AI Slop Code Risk Monitor

shareAI-lab/Kode-CLI

SlopCodeMonitor badge for shareAI-lab/Kode-CLI Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Kode CLI — Design for post-human workflows. One unit agent for every human & computer task.

3.7 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for shareAI-lab/Kode-CLI, a TypeScript project with 5,235 GitHub stars. SynthScan examined 189,635 lines of code across 1488 source files, recording 637 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 3.7 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

3.7
Adjusted Signal
3.7
Raw Pattern Score
100%
Time Factor
2026-10-29
Last Push
5.2K
Stars
TypeScript
Language
189.6K
Lines of Code
1.5K
Files
637
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 16.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 618 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.7/100 · LOW

Are imports declared and package/API names verified? 12 finding(s).

Agent Over-Engineering Ratio 14.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 560 finding(s).

PR Review Velocity Impact 16.2/100 · LOW

Which changes need focused human review? 637 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 6MEDIUM 2LOW 629

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 637 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers553 hits · 562 pts
SeverityFileLineSnippetContext
LOWscripts/prepublish-check.js105function assertPackContainsExactPaths(pack, requiredPaths) {CODE
LOWscripts/prepublish-check.js115function assertPackContainsSomeUnderPrefix(pack, prefix, humanName) {CODE
LOWscripts/prepublish-check.js126function assertPackExcludesPrefixes(pack, prefixes) {CODE
LOWpackages/tools/src/tools/network/WebFetchTool/utils.ts16export function extractTextFromMessageContent(content: unknown): string | null {CODE
LOWpackages/tools/src/tools/network/WebFetchTool/utils.ts210export async function fetchWithRedirectDetection(CODE
LOW…ols/src/tools/filesystem/FileReadTool/FileReadTool.tsx66function extractTaskOutputIdFromPath(filePath: string): string | null {CODE
LOW…tools/src/tools/search/WebSearchTool/WebSearchTool.tsx60function parseAnthropicWebSearchContentBlocks(CODE
LOW…tools/src/tools/search/WebSearchTool/WebSearchTool.tsx215function canUseAnthropicServerToolWebSearch(modelName: string): boolean {CODE
LOWpackages/tools/src/tools/search/GrepTool/helpers.ts25export function toProjectRelativeIfPossible(p: string): string {CODE
LOW…ols/src/tools/system/TaskOutputTool/TaskOutputTool.tsx137async function waitForBashTaskCompletion(args: {CODE
LOWpackages/tools/src/tools/system/LspTool/call.ts516export function getCachedLspRuntimeStatus(): {CODE
LOWpackages/tools/src/tools/system/LspTool/call.ts580export async function ensureLspManagerInitialized(): Promise<LspServerManager | null> {CODE
LOWpackages/tools/src/tools/system/LspTool/tsProject.ts40export function getOrCreateTsProject(CODE
LOWpackages/tools/src/tools/system/LspTool/tsProject.ts139export function isFileTypeSupportedByTypescriptBackend(CODE
LOWpackages/tools/src/tools/system/LspTool/lspConfig.ts400function parseLspServersFromUnknown(CODE
LOWpackages/tools/src/tools/system/LspTool/lspConfig.ts432function parseLspServersFromTopLevelRecord(CODE
LOWpackages/tools/src/tools/system/LspTool/lspConfig.ts474function loadPluginLspServersFromRootFile(pluginRoot: string): {CODE
LOWpackages/tools/src/tools/system/LspTool/lspConfig.ts614export function buildLspServerIndexFromServers(CODE
LOWpackages/tools/src/tools/system/LspTool/lspConfig.ts641export function lspWorkspaceFolderForServer(CODE
LOWpackages/tools/src/tools/system/LspTool/lspConfig.ts657export function lspWorkspaceFoldersForServer(CODE
LOWpackages/tools/src/tools/system/LspTool/format.ts29export function toProjectRelativeIfPossible(filePath: string): string {CODE
LOWpackages/tools/src/tools/system/LspTool/format.ts49export function formatGoToDefinitionResult(CODE
LOWpackages/tools/src/tools/system/LspTool/format.ts97export function formatFindReferencesResult(CODE
LOWpackages/tools/src/tools/system/LspTool/format.ts158export function formatDocumentSymbolsResult(CODE
LOW…ges/tools/src/tools/system/BashTool/summarizeOutput.ts74function formatPersistedBashOutput(args: {CODE
LOW…ges/tools/src/tools/system/BashTool/summarizeOutput.ts128function extractTextFromAssistantMessage(message: AssistantMessage): string {CODE
