🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning intelligence, federation, vector RAG integration, and native Claude Code / Codex / Hermes and many more Integrated
This report summarizes scanner evidence for ruvnet/ruflo, a TypeScript project with 80,349 GitHub stars. SynthScan examined 1,948,070 lines of code across 7305 source files, recording 3194 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 3.9 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 1969 finding(s).
Are imports declared and package/API names verified? 116 finding(s).
Are wrappers, guards, and repeated structures necessary? 1525 finding(s).
Which changes need focused human review? 3194 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 3194 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugins/ruflo-console/hooks/views/common.ts | 321 | // BBS section header: ▓▒░ SWARM ░▒▓══════════ right | COMMENT |
| MEDIUM | plugins/ruflo-metaharness/scripts/smoke.sh | 11 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 12 | # ── plugin.json ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 27 | # ── commands ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 39 | # ── skills ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 52 | # ── no wildcard tool grants ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 61 | # ── agents ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 72 | # ── HAL schema referenced ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 82 | # ── cost gate documented ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 88 | # ── Ed25519 signing referenced ──────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 95 | # ── memory namespaces ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 102 | # ── resumable runs documented ───────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 108 | # ── extensibility note ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 115 | # ── original smoke test still passes ───────────────────────────────────────── | COMMENT |
| MEDIUM | plugins/ruflo-workflows/scripts/smoke-gaia.sh | 129 | # ── CLI backend referenced ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugins/ruflo-cost-tracker/scripts/smoke.sh | 91 | # ─── ADR-0002 checks (11–16) ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugins/ruflo-cost-tracker/scripts/smoke.sh | 144 | # ─── Doc-invariant single-line greps (ADR-0002 §"Verification") ────────────── | COMMENT |
| MEDIUM | plugins/ruflo-cost-tracker/scripts/smoke.sh | 607 | # ─── Consistency invariants (prevent README/agent drift) ───────────────────── | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 39 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 41 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 50 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 52 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 62 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 64 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 74 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 76 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 86 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 88 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 97 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 99 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 109 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 111 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 120 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 122 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 130 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 132 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 140 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 142 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 150 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 152 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 161 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 163 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 171 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 173 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 181 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 183 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 191 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-memory.sh | 193 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 43 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 45 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 52 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 54 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 61 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 63 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 72 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 74 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 82 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 84 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 94 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/docker-regression/scripts/test-cli-commands.sh | 96 | # ============================================================================ | COMMENT |
| 1049 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CHANGELOG.md | 648 | - **`@claude-flow/swarm` 3.0.1** — Byzantine quorums now intersect for every cluster size (#3560, #3587, @rudycelekli); | CODE |
| MEDIUM | CHANGELOG.md | 860 | ### v2.7.0 — agentic-flow Integration | COMMENT |
| MEDIUM | README.md | 3 | <a href="https://cognitum.one/agentic-engineering"><img src="ruflo/assets/ruflo-neon-flicker.gif" alt="Ruflo animated ne | CODE |
| MEDIUM | README.md | 128 | > Claude Flow is now Ruflo — named by [`rUv`](https://ruv.io), who loves Rust, flow states, and building things that fee | CODE |
| MEDIUM | README.md | 247 | | [**agentic-qe-fleet**](https://github.com/proffesor-for-testing/agentic-qe/tree/v3.15.17/plugins/agentic-qe-fleet) | E | CODE |
| MEDIUM | README.md | 484 | | [Ecosystem](docs/USERGUIDE.md#-ecosystem--integrations) | RuVector, agentic-flow, Flow Nexus | | CODE |
| MEDIUM | package-lock.json | 5651 | "resolved": "https://registry.npmjs.org/agentic-flow/-/agentic-flow-2.1.2.tgz", | CODE |
| MEDIUM | package-lock.json | 14098 | "resolved": "https://registry.npmjs.org/agentic-flow/-/agentic-flow-2.0.12-fix.8.tgz", | CODE |
| MEDIUM | README.zh-CN.md | 3 | [](https://cognitum.one/agentic-engineering) | CODE |
| MEDIUM | README.zh-CN.md | 354 | | [生态系统](docs/USERGUIDE.md#-ecosystem--integrations) | RuVector、agentic-flow、Flow Nexus | | CODE |
| MEDIUM | CLAUDE.md | 1362 | npx ruflo metaharness redblue init # @metaharness/redblue — scaffold redblue.yaml | CODE |
| MEDIUM | plugins/README.md | 56 | | [agentic-qe-fleet](https://github.com/proffesor-for-testing/agentic-qe/tree/v3.15.17/plugins/agentic-qe-fleet) | Exter | CODE |
| MEDIUM | plugins/ruflo-console/hooks/vector.ts | 109 | // WORKERS: ruvector hands each verb to npx agentic-flow@alpha, so all of them reach the registry. | COMMENT |
| MEDIUM | plugins/ruflo-agntcy/README.md | 60 | - Cisco CASA overview — https://outshift.cisco.com/blog/ai-ml/continuous-agentic-semantic-authorization-for-mas | CODE |
| MEDIUM | …cs/adrs/ADR-380-agntcy-outshift-runtime-integration.md | 198 | - Cisco CASA overview — https://outshift.cisco.com/blog/ai-ml/continuous-agentic-semantic-authorization-for-mas | CODE |
| MEDIUM | plugins/ruflo-metaharness/scripts/smoke.sh | 2160 | # Anti-regression: scaffold MUST cd into a temp dir (--target is ignored | COMMENT |
| MEDIUM | …ugin-creator/docs/adrs/0001-plugin-creator-contract.md | 34 | ### 2. Update the scaffolding output | COMMENT |
| MEDIUM | …drs/0002-agentic-flow-and-agent-booster-integration.md | 73 | ### 2. New skill: `cost-compact-context` (conditional on agentic-flow availability) | COMMENT |
| MEDIUM | …drs/0002-agentic-flow-and-agent-booster-integration.md | 170 | The single biggest dependency in this ADR is that **agents reading `cost-compact-context/SKILL.md` can actually invoke ` | CODE |
| MEDIUM | plugins/ruflo-ddd/README.md | 36 | # Aggregate scaffolding | COMMENT |
| MEDIUM | plugins/ruflo-ruvector/commands/vector.md | 107 | ## LLM orchestration — needs `@ruvector/ruvllm` | COMMENT |
| MEDIUM | plugins/ruflo-graph-intelligence/package-lock.json | 1113 | "resolved": "https://registry.npmjs.org/agentic-flow/-/agentic-flow-3.0.0-alpha.2.tgz", | CODE |
