Home / pinchtab / pinchtab
AI Slop Code RIsk Monitor

pinchtab/pinchtab

High-performance browser automation bridge and multi-instance orchestrator with advanced stealth injection and real-time dashboard.

9.3 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for pinchtab/pinchtab, a Go project with 10,362 GitHub stars. SynthScan examined 399,888 lines of code across 2209 source files, recording 1381 pattern matches distributed across 11 syntactic categories. The legacy adjusted pattern signal is 9.3 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

9.3
Adjusted Signal
9.3
Raw Pattern Score
100%
Time Factor
2026-10-06
Last Push
10.4K
Stars
Go
Language
399.9K
Lines of Code
2.2K
Files
1.4K
Pattern Hits
2026-10-12
Scan Date
0.00
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 4.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 310 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.8/100 · LOW

Are imports declared and package/API names verified? 64 finding(s).

Agent Over-Engineering Ratio 34.0/100 · MEDIUM

Are wrappers, guards, and repeated structures necessary? 1031 finding(s).

PR Review Velocity Impact 34.8/100 · MEDIUM

Which changes need focused human review? 1381 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 1MEDIUM 1016LOW 364

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1381 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators1007 hits · 3298 pts
SeverityFileLineSnippetContext
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh7# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh23# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh31# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡tests/e2e/scenarios/infra/sessions-extended.sh47# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡tests/e2e/scenarios/infra/sessions-extended.sh57# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡tests/e2e/scenarios/infra/sessions-extended.sh65# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh80# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh88# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh102# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh116# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh130# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh143# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh168# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh191# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/sessions-extended.sh199# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh165# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh177# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh189# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh201# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh213# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh225# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh249# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh258# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh270# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh286# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh310# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh334# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh349# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh368# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/auth-extended.sh405# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡tests/e2e/scenarios/infra/system-extended.sh570# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡tests/e2e/scenarios/infra/system-extended.sh578# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡tests/e2e/scenarios/infra/system-extended.sh586# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡tests/e2e/scenarios/infra/system-extended.sh594# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡tests/e2e/scenarios/infra/system-extended.sh615# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡tests/e2e/scenarios/infra/system-extended.sh623# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡tests/e2e/scenarios/infra/system-extended.sh631# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh9# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh26# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh38# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh49# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh71# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh85# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh99# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh118# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh135# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh143# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh154# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh166# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh184# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh185# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh275# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh285# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh303# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh312# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh327# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh353# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh371# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh400# ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/scenarios/infra/system-extended.sh435# ─────────────────────────────────────────────────────────────────COMMENT
947 more matches not shown…
Over-Commented Block234 hits · 234 pts
SeverityFileLineSnippetContext
LOWcmd/pinchtab/negative_positionals.go1package mainCOMMENT
LOWcmd/pinchtab/cmd_cli_docs_test.go61// whose help no longer claims cookies as its job. The CLI is the token-cheap surface theCOMMENT
LOWcmd/pinchtab/cmd_cli_runtime.go141 }COMMENT
LOWcmd/pinchtab/unknown_subcommand.go61 if sub.IsAvailableCommand() {COMMENT
LOWcmd/pinchtab/cmd_session.go161 rootCmd.AddCommand(sessionCmd)COMMENT
LOWcmd/pinchtab/cmd_server_test.go341// standing in for it, and a reader would not know which path is authoritative.COMMENT
LOWcmd/pinchtab/cmd_config_secret_test.go1package mainCOMMENT
LOWcmd/pinchtab/cmd_server.go101 if v := strings.TrimSpace(port); v != "" {COMMENT
LOWcmd/pinchtab/cmd_bridge_test.go161// Parity with the server is a structural property, not a coincidence of two tables:COMMENT
LOWtests/tools/docker-compose.benchmark.yml1services:COMMENT
LOWtests/tools/runner/internal/e2e/provider.go361// writeGhostChromeConfig reads a chrome-flavoured pinchtab config and writes aCOMMENT
LOWtests/tools/runner/internal/e2e/e2e_test.go1081// moved, which is the drift this pins. --verbose is still expected alongside for theCOMMENT
LOWtests/tools/scripts/record-run-usage.sh1#!/usr/bin/env bashCOMMENT
LOWtests/tools/scripts/baseline.sh1#!/usr/bin/env bashCOMMENT
LOWtests/stealth-score/up.sh1#!/usr/bin/env bashCOMMENT
LOWtests/optimization/up.sh1#!/usr/bin/env bashCOMMENT
LOWtests/soak/setup.sh1#!/usr/bin/env bashCOMMENT
LOWtests/e2e/docker-compose-multi.yml1# Log level for every `pinchtab server` service below: `--log-level debug`, namedCOMMENT
LOWtests/e2e/docker-compose-multi.yml21# `--verbose` contributes ONLY the banner *while* `--log-level` is set: applyLogLevelCOMMENT
LOWtests/e2e/docker-compose-multi.yml161 volumes:COMMENT
LOWtests/e2e/pipefail_rules_test.go21// which closes the read end of the pipe; if the writer has not finished, it diesCOMMENT
LOWtests/e2e/docker-compose.yml1# Log level for every `pinchtab server` service below: `--log-level debug`, namedCOMMENT
LOWtests/e2e/docker-compose.yml61 default:COMMENT
LOWtests/e2e/scenarios/infra/browser-routing-extended.sh1#!/bin/bashCOMMENT
LOWtests/e2e/scenarios/infra/browser-routing-smoke.sh1#!/bin/bashCOMMENT
LOWtests/e2e/scenarios/infra/browser-routing-smoke.sh61# FAIL-LOUD.COMMENT
LOWtests/e2e/scenarios/infra/screencast-cloak-diag.sh1#!/bin/bashCOMMENT
LOWtests/e2e/scenarios/cli/scrape-basic.sh1#!/bin/bashCOMMENT
LOWtests/e2e/scenarios/api/network-route-smoke.sh1#!/bin/bashCOMMENT
LOWtests/e2e/scenarios/api/tabs-autoclose-smoke.sh1#!/bin/bashCOMMENT