LOW…kages/tools/src/tools/system/BashTool/dataLossRules.ts179function isNonExecutableSubcommand(tokens: string[]): boolean {CODE
LOW…ols/system/BashTool/BashToolRunInBackgroundOverlay.tsx98export function BashToolRunInBackgroundOverlay({CODE
LOW…ages/tools/src/tools/system/BashTool/sandboxNetwork.ts7export async function maybeAttachSandboxNetworkPorts(args: {CODE
LOW…ools/src/tools/system/BashTool/llmSafetyGateVerdict.ts55export function formatBashLlmGateBlockMessage(CODE
LOWpackages/tools/src/tools/ai/TaskTool/permissions.ts5export function normalizeAgentPermissionMode(CODE
LOWpackages/tools/src/tools/ai/TaskTool/forkContext.ts59function createForkContextToolResult(options: {CODE
LOWpackages/tools/src/tools/ai/TaskTool/forkContext.ts80function createToolUseOnlyAssistantMessage(options: {CODE
LOWpackages/tools/src/tools/ai/TaskTool/render.tsx17export function renderTaskToolResultMessage(CODE
LOWpackages/tools/src/tools/ai/TaskTool/render.tsx111export function renderTaskToolResultForAssistant(output: Output): string {CODE
LOW…/tools/src/tools/interaction/SlashCommandTool/utils.ts13export function normalizeCommandModelName(model: unknown): string | undefined {CODE
LOW…/tools/src/tools/interaction/SlashCommandTool/utils.ts94export function getCommandAllowedToolsFromContext(ctx: unknown): string[] {CODE
LOW…es/tools/src/tools/interaction/SkillTool/SkillTool.tsx89function getDisableModelInvocation(cmd: unknown): boolean {CODE
LOW…es/tools/src/tools/interaction/SkillTool/SkillTool.tsx129function normalizeCommandModelName(model: unknown): string | undefined {CODE
LOW…es/tools/src/tools/interaction/SkillTool/SkillTool.tsx234 function buildAvailableSkillsSection(cmds: CustomCommand[]): string {CODE
LOWpackages/core/src/history.ts199function normalizeHistoryWriteInput(input: HistoryWriteInput): {CODE
LOWpackages/core/src/history.ts312function loadPromptHistoryFromRoot(args: {CODE
LOWpackages/core/src/history.ts384function loadPromptHistoryForProject(project: string): PromptHistoryItem[] {CODE
LOWpackages/core/src/history.ts432function loadGlobalPromptHistoryFromRoot(args: {CODE
LOWpackages/core/src/history.ts600export function getGlobalHistoryWithPastes(): Array<{CODE
LOWpackages/core/src/messages.ts29export function setModelConfigChangeHandler(handler: () => void) {CODE
LOWpackages/core/src/cost-tracker.ts49export function registerCostSummaryOnExit(): () => void {CODE
LOWpackages/core/src/tasks/storage.ts165function getTaskListDirCandidatesForRead(taskListId: string): string[] {CODE
LOWpackages/core/src/tasks/storage.ts251function getHighestTaskIdAcrossStores(taskListId: string): number {CODE
LOWpackages/core/src/tasks/storage.ts394function getTaskFromNonPrimaryStores(args: {CODE
LOWpackages/core/src/types/toolPermissionContext.ts66export function createDefaultToolPermissionContext(options?: {CODE
LOWpackages/core/src/types/toolPermissionContext.ts80export function applyToolPermissionContextUpdate(CODE
LOWpackages/core/src/types/toolPermissionContext.ts155export function applyToolPermissionContextUpdates(CODE
LOWpackages/core/src/types/toolPermissionContext.ts166export function isPersistableToolPermissionDestination(CODE
LOWpackages/core/src/types/toolPermissionContext.ts176export function canUserModifyToolPermissionUpdate(CODE
LOW…/src/test/unit/queryllm-model-pointer-fallback.test.ts30 async function stubQueryLLMWithPromptCaching(CODE
LOWpackages/core/src/test/unit/ripgrep-bundled.test.ts52function getPlatformExecutableName(): string {CODE
LOW…/src/test/unit/queryllm-tool-description-cache.test.ts50 async function stubQueryLLMWithPromptCaching(CODE
LOW…ages/core/src/test/unit/file-permission-engine.test.ts26function createCautiousToolPermissionContext(CODE
LOW…ges/core/src/test/unit/messages-ui-consistency.test.ts24function makeToolUseAssistantWithSiblings(CODE
493 more matches not shown…
Structural Annotation Overuse47 hits · 78 pts
SeverityFileLineSnippetContext
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts43 // Step 1: Create adapterCOMMENT
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts48 // Step 2: Build request with STREAMING enabled (this is the key!)COMMENT
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts62 // Step 3: Create requestCOMMENT
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts68 // Step 4: Make API callCOMMENT
