2.1

Adjusted Signal

2.1

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

29.9K

Stars

TypeScript

Language

4.2M

Lines of Code

22.1K

Files

8.2K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 9.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 7760 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.0/100 · LOW

Are imports declared and package/API names verified? 371 finding(s).

Agent Over-Engineering Ratio 8.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 7453 finding(s).

PR Review Velocity Impact 10.1/100 · LOW

Which changes need focused human review? 8199 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 21HIGH 64MEDIUM 107LOW 8007

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 8199 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers7384 hits · 7472 pts

Severity	File	Line	Snippet	Context
LOW	scripts/check-icon-path-precision.ts	122	function precisionExceptionFromChild(	CODE
LOW	scripts/check-api-validation-contracts.ts	464	function isContractFetchHelperCall(line: string, matchIndex: number): boolean {	CODE
LOW	scripts/check-api-validation-contracts.ts	609	function findUntypedResponseFindings(	CODE
LOW	scripts/check-api-validation-contracts.ts	679	function findSameOriginApiFetchFindings(	CODE
LOW	scripts/check-api-validation-contracts.ts	892	function buildBoundaryPolicyMetrics(	CODE
LOW	scripts/check-api-validation-contracts.ts	1027	function printBoundaryPolicyMetric(metric: BoundaryPolicyMetric) {	CODE
LOW	scripts/check-api-validation-contracts.ts	1034	function printRawFetchAndDoubleCastMetrics(	CODE
LOW	scripts/check-api-validation-contracts.ts	1127	function printBoundaryContractDrift(	CODE
LOW	scripts/bump-npm-package-versions.ts	166	export function updateLockfileWorkspaceVersion(	CODE
LOW	scripts/check-openapi-specs.ts	456	function collectSchemaHolderExamples(	CODE
LOW	scripts/generate-deployment-config.ts	34	function buildOAuthDeploymentFacts(): CanonicalOAuthDeploymentFacts {	CODE
LOW	scripts/generate-deployment-config.ts	74	function renderOAuthDeploymentFacts(facts: CanonicalOAuthDeploymentFacts): string {	CODE
LOW	scripts/check-principal-kind-parity.ts	44	export function parsePrincipalKindLiterals(source: string): PrincipalKindDeclaration[] {	CODE
LOW	scripts/check-test-patterns.ts	148	export function findStubAndHookViolations(	CODE
LOW	scripts/generate-v2-mcp-operations.ts	164	async function loadUnpublishedOperationKeys(): Promise<Set<string>> {	CODE
LOW	scripts/check-permission-group-enforcement.ts	247	export function parseOperationCapabilities(source: string): ParsedOperations {	CODE
LOW	scripts/check-permission-group-enforcement.ts	442	export function parseOperationRegistryMembers(source: string): OperationRegistryMember[] {	CODE
LOW	scripts/check-permission-group-enforcement.test.ts	102	function defineCredentialUserOperation(id: string, capability: string) {	CODE
LOW	scripts/check-permission-group-enforcement.test.ts	157	function defineCredentialUserOperation(id: string) {	CODE
LOW	scripts/generate-v2-cli-api.ts	89	export async function loadWorkspaceKeyDenialMarkers(): Promise<readonly string[]> {	CODE
LOW	scripts/check-integration-access.ts	140	export function findIntegrationAccessViolations(	CODE
LOW	scripts/generate-docs.ts	40	export function defaultIntegrationDocsUrl(blockType: string): string {	CODE
LOW	scripts/generate-docs.ts	854	export function extractUserSettableParamIds(	CODE
LOW	scripts/generate-docs.ts	1082	function collectShorthandPropertyNames(body: string, into: Set<string>): void {	CODE
LOW	scripts/generate-docs.ts	1141	export function extractMapperWrittenParamIds(blockContent: string): string[] {	CODE
LOW	scripts/generate-docs.ts	1219	export function extractBlockSuppliedParamIds(	CODE
LOW	scripts/generate-docs.ts	1257	function extractOperationsFromContent(blockContent: string): BlockOperation[] {	CODE
LOW	scripts/generate-docs.ts	1316	function extractSwitchCaseToolMapping(fileContent: string): Map<string, string> {	CODE
LOW	scripts/generate-docs.ts	1497	function precededByRegexStartKeyword(content: string, index: number): boolean {	CODE
LOW	scripts/generate-docs.ts	1784	function isEnvironmentBoundCredential(blockContent: string): boolean {	CODE
LOW	scripts/generate-docs.ts	1924	function writeIntegrationsIconMapping(iconMapping: Record<string, IconRef>): void {	CODE
LOW	scripts/generate-docs.ts	2303	function extractSpreadSubBlocksOperations(	CODE
LOW	scripts/generate-docs.ts	2318	export function extractInheritedBlockCategory(	CODE
LOW	scripts/generate-docs.ts	2341	function extractBlockConfigFromContent(	CODE
LOW	scripts/generate-docs.ts	2567	function extractStringPropertyFromContent(	CODE
LOW	scripts/generate-docs.ts	2616	function extractEnumPropertyFromContent(content: string, propName: string): string \| null {	CODE
LOW	scripts/generate-docs.ts	2645	function extractArrayPropertyFromContent(content: string, propName: string): string[] \| null {	CODE
LOW	scripts/generate-docs.ts	2682	function extractIconNameFromContent(content: string): string \| null {	CODE
LOW	scripts/generate-docs.ts	2756	function extractOutputsFromContent(content: string): Record<string, any> {	CODE
LOW	scripts/generate-docs.ts	2815	function extractToolsAccessFromContent(content: string): string[] {	CODE
LOW	scripts/generate-docs.ts	3034	function resolveConstFromTypesContent(	CODE
LOW	scripts/generate-docs.ts	3231	function extractOutputsFromToolContent(	CODE
LOW	scripts/generate-docs.ts	3358	function extractObjectPropertyBody(content: string, propertyName: string): string \| null {	CODE
LOW	scripts/generate-docs.ts	4781	function environmentBoundDataverseScopes(sources: OAuthDocsSources): string[] {	CODE
LOW	scripts/generate-docs.ts	5009	function formatTriggerProviderName(provider: string): string {	CODE
LOW	scripts/generate-docs.ts	5098	function normalizeTriggerOutputNode(node: Record<string, any>): Record<string, any> {	CODE
LOW	scripts/generate-docs.ts	5378	function withReferenceDetailsImport(markdown: string): string {	CODE
LOW	scripts/generate-docs.ts	5390	function generateTriggerProviderDoc(	CODE
LOW	scripts/generate-docs.ts	5441	async function collectPreviewOnlyTriggerIds(): Promise<Set<string>> {	CODE
LOW	scripts/check-zustand-v5-selectors.ts	478	function returnsPrimitiveDerivedValue(selector: string): boolean {	CODE
LOW	scripts/check-zustand-v5-selectors.ts	486	function usesReferenceFallbackOnlyInsideBlockBody(selector: string): boolean {	CODE
LOW	scripts/check-zustand-v5-selectors.ts	499	function isPrimitiveReturnExpression(expression: string, selector: string): boolean {	CODE
LOW	scripts/check-zustand-v5-selectors.ts	519	function isIdentifierAssignedPrimitive(identifier: string, selector: string): boolean {	CODE
LOW	scripts/generate-v2-cli-api.test.ts	85	function workspaceKeyDenialMarkers(): string[] {	CODE
LOW	scripts/sync-tool-catalog.ts	75	function renderRuntimeSchemaModule(catalog: { tools: Record<string, unknown>[] }): string {	CODE
LOW	scripts/generate-cli-docs.ts	1256	function assertEveryFieldDocumented(): void {	CODE
LOW	scripts/create-single-release.ts	105	export function findPreviousVersionCommit(currentCommit: VersionCommit): VersionCommit \| null {	CODE
LOW	scripts/create-single-release.ts	175	async function getCommitsBetweenVersions(	CODE
LOW	scripts/check-tool-request-boundary.ts	240	function collectFunctionLocalBindings(fn: SyntaxNode, locals: Map<string, SyntaxNode>): void {	CODE
LOW	scripts/check-tool-request-boundary.ts	329	function functionReturnsInternalPath(	CODE
7324 more matches not shown…