LOWtests/e2e/scenarios/api/annotate-basic.sh1#!/bin/bashCOMMENT
LOWtests/e2e/scenarios/api/browser-activity-basic.sh1#!/bin/bashCOMMENT
LOWinternal/testbrowser/removal_fail_windows_test.go1//go:build windowsCOMMENT
LOWinternal/testbrowser/profile.go21// asynchronous: when the test body returns the process is often still flushingCOMMENT
LOWinternal/srccensus/srccensus_test.go481COMMENT
LOWinternal/srccensus/srccensus.go1// Package srccensus is the shared home for this repo's source-scanning census guards.COMMENT
LOWinternal/srccensus/srccensus.go21// 2. NON-VACUITY IS STRUCTURAL. Load fails when the package yields too few files, andCOMMENT
LOWinternal/srccensus/srccensus.go121// module-wide rather than package-scoped, and it exists so the EXCLUSIONS are inheritedCOMMENT
LOWinternal/srccensus/srccensus.go141}COMMENT
LOWinternal/selector/selector.go1// Package selector provides a unified element targeting system.COMMENT
LOWinternal/selector/selector.go101// Parse interprets a selector string and returns a typed Selector.COMMENT
LOWinternal/remedy/census_test.go41COMMENT
LOWinternal/remedy/remedy.go1// Package remedy owns details.remedy, the one field in an error response an agent may actCOMMENT
LOWinternal/autosolver/challenge_detection_test.go321 "https://example.com",COMMENT
LOWinternal/autosolver/interfaces.go1// Package autosolver provides a modular, interface-driven system forCOMMENT
LOWinternal/autosolver/challenge_detection.go61 Confidence: 0.7,COMMENT
LOWinternal/autosolver/challenge_detection.go101 "turnstile.render(",COMMENT
LOWinternal/scroll/direction.go1// Package scroll owns the scroll DIRECTION KEYWORD: which words name a direction,COMMENT
LOWinternal/proxy/proxy.go21 Client *http.ClientCOMMENT
LOWinternal/proxy/proxy.go101 }COMMENT
LOWinternal/proxy/proxy.go201// producer stamped these headers on the response it serialised, so reading them hereCOMMENT
LOWinternal/navguard/target.go41 // the browser disagree about where an authority begins, so a target theCOMMENT
LOWinternal/config/config_apply_census_test.go61 "autoSolver.solvers": "semantic",COMMENT
LOWinternal/config/live.go1package configCOMMENT
LOWinternal/config/validate.go41 FatalAtLoad: true,COMMENT
LOWinternal/config/browser_proxy.go41COMMENT
LOWinternal/config/config_methods.go81// and the wording it replaces ("remove the key") named an action no shipped commandCOMMENT
LOWinternal/config/fileio.go61}COMMENT
LOWinternal/security/allowlist.go1// Package security owns the cross-cutting host allowlist primitive sourcedCOMMENT
LOWinternal/activity/context.go281 }COMMENT
174 more matches not shown…
Fake / Example Data64 hits · 66 pts
SeverityFileLineSnippetContext
LOWplugins/openclaw/openclaw.plugin.json103 "baseUrl": { "label": "Base URL", "placeholder": "http://localhost:9867" },CODE
LOWplugins/openclaw/openclaw.plugin.json105 "timeoutMs": { "label": "Timeout (ms)", "placeholder": "30000" },CODE
LOWplugins/grok/skills/pinchtab-mcp/SKILL.md154pinchtab_fill(selector="e3", value="user@example.com")CODE
LOWtests/soak/setup.sh53open('/fixtures/heavy.html','w').write('<html><body><table>'+''.join(f'<tr><td>{i}</td><td>lorem ipsum dolor sit amet {iCODE
LOWtests/soak/setup.sh53open('/fixtures/heavy.html','w').write('<html><body><table>'+''.join(f'<tr><td>{i}</td><td>lorem ipsum dolor sit amet {iCODE
LOW⚡tests/e2e/scenarios/api/actions-extended.sh239 action_type_humanized "$NAME_REF" "John Doe"CODE
LOW⚡tests/e2e/scenarios/api/actions-extended.sh242 assert_value "textbox" "Name" "John Doe"CODE
LOWinternal/selector/selector.go45 KindPlaceholder Kind = "placeholder"CODE
LOWinternal/autosolver/autosolver_test.go332 User: "user@example.com",CODE
LOWinternal/autosolver/semantic/adapter.go342 name := extractAttr(snippet, "placeholder")CODE
LOWinternal/autosolver/semantic/adapter.go379 placeholder := extractAttr(snippet, "placeholder")CODE
LOWinternal/bridge/semantic_metadata.go15 Placeholder string `json:"placeholder"`CODE
LOWinternal/bridge/semantic_metadata.go191 placeholder: attr("placeholder"),CODE