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts72 // Step 5: TRACK STREAM STATE before adapterCOMMENT
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts82 // Step 6: Check if body is a ReadableStreamCOMMENT
LOW…ore/src/test/diagnostic/diagnostic-stream-test.test.ts111 // Step 7: Parse responseCOMMENT
LOW…ore/src/test/diagnostic/diagnostic-stream-test.test.ts138 // Step 8: Validate resultCOMMENT
LOW…e/src/test/regression/responses-api-regression.test.ts40 // Step 1: Get response with responseIdCOMMENT
LOW…e/src/test/regression/responses-api-regression.test.ts56 // Step 2: Convert to AssistantMessage (like the refactored CLI pipeline does)COMMENT
LOW⚡packages/core/src/services/systemPrompt.ts19 // Step 0: Add GPT-5 Agent persistence support for coding tasksCOMMENT
LOWpackages/builtin-skills/skills/skill-judge/SKILL.md496### Step 1: First Pass — Knowledge Delta ScanCOMMENT
LOW⚡packages/builtin-skills/skills/skill-judge/SKILL.md511### Step 2: Structure AnalysisCOMMENT
LOW⚡packages/builtin-skills/skills/skill-judge/SKILL.md521### Step 3: Score Each DimensionCOMMENT
LOW⚡packages/builtin-skills/skills/skill-judge/SKILL.md528### Step 4: Calculate Total & GradeCOMMENT
LOWpackages/builtin-skills/skills/skill-judge/SKILL.md544### Step 5: Generate ReportCOMMENT
LOWpackages/builtin-skills/skills/skill-creator/SKILL.md215### Step 1: Understanding the Skill with Concrete ExamplesCOMMENT
LOWpackages/builtin-skills/skills/skill-creator/SKILL.md232### Step 2: Planning the Reusable Skill ContentsCOMMENT
LOWpackages/builtin-skills/skills/skill-creator/SKILL.md256### Step 3: Initializing the SkillCOMMENT
LOWpackages/builtin-skills/skills/skill-creator/SKILL.md279### Step 4: Edit the SkillCOMMENT
LOWpackages/builtin-skills/skills/skill-creator/SKILL.md320### Step 5: Packaging a SkillCOMMENT
LOWpackages/builtin-skills/skills/skill-creator/SKILL.md347### Step 6: IterateCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md125### Step 1: Understand Existing CodeCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md148### Step 2: Design IntegrationCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md173### Step 3: ImplementCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md258### Step 1: Profile First (ALWAYS)COMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md269### Step 2: Identify BottleneckCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md283### Step 3: Propose OptimizationCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md300### Step 4: Implement with BenchmarksCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md323### Step 1: Understand Current StateCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md340### Step 2: Ensure Test CoverageCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md352### Step 3: Plan Safe TransformationsCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md370### Step 3: Incremental ExecutionCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md442### Step 1: Assess Current StateCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md457### Step 2: Migration PlanCOMMENT
LOW…lls/vibe-coding/references/scenarios/complete-guide.md491### Step 3: Execute with CheckpointsCOMMENT
LOW…kills/vibe-coding/references/scenarios/optimization.md21## Step 1: Profile FirstCOMMENT
LOW…kills/vibe-coding/references/scenarios/optimization.md44## Step 2: Identify BottleneckCOMMENT
LOW…kills/vibe-coding/references/scenarios/optimization.md63## Step 3: Propose OptimizationCOMMENT
LOW…kills/vibe-coding/references/scenarios/optimization.md82## Step 4: Implement with BenchmarksCOMMENT
LOW…lls/skills/vibe-coding/references/scenarios/feature.md15## Step 1: Understand Existing CodeCOMMENT
LOW…lls/skills/vibe-coding/references/scenarios/feature.md32## Step 2: Design IntegrationCOMMENT
LOW…lls/skills/vibe-coding/references/scenarios/feature.md58## Step 3: ImplementCOMMENT
LOW…skills/vibe-coding/references/scenarios/refactoring.md21## Step 1: Understand Current StateCOMMENT
LOW…skills/vibe-coding/references/scenarios/refactoring.md40## Step 2: Ensure Test CoverageCOMMENT
LOW…skills/vibe-coding/references/scenarios/refactoring.md56## Step 3: Plan Safe TransformationsCOMMENT
LOW…skills/vibe-coding/references/scenarios/refactoring.md76## Step 4: Incremental ExecutionCOMMENT
Verbosity Indicators11 hits · 22 pts
SeverityFileLineSnippetContext
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts43 // Step 1: Create adapterCOMMENT
