW	scripts/pr_blocker_audit.py	432	CODE
LOW	mcp_servers/memory_server.py	144	CODE
LOW	mcp_servers/rag_server.py	69	CODE
LOW	mcp_servers/image_gen_server.py	45	CODE
420 more matches not shown…

Modern AI Meta-Vocabulary74 hits · 219 pts

Severity	File	Line	Snippet	Context
MEDIUM	requirements.txt	14	# Vector store + local embeddings for RAG, semantic memory, and tool	COMMENT
MEDIUM	build-macos-app.sh	136	# Wait for readiness (first run downloads an embedding model — allow ~2 min).	COMMENT
MEDIUM	requirements-optional.txt	4	# Note: chromadb-client + fastembed moved to requirements.txt — RAG, semantic	COMMENT
MEDIUM	requirements-optional.txt	38	# RAG index). markitdown (MIT, Microsoft) converts .docx/.xlsx/.pptx/.xls/.epub	COMMENT
MEDIUM	app.py	35	# 1463]), so the ONNX embedding model fails to load. huggingface_hub reads this	COMMENT
MEDIUM	app.py	558	# ========= RAG (vector document RAG) =========	COMMENT
MEDIUM	start-macos.sh	190	# ChromaDB backs the tool index and vector RAG. chromadb ships in the venv, so	COMMENT
MEDIUM	specs/documents-rag-uploads.md	1	# Documents, RAG, And Uploads	COMMENT
MEDIUM	specs/documents-rag-uploads.md	132	## Personal Docs And RAG	COMMENT
MEDIUM	tests/test_task_shell_tools.py	3	Regression for #4163: the task runner built `relevant_tools` from RAG output	STRING
MEDIUM⚡	tests/test_task_shell_tools.py	40	assert "web_fetch" in tools # RAG-selected tool kept	CODE
MEDIUM	tests/test_task_shell_tools.py	103	# Degraded-index stand-in that still returns one RAG hit, so we can prove	COMMENT
MEDIUM	tests/test_task_shell_tools.py	147	# rest of the shell/file defaults and the RAG hit survive.	COMMENT
MEDIUM	tests/test_task_shell_tools.py	153	assert "web_fetch" in offered # RAG-selected tool preserved	CODE
MEDIUM	…/test_fenced_example_not_executed_for_native_models.py	48	# Skip RAG/tool-index, MCP, and settings lookups; keep the real loop body,	COMMENT
MEDIUM	tests/test_kv_cache_invalidation_2927.py	97	# in real life, minus any per-turn dynamic content (RAG/memory/web), which	COMMENT
MEDIUM	tests/test_agent_rounds_exhausted.py	33	# Skip RAG/tool-index, MCP, and settings lookups; keep the real loop body,	COMMENT
MEDIUM⚡	tests/test_context_budget.py	1	"""Issue #1170 — the agent input-token budget adapts to the model context window.	STRING
MEDIUM	tests/test_rag_remove_directory_scope.py	1	"""Regression guard for #1660 — removing one RAG directory must delete only that	STRING
MEDIUM	tests/test_tool_rag_keyword_hints.py	1	"""Regression for issue #1707 — the agent tool-RAG force-included the entire	STRING
MEDIUM	static/js/MODULE_SUMMARY.md	105	## 6. Knowledge, Memory, and RAG	COMMENT
MEDIUM	static/js/calendar.js	1173	// Drag on an empty cell to scaffold a new event for that range.	COMMENT
MEDIUM	routes/personal_routes.py	297	# Remove from RAG vector store (best-effort).	COMMENT
MEDIUM	routes/personal_routes.py	415	# Remove chunks from RAG vector store (best-effort)	COMMENT
MEDIUM	routes/auth_routes.py	533	# direct personal RAG uploads live in per-owner directories and the	COMMENT
MEDIUM⚡	routes/embedding_routes.py	302	# Reset the RAG singleton so it picks up the new endpoint	COMMENT
MEDIUM⚡	routes/embedding_routes.py	346	# Reset the RAG singleton so it falls back to fastembed	COMMENT
MEDIUM	routes/session_routes.py	1161	# all 100+ chats to one LLM call blows the context window, makes	COMMENT