Fake / Example Data296 hits · 316 pts

Severity	File	Line	Snippet	Context
LOW	.agents/skills/design-taste-frontend/SKILL.md	591	### 9.D Content & Data ("Jane Doe" Effect)	COMMENT
LOW	.agents/skills/design-taste-frontend/SKILL.md	592	* NO generic names. "John Doe", "Sarah Chan", "Jack Su" → use creative, realistic, locale-appropriate names.	COMMENT
LOW	packages/utils/src/string.ts	73	* slugify('Acme Corp') // 'acme-corp'	COMMENT
LOW	packages/deployment-config/src/env-capabilities.ts	203	return normalized !== '' && normalized !== 'placeholder'	CODE
LOW	packages/audit/src/log.test.ts	62	actorEmail: 'test@test.com',	CODE
LOW	packages/emcn/src/components/combobox/combobox.tsx	111	'value' \| 'onChange' \| 'disabled' \| 'placeholder'	CODE
LOW	packages/sim-setup/src/setup-status.ts	24	reason: 'missing' \| 'placeholder' \| 'invalid secret' \| 'invalid URL'	CODE
LOW	packages/sim-setup/src/setup-status.ts	57	issues.push({ key, reason: 'placeholder' })	CODE
LOW	apps/desktop/native/computer-use/ComputerUse.swift	324	if let placeholder = attribute(element, kAXPlaceholderValueAttribute) as? String { node["placeholder"] =	CODE
LOW	apps/desktop/src/main/browser-agent/page-functions.ts	481	el.getAttribute('placeholder') \|\|	CODE
LOW	apps/desktop/src/main/browser-agent/page-functions.ts	525	'placeholder',	CODE
LOW	apps/desktop/src/main/browser-agent/page-functions.ts	1656	const label = field.getAttribute('aria-label') \|\| field.getAttribute('placeholder') \|\| ''	CODE
LOW	apps/desktop/src/main/browser-agent/page-functions.ts	2271	const label = field.getAttribute('aria-label') \|\| field.getAttribute('placeholder') \|\| ''	CODE
LOW	apps/docs/openapi-v2-tables.json	7051	"name": "Jane Doe",	CODE
LOW	apps/sim/blocks/blocks/mysql.ts	289	placeholder: '{\n "name": "John Doe",\n "email": "john@example.com",\n "active": true\n}',	CODE
LOW	apps/sim/blocks/blocks/mysql.ts	298	placeholder: '{\n "name": "Jane Doe",\n "email": "jane@example.com"\n}',	CODE
LOW	apps/sim/blocks/blocks/gamma.ts	181	{ label: 'Placeholder', id: 'placeholder' },	CODE
LOW	apps/sim/blocks/blocks/google_sheets.ts	161	- "list of employees with name and email" -> [{"name": "John Doe", "email": "john@example.com"}, {"name": "Jane Smith",	CODE
LOW	apps/sim/blocks/blocks/google_sheets.ts	231	- "append customer info" -> [{"name": "Acme Corp", "contact": "John Smith", "status": "Active"}]	CODE
LOW	apps/sim/blocks/blocks/google_sheets.ts	572	- "list of employees with name and email" -> [{"name": "John Doe", "email": "john@example.com"}, {"name": "Jane Smith",	CODE
LOW	apps/sim/blocks/blocks/google_sheets.ts	632	- "append customer info" -> [{"name": "Acme Corp", "contact": "John Smith", "status": "Active"}]	CODE
LOW	apps/sim/blocks/blocks/luma.ts	301	placeholder: '[{"email": "user@example.com", "name": "John Doe"}]',	CODE
LOW	apps/sim/blocks/blocks/luma.ts	301	placeholder: '[{"email": "user@example.com", "name": "John Doe"}]',	CODE
LOW	apps/sim/blocks/blocks/luma.ts	312	- "invite John Doe at john@example.com and Jane Smith at jane@example.com" -> [{"email": "john@example.com", "name": "Jo	CODE
LOW	apps/sim/blocks/blocks/intercom.ts	697	Example: [{"id": "contact_id_1"}, {"id": "contact_id_2"}] or [{"email": "user@example.com"}]	CODE
LOW	apps/sim/blocks/blocks/revenuecat.ts	342	placeholder: '{"$email": {"value": "user@example.com", "updated_at_ms": 1709195668093}}',	CODE
LOW	apps/sim/blocks/blocks/google_contacts.ts	140	placeholder: 'Acme Corp',	CODE
LOW	apps/sim/blocks/blocks/stripe.ts	418	placeholder: '{"line1": "123 Main St", "city": "New York", "country": "US"}',	CODE