LOWinternal/bridge/observe/snapshot_budget_test.go36 values := []string{"", "user@example.com", "", "", "United Kingdom", "", "", ""}CODE
LOWinternal/bridge/observe/snapshot_budget_test.go216 {name: "valued", node: A11yNode{Ref: "e1", Role: "textbox", Value: "user@example.com"}},CODE
LOWinternal/browsers/ghostchrome/staticfetch/semantics.go133 if ph, ok := el.GetAttribute("placeholder"); ok {CODE
LOWinternal/extract/extract_test.go62 "author": "Jane Doe",CODE
LOW⚡internal/extract/extract_test.go87 {Ref: "e3", Role: "text", Name: "Author", Text: "Jane Doe", Depth: 1},CODE
LOW⚡internal/extract/extract_test.go89 {Ref: "e5", Role: "text", Name: "Body", Text: "Lorem ipsum dolor sit amet.", Depth: 1},CODE
LOW⚡internal/extract/extract_test.go89 {Ref: "e5", Role: "text", Name: "Body", Text: "Lorem ipsum dolor sit amet.", Depth: 1},CODE
LOW⚡internal/extract/extract_test.go96 {Ref: "e2", Role: "textbox", Name: "Email address", Value: "user@example.com", Depth: 1},CODE
LOWinternal/extract/extract_test.go143 "author": "Jane Doe",CODE
LOWinternal/extract/extract_test.go156 "email": "user@example.com",CODE
LOWinternal/extract/testdata/extract-article.json52 "text": "Jane Doe",CODE
LOWinternal/extract/testdata/extract-article.json61 "name": "Jane Doe",CODE
LOWinternal/extract/testdata/corpus/search/snapshot.json16 {"ref":"e11","role":"searchbox","name":"Search Wikipedia","depth":12,"label":"Search Wikipedia","placeholder":"SearcCODE
LOWinternal/extract/testdata/corpus/infobox/snapshot.json16 {"ref":"e11","role":"searchbox","name":"Search Wikipedia","depth":12,"label":"Search Wikipedia","placeholder":"SearcCODE
LOWinternal/extract/testdata/corpus/article/snapshot.json15 {"ref":"e10","role":"searchbox","name":"Search Wikinews","depth":12,"label":"Search Wikinews","placeholder":"Search CODE
LOWinternal/assets/axe.min.js12!function i(window){var q=window,document=window.document;function te(e){return(te="function"==typeof Symbol&&"symbol"==CODE
LOWinternal/handlers/snapshot_enrichment_test.go125 for _, field := range []string{`"tag"`, `"testid"`, `"placeholder"`} {CODE
LOWdocs/showcase.md130 -d '{"kind":"fill","ref":"e3","text":"user@example.com"}' | jq .CODE
LOWdocs/showcase.md132pinchtab fill e3 "user@example.com"CODE
LOWdocs/deep-dive/logs/lpe-sonnet46-1.txt170▶ ./scripts/pt fill e3 "John Doe" --snap-diffCODE
LOWdocs/deep-dive/logs/lpe-sonnet46-1.txt176▶ ./scripts/runner step-end 1 1 answer "Filled Full Name field with 'John Doe',...CODE
LOWdocs/deep-dive/logs/lpe-sonnet46-2.txt170▶ ./scripts/pt fill e3 "John Doe" --snap-diffCODE
LOWdocs/deep-dive/logs/lpe-sonnet46-2.txt176▶ ./scripts/runner step-end 1 1 answer "Filled Full Name field with 'John Doe',...CODE
LOWdocs/deep-dive/logs/lae2.txt158▶ ./scripts/ab fill @e4 "John Doe"CODE
LOWdocs/deep-dive/logs/lae3.txt158▶ ./scripts/ab fill @e4 "John Doe"CODE
LOWdocs/deep-dive/logs/lae1.txt158▶ ./scripts/ab fill @e4 "John Doe"CODE
LOWdocs/deep-dive/logs/lae1.txt268▶ ./scripts/ab fill @e6 "555-1234"CODE
LOWdocs/deep-dive/logs/lae2-sonnet46-2.txt164▶ ./scripts/ab fill @e4 "John Doe"CODE
LOWdocs/deep-dive/logs/la2.txt136▶ ./scripts/ab fill @e4 "John Doe"CODE
LOWdocs/deep-dive/logs/la2.txt146▶ ./scripts/runner step-end 1 1 answer "Filled Full Name field with 'John Doe'"...CODE
LOWdocs/deep-dive/logs/la3.txt136▶ ./scripts/ab fill @e4 "John Doe"CODE
LOWdocs/deep-dive/logs/la3.txt146▶ ./scripts/runner step-end 1 1 answer "Filled Full Name field with 'John Doe'"...CODE
LOWdocs/deep-dive/logs/la3.txt173▶ ./scripts/ab fill @e7 "555-1234"CODE
LOWdocs/deep-dive/logs/la1.txt136▶ ./scripts/ab fill @e4 "John Doe"CODE
LOWdocs/deep-dive/logs/la4.txt136▶ ./scripts/ab fill @e4 "John Doe"CODE
LOWdocs/deep-dive/logs/lae1-sonnet46-1.txt164▶ ./scripts/ab fill @e4 "John Doe"CODE
LOWdocs/deep-dive/logs/la5.txt136▶ ./scripts/ab fill @e4 "John Doe"CODE
LOWdocs/deep-dive/logs/lp1.txt159▶ ./scripts/pt fill e3 "John Doe" --snap-diffCODE
LOWdocs/deep-dive/logs/lp2.txt148▶ ./scripts/pt fill e3 "John Doe" --snap-diffCODE
LOWdocs/deep-dive/logs/lp3.txt148▶ ./scripts/pt fill e3 "John Doe" --snap-diffCODE