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts48 // Step 2: Build request with STREAMING enabled (this is the key!)COMMENT
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts62 // Step 3: Create requestCOMMENT
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts68 // Step 4: Make API callCOMMENT
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts72 // Step 5: TRACK STREAM STATE before adapterCOMMENT
LOW⚡…ore/src/test/diagnostic/diagnostic-stream-test.test.ts82 // Step 6: Check if body is a ReadableStreamCOMMENT
LOW…ore/src/test/diagnostic/diagnostic-stream-test.test.ts111 // Step 7: Parse responseCOMMENT
LOW…ore/src/test/diagnostic/diagnostic-stream-test.test.ts138 // Step 8: Validate resultCOMMENT
LOW…e/src/test/regression/responses-api-regression.test.ts40 // Step 1: Get response with responseIdCOMMENT
LOW…e/src/test/regression/responses-api-regression.test.ts56 // Step 2: Convert to AssistantMessage (like the refactored CLI pipeline does)COMMENT
LOW⚡packages/core/src/services/systemPrompt.ts19 // Step 0: Add GPT-5 Agent persistence support for coding tasksCOMMENT
Magic Placeholder Names2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHdocs/develop/configuration.md52 "apiKey": "<YOUR_API_KEY>",CODE
HIGHdocs/develop/configuration.md52 "apiKey": "<YOUR_API_KEY>",CODE
Excessive Try-Catch Wrapping7 hits · 9 pts
SeverityFileLineSnippetContext
LOW…ltin-skills/skills/skill-creator/scripts/init_skill.py217 except Exception as e:CODE
LOW…ltin-skills/skills/skill-creator/scripts/init_skill.py232 except Exception as e:CODE
LOW…ltin-skills/skills/skill-creator/scripts/init_skill.py259 except Exception as e:CODE
LOW…n-skills/skills/skill-creator/scripts/package_skill.py80 except Exception as e:CODE
MEDIUM…in-skills/skills/webapp-testing/scripts/with_server.py49 print("Error: No command specified to run")CODE
MEDIUM…in-skills/skills/webapp-testing/scripts/with_server.py54 print("Error: Number of --server and --port arguments must match")CODE
LOW…ills/skills/mcp-builder/reference/python_mcp_server.md467 except Exception as e:CODE
Fake / Example Data6 hits · 6 pts
SeverityFileLineSnippetContext
LOW…ills/webapp-testing/examples/static_html_automation.py21 page.fill('#name', 'John Doe')CODE
LOW…ills/skills/mcp-builder/reference/python_mcp_server.md306 "name": str, # Full name (e.g., "John Doe")STRING
LOW…ills/skills/mcp-builder/reference/python_mcp_server.md572 return {"id": user_id, "name": "John Doe", "email": "john@example.com"}CODE
LOW…skills/skills/mcp-builder/reference/node_mcp_server.md173 "name": string, // Full name (e.g., "John Doe")CODE
LOW…kills/skills/vibe-coding/references/domains/testing.md132const user = { id: 1, name: 'Test', email: 'test@test.com', role: 'admin', ... };CODE
LOW…i/components/ModelSelector/flow/actions/fetchModels.ts159 apiKey: apiKey || 'dummy-key-for-ollama', // Ollama doesn't need a real keyCODE
Cross-Language Confusion (JS/TS)1 hit · 5 pts
SeverityFileLineSnippetContext
HIGH…es/tools/src/tools/interaction/TodoWriteTool/prompt.ts105print("Hello World")CODE
Cross-Language Confusion2 hits · 5 pts
SeverityFileLineSnippetContext
HIGH…in-skills/skills/webapp-testing/scripts/with_server.py12 --server "cd backend && python server.py" --port 3000 \STRING
HIGH…in-skills/skills/webapp-testing/scripts/with_server.py13 --server "cd frontend && npm run dev" --port 5173 \STRING
Docstring Block Structure1 hit · 5 pts
SeverityFileLineSnippetContext
HIGH…ills/skills/mcp-builder/reference/python_mcp_server.md282 Search for users in the Example system by name, email, or team. This tool searches across all user profiles inSTRING
Over-Commented Block4 hits · 4 pts
SeverityFileLineSnippetContext
LOWscripts/seccomp/gen-unix-block-bpf.c1#include <errno.h>COMMENT
LOWpackages/core/src/utils/messages.ts1// IMPORTANT:COMMENT
LOWpackages/core/src/utils/log.ts1// IMPORTANT:COMMENT
LOWapps/cli/src/ui/hooks/useApiKeyVerification.ts21COMMENT
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOW…ltin-skills/skills/skill-creator/scripts/init_skill.py208 # Check if directory already existsCOMMENT
Deep Nesting1 hit · 1 pts
SeverityFileLineSnippetContext
LOW…n-skills/skills/skill-creator/scripts/package_skill.py19CODE
Unused Imports1 hit · 1 pts
SeverityFileLineSnippetContext
LOW…-skills/skills/skill-creator/scripts/quick_validate.py7CODE