| MEDIUM | plugins/ruflo-agentdb/README.md | 108 | ### Naming guardrails | COMMENT |
| MEDIUM | plugins/ruflo-agentdb/scripts/smoke.sh | 143 | # 10. Namespace convention guardrails: reserved list + colon rule + length cap | COMMENT |
| MEDIUM | tests/docker-regression/docker-compose.yml | 2 | # Docker Compose orchestration for comprehensive testing | COMMENT |
| MEDIUM | .agents/skills/v3-integration-deep/SKILL.md | 40 | ## agentic-flow@alpha Feature Integration | COMMENT |
| MEDIUM⚡ | .agents/skills/v3-integration-deep/SKILL.md | 121 | // Replace SwarmCoordinator (800+ lines) with agentic-flow Swarm | COMMENT |
| MEDIUM⚡ | .agents/skills/v3-integration-deep/SKILL.md | 127 | // Replace AgentManager (1,736+ lines) with agentic-flow lifecycle | COMMENT |
| MEDIUM⚡ | .agents/skills/v3-integration-deep/SKILL.md | 135 | // Replace TaskScheduler with agentic-flow task graph | COMMENT |
| MEDIUM | .agents/skills/flow-nexus-swarm/SKILL.md | 21 | 4. [Agent Orchestration](#agent-orchestration) | CODE |
| MEDIUM | .agents/skills/agent-v3-integration-architect/SKILL.md | 22 | # Check agentic-flow status | COMMENT |
| MEDIUM | .agents/skills/agent-v3-integration-architect/SKILL.md | 90 | ## agentic-flow@alpha Feature Integration | COMMENT |
| MEDIUM | .agents/skills/github-release-management/SKILL.md | 294 | # Multi-target deployment orchestration | COMMENT |
| MEDIUM | .agents/skills/github-code-review/SKILL.md | 58 | - [Multi-Agent Review System](#multi-agent-review-system) | CODE |
| MEDIUM | .agents/skills/github-code-review/SKILL.md | 110 | # Start multi-agent review | COMMENT |
| MEDIUM | .agents/skills/agent-release-swarm/SKILL.md | 98 | # Run release orchestration | COMMENT |
| MEDIUM | .agents/skills/agent-v3-queen-coordinator/SKILL.md | 87 | - **Agent #10**: agentic-flow@alpha deep integration | CODE |
| MEDIUM | .agents/skills/agentdb-vector-search/SKILL.md | 154 | ### RAG (Retrieval Augmented Generation) | COMMENT |
| MEDIUM | .agents/skills/agentdb-vector-search/SKILL.md | 301 | # Check embedding model dimensions: | COMMENT |
| MEDIUM | .claude/statusline.sh | 97 | # Calculate REAL memory usage (system memory used by node/agentic processes) | COMMENT |
| MEDIUM | .claude/statusline.sh | 112 | # Check agentic-flow@alpha integration status | COMMENT |
| MEDIUM | .claude/statusline.sh | 121 | # Count active agentic-flow processes | COMMENT |
| MEDIUM | .claude/statusline.sh | 140 | # If we have agentic-flow processes but no specific agents, use a heuristic | COMMENT |
| MEDIUM | .claude/statusline.sh | 171 | # Get context window usage from Context Autopilot state (primary) or Claude Code input (fallback) | COMMENT |
| MEDIUM | .claude/agents/github/release-swarm.md | 61 | # Run release orchestration | COMMENT |
| MEDIUM | .claude/agents/v3/v3-integration-architect.md | 51 | ## agentic-flow@alpha Feature Integration | COMMENT |
| MEDIUM | .claude/agents/v3/v3-queen-coordinator.md | 47 | - **Agent #10**: agentic-flow@alpha deep integration | CODE |
| MEDIUM | .claude/commands/coordination/task-orchestrate.md | 1 | # task-orchestrate | COMMENT |
| MEDIUM | .claude/commands/github/release-swarm.md | 54 | # Run release orchestration | COMMENT |
| MEDIUM | .claude/commands/sparc/orchestrator.md | 65 | # Initialize orchestration swarm | COMMENT |
| MEDIUM | .claude/commands/sparc/orchestrator.md | 121 | # 1. Initialize orchestration swarm | COMMENT |
| MEDIUM | .claude/commands/sparc/orchestrator.md | 127 | # 3. Execute orchestration | COMMENT |
| MEDIUM | .claude/skills/sparc-methodology/SKILL.md | 19 | 5. [Orchestration Patterns](#orchestration-patterns) | CODE |
| MEDIUM | .claude/skills/v3-integration-deep/SKILL.md | 40 | ## agentic-flow@alpha Feature Integration | COMMENT |
| MEDIUM⚡ | .claude/skills/v3-integration-deep/SKILL.md | 121 | // Replace SwarmCoordinator (800+ lines) with agentic-flow Swarm | COMMENT |
| MEDIUM⚡ | .claude/skills/v3-integration-deep/SKILL.md | 127 | // Replace AgentManager (1,736+ lines) with agentic-flow lifecycle | COMMENT |
| MEDIUM⚡ | .claude/skills/v3-integration-deep/SKILL.md | 135 | // Replace TaskScheduler with agentic-flow task graph | COMMENT |
| MEDIUM | .claude/skills/agentic-jujutsu/SKILL.md | 627 | - **NPM Package**: https://npmjs.com/package/agentic-jujutsu | CODE |
| MEDIUM | .claude/skills/agentic-jujutsu/SKILL.md | 628 | - **GitHub**: https://github.com/ruvnet/agentic-flow/tree/main/packages/agentic-jujutsu | CODE |
| MEDIUM | .claude/skills/flow-nexus-swarm/SKILL.md | 15 | 4. [Agent Orchestration](#agent-orchestration) | CODE |
| 496 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | AGENTS.md | 163 | # Step 1: Coordination (optional) | COMMENT |
| LOW⚡ | AGENTS.md | 167 | # Step 2: IMMEDIATELY DO THE WORK YOURSELF - DON'T WAIT! | COMMENT |
| LOW⚡ | AGENTS.md | 171 | # Step 3: Report what you did | COMMENT |
| LOW⚡ | plugins/ruflo-cost-tracker/skills/cost-session/SKILL.md | 50 | # Step 1: find outliers across all sessions | COMMENT |
| LOW⚡ | plugins/ruflo-cost-tracker/skills/cost-session/SKILL.md | 53 | # Step 2: drill into the flagged session | COMMENT |
| LOW⚡ | plugins/ruflo-cost-tracker/skills/cost-session/SKILL.md | 56 | # Step 3: open that jsonl at the timestamp the top message reports, | COMMENT |
| LOW | tests/rvf-integration.test.ts | 290 | // Step 1: Create JsonBackend with entries | COMMENT |
| LOW⚡ | tests/rvf-integration.test.ts | 301 | // Step 2: Create RvfBackend | COMMENT |
| LOW⚡ | tests/rvf-integration.test.ts | 306 | // Step 3: Copy entries from JSON to RVF | COMMENT |
| LOW⚡ | tests/rvf-integration.test.ts | 311 | // Step 4: Verify all entries accessible in RVF | COMMENT |
| LOW⚡ | .agents/skills/github-workflow-automation/SKILL.md | 539 | // Step 1: Initialize swarm coordination | COMMENT |
| LOW⚡ | .agents/skills/github-workflow-automation/SKILL.md | 545 | // Step 2: Spawn specialized agents | COMMENT |
| LOW⚡ | .agents/skills/github-workflow-automation/SKILL.md | 551 | // Step 3: Orchestrate GitHub workflow | COMMENT |
| LOW⚡ | .agents/skills/skill-builder/SKILL.md | 285 | #### Step 1: Initial Setup | COMMENT |
| LOW⚡ | .agents/skills/skill-builder/SKILL.md | 294 | #### Step 2: Configuration | COMMENT |
| LOW⚡ | .agents/skills/skill-builder/SKILL.md | 298 | #### Step 3: Execution | COMMENT |
| LOW⚡ | .agents/skills/skill-builder/SKILL.md | 580 | ### Step 1: Setup | COMMENT |
| LOW⚡ | .agents/skills/skill-builder/SKILL.md | 583 | ### Step 2: Usage | COMMENT |
| LOW⚡ | .agents/skills/skill-builder/SKILL.md | 586 | ### Step 3: Verify | COMMENT |
| LOW | .agents/skills/agent-refinement/SKILL.md | 50 | // Step 1: Write test that defines desired behavior | COMMENT |
| LOW | .agents/skills/agent-refinement/SKILL.md | 115 | // Step 2: Implement minimum code to pass tests | COMMENT |
| LOW | .agents/skills/agent-refinement/SKILL.md | 193 | // Step 3: Refactor while keeping tests green | COMMENT |
| LOW | .agents/skills/flow-nexus-platform/SKILL.md | 869 | ### Step 1: Register & Login | COMMENT |
| LOW | .agents/skills/flow-nexus-platform/SKILL.md | 889 | ### Step 2: Configure Billing | COMMENT |
| LOW | .agents/skills/flow-nexus-platform/SKILL.md | 908 | ### Step 3: Create Your First Sandbox | COMMENT |
| LOW | .agents/skills/flow-nexus-platform/SKILL.md | 929 | ### Step 4: Deploy an App | COMMENT |
| LOW | .agents/skills/flow-nexus-platform/SKILL.md | 948 | ### Step 5: Complete a Challenge | COMMENT |
| LOW | .agents/skills/agent-crdt-synchronizer/SKILL.md | 953 | // Step 1: Achieve consensus on operation ordering | COMMENT |
| LOW | .agents/skills/agent-crdt-synchronizer/SKILL.md | 961 | // Step 2: Apply operation to CRDT with consensus-determined order | COMMENT |
| LOW | .claude/agents/consensus/crdt-synchronizer.md | 928 | // Step 1: Achieve consensus on operation ordering | COMMENT |
| LOW | .claude/agents/consensus/crdt-synchronizer.md | 936 | // Step 2: Apply operation to CRDT with consensus-determined order | COMMENT |
| LOW | .claude/agents/sparc/refinement.md | 24 | // Step 1: Write test that defines desired behavior | COMMENT |
| LOW | .claude/agents/sparc/refinement.md | 89 | // Step 2: Implement minimum code to pass tests | COMMENT |
| LOW | .claude/agents/sparc/refinement.md | 167 | // Step 3: Refactor while keeping tests green | COMMENT |
| LOW | .claude/agents/dual-mode/codex-coordinator.md | 51 | ### Step 1: Initialize Swarm | COMMENT |