MEDIUM	routes/chat_helpers.py	696	# or personal-doc RAG on every turn pulls in keyword-matched but off-topic	COMMENT
MEDIUM	routes/chat_helpers.py	702	# Use RAG?	COMMENT
MEDIUM	routes/skills_routes.py	1851	# candidates so the event-driven Skills Audit pipeline still runs.	COMMENT
MEDIUM	routes/note/note_routes.py	229	# prose=True strips untagged "The user wants me to…" chain-of-thought.	COMMENT
MEDIUM	routes/document/document_routes.py	902	# Detect email-scaffold stubs: "To: \nSubject: \n---\n" style	COMMENT
MEDIUM	services/memory/skill_extractor.py	217	# chain-of-thought BEFORE the JSON output even when asked for	COMMENT
MEDIUM	src/teacher_escalation.py	607	# tried. The appended note leads with the user request text so RAG	COMMENT
MEDIUM	src/personal_docs.py	216	self.excluded_files: Set[str] = set() # Files removed from RAG listing	CODE
MEDIUM	src/personal_docs.py	297	# If RAG manager is available, index the directory immediately.	COMMENT
MEDIUM	src/tool_index.py	37	# of topic. Without this, RAG drops it and the agent falls back to	COMMENT
MEDIUM	src/tool_index.py	48	# check-ins and proactive tasks, in addition to RAG-selected tools.	COMMENT
MEDIUM	src/tool_index.py	192	# Without this, upsert leaves them in place and RAG keeps	COMMENT
MEDIUM	src/tool_index.py	269	# Include server identity in the indexed text so RAG can	COMMENT
MEDIUM⚡	src/task_scheduler.py	1617	# RAG-select relevant tools for this prompt + always-available assistant tools.	COMMENT
MEDIUM	src/task_scheduler.py	29	# setting turns them off). The RAG tool selector + ASSISTANT_ALWAYS_AVAILABLE	COMMENT
MEDIUM	src/task_scheduler.py	1655	# Strip the model's chain-of-thought before saving/delivering. Task	COMMENT
MEDIUM	src/context_compactor.py	40	COMPACT_THRESHOLD = 0.85 # Trigger compaction at 85% of context window	CODE
MEDIUM	src/context_compactor.py	256	# Priority: keep first system msg (preset prompt), drop others (memory, RAG, memo).	COMMENT
MEDIUM⚡	src/ai_interaction.py	522	# RAG management tool	COMMENT
MEDIUM	src/app_initializer.py	59	# Initialize memory vector store (share embedding model with RAG if available)	COMMENT
MEDIUM	src/agent_loop.py	892	# Legacy: full prompt with all tools (fallback when RAG unavailable)	COMMENT
MEDIUM	src/agent_loop.py	2244	# With RAG tools, cache key includes the selected tools	COMMENT
MEDIUM	src/agent_loop.py	2870	# RAG mode: trust the relevant_tools set as already-composed.	COMMENT
MEDIUM	src/agent_loop.py	2882	# Fallback: full prompt (RAG unavailable)	COMMENT
MEDIUM	src/agent_loop.py	3099	# web/RAG context. THREAT_MODEL.md lists tool output as a surface that	COMMENT
MEDIUM	src/agent_loop.py	3857	# RAG-based tool selection: retrieve relevant tools for this query.	COMMENT
MEDIUM	src/agent_loop.py	3870	# actually calls for them (RAG retrieval adds those on a real ask).	COMMENT
MEDIUM	src/agent_loop.py	3876	# Don't short-circuit: fall through to RAG retrieval below.	COMMENT
MEDIUM	src/agent_loop.py	3930	# Fallback: if RAG unavailable, use keyword-based tool selection	COMMENT
MEDIUM	src/agent_loop.py	3985	# regardless of which selection path (RAG, keyword, caller-provided) ran.	COMMENT
MEDIUM	src/agent_loop.py	4014	# settings make web tools visible even when tool RAG misses them;	COMMENT
MEDIUM	src/agent_loop.py	5426	# The model is finishing. If this was an effectful agentic turn,	COMMENT
14 more matches not shown…