LOWdocs/deep-dive/logs/lpe1.txt170▶ ./scripts/pt fill e3 "John Doe" --snap-diffCODE
LOWdocs/deep-dive/logs/lpe3.txt170▶ ./scripts/pt fill e3 "John Doe" --snap-diffCODE
LOWdocs/deep-dive/logs/lpe3.txt176▶ ./scripts/runner step-end 1 1 answer "Filled Full Name field with 'John Doe',...CODE
LOWdocs/deep-dive/logs/lp4.txt148▶ ./scripts/pt fill e3 "John Doe" --snap-diffCODE
LOWdocs/deep-dive/logs/lp4.txt166▶ ./scripts/pt fill e5 "555-1234" --snap-diffCODE
LOWdocs/deep-dive/logs/lp5.txt159▶ ./scripts/pt fill e3 "John Doe" --snap-diffCODE
LOWdocs/deep-dive/logs/lpe2.txt170▶ ./scripts/pt fill e3 "John Doe" --snap-diffCODE
4 more matches not shown…
Structural Annotation Overuse25 hits · 40 pts
SeverityFileLineSnippetContext
LOW⚡internal/config/cloak_roundtrip_test.go21 // Step 2: Convert to FileConfig (what buildChildFileConfig does)COMMENT
LOW⚡internal/config/cloak_roundtrip_test.go28 // Step 3: Marshal to JSON (what writeChildConfig does)COMMENT
LOW⚡internal/config/cloak_roundtrip_test.go52 // Step 4: Write to a temp file (what writeChildConfig does)COMMENT
LOW⚡internal/config/cloak_roundtrip_test.go59 // Step 5: Load via config.Load() with PINCHTAB_CONFIG pointing to child configCOMMENT
LOWdocs/get-started.md91### Step 1: start the serverCOMMENT
LOWdocs/get-started.md109### Step 2: start your first instanceCOMMENT
LOWdocs/get-started.md130### Step 3: navigateCOMMENT
LOWdocs/get-started.md147### Step 4: inspect the pageCOMMENT
LOWdocs/guides/attach-chrome.md78## Step 1: enable attach policyCOMMENT
LOWdocs/guides/attach-chrome.md111## Step 2: start Chrome with remote debuggingCOMMENT
LOWdocs/guides/attach-chrome.md125## Step 3: get the browser WebSocket URLCOMMENT
LOWdocs/guides/attach-chrome.md141## Step 4: attach it to PinchTabCOMMENT
LOWdocs/guides/attach-chrome.md177## Step 5: confirm it is registeredCOMMENT
LOWdocs/guides/mcp-agents.md23## Step 1: Start PinchTabCOMMENT
LOWdocs/guides/mcp-agents.md41## Step 2: Configure Your MCP ClientCOMMENT
LOWdocs/guides/remote-bridge-orchestrator.md113## Step 1: Start The Remote BridgeCOMMENT
LOWdocs/guides/remote-bridge-orchestrator.md139## Step 2: Verify The Bridge DirectlyCOMMENT
LOWdocs/guides/remote-bridge-orchestrator.md154## Step 3: Attach The Bridge To The OrchestratorCOMMENT
LOWdocs/guides/remote-bridge-orchestrator.md194## Step 4: Confirm It Is RegisteredCOMMENT
LOWdocs/guides/remote-bridge-orchestrator.md205## Step 5: Use Normal Orchestrator RoutesCOMMENT
LOWdocs/guides/tailscale-bridge-orchestrator.md131## Step 1: Start The Bridge On Machine BCOMMENT
LOWdocs/guides/tailscale-bridge-orchestrator.md156## Step 2: Prove Machine A Can Reach Machine BCOMMENT
LOWdocs/guides/tailscale-bridge-orchestrator.md177## Step 3: Configure The Orchestrator On Machine ACOMMENT
LOWdocs/guides/tailscale-bridge-orchestrator.md223## Step 4: Attach The BridgeCOMMENT
LOWdocs/guides/tailscale-bridge-orchestrator.md255## Step 5: Control The Remote Browser From Machine ACOMMENT
Hyper-Verbose Identifiers24 hits · 24 pts
SeverityFileLineSnippetContext
LOWplugins/openclaw/policy.ts51export function checkNetworkInterceptPolicy(cfg: PluginConfig): { allowed: boolean; error?: string } {CODE
LOWplugins/openclaw/client.ts102export function clearPinchtabSessionCache(): void {CODE
LOW⚡internal/assets/stealth.js20function deriveNavigatorPlatformFromUA(ua) {CODE
LOWinternal/assets/stealth.js84function recordNativeFunctionSource(fn, name) {CODE
LOWinternal/assets/stealth.js95function installFunctionToStringMask(targetProto) {CODE
LOWinternal/assets/stealth.js127function wrapConstructableAsNative(fn, constructHandler) {CODE
LOWinternal/assets/stealth.js174function wrapProxyHandlerWithSanitizedErrors(handler) {CODE
LOWdashboard/src/types/index.ts485export function normalizeBackendConfigState(CODE
LOWdashboard/src/types/index.ts497export function normalizeDashboardServerInfo(CODE
LOWdashboard/src/types/index.ts508export function normalizeMonitoringSnapshot(CODE
LOW…src/components/molecules/SidebarPanelFooterActions.tsx24export default function SidebarPanelFooterActions({CODE
LOWdashboard/src/activities/selectors.ts52export function normalizeDashboardActivityEvent(CODE
