AI Slop Code Risk Monitor

santifer/career-ops

SlopCodeMonitor badge for santifer/career-ops Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Open-source AI job search agent and job finder: scan job boards, score each job 1-5 against your CV before you apply, tailor an ATS-friendly resume and cover letter, get interview prep and an application tracker. It helps you fill in each application; you press Submit. Runs locally in Codex, OpenCode and other AI CLIs, or as a Claude Code plugin.

3.2 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for santifer/career-ops, a JavaScript project with 78,961 GitHub stars. SynthScan examined 147,622 lines of code across 872 source files, recording 363 pattern matches distributed across 10 syntactic categories. The legacy adjusted pattern signal is 3.2 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

3.2
Adjusted Signal
3.2
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
79.0K
Stars
JavaScript
Language
147.6K
Lines of Code
872
Files
363
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 9.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 301 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.4/100 · LOW

Are imports declared and package/API names verified? 20 finding(s).

Agent Over-Engineering Ratio 4.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 46 finding(s).

PR Review Velocity Impact 15.6/100 · LOW

Which changes need focused human review? 363 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 3MEDIUM 61LOW 299

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 363 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block258 hits · 206 pts
SeverityFileLineSnippetContext
LOWREADME.hi.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWREADME.fr.md241claude # or codex / opencode / qwen / agy / grokCOMMENT
LOWREADME.es.md241claude # or codex / opencode / qwen / agy / grokCOMMENT
LOWREADME.ar.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWREADME.cn.md241claude # or codex / opencode / qwen / agy / grokCOMMENT
LOWREADME.tr.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWREADME.ua.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWREADME.ta.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWREADME.da.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWREADME.de.md241claude # or codex / opencode / qwen / agy / grokCOMMENT
LOWREADME.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWREADME.ja.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWREADME.pt-BR.md241claude # or codex / opencode / qwen / agy / grokCOMMENT
LOWREADME.zh-TW.md241claude # or codex / opencode / qwen / agy / grokCOMMENT
LOWREADME.id.md241# "Change the archetypes to backend engineering roles"COMMENT
LOWREADME.vi.md241# Rồi nhờ CLI của bạn điều chỉnh hệ thống cho phù hợp với bạn:COMMENT
LOWREADME.pl.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWREADME.ru.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWREADME.ko-KR.md241# Then ask your CLI to adapt the system to you:COMMENT
LOWconfig/plugins.example.yml1# career-ops — Plugin activation (opt-in)COMMENT
LOWconfig/plugins.example.yml21 enabled: falseCOMMENT
LOWconfig/local-paths.example.txt1# local-paths.txt — files this checkout owns, that upstream does not ship.COMMENT
LOWconfig/local-paths.example.txt21# The supported route is to stop ignoring it in your fork, then commit it:COMMENT
LOWconfig/local-paths.example.txt41COMMENT
LOWconfig/profile.example.yml1# Career-Ops Profile ConfigurationCOMMENT
LOWconfig/profile.example.yml101COMMENT
LOWconfig/profile.example.yml121 # Human-facing output language for reports, tracker notes, PDFs, coverCOMMENT
LOWconfig/profile.example.yml141# The first LinkedIn outreach suggestion (`contacto`) stays on.COMMENT