Modern Structural Boilerplate160 hits · 159 pts

Severity	File	Line	Snippet	Context
LOW	app.py	122	logger = logging.getLogger(__name__)	CODE
LOW	core/auth.py	19	logger = logging.getLogger(__name__)	CODE
LOW	core/database.py	17	logger = logging.getLogger(__name__)	CODE
LOW	core/session_manager.py	27	logger = logging.getLogger(__name__)	CODE
LOW	core/__init__.py	32	__all__ = [	CODE
LOW	scripts/index_documents.py	33	logger = logging.getLogger(__name__)	CODE
LOW	routes/email_pollers.py	46	logger = logging.getLogger(__name__)	CODE
LOW	routes/signature_routes.py	21	logger = logging.getLogger(__name__)	CODE
LOW	routes/tts_routes.py	11	logger = logging.getLogger(__name__)	CODE
LOW	routes/chatgpt_subscription_routes.py	20	logger = logging.getLogger(__name__)	CODE
LOW⚡	routes/email_routes.py	109	def _set_email_writing_style_for_account(settings: dict, style: str, account_id: str \| None = None) -> None:	CODE
LOW	routes/email_routes.py	69	logger = logging.getLogger(__name__)	CODE
LOW	routes/backup_routes.py	13	logger = logging.getLogger(__name__)	CODE
LOW	routes/copilot_routes.py	40	logger = logging.getLogger(__name__)	CODE
LOW	routes/cookbook_helpers.py	19	logger = logging.getLogger(__name__)	CODE
LOW	routes/personal_routes.py	21	logger = logging.getLogger(__name__)	CODE
LOW	routes/shell_routes.py	106	logger = logging.getLogger(__name__)	CODE
LOW	routes/email_helpers.py	40	logger = logging.getLogger(__name__)	CODE
LOW	routes/editor_draft_routes.py	30	logger = logging.getLogger(__name__)	CODE
LOW	routes/auth_routes.py	40	logger = logging.getLogger(__name__)	CODE
LOW	routes/embedding_routes.py	14	logger = logging.getLogger(__name__)	CODE
LOW	routes/stt_routes.py	9	logger = logging.getLogger(__name__)	CODE
LOW	routes/cookbook_routes.py	47	logger = logging.getLogger(__name__)	CODE
LOW	routes/cookbook_routes.py	682	def set_flag(flag: str, value: str) -> None:	CODE
LOW	routes/cookbook_routes.py	750	def set_flag(flag: str, value: str) -> None:	CODE
LOW	routes/preset_routes.py	15	logger = logging.getLogger(__name__)	CODE
LOW	routes/upload_routes.py	33	logger = logging.getLogger(__name__)	CODE
LOW	routes/session_routes.py	125	logger = logging.getLogger(__name__)	CODE
LOW	routes/diagnostics_routes.py	13	logger = logging.getLogger(__name__)	CODE
LOW	routes/emoji_routes.py	23	logger = logging.getLogger(__name__)	CODE
LOW	routes/chat_routes.py	72	logger = logging.getLogger(__name__)	CODE
LOW	routes/chat_routes.py	702	def _set_user_time_from_request(request: Request) -> None:	CODE
LOW	routes/model_routes.py	34	logger = logging.getLogger(__name__)	CODE
LOW	routes/chat_helpers.py	26	logger = logging.getLogger(__name__)	CODE
LOW	routes/calendar_routes.py	21	logger = logging.getLogger(__name__)	CODE
LOW	routes/skills_routes.py	24	logger = logging.getLogger(__name__)	CODE
LOW⚡	routes/research/research_routes.py	72	logger = logging.getLogger(__name__)	CODE
LOW	routes/webhook/webhook_routes.py	16	logger = logging.getLogger(__name__)	CODE
LOW⚡	routes/note/note_routes.py	19	logger = logging.getLogger(__name__)	CODE
LOW	routes/memory/memory_routes.py	35	logger = logging.getLogger(__name__)	CODE
LOW	routes/gallery/gallery_helpers.py	16	logger = logging.getLogger(__name__)	CODE
LOW	routes/gallery/gallery_routes.py	30	logger = logging.getLogger(__name__)	CODE
LOW	routes/contacts/contacts_routes.py	28	logger = logging.getLogger(__name__)	CODE
LOW	routes/mcp/mcp_routes.py	19	logger = logging.getLogger(__name__)	CODE
LOW	routes/document/document_routes.py	17	logger = logging.getLogger(__name__)	CODE
LOW	routes/document/document_helpers.py	18	logger = logging.getLogger(__name__)	CODE
LOW	routes/search/search_routes.py	14	logger = logging.getLogger(__name__)	CODE
LOW	routes/cleanup/cleanup_routes.py	8	logger = logging.getLogger(__name__)	CODE
LOW	routes/task/task_routes.py	25	logger = logging.getLogger(__name__)	CODE
LOW	routes/history/history_routes.py	23	logger = logging.getLogger(__name__)	CODE
LOW	routes/compare/compare_routes.py	17	logger = logging.getLogger(__name__)	CODE
LOW	routes/vault/vault_routes.py	22	logger = logging.getLogger(__name__)	CODE
LOW	routes/admin_wipe/admin_wipe_routes.py	36	logger = logging.getLogger(__name__)	CODE
LOW	services/__init__.py	17	__all__ = [	CODE
LOW	services/research/research_handler.py	20	logger = logging.getLogger(__name__)	CODE
LOW	services/research/__init__.py	7	__all__ = [	CODE
LOW	services/memory/memory_extractor.py	22	logger = logging.getLogger(__name__)	CODE
LOW	services/memory/skill_extractor.py	13	logger = logging.getLogger(__name__)	CODE
LOW	services/memory/memory_vector.py	5	__all__ = ["MemoryVectorStore"]	CODE
LOW⚡	services/memory/skill_format.py	56	logger = logging.getLogger(__name__)	CODE
100 more matches not shown…