| LOW | .claude/agents/dual-mode/codex-coordinator.md | 56 | ### Step 2: Spawn Parallel Workers | COMMENT |
| LOW | .claude/agents/dual-mode/codex-coordinator.md | 68 | ### Step 3: Collect Results | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 602 | // Step 1: Initialize TDD swarm | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 608 | // Step 2: Research and planning | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 614 | // Step 3: Architecture design | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 620 | // Step 4: TDD implementation | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 913 | # Step 1: Research and planning | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 916 | # Step 2: Architecture design | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 919 | # Step 3: TDD implementation | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 922 | # Step 4: Code review | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 925 | # Step 5: Documentation | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 932 | # Step 1: Analyze issue | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 935 | # Step 2: Debug systematically | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 938 | # Step 3: Create tests | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 941 | # Step 4: Review fix | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 948 | # Step 1: Profile performance | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 951 | # Step 2: Identify bottlenecks | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 954 | # Step 3: Implement improvements | COMMENT |
| LOW⚡ | .claude/skills/sparc-methodology/SKILL.md | 957 | # Step 4: Benchmark results | COMMENT |
| LOW | .claude/skills/sparc-methodology/SKILL.md | 631 | // Step 5: Code review | COMMENT |
| LOW | .claude/skills/sparc-methodology/SKILL.md | 641 | // Step 6: Optimization | COMMENT |
| LOW⚡ | .claude/skills/github-workflow-automation/SKILL.md | 521 | // Step 1: Initialize swarm coordination | COMMENT |
| LOW⚡ | .claude/skills/github-workflow-automation/SKILL.md | 527 | // Step 2: Spawn specialized agents | COMMENT |
| LOW⚡ | .claude/skills/github-workflow-automation/SKILL.md | 533 | // Step 3: Orchestrate GitHub workflow | COMMENT |
| LOW⚡ | .claude/skills/skill-builder/SKILL.md | 285 | #### Step 1: Initial Setup | COMMENT |
| 295 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/ruflo-console/hooks/data/write-flavor.ts | 45 | export function startWriteFlavorDetection(run: Run, deadlineMs: number = DETECT_DEADLINE_MS, fallback: () => WriteFlavor | CODE |
| LOW | plugins/ruflo-agntcy/src/receipts/casa-receipt.ts | 149 | export async function loadOrCreateCasaSigningKeypair( | CODE |
| LOW | …ntelligence/src/adapters/observability-span-adapter.ts | 110 | export function registerObservabilitySpanAdapter( | CODE |
| LOW | …elligence/src/adapters/jujutsu-blast-radius-adapter.ts | 94 | export function registerJujutsuBlastRadiusAdapter( | CODE |
| LOW | …-intelligence/src/adapters/federation-trust-adapter.ts | 103 | export function registerFederationTrustAdapter( | CODE |
| LOW | …ph-intelligence/src/adapters/browser-causal-adapter.ts | 181 | export function registerBrowserCausalAdapter( | CODE |
| LOW | …telligence/src/adapters/aidefence-suspicion-adapter.ts | 89 | export function registerAIDefenceSuspicionAdapter( | CODE |
| LOW | …h-intelligence/src/adapters/knowledge-graph-adapter.ts | 97 | export function registerKnowledgeGraphAdapter( | CODE |
| LOW | …raph-intelligence/src/adapters/portfolio-cg-adapter.ts | 127 | export function registerPortfolioCovarianceAdapter( | CODE |
| LOW | …-intelligence/src/adapters/cost-attribution-adapter.ts | 110 | export function registerCostAttributionAdapter( | CODE |
| LOW | plugins/ruflo-neural-trader/src/signed-attribution.ts | 130 | export async function verifyAttributionArtifact( | CODE |
| LOW | .agents/skills/agent-agent/SKILL.md | 177 | async function planWithTemporalAdvantage(planningMatrix, constraints) { | CODE |
| LOW | .agents/skills/agent-mesh-coordinator/SKILL.md | 293 | def trigger_failure_detection(self, peer_id): | CODE |
| LOW | .agents/skills/agent-mesh-coordinator/SKILL.md | 310 | def handle_potential_partition(self): | CODE |
| LOW | .agents/skills/agent-adaptive-coordinator/SKILL.md | 89 | def analyze_task_characteristics(self, task): | CODE |
| LOW | .agents/skills/agent-adaptive-coordinator/SKILL.md | 190 | def evaluate_current_performance(self): | CODE |
| LOW | .agents/skills/agent-adaptive-coordinator/SKILL.md | 202 | def trigger_topology_analysis(self): | CODE |
| LOW | .agents/skills/agent-adaptive-coordinator/SKILL.md | 270 | def predict_load_requirements(self, time_horizon='4h'): | CODE |
| LOW | .agents/skills/agent-code-goal-planner/SKILL.md | 316 | async function implementFeatureWithSPARC(feature: string) { | CODE |
| LOW | .claude/agents/swarm/mesh-coordinator.md | 259 | def trigger_failure_detection(self, peer_id): | CODE |
| LOW | .claude/agents/swarm/mesh-coordinator.md | 276 | def handle_potential_partition(self): | CODE |
| LOW | .claude/agents/swarm/adaptive-coordinator.md | 52 | def analyze_task_characteristics(self, task): | CODE |
| LOW | .claude/agents/swarm/adaptive-coordinator.md | 153 | def evaluate_current_performance(self): | CODE |
| LOW | .claude/agents/swarm/adaptive-coordinator.md | 165 | def trigger_topology_analysis(self): | CODE |
| LOW | .claude/agents/swarm/adaptive-coordinator.md | 233 | def predict_load_requirements(self, time_horizon='4h'): | CODE |
| LOW | .claude/agents/reasoning/agent.md | 173 | async function planWithTemporalAdvantage(planningMatrix, constraints) { | CODE |
| LOW | .claude/agents/goal/agent.md | 173 | async function planWithTemporalAdvantage(planningMatrix, constraints) { | CODE |
| LOW | .claude/agents/goal/code-goal-planner.md | 310 | async function implementFeatureWithSPARC(feature: string) { | CODE |
| LOW | docs/research/copilot-sdk-ruflo-integration.md | 801 | export async function registerRufloMcpWithCopilot( | CODE |
| LOW | v3/index.ts | 512 | export async function getOrCreateSwarm(): Promise<ISwarmHub> { | CODE |
| LOW | …@claude-flow/swarm/__tests__/queen-coordinator.test.ts | 51 | function createMockSwarmCoordinator(): ISwarmCoordinator { | CODE |
| LOW | …@claude-flow/swarm/__tests__/queen-coordinator.test.ts | 236 | function createMockConsensusResult(approved: boolean): ConsensusResult { | CODE |
| LOW | v3/@claude-flow/swarm/src/attention-coordinator.ts | 1001 | export function createAttentionCoordinator( | CODE |
| LOW | v3/@claude-flow/swarm/src/federation-hub.js | 686 | export async function resetDefaultFederationHub() { | CODE |
| LOW | v3/@claude-flow/swarm/src/federation-hub.d.ts | 283 | export declare function resetDefaultFederationHub(): Promise<void>; | CODE |
| LOW | v3/@claude-flow/swarm/src/unified-coordinator.ts | 2095 | export function createUnifiedSwarmCoordinator( | CODE |
| LOW | v3/@claude-flow/swarm/src/federation-hub.ts | 992 | export async function resetDefaultFederationHub(): Promise<void> { | CODE |
| LOW | v3/@claude-flow/swarm/src/shared/events.ts | 276 | export function swarmMilestoneReachedEvent(milestoneId: string, name: string): SwarmEvent { | CODE |
| LOW | v3/@claude-flow/swarm/src/workers/worker-dispatch.js | 838 | export function createWorkerDispatchService(config) { | CODE |
| LOW | v3/@claude-flow/swarm/src/workers/worker-dispatch.d.ts | 232 | export declare function createWorkerDispatchService(config?: Partial<WorkerConfig>): WorkerDispatchService; | CODE |
| LOW | v3/@claude-flow/swarm/src/workers/worker-dispatch.ts | 1129 | export function createWorkerDispatchService(config?: Partial<WorkerConfig>): WorkerDispatchService { | CODE |
| LOW | v3/@claude-flow/embeddings/src/persistent-cache.ts | 408 | export async function isPersistentCacheAvailable(): Promise<boolean> { | CODE |
| LOW | v3/@claude-flow/embeddings/src/hyperbolic.ts | 430 | export function pairwiseHyperbolicDistances( | CODE |
| LOW | v3/@claude-flow/embeddings/src/transformers-loader.ts | 115 | export function getCachedTransformersSource(): TransformersHandle | null { | CODE |
| LOW | v3/@claude-flow/embeddings/src/embedding-service.ts | 939 | export async function createEmbeddingServiceAsync( | CODE |
| LOW | v3/@claude-flow/memory/examples/agentdb-example.ts | 278 | async function gracefulDegradationExample() { | CODE |