LOW	apps/sim/blocks/blocks/square.ts	397	placeholder: '{"address_line_1": "123 Main St", "locality": "New York", "country": "US"}',	CODE
LOW	apps/sim/blocks/blocks/docusign.ts	122	placeholder: 'John Doe',	CODE
LOW	apps/sim/blocks/blocks/docusign.ts	187	placeholder: '[{"roleName":"Signer","name":"John Doe","email":"john@example.com"}]',	CODE
LOW	apps/sim/blocks/blocks/microsoft_dynamics_365.ts	295	placeholder: '{"name":"Contoso","telephone1":"555-0100"}',	CODE
LOW	apps/sim/blocks/blocks/quickbooks.ts	1832	'{"line1":"123 Main St","city":"San Francisco","countrySubDivisionCode":"CA","postalCode":"94105"}',	CODE
LOW	apps/sim/blocks/blocks/quickbooks.ts	1852	'{"line1":"123 Main St","city":"San Francisco","countrySubDivisionCode":"CA","postalCode":"94105"}',	CODE
LOW	apps/sim/blocks/blocks/quickbooks.ts	1869	'{"line1":"123 Main St","city":"San Francisco","countrySubDivisionCode":"CA","postalCode":"94105"}',	CODE
LOW	apps/sim/blocks/blocks/datagma.ts	60	placeholder: 'John Doe',	CODE
LOW	apps/sim/blocks/blocks/identity_center.ts	174	placeholder: 'user@example.com',	CODE
LOW	apps/sim/blocks/blocks/sailpoint.ts	491	placeholder: '["John Doe", "2c9180...id"]',	CODE
LOW	apps/sim/blocks/blocks/mailgun.ts	343	placeholder: 'John Doe',	CODE
LOW	apps/sim/blocks/blocks/mailgun.ts	362	{"first_name": "John", "last_name": "Doe", "company": "Acme Corp", "plan": "premium"}	CODE
LOW	apps/sim/blocks/blocks/google_groups.ts	303	placeholder: 'user@example.com',	CODE
LOW	apps/sim/blocks/blocks/leadmagic.ts	90	placeholder: 'John Doe',	CODE
LOW	apps/sim/blocks/blocks/sendgrid.ts	220	"customer_name": "John Doe",	CODE
LOW	apps/sim/blocks/blocks/sendgrid.ts	374	placeholder: '[{"email": "user@example.com", "first_name": "John"}]',	CODE
LOW	apps/sim/blocks/blocks/sharepoint.ts	471	-> {"Title": "John Smith", "Email": "john@example.com", "WorkPhone": "555-1234"}	CODE
LOW	apps/sim/blocks/blocks/crowdstrike.ts	474	placeholder: 'Jane Doe',	CODE
LOW	apps/sim/blocks/blocks/ketch.ts	103	placeholder: '{"email": "user@example.com"}',	CODE
LOW	apps/sim/blocks/blocks/ketch.ts	159	placeholder: '{"email": "user@example.com", "firstName": "John", "lastName": "Doe"}',	CODE
LOW	apps/sim/blocks/blocks/microsoft_word.ts	222	placeholder: '{"{{customer_name}}": "Acme Corp", "{{date}}": "2026-01-31"}',	CODE
LOW	apps/sim/blocks/blocks/microsoft_word.ts	227	'Generate a JSON object mapping each placeholder in a Word template to the value that should replace it, e.g.	CODE
LOW	apps/sim/blocks/blocks/microsoft_word.ts	621	'# Fill a Word Template\n\nTurn an approved template into a finished document without touching the template itse	CODE
LOW	apps/sim/blocks/blocks/findymail.ts	98	placeholder: 'John Doe',	CODE
LOW	apps/sim/blocks/blocks/loops.ts	258	"company": "Acme Inc",	CODE
LOW	apps/sim/blocks/blocks/microsoft_dataverse.ts	206	'JSON object with column values (e.g., {"name": "Contoso", "telephone1": "555-0100"})',	CODE
LOW	apps/sim/blocks/blocks/posthog.ts	544	placeholder: '{"email": "user@example.com", "plan": "enterprise"}',	CODE
LOW	apps/sim/blocks/blocks/posthog.ts	563	"email": "user@example.com",	CODE
LOW	apps/sim/blocks/blocks/zep.ts	91	placeholder: 'user@example.com',	CODE
LOW	apps/sim/blocks/blocks/enrow.ts	46	placeholder: 'John Doe',	CODE
LOW	apps/sim/blocks/blocks/smartlead.ts	583	placeholder: 'Acme Corp',	CODE
LOW	apps/sim/blocks/blocks/cloudflare.ts	2280	'Generate a JSON array of Cloudflare Access rules from the user\'s description. These are evaluated with OR lo	CODE
236 more matches not shown…