Over-Commented Block176 hits · 156 pts

Severity	File	Line	Snippet	Context
LOW	requirements.txt	21	youtube-transcript-api	COMMENT
LOW	docker-compose.gpu-nvidia.yml	1	# Standalone NVIDIA GPU Compose file for stack-management UIs (Portainer,	COMMENT
LOW	build-macos-app.sh	1	#!/bin/bash	COMMENT
LOW	requirements-optional.txt	1	# Optional dependencies — install only if you use the corresponding feature.	COMMENT
LOW	requirements-optional.txt	21	# in Kokoro's official install instructions and is not a transitive dependency.	COMMENT
LOW	requirements-optional.txt	41	# back to a friendly "install to extract" banner and the core stays pure-MIT.	COMMENT
LOW	docker-compose.gpu-amd.yml	1	# Standalone AMD ROCm GPU Compose file for stack-management UIs (Portainer,	COMMENT
LOW	app.py	361	return True	COMMENT
LOW	docker-compose.yml	61	- GOOGLE_API_KEY=${GOOGLE_API_KEY:-}	COMMENT
LOW	start-macos.sh	1	#!/bin/bash	COMMENT
LOW	start-macos.sh	81	cands="python3 python3.13 python3.12 python3.11"	COMMENT
LOW	docker/gpu.amd.yml	1	# AMD ROCm GPU overlay. Enable by setting COMPOSE_FILE in .env:	COMMENT
LOW	docker/gpu.nvidia.yml	1	# NVIDIA GPU overlay. Enable by setting COMPOSE_FILE in .env:	COMMENT
LOW	docker/entrypoint.sh	1	#!/bin/sh	COMMENT
LOW	docker/entrypoint.sh	101	done	COMMENT
LOW	docker/build-realesrgan-wheels.sh	1	#!/usr/bin/env bash	COMMENT
LOW	core/auth.py	441	# flag must be flipped while the stored map is safe to expose —	COMMENT
LOW	core/database.py	2061	def init_db():	COMMENT
LOW	tests/test_memory_store_unreadable_no_wipe.py	161		COMMENT
LOW	static/sw.js	1	// static/sw.js — Odysseus PWA Service Worker	COMMENT
LOW	static/sw.js	21	'Size1-Regular', 'Size2-Regular', 'Size3-Regular', 'Size4-Regular',	COMMENT
LOW	static/js/chatRenderer.js	1321	}	COMMENT
LOW	static/js/galleryEditor.js	161		COMMENT
LOW	static/js/galleryEditor.js	181	// Lasso state	COMMENT
LOW	static/js/galleryEditor.js	201	// slider edits this layer's alpha edge live.	COMMENT
LOW	static/js/galleryEditor.js	621	}	COMMENT
LOW	static/js/galleryEditor.js	681	}	COMMENT
LOW	static/js/galleryEditor.js	841	// sub-layers (plus any staged-in-progress edit). Falls back to	COMMENT
LOW	static/js/galleryEditor.js	1381	const _refreshHistoryPanelIfOpen = _historyPanel.refreshHistoryPanelIfOpen;	COMMENT
LOW	static/js/galleryEditor.js	1461	// popup re-uses the existing #ge-inpaint-prompt and #ge-inpaint-run	COMMENT
LOW	static/js/galleryEditor.js	1801	* working unchanged.	COMMENT
LOW	static/js/galleryEditor.js	2981	}	COMMENT
LOW	static/js/galleryEditor.js	3141	container.appendChild(editorBody);	COMMENT
LOW	static/js/galleryEditor.js	3161		COMMENT
LOW	static/js/galleryEditor.js	3221	// Fill — visible only when a selection or active mask exists. Pours	COMMENT
LOW	static/js/galleryEditor.js	3721	}	COMMENT
LOW	static/js/modalSnap.js	1	// Right-edge snap docking for draggable modals.	COMMENT
LOW	static/js/cookbookServe.js	1501	: `This model's download isn't complete yet (${esc(m.size \|\| 'partial')}). The serve will start but is likely	COMMENT
LOW	static/js/cookbookServe.js	1521	// Default CPU — works on every host without GPU/wheel matching	COMMENT
LOW	static/js/cookbookServe.js	1561	// Show the GGUF File dropdown for BOTH llama.cpp and Ollama — Ollama	COMMENT
LOW	static/js/cookbookServe.js	1681	// Parser was previously in a separate row below; the user wanted	COMMENT
LOW	static/js/cookbookServe.js	1781	panelHtml += `</div><div class="hwfit-serve-row hwfit-backend-diffusers hwfit-backend-mlx_image hwfit-diff-harmoni	COMMENT
LOW	static/js/cookbookServe.js	3421	}	COMMENT
LOW	static/js/cookbookServe.js	3581	// Network / probe failure — don't block. Better to let the launch	COMMENT
LOW	static/js/cookbookServe.js	3661	// Resolve the target host from the visible Server dropdown — the reliable	COMMENT
LOW	static/js/cookbookServe.js	3961	}	COMMENT
LOW	static/js/ui.js	941	document.addEventListener('touchstart', (e) => {	COMMENT
LOW	static/js/ui.js	1201	try { el.scrollIntoView(); } catch {}	COMMENT
LOW	static/js/cookbook.js	581	// CUDA_VISIBLE_DEVICES; ROCm/HIP uses HIP_VISIBLE_DEVICES; Vulkan and	COMMENT
LOW	static/js/cookbook.js	1181	// category tag. llama_cpp uses the /api/cookbook/rebuild-engine flow	COMMENT
LOW	static/js/cookbook.js	3401	if (_ds) { _envState.remoteHost = _ds.host; _envState.env = _ds.env \|\| 'none'; _envState.envPath = _ds.envPath \|\|	COMMENT
LOW	static/js/notes.js	2221	// Clicking todo item text now toggles its checkbox — let the click bubble	COMMENT
LOW	static/js/cookbookSchedule.js	1	// Cookbook Schedule — opens a small inline form (styled with the app's	COMMENT
LOW	static/js/cookbookSchedule.js	81	// Resolve the model identity from the closest .memory-item card —	COMMENT
LOW	static/js/cookbookRunning.js	221	}, 80);	COMMENT
LOW	static/js/cookbookRunning.js	3221	],	COMMENT
LOW	static/js/cookbookRunning.js	3341	// 73% done. Prefer this aggregate when present.	COMMENT
LOW	static/js/cookbookRunning.js	4181	changed = true;	COMMENT
LOW	static/js/appConfig.js	1	// static/js/appConfig.js	COMMENT
LOW	static/js/section-management.js	41	if (willCollapse) {	COMMENT
116 more matches not shown…