| LOW | v3/@claude-flow/memory/examples/cross-platform-usage.ts | 17 | async function automaticProviderSelection() { | CODE |
| LOW | …/@claude-flow/memory/benchmarks/hnsw-indexing.bench.ts | 280 | export async function runHNSWIndexingBenchmarks(): Promise<void> { | CODE |
| LOW | …@claude-flow/memory/benchmarks/cache-hit-rate.bench.ts | 222 | export async function runCacheHitRateBenchmarks(): Promise<void> { | CODE |
| LOW | …@claude-flow/memory/benchmarks/cache-hit-rate.bench.ts | 436 | function calculateOptimalCacheSize(workingSetSize: number, memoryLimit: number): number { | CODE |
| LOW | …/@claude-flow/memory/benchmarks/vector-search.bench.ts | 192 | export async function runVectorSearchBenchmarks(): Promise<void> { | CODE |
| LOW | v3/@claude-flow/memory/src/agentdb-retrieval-guard.ts | 128 | export function createAgentDbRetrievalGuard(config?: RetrievalGuardConfig): AgentDbRetrievalGuard { | CODE |
| LOW | v3/@claude-flow/memory/src/agentdb-lock-guard.ts | 58 | export function isConcurrentModificationError(error: unknown): boolean { | CODE |
| LOW | v3/@claude-flow/memory/src/agentdb-lock-guard.ts | 244 | export async function closeWithAgentdbLockRecovery( | CODE |
| LOW | …/@claude-flow/memory/src/agentdb-native-driver.test.ts | 163 | function agentdbModuleRecordingHandle(failFirstInit = false) { | CODE |
| LOW | …claude-flow/memory/src/mmr-rerank-cosine-cache.test.ts | 238 | function candidateMmrRerankCounted( | CODE |
| LOW | v3/@claude-flow/memory/src/learning-bridge.test.ts | 37 | function createFailingNeuralLoader(): NeuralLoader { | CODE |
| LOW | …@claude-flow/security/__tests__/helpers/create-mock.ts | 159 | export function createMockCredentialGenerator( | CODE |
| LOW | v3/@claude-flow/security/src/safe-executor.ts | 489 | export function createDevelopmentExecutor(): SafeExecutor { | CODE |
| LOW | v3/@claude-flow/security/src/tool-output-guardrail.ts | 350 | export function createToolOutputGuardrail(config?: GuardrailConfig): ToolOutputGuardrail { | CODE |
| 356 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 21 | # workspace"). `exclude` keeps the directory out of Cargo's member-set | COMMENT |
| LOW | plugins/ruflo-console/scripts/kit-seq.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/ruflo-console/scripts/e2e.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/ruflo-console/scripts/drive.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/ruflo-console/scripts/e2e-control.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/ruflo-console/scripts/typecheck.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/ruflo-agntcy/src/casa/compile.ts | 61 | // "review repository security" -> ["repository.read", "tests.execute"]). | COMMENT |
| LOW | plugins/ruflo-metaharness/scripts/smoke.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/ruflo-metaharness/scripts/smoke.sh | 201 | grep -qE "(^|[[:space:]])'?${sub}'?:" "$F" 2>/dev/null || miss="$miss missing-$sub" | COMMENT |
| LOW | plugins/ruflo-metaharness/scripts/smoke.sh | 881 | # loop above and $EXPECTED_TOOLS both come from metaharness-tools.ts, so this | COMMENT |
| LOW | plugins/ruflo-metaharness/scripts/smoke.sh | 1661 | T="$ROOT/scripts/test-mcp-tools.mjs" | COMMENT |
| LOW | plugins/ruflo-browser/scripts/replay-spike.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/ruflo-core/scripts/ruflo-hook.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/ruflo-business-pods/scripts/smoke.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/ruflo-neural-trader/scripts/runtime-smoke.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugin/scripts/ruflo-hook.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/config.toml | 1 | # ============================================================================= | COMMENT |
| LOW | .agents/config.toml | 21 | # - on-failure: Require approval only after failures | COMMENT |
| LOW | .agents/skills/hive-mind-advanced/SKILL.md | 621 | --queen-type strategic \ | COMMENT |
| LOW | .agents/skills/agentdb-vector-search/SKILL.md | 301 | # Check embedding model dimensions: | COMMENT |
| LOW | .agents/skills/pair-programming/SKILL.md | 921 | # Testing: On completion | COMMENT |
| LOW | .claude/skills/hive-mind-advanced/SKILL.md | 621 | --claude | COMMENT |
| LOW | .claude/skills/hive-mind-advanced/SKILL.md | 641 | COMMENT | |
| LOW | .claude/skills/sparc-methodology/SKILL.md | 961 | ### Workflow 4: Complete Pipeline | COMMENT |
| LOW | .claude/skills/agentdb-vector-search/SKILL.md | 301 | # Check embedding model dimensions: | COMMENT |
| LOW | .claude/skills/pair-programming/SKILL.md | 921 | # Testing: On completion | COMMENT |
| LOW | .claude/helpers/swarm-hooks.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docs/USERGUIDE.md | 4501 | # Output: | COMMENT |
| LOW | …cs/validation/oct12-receipts/sparc-lifecycle-after.txt | 41 | # fail 0 | COMMENT |
| LOW | …s/validation/oct12-receipts/sparc-lifecycle-before.txt | 441 | 1..7 | COMMENT |
| LOW | docs/validation/oct12-receipts/sparc-before.txt | 201 | # todo 0 | COMMENT |
| LOW | docs/validation/oct12-receipts/tdd-workflow-before.txt | 161 | # fail 6 | COMMENT |
| LOW | docs/validation/oct12-receipts/tdd-workflow-after.txt | 41 | # fail 0 | COMMENT |
| LOW | docs/validation/oct12-receipts/coverage-after.txt | 61 | ... | COMMENT |
| LOW | …s/validation/oct12-receipts/coverage-review-before.txt | 121 | ... | COMMENT |
| LOW | docs/validation/oct12-receipts/coverage-before.txt | 141 | # cancelled 0 | COMMENT |
| LOW | …s/validation/oct12-receipts/coverage-compat-before.txt | 81 | # fail 2 | COMMENT |
| LOW | …dation/oct12-receipts/sparc-intended-agents-before.txt | 61 | # pass 2 | COMMENT |
| LOW | docs/validation/oct12-receipts/sparc-after.txt | 21 | # fail 0 | COMMENT |
| LOW | v3/vitest.config.ts | 141 | testTimeout: 30000, | COMMENT |
| LOW | …arm/__tests__/task-orchestrator.queue-position.test.ts | 61 | orchestrator.queueTask(mediumTask.id); | COMMENT |
| LOW | v3/@claude-flow/swarm/__tests__/topology.test.ts | 561 | // Isolate rebalanceHybrid()'s worker-mesh loop from addNode()'s own, | COMMENT |
| LOW | …-flow/swarm/__tests__/message-bus.event-driven.test.ts | 1 | import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest'; | COMMENT |
| LOW | v3/@claude-flow/swarm/__tests__/consensus.test.ts | 581 | // Hypothesis: QueenCoordinator.weightedConsensus() has always computed real | COMMENT |
| LOW | v3/@claude-flow/swarm/__tests__/consensus.test.ts | 781 | }); | COMMENT |
| LOW | v3/@claude-flow/swarm/src/message-bus.ts | 601 | // retryAttempts instead of resetting to 0 on every re-queue. | COMMENT |
| LOW | v3/@claude-flow/swarm/src/unified-coordinator.ts | 1381 | COMMENT | |
| LOW | v3/@claude-flow/swarm/src/topology-manager.ts | 401 | return [...new Set([...leaders.map(l => l.agentId), ...peers])]; | COMMENT |
| LOW | …src/domain/repositories/task-repository.interface.d.ts | 61 | //# sourceMappingURL=task-repository.interface.d.ts.map | COMMENT |
| LOW | v3/@claude-flow/swarm/src/domain/entities/task.js | 261 | //# sourceMappingURL=task.js.map | COMMENT |
| LOW | v3/@claude-flow/memory/src/mmr-benchmark.test.ts | 301 | byLambda: table, | COMMENT |
| LOW | v3/@claude-flow/memory/src/smart-retrieval.ts | 301 | return tokens; | COMMENT |
| LOW | v3/@claude-flow/memory/src/hybrid-backend.test.ts | 241 | // Before this fix, `queryHybrid`'s 'union' strategy computed `weights` | COMMENT |
| LOW | v3/@claude-flow/memory/src/entity-tagger.ts | 41 | if (seen.has(trimmed)) return; | COMMENT |
| LOW | v3/@claude-flow/memory/src/controller-registry.test.ts | 461 | }); | COMMENT |
| LOW | v3/@claude-flow/memory/src/controller-registry.test.ts | 961 | }); | COMMENT |
| LOW | …@claude-flow/memory/src/agentdb-adapter-upsert.test.ts | 201 | // an embeddingGenerator await and released in the same tick, can each | COMMENT |
| LOW | …@claude-flow/memory/src/agentdb-adapter-upsert.test.ts | 241 | // against each participant's own id is the correct probe, matching how | COMMENT |
| LOW | v3/@claude-flow/memory/src/controller-registry.ts | 841 | // Results carry a `signals` field naming which arms surfaced each | COMMENT |
| LOW | v3/@claude-flow/memory/src/controller-registry.ts | 981 | return null; | COMMENT |
| 302 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/rvf-integration.test.ts | 290 | // Step 1: Create JsonBackend with entries | COMMENT |