LOWconfig/profile.example.yml161# Optional. Private repos the `expand` mode's GitHub evidence stepCOMMENT
LOWconfig/profile.example.yml181# cannot disagree. Absent means letter. An explicit --format flag or a payloadCOMMENT
LOWconfig/profile.example.yml201# # description can leave above its tech line, at the cost of aCOMMENT
LOWconfig/profile.example.yml221 # are placed into the slots they already occupy, in the order you list them;COMMENT
LOWconfig/profile.example.yml241 # cv.md stays the source of truth: the section-order guard still compares theCOMMENT
LOWconfig/profile.example.yml261# - "Practical interview processes (pair programming, system design); avoid multiple LeetCode rounds or unpaid take-COMMENT
LOWconfig/profile.example.yml281 # Which cover-letter template to use by default. Kebab-case name of a file inCOMMENT
LOWconfig/profile.example.yml301 # Only trigger this entry when the JD location is in one of these countries.COMMENT
LOWconfig/profile.example.yml321#COMMENT
LOWconfig/profile.example.yml341COMMENT
LOWconfig/profile.example.yml361# `bash batch/batch-runner.sh`).COMMENT
LOWconfig/profile.example.yml381# Used by `/career-ops pipeline`. Before running the full A-G evaluation onCOMMENT
LOWconfig/profile.example.yml401# Define cooldown windows for companies where you've recently applied.COMMENT
LOWplugins/_types.js1// Type catalog for the career-ops plugin contract.COMMENT
LOWweb/src/proxy.ts1import { NextResponse } from "next/server";COMMENT
LOWweb/src/proxy.ts41// The Host header carries the attacker's domain there, so the guard refuses it —COMMENT
LOWweb/src/app/api/cv-pdf/route.ts21COMMENT
LOWweb/src/app/api/patterns/route.ts1import { execFile } from "node:child_process";COMMENT
LOWweb/src/app/api/status/route.ts1import fs from "node:fs";COMMENT
LOWweb/src/app/api/status/route.ts21// it holds the shared tracker lock across the whole read-modify-write,COMMENT
LOWweb/src/app/api/run/route.ts181 codeRoot,COMMENT
LOWweb/src/app/api/run/route.ts201 // envelope-parsing routes rely on.COMMENT
LOWweb/src/app/api/run/route.ts241 // are the CV now (#2185) — the agent's HTML flows through cvFilter toCOMMENT
LOWweb/src/app/api/run/route.ts281 // outright is exactly the bug #1974 reported: "Authentication successful"COMMENT
LOWweb/src/app/api/run/route.ts301 // a Chromium PDF render normally takes low tens of seconds even with aCOMMENT
LOWweb/src/app/api/run/route.ts321 controller.enqueue(enc.encode(JSON.stringify(obj) + "\n"));COMMENT
LOWweb/src/app/api/run/route.ts361 try { controller.close(); } catch { /* */ }COMMENT
LOWweb/src/app/api/run/route.ts441 // raw chunk both misses an error split across two of them and can match aCOMMENT
LOWweb/src/app/api/stats/route.ts1import { execFile } from "node:child_process";COMMENT
LOWweb/src/app/api/quiet-companies/route.ts1import { execFile } from "node:child_process";COMMENT
LOWweb/src/components/apply-view.tsx261 // its cleanup (StrictMode does this on every mount in development), so aCOMMENT
LOWweb/src/components/keyword-coverage.tsx1"use client";COMMENT
198 more matches not shown…
Decorative Section Separators42 hits · 130 pts
SeverityFileLineSnippetContext
MEDIUMconfig/profile.example.yml251# ── Culture Screen ───────────────────────────────────────────────────────────COMMENT
MEDIUMconfig/profile.example.yml271# ── Cover Letter Settings ──────────────────────────────────────────────────COMMENT
MEDIUMconfig/profile.example.yml304# ── Contact Preferences ──────────────────────────────────────────────────────COMMENT
MEDIUMconfig/profile.example.yml317# ── Outreach / greeting ─────────────────────────────────────────────────────COMMENT
MEDIUMconfig/profile.example.yml328# ── Application Email Drafts ────────────────────────────────────────────────COMMENT
MEDIUMconfig/profile.example.yml342# ── Scan / JD extractor ─────────────────────────────────────────────────────COMMENT