Cross-File Repetition13 hits · 65 pts

Severity	File	Snippet	Context
HIGH	tests/test_skills_manager_owner_isolation.py	\ --- name: {name} description: original description version: 1.0.0 category: {category} tags: [] status: draft confiden	STRING
HIGH	tests/test_skills_routes_owner_update.py	\ --- name: {name} description: original description version: 1.0.0 category: {category} tags: [] status: draft confiden	STRING
HIGH	tests/test_skills_delete_owner.py	\ --- name: {name} description: original description version: 1.0.0 category: {category} tags: [] status: draft confiden	STRING
HIGH	tests/test_skill_save_no_rename.py	\ --- name: {name} description: original description version: 1.0.0 category: {category} tags: [] status: draft confiden	STRING
HIGH	tests/test_provider_detection_host_match.py	provider detection tests — build_chat_url / build_models_url routing (re: #768). these import the real helpers from ``	STRING
HIGH	tests/test_provider_detection_detect.py	provider detection tests — build_chat_url / build_models_url routing (re: #768). these import the real helpers from ``	STRING
HIGH	tests/test_provider_detection_builders.py	provider detection tests — build_chat_url / build_models_url routing (re: #768). these import the real helpers from ``	STRING
HIGH	tests/test_email_owner_scope.py	insert or replace into email_summaries (message_id, owner, uid, folder, subject, sender, summary, model_used, created_at	STRING
HIGH	routes/email_pollers.py	insert or replace into email_summaries (message_id, owner, uid, folder, subject, sender, summary, model_used, created_at	STRING
HIGH	routes/email_routes.py	insert or replace into email_summaries (message_id, owner, uid, folder, subject, sender, summary, model_used, created_at	STRING
HIGH	tests/test_email_owner_scope.py	insert or replace into email_ai_replies (message_id, owner, uid, folder, reply, model_used, created_at) values (?, ?, ?,	STRING
HIGH	routes/email_pollers.py	insert or replace into email_ai_replies (message_id, owner, uid, folder, reply, model_used, created_at) values (?, ?, ?,	STRING
HIGH	routes/email_routes.py	insert or replace into email_ai_replies (message_id, owner, uid, folder, reply, model_used, created_at) values (?, ?, ?,	STRING

AI Slop Vocabulary20 hits · 47 pts

Severity	File	Line	Snippet	Context
MEDIUM	build-macos-app.sh	34	# let sips emit the .icns directly — more robust across macOS versions than	COMMENT
LOW	start-macos.sh	76	# (or non-mac) we just use whatever Python 3.11+ is on PATH.	COMMENT
MEDIUM	core/database.py	300	# Library + search. Owning the row directly is robust against that.	COMMENT
MEDIUM	core/database.py	2639	"""Get comprehensive database statistics including file size"""	STRING
MEDIUM⚡	tests/test_markdown_rendering_js.py	254	# same way; they need KaTeX/sanitizer conditions this harness doesn't set up.	STRING
MEDIUM	tests/test_companion_readonly.py	24	# import is robust regardless of collection order.	COMMENT
MEDIUM	tests/test_backup_import_skills_dedup.py	18	# via monkeypatch — robust to import order and reverted at teardown. (Stubbing	COMMENT
MEDIUM	tests/test_chat_metrics.py	23	# --- captured-stream harness (mirrors test_llm_core_streaming.py) -----------	COMMENT
MEDIUM	static/js/spinner.js	216	// Rotating a single continuous spiral keeps the loop seamless: the start	COMMENT
MEDIUM	static/js/windowResize.js	10	// inner element. Absolutely-positioned handle children would scroll away	COMMENT
MEDIUM	static/js/slashCommands.js	2373	// via .closest(selector) — more robust than t.contains(e.target) when	COMMENT
MEDIUM	scripts/add_hwfit_models.py	269	# Next-to-last resort: parse config.json. This is robust against	COMMENT
MEDIUM	routes/cookbook_routes.py	1096	# also breaks robust resume on flaky transfers — the blob-based hub	COMMENT
LOW	routes/history/history_routes.py	220	# parsed multimodal content and the _db_id edit/delete keys it just set.	COMMENT
MEDIUM	services/search/service.py	69	# `fetch_content` is accepted for API compatibility; the comprehensive	COMMENT
MEDIUM	services/search/core.py	262	"""Perform comprehensive web search with content fetching and advanced filtering."""	STRING
MEDIUM	src/document_actions.py	69	# Documents now carry their own owner column (robust to a deleted	COMMENT
MEDIUM⚡	src/llm_core.py	1076	# harness size. Character presets can ask for a warmer voice, but	COMMENT
MEDIUM⚡	src/deep_research.py	707	"""Let the LLM decide whether the report is comprehensive enough."""	STRING
LOW	src/agent_tools/session_tools.py	315	# just return a clickable anchor link the user can click. The	COMMENT