Hallucination Indicators21 hits · 230 pts

Severity	File	Line	Snippet	Context
CRITICAL	apps/desktop/src/main/server-window.test.ts	59	const found = win.webContents.on.mock.calls.find(([event]) => event === name)?.[1]	CODE
CRITICAL	apps/desktop/src/main/shell-theme.test.ts	18	const read = win.webContents.ipc.handle.mock.calls.find(	CODE
CRITICAL	apps/desktop/src/main/load-health.test.ts	27	const handler = win.webContents.on.mock.calls.find(([name]) => name === 'did-fail-load')?.[1]	CODE
CRITICAL	apps/desktop/src/main/dialogs.test.ts	22	const handler = win.webContents.ipc.on.mock.calls.find(	CODE
CRITICAL	apps/desktop/src/main/browser-credentials/fill.test.ts	267	const request = context.contents.send.mock.calls.at(-1)?.[1]	CODE
CRITICAL	apps/desktop/src/main/browser-credentials/fill.test.ts	395	const request = context.contents.send.mock.calls.at(-1)![1]	CODE
CRITICAL	apps/docs/lib/content/request-samples.ts	74	? `request.Content!.Headers.ContentType = System.Net.Http.Headers.MediaTypeHeaderValue.Parse(${quote(value)});`	CODE
CRITICAL	apps/realtime/src/handlers/file-doc.test.ts	961	const reply = b.socket.emit.mock.calls.find(	CODE
CRITICAL	apps/sim/app/workspace/[workspaceId]/files/prefetch.ts	126	return listWorkspaceFileFoldersContract.response.schema.shape.folders.parse(folders)	CODE
CRITICAL	apps/sim/hooks/queries/mothership-chats.ts	285	const mode = getMothershipChatResponseSchema.shape.chat.shape.mode.parse(chat.mode)	CODE
CRITICAL	apps/sim/hooks/queries/mothership-chats.ts	294	effort: getMothershipChatResponseSchema.shape.chat.shape.effort.parse(chat.effort ?? null),	CODE
CRITICAL	apps/sim/lib/auth/sso/provider-repository.ts	147	const body = plugin.endpoints.registerSSOProvider.options.body.parse(input)	CODE
CRITICAL	apps/sim/lib/auth/sso/provider-repository.ts	214	const body = plugin.endpoints.updateSSOProvider.options.body.parse(input)	CODE
CRITICAL	apps/sim/lib/api/contracts/v2/knowledge.ts	106	strategy: knowledgeBaseDataSchema.shape.chunkingConfig.shape.strategy.describe(	CODE
CRITICAL	apps/sim/lib/api/contracts/v2/knowledge.ts	109	strategyOptions: knowledgeBaseDataSchema.shape.chunkingConfig.shape.strategyOptions.describe(	CODE
CRITICAL⚡	apps/sim/lib/api/contracts/v2/workflows.ts	2147	id: v1WorkflowExportPayloadSchema.shape.workflow.shape.id.describe(	CODE
CRITICAL⚡	apps/sim/lib/api/contracts/v2/workflows.ts	2150	name: v1WorkflowExportPayloadSchema.shape.workflow.shape.name.describe(	CODE
CRITICAL⚡	apps/sim/lib/api/contracts/v2/workflows.ts	2153	description: v1WorkflowExportPayloadSchema.shape.workflow.shape.description.describe(	CODE
CRITICAL⚡	apps/sim/lib/api/contracts/v2/workflows.ts	2156	workspaceId: v1WorkflowExportPayloadSchema.shape.workflow.shape.workspaceId.describe(	CODE
CRITICAL	apps/sim/lib/api/contracts/v2/custom-tools.ts	64	name: customToolSchemaSchema.shape.function.shape.name.describe(	CODE
CRITICAL	apps/sim/lib/api/contracts/v2/custom-tools.ts	67	description: customToolSchemaSchema.shape.function.shape.description.describe(	CODE