| LOW⚡ | tests/rvf-integration.test.ts | 301 | // Step 2: Create RvfBackend | COMMENT |
| LOW⚡ | tests/rvf-integration.test.ts | 306 | // Step 3: Copy entries from JSON to RVF | COMMENT |
| LOW⚡ | tests/rvf-integration.test.ts | 311 | // Step 4: Verify all entries accessible in RVF | COMMENT |
| LOW⚡ | …memory/benchmarks/longmemeval/scripts/run-benchmark.sh | 26 | # Step 1: Ensure dataset exists | COMMENT |
| LOW⚡ | …memory/benchmarks/longmemeval/scripts/run-benchmark.sh | 32 | # Step 2: Ingest conversations into AgentDB | COMMENT |
| LOW⚡ | …memory/benchmarks/longmemeval/scripts/run-benchmark.sh | 36 | # Step 3: Run evaluation | COMMENT |
| LOW⚡ | …memory/benchmarks/longmemeval/scripts/run-benchmark.sh | 40 | # Step 4: Generate report | COMMENT |
| LOW⚡ | v3/@claude-flow/memory/src/controller-registry.ts | 272 | // Step 1: Initialize AgentDB (the core) | COMMENT |
| LOW⚡ | v3/@claude-flow/memory/src/controller-registry.ts | 275 | // Step 2: Set up the backend | COMMENT |
| LOW⚡ | v3/@claude-flow/memory/src/controller-registry.ts | 278 | // Step 3: Initialize controllers level by level | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/optimizer.ts | 94 | // Step 1: Rank violations | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/optimizer.ts | 101 | // Step 2: Propose changes for top violations | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/optimizer.ts | 106 | // Step 3: Evaluate each change | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/optimizer.ts | 116 | // Step 4: Promote winners, record ADRs | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/retriever.ts | 355 | // Step 1: Classify intent | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/retriever.ts | 359 | // Step 2: Generate query embedding | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/retriever.ts | 362 | // Step 3: Score all shards | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/retriever.ts | 366 | // Step 4: Select top N with contradiction resolution | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/retriever.ts | 369 | // Step 5: Build combined policy text | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/memory-gate.ts | 255 | // Step 1: Authority check | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/memory-gate.ts | 264 | // Step 2: Rate limit check | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/memory-gate.ts | 273 | // Step 3: Overwrite check | COMMENT |
| LOW | v3/@claude-flow/guidance/src/memory-gate.ts | 286 | // Step 4: Contradiction detection | COMMENT |
| LOW | v3/@claude-flow/guidance/src/memory-gate.ts | 300 | // Step 5: Record write timestamp if allowed | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/index.ts | 495 | // Step 1: Read guidance files | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/index.ts | 505 | // Step 2: Compile | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/index.ts | 508 | // Step 3: Load into retriever | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/index.ts | 511 | // Step 4: Set active rules on gates | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/index.ts | 518 | // Step 5: Set up headless runner if enabled | COMMENT |
| LOW | v3/@claude-flow/guidance/src/gateway.ts | 172 | // Step 1: Idempotency check (batch cleanup on interval, not every call) | COMMENT |
| LOW | v3/@claude-flow/guidance/src/gateway.ts | 192 | // Step 2: Schema validation | COMMENT |
| LOW | v3/@claude-flow/guidance/src/gateway.ts | 206 | // Step 3: Budget check | COMMENT |
| LOW | v3/@claude-flow/guidance/src/gateway.ts | 222 | // Step 4: EnforcementGates checks | COMMENT |
| LOW | v3/@claude-flow/guidance/src/gateway.ts | 282 | // Step 5: Allow | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/ruvbot-integration.ts | 493 | // Step 1: Evaluate through MemoryWriteGate | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/ruvbot-integration.ts | 502 | // Step 2: Log the operation | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/ruvbot-integration.ts | 511 | // Step 3: If denied, do not write | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/ruvbot-integration.ts | 516 | // Step 4: Perform the write through ruvbot | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/ruvbot-integration.ts | 776 | // Step 1: Run through EnforcementGates (secrets, destructive ops) | COMMENT |
| LOW⚡ | v3/@claude-flow/guidance/src/ruvbot-integration.ts | 782 | // Step 2: Run through AIDefence gate | COMMENT |
| LOW | v3/@claude-flow/guidance/src/ruvbot-integration.ts | 795 | // Step 3: Feed outcomes into trust accumulator | COMMENT |
| LOW⚡ | …flow/plugins/src/integrations/ruvector/quantization.ts | 599 | // Step 1: Quantize query and all candidates | COMMENT |
| LOW⚡ | …flow/plugins/src/integrations/ruvector/quantization.ts | 603 | // Step 2: Compute Hamming distances | COMMENT |
| LOW⚡ | …flow/plugins/src/integrations/ruvector/quantization.ts | 612 | // Step 3: Filter top candidates by Hamming distance | COMMENT |
| LOW⚡ | …flow/plugins/src/integrations/ruvector/quantization.ts | 617 | // Step 4: Rerank filtered candidates with exact Euclidean distance | COMMENT |
| LOW⚡ | …flow/plugins/src/integrations/ruvector/quantization.ts | 626 | // Step 5: Sort by exact distance and return top-k | COMMENT |
| LOW⚡ | …flow/plugins/src/integrations/ruvector/quantization.ts | 1107 | // Step 1: Rotate vectors | COMMENT |
| LOW⚡ | …flow/plugins/src/integrations/ruvector/quantization.ts | 1110 | // Step 2: Train PQ on rotated vectors | COMMENT |
| LOW⚡ | …flow/plugins/src/integrations/ruvector/quantization.ts | 1113 | // Step 3: Update rotation matrix using Procrustes analysis | COMMENT |
| LOW⚡ | …@claude-flow/cli/__tests__/terminal-encryption.test.ts | 126 | // Step 1: write plaintext (gate off) | COMMENT |
| LOW⚡ | …@claude-flow/cli/__tests__/terminal-encryption.test.ts | 131 | // Step 2: flip encryption on for the read | COMMENT |
| LOW⚡ | …@claude-flow/cli/__tests__/terminal-encryption.test.ts | 135 | // Step 3: list should still find the legacy session via the | COMMENT |
| LOW⚡ | …@claude-flow/cli/__tests__/terminal-encryption.test.ts | 147 | // Step 1: legacy plaintext write | COMMENT |
| LOW⚡ | …@claude-flow/cli/__tests__/terminal-encryption.test.ts | 153 | // Step 2: enable encryption and add a second session — saveTerminalStore | COMMENT |
| LOW⚡ | …claude-flow/cli/__tests__/memory-db-encryption.test.ts | 146 | // Step 1: plant a plaintext SQLite blob on disk (no env vars set | COMMENT |
| LOW⚡ | …claude-flow/cli/__tests__/memory-db-encryption.test.ts | 151 | // Step 2: enable encryption for the read. | COMMENT |
| LOW⚡ | …claude-flow/cli/__tests__/memory-db-encryption.test.ts | 155 | // Step 3: readFileMaybeEncrypted's magic-byte sniff sees no RFE1 | COMMENT |
| LOW⚡ | …/@claude-flow/cli/__tests__/session-encryption.test.ts | 139 | // Step 1: save with encryption OFF → plaintext on disk | COMMENT |
| LOW⚡ | …/@claude-flow/cli/__tests__/session-encryption.test.ts | 144 | // Step 2: turn encryption ON for the read | COMMENT |
| 74 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugins/ruflo-metaharness/scripts/smoke.sh | 249 | # BOTH bins resolved from the package.json bin map (metaharness + harness) | COMMENT |
| MEDIUM | plugins/ruflo-metaharness/scripts/smoke.sh | 350 | "score" # iter 1 — score harness against ruflo | CODE |
| MEDIUM | plugins/ruflo-metaharness/scripts/smoke.sh | 678 | # plugins/ruflo-metaharness/skills/harness-foo/SKILL.md | COMMENT |
| MEDIUM | plugins/ruflo-metaharness/scripts/smoke.sh | 679 | # └── must have `name: harness-foo` | COMMENT |
| MEDIUM | plugins/ruflo-metaharness/scripts/smoke.sh | 1261 | # Guard 1 — ADR-150 §Sandboxing: `harness from-repo` must never be wrapped | COMMENT |
| MEDIUM | plugins/ruflo-browser/scripts/replay-spike.sh | 2 | # replay-spike.sh — pre-Accept spike harness for ADR-0001 Verification §4. | COMMENT |
| MEDIUM | plugins/ruflo-browser/scripts/replay-spike.sh | 9 | # This is an INTERACTIVE harness — it requires: | COMMENT |
| MEDIUM | plugins/ruflo-deepseek-harness/scripts/smoke.sh | 2 | # Structural smoke test for ruflo-deepseek-harness: the plugin's scripts exist, and the mod (ADR-445 pattern) is wired. | COMMENT |
| MEDIUM | plugins/ruflo-business-pods/templates/exec.json | 35 | "description": "Measures executive-summary quality and cross-pod escalation timeliness. PII policy is GDPR — most re | CODE |