Fake / Example Data45 hits · 43 pts

Severity	File	Line	Snippet	Context
LOW⚡	tests/test_imap_leak_fixes.py	51	result = helpers._fetch_sender_thread_context("user@example.com")	CODE
LOW⚡	tests/test_imap_leak_fixes.py	68	result = helpers._fetch_sender_thread_context("user@example.com")	CODE
LOW⚡	tests/test_imap_leak_fixes.py	255	"imap_user": "user@example.com",	CODE
LOW	tests/test_imap_leak_fixes.py	308	"imap_user": "user@example.com", "imap_password": "wrong",	CODE
LOW	tests/test_imap_leak_fixes.py	358	"smtp_security": security, "smtp_user": "user@example.com",	CODE
LOW	tests/test_email_imap_timeout.py	111	"imap_user": "user@example.com",	CODE
LOW	tests/test_email_imap_timeout.py	125	assert captured["login"] == ("user@example.com", "pw")	CODE
LOW⚡	tests/test_email_oauth.py	42	state = make_oauth_state("acct-123", "user@example.com")	CODE
LOW⚡	tests/test_email_oauth.py	47	assert payload["o"] == "user@example.com"	CODE
LOW⚡	tests/test_email_oauth.py	62	state = make_oauth_state("acct-123", "user@example.com")	CODE
LOW⚡	tests/test_email_oauth.py	77	state = make_oauth_state("acct-123", "user@example.com")	CODE
LOW⚡	tests/test_model_context.py	87	api_key="fake-key",	CODE
LOW	tests/test_model_context.py	251	api_key="fake-key",	CODE
LOW⚡	tests/test_model_routes.py	485	ep = SimpleNamespace(endpoint_kind="auto", api_key="fake-key")	CODE
LOW⚡	tests/test_model_routes.py	1998	api_key="fake-key",	CODE
LOW⚡	tests/test_model_routes.py	2007	"api_key": "fake-key",	CODE
LOW⚡	tests/test_model_routes.py	2055	"api_key": "fake-key",	CODE
LOW⚡	tests/test_model_routes.py	2070	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	535	result = _ping_endpoint("http://100.117.136.97:34521/v1", "fake-key", timeout=1)	CODE
LOW	tests/test_model_routes.py	1778	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	1811	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	1836	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	1860	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	2037	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	2101	"api_key": "fake-key",	CODE
LOW	tests/test_model_routes.py	2151	api_key="fake-key",	CODE
LOW⚡	tests/test_sender_signature_skip_roles.py	20	assert _skipped("admin@example.org")	CODE
LOW⚡	tests/test_shell_routes.py	460	assert _ssh_base_argv("user@example.com", None) == [	CODE
LOW⚡	tests/test_shell_routes.py	466	"user@example.com",	CODE
LOW⚡	tests/test_email_send_only_no_inbox.py	26	"smtp_user": "noreply@example.org",	CODE
LOW⚡	tests/test_email_send_only_no_inbox.py	33	"from_address": "noreply@example.org",	CODE
LOW⚡	tests/test_api_token_routes.py	290	fake_token = SimpleNamespace(id="abcd1234", owner="alice", name="test")	CODE
LOW⚡	tests/test_api_token_routes.py	292	fake_session.query.return_value.filter.return_value.first.return_value = fake_token	CODE
LOW⚡	tests/test_api_token_routes.py	301	fake_session.delete.assert_called_once_with(fake_token)	CODE
LOW⚡	tests/test_api_token_routes.py	454	fake_token = SimpleNamespace(id="tok123", owner="alice", name="alice-token")	CODE
LOW⚡	tests/test_api_token_routes.py	456	fake_session.query.return_value.filter.return_value.first.return_value = fake_token	CODE
LOW⚡	tests/test_api_token_routes.py	494	fake_token = SimpleNamespace(id="tok123", owner="alice", name="alice-token")	CODE
LOW⚡	tests/test_api_token_routes.py	496	fake_session.query.return_value.filter.return_value.first.return_value = fake_token	CODE
LOW⚡	tests/test_api_token_routes.py	504	fake_session.delete.assert_called_once_with(fake_token)	CODE
LOW⚡	tests/test_issue_description_check.py	149	assert revision["attributes"]["placeholder"] == "1fef4929cf1d (2026-08-11)"	STRING
LOW	tests/test_hwfit_container_visibility_warning.py	80	out = hardware._attach_probe_context(result, host="user@example.com")	CODE
LOW	static/app.js	2411	textarea.setAttribute('placeholder', 'Swipe to toggle plan');	CODE
LOW	static/app.js	2414	textarea.setAttribute('placeholder', width < PLACEHOLDER_COMPACT_WIDTH ? 'Message...' : 'Message Odysseus...');	CODE
LOW	static/lib/html2pdf.bundle.min.js	2	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.am	CODE
LOW	static/lib/highlight.min.js	317	}),re=["a","abbr","address","article","aside","audio","b","blockquote","body","button","canvas","caption","cite","code",	CODE