MEDIUMconfig/profile.example.yml358# ── Auto-PDF threshold ──────────────────────────────────────────────────────COMMENT
MEDIUMconfig/profile.example.yml379# ── Two-pass triage gate ────────────────────────────────────────────────────COMMENT
MEDIUMconfig/profile.example.yml399# ── Re-apply Cooldown Windows ──────────────────────────────────────────────COMMENT
MEDIUMweb/src/app/actions/registry.ts101// ── helpers ──────────────────────────────────────────────────────────────COMMENT
MEDIUMweb/src/app/actions/registry.ts123// ── actions ──────────────────────────────────────────────────────────────COMMENT
MEDIUMweb/src/components/apply-view.tsx246// ── Leaving the page: back out, or record that you applied ─────────────────COMMENT
MEDIUMweb/src/components/apply-view.tsx366// ── Watch the agent reach the form live (it navigates, never submits) ───────COMMENT
MEDIUMweb/src/components/apply-view.tsx414// ── Issues the interpreter surfaced — never fail mute ───────────────────────COMMENT
MEDIUMweb/src/components/apply-view.tsx444// ── Journey rail: Reading → Drafting → Review ───────────────────────────────COMMENT
MEDIUMweb/src/components/assistant-console.tsx27// inline next to text, both fed by the single JobsProvider store ──────────────COMMENT
MEDIUMweb/src/components/assistant-console.tsx66// ── envelope parsing: act ONLY on complete <<act:ID {json}>> envelopes ────────COMMENT
MEDIUMweb/src/components/assistant-console.tsx138// ── persistence migration: old {role,content:string} → parts[] ────────────────COMMENT
MEDIUMweb/src/lib/apply/drive.ts14// ─────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMweb/src/lib/apply/drive.ts29// ─────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMweb/src/lib/apply/diagnose.ts7// ─────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMweb/src/lib/apply/diagnose.ts13// ─────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMweb/src/lib/apply/agent-interpret.ts14// ─────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMweb/src/lib/apply/agent-interpret.ts21// ─────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡templates/portals.example.yml3658 # ── Swiss startup job boards ───────────────────────────────────────COMMENT
MEDIUM⚡templates/portals.example.yml3667 # ── CryptocurrencyJobs (Web3 / crypto) ─────────────────────────────COMMENT
MEDIUM⚡templates/portals.example.yml3676 # ── Python.org Jobs (Python / AI / Backend) ────────────────────────COMMENT
MEDIUMtemplates/portals.example.yml1214# ── Provider auto-detection ───────────────────────────────────────COMMENT
MEDIUMtemplates/portals.example.yml1322# ── Built-in provider examples ────────────────────────────────────COMMENT
MEDIUMtemplates/portals.example.yml2160# ── aggregator: true (optional, per entry) ────────────────────────────COMMENT
MEDIUMtemplates/portals.example.yml2192# ── max_response_mb (optional, per entry) ─────────────────────────────COMMENT
MEDIUMtemplates/portals.example.yml3046 # ============================================================COMMENT
MEDIUMtemplates/portals.example.yml3048 # ============================================================COMMENT
MEDIUMtemplates/portals.example.yml3070 # ============================================================COMMENT
MEDIUMtemplates/portals.example.yml3384# ── Job Boards ────────────────────────────────────────────────────────COMMENT
MEDIUMtemplates/portals.example.yml3391 # ── Telegram channels (public) ─────────────────────────────────────COMMENT
MEDIUMtemplates/portals.example.yml3418 # ── SolidJobs (Polish market) ──────────────────────────────────────COMMENT
MEDIUMtemplates/portals.example.yml3470 # ── JustJoin.it / NoFluffJobs / Bulldogjob (Polish tech market) ───────────COMMENT