| MEDIUM | tests/docker-regression/docker-compose.yml | 2 | # Docker Compose orchestration for comprehensive testing | COMMENT |
| MEDIUM | tests/docker-regression/scripts/run-all-tests.sh | 3 | # Executes all capability tests for comprehensive regression testing | COMMENT |
| MEDIUM | .agents/skills/security-audit/scripts/security-scan.sh | 3 | # Run comprehensive security scan pipeline | COMMENT |
| MEDIUM | .claude/helpers/auto-commit.sh | 3 | # Handles git add, commit, and push in a robust way | COMMENT |
| MEDIUM | …/@claude-flow/memory/benchmarks/longmemeval/harness.ts | 119 | // Contains match (lenient — official eval is more nuanced) | COMMENT |
| MEDIUM | v3/@claude-flow/memory/src/smart-retrieval.ts | 210 | // Fall back through id → key → content hash so deduplication is robust | COMMENT |
| MEDIUM | …claude-flow/memory/src/mmr-rerank-cosine-cache.test.ts | 380 | // keep this robust on slow/shared CI hardware while still being a real | COMMENT |
| MEDIUM | v3/@claude-flow/guidance/src/analyzer.ts | 2171 | // Use both Pearson and Spearman for more robust verdict | COMMENT |
| MEDIUM | v3/@claude-flow/codex/tests/generators.test.ts | 132 | expect(result).toContain('### Repository harness adapter'); | CODE |
| MEDIUM | v3/@claude-flow/codex/src/generators/agents-md.ts | 46 | ### Repository harness adapter | COMMENT |
| MEDIUM | v3/@claude-flow/mcp/.claude/helpers/auto-commit.sh | 3 | # Handles git add, commit, and push in a robust way | COMMENT |
| MEDIUM | v3/@claude-flow/cli/.claude/helpers/auto-commit.sh | 3 | # Handles git add, commit, and push in a robust way | COMMENT |
| MEDIUM | …ow/cli/__tests__/memory-search-truncation-2982.test.ts | 13 | * ControllerRegistry only), matching the #2652 test's harness pattern, so | COMMENT |
| MEDIUM | v3/@claude-flow/cli/__tests__/real-binary/loads.test.ts | 4 | * #4485 shipped because the harness only imitated the loader. A module the real loader refuses gives no error anywhere | COMMENT |
| MEDIUM⚡ | v3/@claude-flow/cli/templates/grok/config.toml | 4 | # Goal: full harness (MCP + hooks + skills + agent teams path), not a thin CLI wrapper. | COMMENT |
| MEDIUM | v3/@claude-flow/cli/src/ruvector/model-router.ts | 923 | // Higher variance suggests more nuanced semantics | COMMENT |
| MEDIUM | …/@claude-flow/performance/__tests__/benchmarks.test.ts | 429 | // agree within 2x") but make each measurement robust: warm up, then take two | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/Cargo.toml | 2 | # detection) plus a robustness-evaluation harness. | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/Cargo.toml | 8 | # agent-harness-generator/crates/ as a plain member. | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/src/align.rs | 1 | //! Indel-robust detection via context self-synchronization + local alignment. | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/src/align.rs | 5 | //! The position-locked detector ([`crate::detect`]) is substitution-robust but | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/src/align.rs | 52 | /// Self-synchronizing indel-robust detector (layer 1). Closed-form: the sum of | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/src/align.rs | 124 | /// Local-alignment indel-robust detector (layer 2), empirically calibrated. | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/src/align.rs | 197 | // stays strong AND indel-robust across deletion rates. | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/src/evolve.rs | 1 | //! Darwin/flywheel-style bounded tuner for the indel-robust alignment detector. | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/src/wasm.rs | 10 | //! `"gumbel"`. Detectors exposed: the per-scheme detector, the indel-robust | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/src/wasm.rs | 116 | /// Indel-robust detection (Gumbel self-sync): far stronger than the standard | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/src/context.rs | 16 | //! distribution-preserving in expectation and robust to "repeat the prompt" | COMMENT |
| MEDIUM | v3/crates/ruflo-watermark/src/context.rs | 29 | /// Larger `H` => more distortion-free and repetition-robust, but early | COMMENT |
| MEDIUM⚡ | ruflo/src/config/config.example.json | 75 | "systemPrompt": "You are an intelligent AI assistant with powerful tools organized into 5 groups. You MUST use tools p | CODE |
| MEDIUM | .github/workflows/oia-audit-weekly.yml | 3 | # Runs `harness oia-audit` against the ruflo repo every Sunday at | COMMENT |
| MEDIUM | .github/workflows/metaharness-ci.yml | 581 | # If upstream `harness mcp-scan` ever changes its text format, | COMMENT |
| MEDIUM | .github/workflows/mod-guidance.yml | 40 | # harness can only imitate, such as #4485 (a hooks module the real loader | COMMENT |
| MEDIUM | .github/workflows/metaharness-pin-drift.yml | 4 | # pin's range excludes (agent-harness-generator#142 / #149). This workflow diffs | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/ruflo-console/tests/adr-mutation.spec.ts | 62 | out.push(block([accepted, proposed, ...Array.from({ length: 10 }, (_v, i) => ({ ...accepted, file: `00${i + 10}-z.md`, | CODE |
| LOW | plugins/ruflo-console/tests/adr-integration.spec.ts | 230 | ...Array.from({ length: 8 }, (_v, i) => doc(`00${i + 10}-z.md`, 'Accepted', `${i + 10}. Long ${'word '.repeat(40)} | CODE |
| LOW | plugins/ruflo-console/tests/adr.spec.ts | 156 | const huge = parseAdr('0001-huge.md', `# 1. Huge\n\n## Status\n\nAccepted\n\n${'lorem ipsum '.repeat(1_000_000)}`) | CODE |
| LOW | plugins/ruflo-agentdb/tests/fold.test.ts | 66 | const r = run({ content: `${'lorem ipsum '.repeat(60)}${wide(phrase)}` }) | CODE |
| LOW | plugins/ruflo-agentdb/tests/fold.test.ts | 68 | const ok = run({ content: 'lorem ipsum '.repeat(60) }) | CODE |
| LOW | plugins/ruflo-agentdb/tests/screen.test.ts | 167 | const filler = 'lorem ipsum dolor sit amet '.repeat(5000) | CODE |
| LOW | plugins/ruflo-agentdb/tests/screen.test.ts | 167 | const filler = 'lorem ipsum dolor sit amet '.repeat(5000) | CODE |
| LOW | plugins/ruflo-agentdb/tests/textsof.test.ts | 38 | const pad = 'lorem ipsum dolor '.repeat(29_000) | CODE |
| LOW | .agents/skills/agent-authentication/SKILL.md | 26 | email: "user@example.com", | CODE |
| LOW | .agents/skills/agent-authentication/SKILL.md | 33 | email: "user@example.com", | CODE |
| LOW | .agents/skills/agent-authentication/SKILL.md | 45 | mcp__flow-nexus__user_reset_password({ email: "user@example.com" }) | CODE |
| LOW | .agents/skills/agent-agentic-payments/SKILL.md | 28 | holder_id: "user@example.com", | CODE |
| LOW | .agents/skills/agent-refinement/SKILL.md | 66 | email: 'user@example.com', | CODE |
| LOW | .agents/skills/agent-refinement/SKILL.md | 94 | email: 'user@example.com', | CODE |
| LOW | .agents/skills/flow-nexus-platform/SKILL.md | 32 | email: "user@example.com", | CODE |
| LOW | .agents/skills/flow-nexus-platform/SKILL.md | 42 | email: "user@example.com", | CODE |
| LOW | .agents/skills/flow-nexus-platform/SKILL.md | 62 | email: "user@example.com" | CODE |
| LOW | .claude/agents/payments/agentic-payments.md | 23 | holder_id: "user@example.com", | CODE |
| LOW | .claude/agents/flow-nexus/authentication.md | 21 | email: "user@example.com", | CODE |
| LOW | .claude/agents/flow-nexus/authentication.md | 28 | email: "user@example.com", | CODE |
| LOW | .claude/agents/flow-nexus/authentication.md | 40 | mcp__flow-nexus__user_reset_password({ email: "user@example.com" }) | CODE |
| LOW | .claude/agents/sparc/refinement.md | 40 | email: 'user@example.com', | CODE |
| LOW | .claude/agents/sparc/refinement.md | 68 | email: 'user@example.com', | CODE |
| LOW | .claude/commands/flow-nexus/login-registration.md | 13 | email: "user@example.com", | CODE |
| LOW | .claude/commands/flow-nexus/login-registration.md | 22 | email: "user@example.com", | CODE |
| LOW | .claude/commands/flow-nexus/login-registration.md | 40 | mcp__flow-nexus__user_reset_password({ email: "user@example.com" }) | CODE |
| LOW⚡ | .claude/skills/browser/SKILL.md | 114 | agent-browser fill ".email-input" "test@test.com" | CODE |
| LOW⚡ | .claude/skills/browser/SKILL.md | 120 | agent-browser find label "Email" fill "test@test.com" | CODE |
| LOW⚡ | .claude/skills/browser/SKILL.md | 130 | agent-browser fill @e2 "user@example.com" | CODE |
| LOW⚡ | .claude/skills/browser/SKILL.md | 140 | agent-browser fill @e1 "John Doe" | CODE |