Cross-Language Confusion (JS/TS)5 hits · 32 pts

Severity	File	Line	Snippet	Context
HIGH	static/js/cookbookDownload.js	166	elif t>=1048576: ds=f'{s.n/1048576:.1f}';ts=f'{t/1048576:.1f}MB';ss=f'{sp/1048576:.1f}MB/s'	CODE
HIGH	static/js/cookbookDownload.js	169	print(f'FILE {d} [{bar}] {p}% {ds}/{ts} {ss}',flush=True)	CODE
HIGH⚡	static/js/cookbookDownload.js	189	print(f'START {repo}',flush=True)	CODE
HIGH⚡	static/js/cookbookDownload.js	192	print(f'DONE {path}',flush=True)	CODE
HIGH⚡	static/js/cookbookDownload.js	194	print(f'ERROR {e}',file=sys.stderr,flush=True);sys.exit(1)	CODE

Redundant / Tautological Comments20 hits · 28 pts

Severity	File	Line	Snippet	Context
LOW	core/database.py	1602	# Check if prompt/schedule/scheduled_time are still NOT NULL — need table rebuild	COMMENT
LOW	tests/test_api_key_manager_atomic_save.py	65	# Close the file then raise	COMMENT
LOW	tests/test_tts_service_enforce_cache_limit.py	27	# Set limit to 100 bytes. 80% target capacity will be 80 bytes.	COMMENT
LOW	tests/test_chat_route_tool_policy.py	48	# Check if 'body' appears in the value	COMMENT
LOW	scripts/diffusion_server.py	529	# Check if it's a HF repo with a single safetensors file	COMMENT
LOW	scripts/diffusion_server.py	900	# Check if the main pipeline IS already an inpaint pipeline	COMMENT
LOW	scripts/index_documents.py	54	# Check if directory exists	COMMENT
LOW	scripts/index_documents.py	87	# Display results	COMMENT
LOW	routes/shell_routes.py	617	# Set master to non-blocking	COMMENT
LOW	routes/shell_routes.py	824	# Check if tmux session is still alive	COMMENT
LOW	routes/cookbook_routes.py	4351	# Check if session is alive + capture output	COMMENT
LOW	routes/cookbook_routes.py	2098	ps_lines.append('# Check if ollama is available')	CODE
LOW	routes/mcp/mcp_routes.py	256	# Check if OAuth token already exists — skip connection attempt if not	COMMENT
LOW	routes/document/document_routes.py	652	# Check if we can coalesce with the latest version	COMMENT
LOW	src/config.py	194	# Check if LLM host is reachable if specified	COMMENT
LOW	src/config.py	199	# Check if API keys are set when needed	COMMENT
LOW	src/memory.py	395	# Check if this is an identity memory (contains name patterns or identity indicators)	COMMENT
LOW	src/tool_execution.py	110	# Check if any path component is a sensitive directory.	COMMENT
LOW	src/upload_handler.py	1252	# Check if file type is safe	COMMENT
LOW	src/integrations.py	791	# Check if a miniflux integration already exists	COMMENT

Verbosity Indicators15 hits · 26 pts

Severity	File	Line	Snippet	Context
LOW	static/js/group.js	528	// Step 2: Character assignment	COMMENT
LOW⚡	static/js/documentLibrary.js	1017	// Step 1: switch session if needed and wait for it to load	COMMENT
LOW⚡	static/js/documentLibrary.js	1025	// Step 2: ensure doc is in tabs	COMMENT
LOW⚡	static/js/documentLibrary.js	1035	// Step 3: open panel (slide-in is handled by openPanel)	COMMENT
LOW	static/js/editor/tools/lasso-mask.js	75	// Step 1: draw hard mask	COMMENT
LOW	static/js/editor/tools/lasso-mask.js	111	// Step 2: pixel data and distance-based feather.	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	525	# Step 1: prerequisites	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	533	# Step 2: signing key	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	541	# Step 3: apt repository	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	550	# Step 4: install toolkit	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	558	# Step 5: configure Docker runtime	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	565	# Step 6: restart Docker	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	587	# Step 7: verification	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	593	# Step 8: enable overlay (only if passthrough verified)	COMMENT
LOW	src/deep_research.py	166	- Then the detailed steps: ## Step 1: ..., ## Step 2: ...	CODE