MEDIUMtemplates/portals.example.yml3492 # ── Jobs.cz / Prace.cz (Czech job portals) ─────────────────────────────────COMMENT
MEDIUMtemplates/portals.example.yml3552 # ── HigherEdJobs (university / higher-ed RSS) ────────────────────────COMMENT
MEDIUMtemplates/portals.example.yml3563 # ── Getro — VC portfolio "talent network" boards ───────────────────COMMENT
MEDIUMtemplates/portals.example.yml3644 # ── Consider (consider.com) — VC portfolio boards ──────────────────COMMENT
Modern AI Meta-Vocabulary13 hits · 41 pts
SeverityFileLineSnippetContext
MEDIUMmodes/batch.md76### Manual multi-agent fan-outCOMMENT
MEDIUMweb/src/app/actions/registry.ts3// so the human UI and the agentic UI can never drift. Pure module (no ReactCOMMENT
MEDIUMweb/src/app/api/apply/drive/route.ts11// Streamed agentic drive over an OPEN session: the AI drives the headed page toCOMMENT
MEDIUM⚡web/src/app/api/apply/session/route.ts8export const maxDuration = 300; // the agentic drive + interpretation fallbacks spawn a plannerCODE
MEDIUM⚡web/src/app/api/apply/session/route.ts12// cliId enables the agentic fallback (the AI interprets the live form) whenCOMMENT
MEDIUM⚡web/src/app/api/apply/session/route.ts22 // already treats a missing CLI as "no agentic fallback".COMMENT
MEDIUMweb/src/components/portals-view.tsx36 // map the agentic "fix-portal" workers to the company they're repairingCOMMENT
MEDIUMweb/src/components/apply/apply-provider.tsx105 // Stream the agentic drive (the AI reaching the form live) and finalize theCOMMENT
MEDIUMweb/src/components/jobs/worker-card.tsx63// Keeping it single is what guarantees the human UI and the agentic UI stayCOMMENT
MEDIUMweb/src/lib/apply/issue.ts8// One step of the agentic drive loop (the AI reaching/filling the form live).COMMENT
MEDIUMdocs/SUPPORTED_JOB_BOARDS.md12| Agentic Engineering Jobs | API | Reads the site's public zero-auth REST API (`https://agentic-engineering-jobs.com/apiCODE
MEDIUM.github/workflows/no-user-data.yml6# under examples/. Tracked scaffolding (.gitkeep keepers, dir READMEs) is exempt.COMMENT
MEDIUMtemplates/portals.example.yml2070# provider: agentic-jobsCOMMENT
Structural Annotation Overuse18 hits · 32 pts
SeverityFileLineSnippetContext
LOWAGENTS.md228#### Step 0: Free Tier CheckCOMMENT
LOWAGENTS.md235#### Step 1: CV (required)COMMENT
LOWAGENTS.md246#### Step 2: Profile (required)COMMENT
LOWAGENTS.md265#### Step 3: Portals (recommended)COMMENT
LOWAGENTS.md313#### Step 4: TrackerCOMMENT
LOWAGENTS.md322#### Step 5: Get to know the user (important for quality)COMMENT
LOWAGENTS.md338#### Step 6: ReadyCOMMENT
LOWmodes/followup.md23## Step 0: Check that follow-ups are onCOMMENT
LOW⚡modes/interview.md29### Step 1: Target Roles & AmbitionsCOMMENT
LOW⚡modes/interview.md37### Step 2: Experience & Core AchievementsCOMMENT
LOW⚡modes/interview.md44### Step 3: Digging for Metrics (Business Impact)COMMENT
LOW⚡modes/interview.md50### Step 4: Uncovering Hidden SkillsCOMMENT
LOW⚡docs/RUNNING_ON_A_BUDGET.md433### Step 1: Scan for Job Offers (0 Tokens)COMMENT
LOW⚡docs/RUNNING_ON_A_BUDGET.md441### Step 2: Fetch the Job Description (0 Tokens)COMMENT
LOW⚡docs/RUNNING_ON_A_BUDGET.md444### Step 3: Evaluate the Offer (~4,500 Tokens)COMMENT
LOWdocs/RUNNING_ON_A_BUDGET.md479### Step 4: Tailor the CV HTML (~3,000 Tokens)COMMENT
LOWdocs/RUNNING_ON_A_BUDGET.md494### Step 5: Generate ATS-Optimized PDF (0 Tokens)COMMENT
LOWdocs/BACKUP_STRATEGIES.md16## Step 0: move your data into its own folder (data root)COMMENT
Magic Placeholder Names3 hits · 22 pts
SeverityFileLineSnippetContext
HIGH⚡docs/RUNNING_ON_A_BUDGET.md213export MOONSHOT_API_KEY="your_api_key"CODE
HIGH⚡docs/RUNNING_ON_A_BUDGET.md219$env:MOONSHOT_API_KEY="your_api_key"CODE
HIGH⚡docs/RUNNING_ON_A_BUDGET.md225set MOONSHOT_API_KEY=your_api_keyCODE
Fake / Example Data17 hits · 19 pts
SeverityFileLineSnippetContext