Over-Commented Block180 hits · 179 pts

Severity	File	Line	Snippet	Context
LOW	turbo.json	1	{	COMMENT
LOW	docker-compose.prod.yml	21	# TRUSTED_ORIGINS: comma-separated public origins to trust for auth in	COMMENT
LOW	scripts/generate-image-manifest.ts	161	const entries = input.images	COMMENT
LOW	scripts/sync-metrics-contract.ts	81	const constLines = pairs.map((p) => ` ${p.ident}: ${JSON.stringify(p.name)},`).join('\n')	COMMENT
LOW	packages/sim-cli/src/contract/commands.ts	281	},	COMMENT
LOW	packages/sim-cli/src/contract/commands.ts	621	compareWorkflowVersions: { command: 'workflows versions compare' },	COMMENT
LOW	packages/sim-cli/src/contract/commands.ts	2001	// Every other `--limit` in the CLI is a page size typed as a bare	COMMENT
LOW	packages/sim-cli/src/contract/commands.ts	2041	},	COMMENT
LOW	packages/sim-cli/src/contract/commands.ts	2161	// this same leaf and renders by hand. These stay omitted because sending	COMMENT
LOW	packages/sim-cli/src/contract/commands.ts	2321	abortFileUpload: { hidden: true },	COMMENT
LOW	packages/sim-cli/src/config/profile.ts	601	// `normalizeWorkspaceId`: `new URL()` tolerates padding and hands the padded	COMMENT
LOW	packages/db/scripts/register-sso-provider.ts	641	// constraint (sso_provider.provider_id is a plain index, and prod already	COMMENT
LOW	packages/db/scripts/migrate-block-api-keys-to-byok.ts	1	#!/usr/bin/env bun	COMMENT
LOW	packages/db/scripts/migrate-block-api-keys-to-byok.ts	21	// Optional guard: only migrate a key for <providerId>	COMMENT
LOW	.github/workflows/disk-gc.yml	1	name: disk-gc	COMMENT
LOW	.github/workflows/disk-gc.yml	101		COMMENT
LOW	.github/workflows/codeql.yml	1	name: codeql	COMMENT
LOW	.github/workflows/codeql.yml	21	push:	COMMENT
LOW	.github/workflows/codeql.yml	41	- '*/.js'	COMMENT
LOW	.github/workflows/checks.yml	561	# Lint, audits, type-check and the schema sync check: about two minutes of mostly cached work,	COMMENT
LOW	.github/workflows/checks.yml	641	# `⚠ … skipping` line; the migration audit printed `✓ No new migrations to	COMMENT
LOW	.github/workflows/checks.yml	841	fi	COMMENT
LOW	.github/workflows/helm.yml	81	# external-secrets all gate on it). Beyond `helm lint` it runs yamllint over	COMMENT
LOW	.github/workflows/helm.yml	321	# forces a version bump on every chart change, so a version that is	COMMENT
LOW	.github/workflows/migrate.yml	41	# One migrate job per environment at a time, so a manual dispatch queues	COMMENT
LOW	.github/workflows/companion.yml	1	name: companion	COMMENT
LOW	.github/workflows/ci.yml	1	name: ci	COMMENT
LOW	.github/workflows/ci.yml	161	matrix:	COMMENT
LOW	.github/workflows/ci.yml	861	# .github/actions/image): the extra manifests they add to an index	COMMENT
LOW	.github/workflows/ci.yml	981	# digest can prove. ghcr holds the latest tags back when	COMMENT
LOW	.github/workflows/ci.yml	1081		COMMENT
LOW	.github/codeql/codeql-config.yml	21	- '/e2e/'	COMMENT
LOW	.github/codeql/codeql-config.yml	41	# (incremental) analysis. Extraction is ~53% of a run and is exactly what overlay	COMMENT
LOW	.github/scripts/ci-gate.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.github/scripts/http-e2e.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.github/scripts/stop-session.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.github/actions/image/action.yml	81	sbom: false	COMMENT
LOW	.github/actions/image/action.yml	101	#	COMMENT
LOW	.github/actions/image/action.yml	121	echo "::warning::max-cache-size-mb must be a positive whole number of MB, got '${KEEP_MB}' — skipping prune ra	COMMENT
LOW	.github/actions/image/action.yml	141	# (moby/buildkit#1198). The builder's post step then SIGTERMs buildkitd	COMMENT
LOW	apps/pii/server.py	181	# idle copy of every model.	COMMENT
LOW	apps/desktop/src/main/terminal/tmux.ts	401	try {	COMMENT
LOW	apps/desktop/src/main/browser-agent/page-functions.ts	2101	// natively, so Tab alone is enough to get there. Treated like a	COMMENT
LOW	apps/desktop/src/main/browser-agent/driver.ts	3801	const targetFrame = frameExecutionTarget(target, contents)	COMMENT
LOW	apps/desktop/src/main/browser-agent/session.ts	2401	// Electron's plugin switch only admits its internal plugins; the built-in	COMMENT
LOW	apps/docs/scripts/vercel-ignore-build.sh	1	#!/usr/bin/env bash	COMMENT
LOW	apps/docs/lib/redirects.ts	261	*/	COMMENT
LOW	apps/realtime/src/handlers/file-doc.ts	1081	broadcastLocal(io, name, encoding.toUint8Array(encoder), null)	COMMENT
LOW	apps/realtime/src/handlers/file-doc.ts	1101	// single-replica merge branch (where every agent frame is AGENT_SYNC_ORIGIN), and the cluster flag is	COMMENT
LOW	apps/realtime/src/handlers/workflow.ts	181	// mapping did not yet exist — cleanupEvictedSocket would find nothing to	COMMENT
LOW	apps/realtime/src/handlers/tables.ts	141	// cancels A the instant B arrives.	COMMENT
LOW	apps/realtime/src/handlers/tables.ts	281	// disconnected.	COMMENT
LOW	apps/realtime/src/handlers/connection.ts	41	// await: Socket.IO clears `socket.rooms` via leaveAll() as soon as the	COMMENT
LOW	apps/sim/blocks/blocks/zoho-desk.ts	2661	if (value !== undefined) result[name] = value	COMMENT
LOW	apps/sim/blocks/blocks/zoho-desk.ts	2721	// Always assigned, never conditionally: an emptied multi-select stores	COMMENT
LOW	apps/sim/blocks/blocks/zoho-desk.ts	2741	result.from = toPaginationValue(rawFrom, 0)	COMMENT
LOW	apps/sim/blocks/blocks/manageengine-sdp.ts	261	// The data center is a closed list rather than a base-URL field: the value	COMMENT
LOW	apps/sim/blocks/blocks/manageengine-sdp.ts	1061	// model addresses tool params by their real names. The tool is already	COMMENT
LOW	apps/sim/background/workflow-column-execution.ts	1001		COMMENT
LOW	apps/sim/tools/index.ts	401	params: Record<string, unknown>,	COMMENT
120 more matches not shown…