| LOW | .claude/skills/flow-nexus-platform/SKILL.md | 29 | email: "user@example.com", | CODE |
| LOW | .claude/skills/flow-nexus-platform/SKILL.md | 39 | email: "user@example.com", | CODE |
| LOW | .claude/skills/flow-nexus-platform/SKILL.md | 59 | email: "user@example.com" | CODE |
| LOW | docs/USERGUIDE.md | 6437 | await browser.fill('@e1', 'user@example.com'); | CODE |
| LOW | docs/QUALITY-SWEEP.md | 36 | - T5 (done): Removed stale "placeholder" comment from `analyze.ts`. `coordination_orchestrate` stub linked to issue #214 | CODE |
| LOW | docs/QUALITY-SWEEP.md | 156 | - `hooks-tools.ts:3115/3141` — `implementation: 'placeholder'` when SONA unavailable. The code has a real fallback path | CODE |
| LOW | v3/@claude-flow/memory/src/entity-tagger.test.ts | 61 | expect(got).toContain('Acme Corp'); | CODE |
| LOW | v3/@claude-flow/memory/src/entity-tagger.ts | 19 | * - Proper-noun 2-grams: "Alice Smith", "Acme Corp" | COMMENT |
| LOW | v3/@claude-flow/security/README.md | 48 | const email = InputValidator.validate(EmailSchema, 'user@example.com'); | CODE |
| LOW | v3/@claude-flow/security/README.md | 195 | const email = EmailSchema.parse('user@example.com'); | CODE |
| LOW | …claude-flow/security/__tests__/input-validator.test.ts | 77 | expect(() => EmailSchema.parse('user@example.com')).not.toThrow(); | CODE |
| LOW | …claude-flow/security/__tests__/input-validator.test.ts | 89 | expect(result).toBe('user@example.com'); | CODE |
| LOW⚡ | …claude-flow/security/__tests__/input-validator.test.ts | 192 | email: 'user@example.com', | CODE |
| LOW⚡ | …claude-flow/security/__tests__/input-validator.test.ts | 199 | email: 'user@example.com', | CODE |
| LOW⚡ | …claude-flow/security/__tests__/input-validator.test.ts | 207 | email: 'user@example.com', | CODE |
| LOW⚡ | …claude-flow/security/__tests__/input-validator.test.ts | 217 | email: 'user@example.com', | CODE |
| LOW⚡ | …claude-flow/security/__tests__/input-validator.test.ts | 225 | email: 'user@example.com', | CODE |
| LOW | …claude-flow/security/__tests__/input-validator.test.ts | 333 | expect(InputValidator.validateEmail('user@example.com')).toBe('user@example.com'); | CODE |
| LOW | …claude-flow/security/__tests__/input-validator.test.ts | 357 | expect(result.email).toBe('user@example.com'); | CODE |
| LOW | …claude-flow/security/__tests__/input-validator.test.ts | 361 | const success = InputValidator.safeParse(EmailSchema, 'user@example.com'); | CODE |
| LOW | …aude-flow/aidefence/__tests__/threat-detection.test.ts | 185 | expect(service.detectPII('contact: alice@example.org')).toBe(true); | CODE |
| LOW | …aude-flow/aidefence/__tests__/threat-detection.test.ts | 186 | expect(service.detectPII('contact: alice@example.org')).toBe(true); | CODE |
| LOW | …tion/__tests__/unit/federation-envelope-claims.test.ts | 29 | payload: { event: 'placeholder' }, | CODE |
| LOW | …e-flow/mcp/.claude/agents/payments/agentic-payments.md | 23 | holder_id: "user@example.com", | CODE |
| LOW | …e-flow/mcp/.claude/agents/flow-nexus/authentication.md | 21 | email: "user@example.com", | CODE |
| LOW | …e-flow/mcp/.claude/agents/flow-nexus/authentication.md | 28 | email: "user@example.com", | CODE |
| LOW | …e-flow/mcp/.claude/agents/flow-nexus/authentication.md | 40 | mcp__flow-nexus__user_reset_password({ email: "user@example.com" }) | CODE |
| LOW | v3/@claude-flow/mcp/.claude/agents/sparc/refinement.md | 338 | email: 'user@example.com', | CODE |
| LOW | v3/@claude-flow/mcp/.claude/agents/sparc/refinement.md | 366 | email: 'user@example.com', | CODE |
| LOW | …e-flow/cli/.claude/agents/payments/agentic-payments.md | 23 | holder_id: "user@example.com", | CODE |
| 38 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .claude/helpers/validate-v3-config.sh | 147 | # Check if Node.js version is 20+ | COMMENT |
| LOW | .claude/helpers/ddd-tracker.sh | 34 | # Check if domain directory exists (20 points) | COMMENT |
| LOW | .claude/helpers/worker-manager.sh | 83 | # Check if daemon is running | COMMENT |
| LOW | .claude/helpers/perf-worker.sh | 15 | # Check if we should run (throttle to once per 5 minutes) | COMMENT |
| LOW | .claude/helpers/checkpoint-manager.sh | 89 | # Check if it's a tag | COMMENT |
| LOW | .claude/helpers/checkpoint-manager.sh | 99 | # Check if it's a branch | COMMENT |
| LOW | .claude/helpers/v3.sh | 97 | echo " v3 update performance 2.5x # Set performance to 2.5x" | CODE |
| LOW⚡ | .claude/helpers/learning-hooks.sh | 40 | # Check if better-sqlite3 is available | COMMENT |
| LOW | .claude/helpers/daemon-manager.sh | 46 | # Check if a process is running | COMMENT |
| LOW | .claude/helpers/setup-mcp.sh | 6 | # Check if claude command exists | COMMENT |
| LOW | .claude/helpers/auto-commit.sh | 30 | # Check if there are changes to commit | COMMENT |
| LOW | .claude/helpers/auto-commit.sh | 48 | # Check if in a git repo | COMMENT |
| LOW | .claude/helpers/standard-checkpoint-hooks.sh | 53 | # Check if file was modified - first check if file is tracked | COMMENT |
| LOW | .claude/helpers/swarm-hooks.sh | 76 | # Check if agent already exists | COMMENT |
| LOW | .claude/helpers/swarm-hooks.sh | 135 | # Check if message is for us or broadcast | COMMENT |
| LOW | .claude/helpers/swarm-hooks.sh | 339 | # Check if vote is valid option | COMMENT |
| LOW | .claude/helpers/swarm-hooks.sh | 565 | # Check if handoff is for us and pending | COMMENT |
| LOW | .claude/helpers/update-v3-progress.sh | 155 | echo " $0 performance 2.5x # Set speedup to 2.5x" | CODE |
| LOW | docs/assets/readme/generate.py | 9 | # Set RUFLO_DISPLAY_FONT to a Nimbus Sans Narrow Bold OTF on other systems. | COMMENT |
| LOW | …@claude-flow/mcp/.claude/helpers/validate-v3-config.sh | 147 | # Check if Node.js version is 20+ | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/ddd-tracker.sh | 34 | # Check if domain directory exists (20 points) | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/worker-manager.sh | 83 | # Check if daemon is running | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/perf-worker.sh | 15 | # Check if we should run (throttle to once per 5 minutes) | COMMENT |
| LOW | …@claude-flow/mcp/.claude/helpers/checkpoint-manager.sh | 89 | # Check if it's a tag | COMMENT |
| LOW | …@claude-flow/mcp/.claude/helpers/checkpoint-manager.sh | 99 | # Check if it's a branch | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/v3.sh | 97 | echo " v3 update performance 2.5x # Set performance to 2.5x" | CODE |
| LOW⚡ | v3/@claude-flow/mcp/.claude/helpers/learning-hooks.sh | 40 | # Check if better-sqlite3 is available | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/daemon-manager.sh | 46 | # Check if a process is running | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/setup-mcp.sh | 6 | # Check if claude command exists | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/auto-commit.sh | 30 | # Check if there are changes to commit | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/auto-commit.sh | 48 | # Check if in a git repo | COMMENT |
| LOW | …-flow/mcp/.claude/helpers/standard-checkpoint-hooks.sh | 53 | # Check if file was modified - first check if file is tracked | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/swarm-hooks.sh | 76 | # Check if agent already exists | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/swarm-hooks.sh | 135 | # Check if message is for us or broadcast | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/swarm-hooks.sh | 339 | # Check if vote is valid option | COMMENT |
| LOW | v3/@claude-flow/mcp/.claude/helpers/swarm-hooks.sh | 565 | # Check if handoff is for us and pending | COMMENT |
| LOW | …@claude-flow/mcp/.claude/helpers/update-v3-progress.sh | 155 | echo " $0 performance 2.5x # Set speedup to 2.5x" | CODE |
| LOW | …@claude-flow/cli/.claude/helpers/validate-v3-config.sh | 147 | # Check if Node.js version is 20+ | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/ddd-tracker.sh | 34 | # Check if domain directory exists (20 points) | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/worker-manager.sh | 83 | # Check if daemon is running | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/perf-worker.sh | 15 | # Check if we should run (throttle to once per 5 minutes) | COMMENT |
| LOW | …@claude-flow/cli/.claude/helpers/checkpoint-manager.sh | 89 | # Check if it's a tag | COMMENT |