AI Structural Patterns38 hits · 26 pts

Severity	File	Line	Context
LOW	tests/test_model_routes.py	1664	CODE
LOW	tests/test_model_routes.py	721	CODE
LOW	tests/test_model_routes.py	741	CODE
LOW	tests/test_model_defaults.py	131	CODE
LOW	scripts/diffusion_server.py	763	CODE
LOW	scripts/demo_email/seed_demo_emails.py	109	CODE
LOW	mcp_servers/email_server.py	1602	CODE
LOW	routes/email_pollers.py	383	CODE
LOW	routes/email_routes.py	2327	CODE
LOW	routes/shell_routes.py	976	CODE
LOW	routes/hwfit_routes.py	194	CODE
LOW	routes/hwfit_routes.py	319	CODE
LOW	routes/hwfit_routes.py	413	CODE
LOW	routes/model_routes.py	1990	CODE
LOW	routes/chat_helpers.py	605	CODE
LOW	routes/chat_helpers.py	1023	CODE
LOW	routes/chat_helpers.py	1154	CODE
LOW	routes/gallery/gallery_routes.py	674	CODE
LOW	routes/mcp/mcp_routes.py	159	CODE
LOW	routes/compare/compare_routes.py	71	CODE
LOW	services/memory/skills.py	293	CODE
LOW	services/search/core.py	250	CODE
LOW	src/text_helpers.py	143	CODE
LOW	src/research_handler.py	240	CODE
LOW	src/research_handler.py	740	CODE
LOW	src/model_capabilities.py	486	CODE
LOW	src/agent_loop.py	2223	CODE
LOW	src/agent_loop.py	3118	CODE
LOW	src/agent_loop.py	3417	CODE
LOW	src/chat_processor.py	263	CODE
LOW	src/visual_report.py	100	CODE
LOW	src/llm_core.py	2262	CODE
LOW	src/llm_core.py	2559	CODE
LOW	src/llm_core.py	2582	CODE
LOW	src/tool_execution.py	593	CODE
LOW	src/tool_execution.py	748	CODE
LOW	src/deep_research.py	192	CODE
LOW	src/model_capability_readers/llamacpp.py	247	CODE

Hallucination Indicators2 hits · 25 pts

Severity	File	Line	Snippet	Context
CRITICAL⚡	tests/test_session_mode_helpers.py	56	sess.query.return_value.filter.return_value.update.assert_called_once_with({"mode": "agent"})	CODE
CRITICAL	static/lib/html2pdf.bundle.min.js	2	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.am	CODE

Structural Annotation Overuse14 hits · 25 pts

Severity	File	Line	Snippet	Context
LOW	static/js/group.js	528	// Step 2: Character assignment	COMMENT
LOW⚡	static/js/documentLibrary.js	1017	// Step 1: switch session if needed and wait for it to load	COMMENT
LOW⚡	static/js/documentLibrary.js	1025	// Step 2: ensure doc is in tabs	COMMENT
LOW⚡	static/js/documentLibrary.js	1035	// Step 3: open panel (slide-in is handled by openPanel)	COMMENT
LOW	static/js/editor/tools/lasso-mask.js	75	// Step 1: draw hard mask	COMMENT
LOW	static/js/editor/tools/lasso-mask.js	111	// Step 2: pixel data and distance-based feather.	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	525	# Step 1: prerequisites	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	533	# Step 2: signing key	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	541	# Step 3: apt repository	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	550	# Step 4: install toolkit	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	558	# Step 5: configure Docker runtime	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	565	# Step 6: restart Docker	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	587	# Step 7: verification	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	593	# Step 8: enable overlay (only if passthrough verified)	COMMENT

Self-Referential Comments8 hits · 20 pts

Severity	File	Line	Snippet	Context
MEDIUM	launcher.py	17	# Define a dummy NullWriter to suppress standard stream crashes (isatty etc.) in GUI mode	COMMENT
MEDIUM	tests/test_tts_service_enforce_cache_limit.py	80	# Create a file to evict	COMMENT
MEDIUM	tests/test_rag_search_signature.py	8	# Create a mock instance for VectorRAG	COMMENT
MEDIUM	tests/test_skills_delete_owner.py	46	# Create an owner-scoped skill (owner="alice")	STRING
MEDIUM	tests/test_skills_delete_owner.py	71	# Create an owner-scoped skill (owner="alice")	STRING
MEDIUM	src/task_scheduler.py	727	# Create the run record with status="queued" BEFORE waiting on the	COMMENT
MEDIUM	src/task_scheduler.py	2599	# Create the singleton session first (CrewMember.session_id links to it).	COMMENT
MEDIUM	src/task_scheduler.py	2616	# Create the assistant CrewMember.	COMMENT

Synthetic Comment Markers2 hits · 12 pts

Severity	File	Line	Snippet	Context
HIGH	core/database.py	356	ai_tags = Column(Text, nullable=True, default="") # AI-generated tags (comma-separated)	CODE
HIGH	static/js/notes.js	3049	// Going Goal→Todo keeps the AI-generated steps as a plain checklist.	COMMENT

Dead Code5 hits · 10 pts

Severity	File	Line	Context
MEDIUM	tests/test_workspace_confine.py	388	CODE
MEDIUM	tests/test_delete_user_revokes_api_tokens.py	125	CODE
MEDIUM	tests/test_tool_policy.py	458	CODE
MEDIUM	tests/test_scheduler_prompt_cache_time.py	54	CODE
MEDIUM	tests/test_external_context_tool_gate.py	1270	CODE

Overly Generic Function Names4 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	tests/test_security_regressions.py	1422	def handle_request(self, req):	CODE
LOW	tests/test_skill_importer_dns_pinning.py	79	def handle_request(self, request):	CODE
LOW	services/memory/skill_importer.py	195	def handle_request(self, request: httpx.Request) -> httpx.Response:	CODE
LOW	src/outbound_fetch.py	181	def handle_request(self, request: httpx.Request) -> httpx.Response:	CODE

Analysis Overview

What These Metrics Mean

Score History

Severity Breakdown

Directory Score Breakdown

Pattern Findings