Cross-Language Confusion (JS/TS)30 hits · 170 pts

Severity	File	Line	Snippet	Context
HIGH	scripts/desktop-prune-workflow.test.ts	44	elif [ "$1 $2" = 'release delete' ]; then	CODE
HIGH	apps/sim/app/playground/page.tsx	115	print(f"Hello, {name}")	CODE
HIGH	…/deploy/components/deploy-modal/components/api/api.tsx	147	print(response.json())`	CODE
HIGH	…/deploy/components/deploy-modal/components/api/api.tsx	214	print(line.decode("utf-8"))`	CODE
HIGH	…/deploy/components/deploy-modal/components/api/api.tsx	293	print(execution)`	CODE
HIGH	…/deploy/components/deploy-modal/components/api/api.tsx	342	print(status)`	CODE
HIGH	…/deploy/components/deploy-modal/components/api/api.tsx	386	print(limits)`	CODE
HIGH	apps/sim/scripts/function-sandbox-parity-manifest.ts	319	print(${JSON.stringify(resultPrefix)} + json.dumps(manifest, separators=(",", ":")))	CODE
HIGH	apps/sim/scripts/probes/session-process.ts	23	print(os.getuid(), flush=True)	CODE
HIGH	apps/sim/lib/uploads/documents/compile.ts	362	print("xlsx recalc skipped:", __sim_recalc_err)	CODE
HIGH	…/sim/lib/workspace-files/render-document-for-vision.ts	84	print("__SIM_RESULT__=" + json.dumps({"first": first, "last": last, "total": total}))	CODE
HIGH	…/sim/lib/workspace-files/render-document-for-vision.ts	110	print("__SIM_RESULT__=" + json.dumps({"first": first, "last": last, "total": total}))`	CODE
HIGH	…ps/sim/lib/execution/remote-sandbox/session-process.ts	60	elif action == 'init':	CODE
HIGH	…ps/sim/lib/execution/remote-sandbox/session-process.ts	89	elif action == 'stop':	CODE
HIGH	…ps/sim/lib/execution/remote-sandbox/session-process.ts	117	print(json.dumps({'settled': True}))	CODE
HIGH	…/lib/execution/remote-sandbox/session-file-snapshot.ts	28	print('${FAILURE_MARKER} ' + reason + (' ' + detail if detail else ''))	CODE
HIGH	…s/sim/lib/execution/remote-sandbox/file-publication.ts	25	print('Destination already exists; use --force to overwrite it.', file=sys.stderr)	CODE
HIGH	…/tools/handlers/workbench-confidentiality.live.test.ts	1019	print(hashlib.sha256(source.read()).hexdigest())	CODE
HIGH	…/tools/handlers/workbench-confidentiality.live.test.ts	1021	print(','.join(archive.namelist()))	CODE
HIGH	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	231	elif len(prefix) < max_line_bytes:	CODE
HIGH	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	429	elif prefix == b'-':	CODE
HIGH	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	433	elif prefix == b'+':	CODE
HIGH⚡	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	523	elif comment['line'] in found and start_found[comment['start_line']] != found[comment['line']]:	CODE
HIGH⚡	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	533	elif operation == 'search':	CODE
HIGH⚡	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	535	elif operation == 'find':	CODE
HIGH⚡	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	537	elif operation == 'list':	CODE
HIGH⚡	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	539	elif operation == 'list_changed_files':	CODE
HIGH⚡	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	541	elif operation == 'read_file_diff':	CODE
HIGH⚡	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	543	elif operation == 'validate_comments':	CODE
HIGH⚡	…/sim/executor/handlers/pi/cloud/review/tools-script.ts	545	elif operation == 'preflight_checkout':	CODE