| LOW | …@claude-flow/cli/.claude/helpers/checkpoint-manager.sh | 99 | # Check if it's a branch | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/v3.sh | 97 | echo " v3 update performance 2.5x # Set performance to 2.5x" | CODE |
| LOW⚡ | v3/@claude-flow/cli/.claude/helpers/learning-hooks.sh | 40 | # Check if better-sqlite3 is available | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/daemon-manager.sh | 46 | # Check if a process is running | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/setup-mcp.sh | 6 | # Check if claude command exists | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/auto-commit.sh | 30 | # Check if there are changes to commit | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/auto-commit.sh | 48 | # Check if in a git repo | COMMENT |
| LOW | …-flow/cli/.claude/helpers/standard-checkpoint-hooks.sh | 53 | # Check if file was modified - first check if file is tracked | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/swarm-hooks.sh | 76 | # Check if agent already exists | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/swarm-hooks.sh | 135 | # Check if message is for us or broadcast | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/swarm-hooks.sh | 339 | # Check if vote is valid option | COMMENT |
| LOW | v3/@claude-flow/cli/.claude/helpers/swarm-hooks.sh | 565 | # Check if handoff is for us and pending | COMMENT |
| LOW | …@claude-flow/cli/.claude/helpers/update-v3-progress.sh | 155 | echo " $0 performance 2.5x # Set speedup to 2.5x" | CODE |
| LOW | v3/goal_ui/build-widget.sh | 10 | # Check if build was successful | COMMENT |
| LOW | v3/scripts/start-mcp.sh | 87 | ./start-mcp.sh --status # Check if server is running | CODE |
| LOW | v3/scripts/start-mcp.sh | 98 | # Check if server is running | COMMENT |
| LOW | v3/scripts/start-mcp.sh | 221 | # Check if already running | COMMENT |
| LOW | scripts/install.sh | 324 | # Check if already configured | COMMENT |
| 5 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .agents/skills/agent-topology-optimizer/SKILL.md | 89 | // AI-generated novel topologies | COMMENT |
| HIGH | .claude/agents/optimization/topology-optimizer.md | 82 | // AI-generated novel topologies | COMMENT |
| HIGH | …/mcp/.claude/agents/optimization/topology-optimizer.md | 84 | // AI-generated novel topologies | COMMENT |
| HIGH | …/cli/.claude/agents/optimization/topology-optimizer.md | 84 | // AI-generated novel topologies | COMMENT |
| HIGH | v3/@claude-flow/cli/src/commands/completions.ts | 40 | # Generated by claude-flow completions bash | COMMENT |
| HIGH | v3/@claude-flow/cli/src/commands/completions.ts | 139 | # Generated by claude-flow completions zsh | COMMENT |
| HIGH | v3/@claude-flow/cli/src/commands/completions.ts | 358 | # Generated by claude-flow completions fish | COMMENT |
| HIGH | v3/@claude-flow/cli/src/commands/completions.ts | 417 | # Generated by claude-flow completions powershell | COMMENT |
| HIGH | .github/workflows/v3-ci.yml | 1470 | # or AI-generated snippets that still reference the old versions. | COMMENT |
| HIGH | .github/workflows/v3-ci.yml | 1498 | # regression from blog posts or AI-generated snippets. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CLAUDE.md | 1248 | PINATA_API_KEY=your-api-key | CODE |
| HIGH | .agents/skills/flow-nexus-platform/SKILL.md | 130 | API_KEY: "your_api_key", | CODE |
| HIGH | .agents/skills/flow-nexus-platform/SKILL.md | 387 | api_key: "your_api_key", | CODE |
| HIGH | .claude/commands/flow-nexus/sandbox.md | 16 | API_KEY: "your_api_key", | CODE |
| HIGH | .claude/skills/flow-nexus-platform/SKILL.md | 127 | API_KEY: "your_api_key", | CODE |
| HIGH | .claude/skills/flow-nexus-platform/SKILL.md | 384 | api_key: "your_api_key", | CODE |
| HIGH | docs/USERGUIDE.md | 1533 | const ai = new GoogleGenAI({ apiKey: 'YOUR_API_KEY' }); | CODE |
| HIGH⚡ | v3/@claude-flow/embeddings/README.md | 159 | apiKey: 'your-api-key', | CODE |
| HIGH | …e-flow/cli/.claude/skills/flow-nexus-platform/SKILL.md | 127 | API_KEY: "your_api_key", | CODE |
| HIGH | …e-flow/cli/.claude/skills/flow-nexus-platform/SKILL.md | 384 | api_key: "your_api_key", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …flow/plugins/examples/ruvector/streaming-large-data.ts | 111 | print(): void { | CODE |
| HIGH⚡ | v3/@claude-flow/cli/src/auth/client.ts | 127 | print('Opening your browser to sign in to Cognitum...'); | CODE |
| HIGH⚡ | v3/@claude-flow/cli/src/auth/client.ts | 128 | print(`If it doesn't open automatically, visit:\n\n ${url}\n`); | CODE |
| HIGH⚡ | v3/@claude-flow/cli/src/auth/client.ts | 130 | print('Waiting for you to finish signing in...'); | CODE |
| HIGH | v3/@claude-flow/cli/src/auth/client.ts | 149 | print('Browser-based callback unavailable (SSH/container detected, or --no-browser).\n'); | CODE |
| HIGH | v3/@claude-flow/cli/src/auth/client.ts | 153 | print(`Open this URL in a browser and authorize:\n\n ${url}\n`); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …aude-flow/plugins/examples/ruvector/docker-compose.yml | 6 | # Usage: | COMMENT |
| LOW | v3/@claude-flow/cli/docker/docker-compose.workers.yml | 4 | # Usage: | COMMENT |
| LOW | v3/@claude-flow/cli/docker/docker-compose.yml | 8 | # Usage: | COMMENT |
| LOW | v3/@claude-flow/cli/scripts/deploy-ipfs-node.sh | 6 | # Usage: | COMMENT |
| LOW | v3/scripts/start-mcp.sh | 5 | # Usage: | COMMENT |
| LOW | ruflo/docker-compose.yml | 4 | # Usage: | COMMENT |
| LOW | scripts/verify-federation-plugin.sh | 21 | # Usage: | COMMENT |
| LOW | scripts/install.sh | 6 | # Usage: | COMMENT |
| LOW⚡ | scripts/verify-appliance.sh | 9 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/benchmarks/runs/gaia-l1-iter61b-hybrid-only.json | 38 | FAIL answer="I cannot access YouTube videos directly, so I'm unable to determine the highest number of bird species | CODE |
| MEDIUM | docs/benchmarks/runs/gaia-l1-iter61b-hybrid-only.json | 408 | "answer": "I cannot access YouTube videos directly, so I'm unable to determine the highest number of bird species | CODE |
| MEDIUM | v3/@claude-flow/integration/src/agentic-flow-agent.ts | 749 | // This is a basic implementation that should be overridden by subclasses | COMMENT |
| MEDIUM | .github/workflows/codeql.yml | 58 | # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …/plugin-agent-federation/__tests__/unit/plugin.test.ts | 183 | context.services.register.mock.calls.find(([serviceName]) => serviceName === name)?.[1] as any; | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/agent-production-validator/SKILL.md | 59 | /TODO.*implementation$gi, // TODO: implement this | CODE |
| LOW | .claude/agents/testing/production-validator.md | 32 | /TODO.*implementation/gi, // TODO: implement this | CODE |
| LOW | …aude/agents/testing/validation/production-validator.md | 32 | /TODO.*implementation/gi, // TODO: implement this | CODE |
| LOW | …low/mcp/.claude/agents/testing/production-validator.md | 54 | /TODO.*implementation/gi, // TODO: implement this | CODE |
| LOW | …low/cli/.claude/agents/testing/production-validator.md | 54 | /TODO.*implementation/gi, // TODO: implement this | CODE |
| LOW | …ude-flow/hooks/src/__tests__/guidance-provider.test.ts | 233 | // TODO: implement proper validation | COMMENT |
| LOW | ruflo/src/ruvocal/src/lib/server/auth.ts | 525 | // TODO: Handle errors if provider is not responding | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …-federation/src/domain/services/wg-firewall-service.ts | 189 | lines.push('# This file is overwritten on every peer-set change; do not hand-edit.'); | CODE |
| MEDIUM | .github/workflows/rollback-manager.yml | 334 | # Create a revert commit with metadata | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …laude-flow/cli/__tests__/ruvector/ast-analyzer.test.ts | 190 | function processData(data) { | CODE |
| LOW | …de-flow/cli/__tests__/ruvector/diff-classifier.test.ts | 587 | export function getData(key: string) { | CODE |
| LOW | ruflo/src/mcp-bridge/mcp-stdio-kernel.js | 77 | async function handleRequest(request) { | CODE |
| LOW | ruflo/src/ruvocal/mcp-bridge/mcp-stdio-kernel.js | 77 | async function handleRequest(request) { | CODE |
| LOW | ruflo/src/ruvocal/src/lib/server/hooks/handle.ts | 29 | export async function handleRequest({ event, resolve }: HandleInput): Promise<Response> { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/assets/readme/generate-learning-cosmos.py | 52 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/assets/readme/make-ruvector-promo.py | 3 | CODE |