LOWmodes/pdf.md6216. Read `name` from `config/profile.yml` → normalize to kebab-case lowercase (e.g. "John Doe" → "john-doe") → `{candidaCODE
LOWmodes/tr/pdf.md2115. `config/profile.yml` dosyasından `name` değerini ve JD'den şirket adını oku → kabuk komut enjeksiyonunu ve geçersiz CODE
LOWconfig/plugins.example.yml39 # Check an employer: `node plugins/h1b-sponsor/check.mjs "Acme Corp"`. See plugins/h1b-sponsor/README.md.COMMENT
LOW⚡plugins/h1b-sponsor/README.md71node plugins/h1b-sponsor/check.mjs "Acme Corp"CODE
LOW⚡plugins/h1b-sponsor/README.md77node plugins/h1b-sponsor/check.mjs "Acme Corp" --jsonCODE
LOW⚡plugins/h1b-sponsor/README.md83node plugins/h1b-sponsor/check.mjs "Acme Corp" --summaryCODE
LOWplugins/h1b-sponsor/README.md104node plugins/h1b-sponsor/check.mjs "Acme Corp" --refreshCODE
LOWplugins/h1b-sponsor/README.md110node plugins/h1b-sponsor/check.mjs "Acme Corp" --cache-dir /tmp/h1b-cacheCODE
LOWweb/src/lib/apply/diagnose.ts247 const ph = shell?.querySelector('.select__placeholder, [class*="placeholder" i]');CODE
LOWdocs/SCRIPTS.md565node contact-extract.mjs --file email.txt --company "Acme Inc" --tracker 42CODE
LOWdocs/KEEPING_PORTALS_LIVE.md52node discover-ats.mjs "Acme Corp" # preview — writes nothingCODE
LOWdocs/KEEPING_PORTALS_LIVE.md53node discover-ats.mjs "Acme Corp" --write # append the resolved entriesCODE
LOWdashboard/internal/ui/screens/pipeline_test.go150 {Company: "Acme Corp", Role: "Senior PM, Voice AI", Status: "Evaluated", Score: 4.2, HasScore: true, Notes: "Series B CODE
LOWdashboard/internal/ui/screens/pipeline_test.go167 if len(pm.filtered) != 1 || pm.filtered[0].Company != "Acme Corp" {CODE
LOWdashboard/internal/ui/screens/pipeline_test.go174 if len(pm.filtered) != 1 || pm.filtered[0].Company != "Acme Corp" {CODE
LOWdashboard/internal/data/career_test.go968 body := strings.Repeat("lorem ipsum dolor sit amet\n", 40_000)CODE
LOWdashboard/internal/data/career_test.go968 body := strings.Repeat("lorem ipsum dolor sit amet\n", 40_000)CODE
AI Slop Vocabulary5 hits · 11 pts
SeverityFileLineSnippetContext
MEDIUMweb/src/components/cv/cv-ingest.tsx188 // so the Explorer auto-fires the FREE scan itself (robust, no push/replaceState race).COMMENT
MEDIUMdashboard/internal/ui/screens/pipeline.go432// the current UI state so manual refresh feels seamless.COMMENT
MEDIUM.github/workflows/test.yml144 fetch-depth: 0 # harness needs release tagsCODE
MEDIUM.github/workflows/test.yml145 persist-credentials: false # the harness only ever touches a local mirrorCODE
LOWtemplates/portals.example.yml1256# same provider; just use whichever host the employer's careers link actually points at.)COMMENT
Self-Referential Comments2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMtemplates/jurisdiction-relocation-tax.yml8# This file is a DATA REFERENCE, not instruction logic: adding a new jurisdictionCOMMENT
MEDIUMtemplates/panelist-roles.yml20# This file is system layer and is replaced on update. To change theCOMMENT
Hyper-Verbose Identifiers4 hits · 4 pts
SeverityFileLineSnippetContext
LOWweb/src/components/page-loading-skeletons.tsx3export function FollowupsDueSectionSkeleton({ rows = 3 }: { rows?: number }) {CODE
LOWweb/src/components/page-loading-skeletons.tsx33export function PipelineTableRowsSkeleton({ rows = 8, trackerColumn = false }: { rows?: number; trackerColumn?: boolean CODE
LOWweb/src/components/page-loading-skeletons.tsx98export function FollowupsTableRowsSkeleton({ rows = 6 }: { rows?: number }) {CODE
LOWweb/src/lib/analytics-data.ts92export function enrichAnalyticsApplication(app: Application, reportContent = ""): AnalyticsApplication {CODE
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOWtemplates/portals.example.yml26# Set recheck_after_days to let previously added URLs become eligible againCOMMENT