Structural Annotation Overuse90 hits · 142 pts

Severity	File	Line	Snippet	Context
LOW	.agents/skills/validate-integration/SKILL.md	20	## Step 1: Gather All Files	COMMENT
LOW	.agents/skills/validate-integration/SKILL.md	46	## Step 2: Pull API Documentation	COMMENT
LOW	.agents/skills/validate-integration/SKILL.md	70	## Step 3: Validate Tools	COMMENT
LOW	.agents/skills/validate-integration/SKILL.md	188	## Step 4: Validate Block	COMMENT
LOW	.agents/skills/validate-integration/SKILL.md	305	## Step 5: Validate OAuth Scopes (if OAuth service)	COMMENT
LOW	.agents/skills/validate-integration/SKILL.md	316	## Step 6: Validate Deployment Availability (if OAuth service)	COMMENT
LOW	.agents/skills/validate-integration/SKILL.md	337	## Step 7: Validate Pagination Consistency	COMMENT
LOW	.agents/skills/validate-integration/SKILL.md	345	## Step 8: Validate Memory Load Safety	COMMENT
LOW	.agents/skills/validate-integration/SKILL.md	370	## Step 9: Validate Error Handling	COMMENT
LOW	.agents/skills/validate-integration/SKILL.md	376	## Step 10: Report and Fix	COMMENT
LOW	.agents/skills/add-trigger/SKILL.md	52	## Step 1: Create `utils.ts`	COMMENT
LOW	.agents/skills/add-trigger/SKILL.md	105	## Step 2: Create Trigger Files	COMMENT
LOW	.agents/skills/add-trigger/SKILL.md	142	## Step 3: Register and Wire	COMMENT
LOW	.agents/skills/add-hosted-key/SKILL.md	22	## Step 1: Register the BYOK Provider ID	COMMENT
LOW	.agents/skills/add-hosted-key/SKILL.md	45	## Step 2: Research the API's Pricing Model and Rate Limits	COMMENT
LOW	.agents/skills/add-hosted-key/SKILL.md	79	## Step 3: Add `hosting` Config to the Tool	COMMENT
LOW	.agents/skills/add-hosted-key/SKILL.md	199	## Step 4: Hide the API Key Field When Hosted	COMMENT
LOW	.agents/skills/add-hosted-key/SKILL.md	254	## Step 5: Add to the BYOK Settings UI	COMMENT
LOW	.agents/skills/add-hosted-key/SKILL.md	271	## Step 6: Summarize Pricing and Throttling Comparison	COMMENT
LOW	.agents/skills/validate-permission-group-item/SKILL.md	17	## Step 1: Registry entry (`lib/permission-groups/fields.ts`)	COMMENT
LOW	.agents/skills/validate-permission-group-item/SKILL.md	26	## Step 2: Schemas, type, defaults, parser	COMMENT
LOW⚡	.agents/skills/validate-permission-group-item/SKILL.md	49	## Step 3: Admin UI (`ee/access-control/components/group-detail.tsx`)	COMMENT
LOW⚡	.agents/skills/validate-permission-group-item/SKILL.md	56	## Step 4: Capability rule	COMMENT
LOW⚡	.agents/skills/validate-permission-group-item/SKILL.md	66	## Step 5: Prove the enforcement — do not assume it	COMMENT
LOW	.agents/skills/validate-permission-group-item/SKILL.md	99	## Step 6: Tests	COMMENT
LOW	.agents/skills/validate-permission-group-item/SKILL.md	106	## Step 7: Run the checks	COMMENT
LOW	.agents/skills/validate-trigger/SKILL.md	19	## Step 1: Gather All Files	COMMENT
LOW	.agents/skills/validate-trigger/SKILL.md	43	## Step 2: Pull API Documentation	COMMENT
LOW	.agents/skills/validate-trigger/SKILL.md	66	## Step 3: Validate Trigger Definitions	COMMENT
LOW	.agents/skills/validate-trigger/SKILL.md	95	## Step 4: Validate Provider Handler	COMMENT
LOW	.agents/skills/validate-trigger/SKILL.md	134	## Step 5: Validate Automatic Subscription Lifecycle	COMMENT
LOW	.agents/skills/validate-trigger/SKILL.md	156	## Step 6: Validate Registration and Block Wiring	COMMENT
LOW	.agents/skills/validate-trigger/SKILL.md	175	## Step 7: Validate Security	COMMENT
LOW	.agents/skills/validate-trigger/SKILL.md	183	## Step 8: Report and Fix	COMMENT
LOW	.agents/skills/add-enrichment/SKILL.md	32	## Step 1: Pick the data-source tool(s)	COMMENT
LOW	.agents/skills/add-enrichment/SKILL.md	44	## Step 2: Verify hosted-key support — chain to `/add-hosted-key` if missing	COMMENT
LOW	.agents/skills/add-enrichment/SKILL.md	63	## Step 3: Write the enrichment definition	COMMENT
LOW	.agents/skills/add-enrichment/SKILL.md	118	## Step 4: Register it	COMMENT
LOW	.agents/skills/add-enrichment/SKILL.md	131	## Step 5: Verify	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	26	## Step 1: Gather All Files	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	56	## Step 2: Pull API Documentation	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	83	## Step 3: Validate API Endpoints	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	126	## Step 4: Validate OAuth Scopes (if OAuth connector)	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	154	## Step 5: Validate Pagination	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	178	## Step 6: Validate Data Transformation	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	208	## Step 7: Validate Tag Definitions and mapTags	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	223	## Step 8: Validate Config Fields and Validation	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	246	## Step 9: Validate getDocument	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	258	## Step 10: Validate General Quality	COMMENT
LOW	.agents/skills/validate-connector/SKILL.md	299	## Step 11: Report and Fix	COMMENT
LOW	.agents/skills/add-integration/SKILL.md	23	## Step 1: Research the API	COMMENT
LOW	.agents/skills/add-integration/SKILL.md	117	## Step 2: Create Tools	COMMENT
LOW	.agents/skills/add-integration/SKILL.md	185	## Step 3: Create Block	COMMENT
LOW	.agents/skills/add-integration/SKILL.md	213	## Step 4: Add Icon	COMMENT
LOW	.agents/skills/add-integration/SKILL.md	267	## Step 5: Create Triggers (Optional)	COMMENT
LOW	.agents/skills/add-integration/SKILL.md	274	## Step 6: Register Everything	COMMENT
LOW	.agents/skills/add-integration/SKILL.md	343	## Step 7: Configure Deployment Availability	COMMENT
LOW	.agents/skills/add-integration/SKILL.md	387	## Step 8: Generate and Validate the Catalog	COMMENT
LOW	.agents/skills/add-model/SKILL.md	27	## Step 1: Live source-of-truth lookup	COMMENT
LOW	.agents/skills/add-model/SKILL.md	46	## Step 2: Consumption Matrix (which provider honors which capability)	COMMENT
30 more matches not shown…