LOWdashboard/src/activities/selectors.ts123export function mergeDashboardActivityEvents(CODE
LOWdashboard/src/activities/selectors.ts228export function partitionAgentThreadEvents(CODE
LOW…rd/src/pages/settings/OrchestrationSettingsSection.tsx12export function OrchestrationSettingsSection({CODE
LOW…board/src/pages/settings/AutoSolverSettingsSection.tsx12export function AutoSolverSettingsSection({CODE
LOW…ard/src/pages/settings/SecurityIdpiSettingsSection.tsx19export function SecurityIdpiSettingsSection({CODE
LOW…rd/src/pages/settings/ObservabilitySettingsSection.tsx11export function ObservabilitySettingsSection({CODE
LOWdashboard/src/services/realtimeReducers.ts74export function resumeTabIdFromSystemEvent(event: SystemEvent): string | null {CODE
LOWdashboard/src/services/auth.ts19export function dispatchServerUnreachable(): void {CODE
LOWdashboard/src/services/auth.ts41export function isInsecureDashboardTransport(): boolean {CODE
LOWdashboard/src/services/api/client.ts13export function resetRealtimeAuthProbeStateForTests(): void {CODE
LOWdashboard/src/services/api/client.ts194export async function handleRealtimeAuthFailure(): Promise<void> {CODE
LOWnpm/src/download.ts59export function httpGetFollowingRedirects(CODE
AI Slop Vocabulary6 hits · 18 pts
SeverityFileLineSnippetContext
MEDIUMtests/e2e/docker-compose-multi.yml2# here rather than inherited. A harness whose logs exist to explain a failingCOMMENT
MEDIUMtests/e2e/docker-compose.yml2# here rather than inherited. A harness whose logs exist to explain a failingCOMMENT
MEDIUMinternal/bridge/observe/snapshot_budget_test.go342// Two things are asserted, both robust across formats. The allocator is never worseCOMMENT
MEDIUMinternal/bridge/observe/bounds.go132 // AABB across the 4 corners — robust against transformed elements.COMMENT
MEDIUMscripts/docker-browser-parity-smoke.sh2# docker-browser-parity-smoke.sh — Browser-provider parity smoke harness.COMMENT
MEDIUMscripts/docker-cdp-attach-smoke.sh11# The host process is only the harness. PinchTab and the browser under test runCOMMENT
Example Usage Blocks9 hits · 14 pts
SeverityFileLineSnippetContext
LOWtests/tools/scripts/record-run-usage.sh5# Usage:COMMENT
LOWscripts/pack-plugin.sh5# Usage:COMMENT
LOWscripts/docker-live-detection-smoke.sh24# Usage:COMMENT
LOWscripts/dev-e2e.sh4# Usage:COMMENT
LOWscripts/docker-browser-parity-smoke.sh18# Usage:COMMENT
LOWscripts/docker-cdp-attach-smoke.sh14# Usage:COMMENT
LOWscripts/docker-npm-install-smoke.sh28# Usage:COMMENT
LOWscripts/testing/simulate-ratelimit-leak.sh8# Usage:COMMENT
LOWscripts/testing/simulate-memory-load.sh7# Usage:COMMENT
Modern AI Meta-Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUMplugins/grok/skills/pinchtab/references/api.md489## Tab locking (multi-agent)COMMENT
MEDIUMtests/e2e/scenarios/infra/orchestrator-extended.sh2# orchestrator-extended.sh — API full orchestration scenarios.COMMENT
MEDIUMskills/pinchtab/references/api.md489## Tab locking (multi-agent)COMMENT
Verbosity Indicators4 hits · 9 pts
SeverityFileLineSnippetContext
LOW⚡internal/config/cloak_roundtrip_test.go21 // Step 2: Convert to FileConfig (what buildChildFileConfig does)COMMENT
LOW⚡internal/config/cloak_roundtrip_test.go28 // Step 3: Marshal to JSON (what writeChildConfig does)COMMENT
LOW⚡internal/config/cloak_roundtrip_test.go52 // Step 4: Write to a temp file (what writeChildConfig does)COMMENT
LOW⚡internal/config/cloak_roundtrip_test.go59 // Step 5: Load via config.Load() with PINCHTAB_CONFIG pointing to child configCOMMENT
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHinternal/audit/enrich.go46 // URL is the audited page URL as requested.COMMENT
Redundant / Tautological Comments4 hits · 7 pts
SeverityFileLineSnippetContext
LOW⚡tests/e2e/scenarios/infra/state-basic.sh128# Check if encryption key is configuredCOMMENT
LOWscripts/check-docs-json.sh14# Check if docs.json existsCOMMENT
LOWscripts/check-gosec.sh8# Check if gosec is installedCOMMENT
LOWscripts/check-gosec.sh39# Check if results file existsCOMMENT