Modern AI Meta-Vocabulary49 hits · 104 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/db/scripts/migrate-block-api-keys-to-byok.ts	14	// translate, guardrails, pi, router_v2). These share one	COMMENT
MEDIUM	apps/sim/blocks/blocks/agent.ts	119	[{"role": "system", "content": "You are a Senior Code Reviewer with expertise in software architecture, security, and be	CODE
MEDIUM	apps/sim/blocks/blocks/dspy.ts	282	'# Reason with Chain of Thought\n\nAnswer a question through a self-hosted DSPy Chain of Thought program that ex	CODE
MEDIUM	apps/sim/blocks/blocks/guardrails.ts	39	docsLink: 'https://docs.sim.ai/workflows/blocks/guardrails',	CODE
MEDIUM	apps/sim/blocks/blocks/kalshi.ts	1091	'# Place a Limit Order\n\nSubmit a limit order on a chosen Kalshi market with guardrails.\n\n## Steps\n1. Get th	CODE
MEDIUM	apps/sim/blocks/blocks/supabase.ts	1578	'# Semantic Vector Search in Supabase\n\nFind the most relevant rows by embedding similarity, the retrieval step	CODE
MEDIUM	apps/sim/tools/gmail/read.ts	152	// For agentic workflows, we'll fetch the first message by default	COMMENT
MEDIUM	apps/sim/emails/broadcasts/v0.6.html	164	<p style="margin:0;color:#ffffff;font-family:-apple-system,'SF Pro Display','SF Pro Text','H	CODE
MEDIUM	apps/sim/lib/compare/data/sim.ts	462	url: 'https://docs.sim.ai/workflows/blocks/guardrails',	CODE
MEDIUM	apps/sim/lib/compare/data/sim.ts	1009	url: 'https://docs.sim.ai/workflows/blocks/guardrails',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/langflow.ts	403	url: 'https://docs.langflow.org/guardrails',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/langflow.ts	835	url: 'https://docs.langflow.org/guardrails',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/langchain.ts	1177	url: 'https://techcrunch.com/2025/10/21/open-source-agentic-startup-langchain-hits-1-25b-valuation/',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/make.ts	621	url: 'https://www.make.com/en/blog/agentic-operating-system',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/stackai.ts	37	url: 'https://www.stackai.com/blog/the-agentic-development-life-cycle-how-to-manage-ai-agents-at-scale',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/stackai.ts	48	url: 'https://www.stackai.com/blog/the-agentic-development-life-cycle-how-to-manage-ai-agents-at-scale',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/stackai.ts	210	url: 'https://www.stackai.com/blog/the-agentic-development-life-cycle-how-to-manage-ai-agents-at-scale',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/stackai.ts	225	url: 'https://www.stackai.com/blog/the-agentic-development-life-cycle-how-to-manage-ai-agents-at-scale',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/stackai.ts	382	url: 'https://www.stackai.com/insights/how-to-design-ai-agent-guardrails-best-practices-for-input-validation	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/stackai.ts	396	url: 'https://www.stackai.com/blog/introducing-stackai-human-in-the-loop-agentic-workflows-you-can-trust',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/stackai.ts	442	url: 'https://docs.stackai.com/agentic-adoption-and-security/scalability/prompt-library',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/stackai.ts	827	url: 'https://www.stackai.com/insights/how-to-design-ai-agent-guardrails-best-practices-for-input-validation	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	52	url: 'https://docs.workato.com/agentic/agentic.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	123	url: 'https://docs.workato.com/en/agentic/agent-studio/knowledge-bases/data-ingestion.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	159	url: 'https://docs.workato.com/agentic/agentic.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	432	url: 'https://docs.workato.com/agentic/agentic.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	459	url: 'https://docs.workato.com/en/agentic/agent-studio/knowledge-bases/knowledge-bases.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	500	url: 'https://docs.workato.com/agentic/agentic.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	576	url: 'https://docs.workato.com/agentic/skills',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	594	url: 'https://docs.workato.com/agentic/agent-studio/chat-interface/chat-interface.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	599	url: 'https://docs.workato.com/en/agentic/agent-studio/conversations.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	614	url: 'https://docs.workato.com/en/agentic/agent-studio/knowledge-bases/knowledge-bases.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	619	url: 'https://docs.workato.com/en/agentic/agent-studio/knowledge-bases/data-ingestion.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	654	url: 'https://docs.workato.com/agentic/agentic.html',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/workato.ts	830	url: 'https://www.workato.com/agentic/mcp',	CODE
MEDIUM	…ps/sim/lib/compare/data/competitors/openai-agentkit.ts	133	{ text: 'Guardrails block', href: 'https://docs.sim.ai/workflows/blocks/guardrails' },	CODE
MEDIUM	…ps/sim/lib/compare/data/competitors/openai-agentkit.ts	250	url: 'https://guardrails.openai.com/',	CODE
MEDIUM	…ps/sim/lib/compare/data/competitors/openai-agentkit.ts	1189	url: 'https://guardrails.openai.com/',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/crewai.ts	161	url: 'https://blog.crewai.com/enabling-domain-experts-to-build-and-deploy-agentic-workflows-without-the-need	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/crewai.ts	201	url: 'https://sambanova.ai/blog/sambanova-and-crewai-partner-to-deliver-agentic-ai-at-scale-on-crewai-amp',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/crewai.ts	1166	url: 'https://siliconangle.com/2024/10/22/agentic-ai-startup-crewai-closes-18m-funding-round/',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/gumloop.ts	165	url: 'https://www.gumloop.com/blog/agentic-ai-tools',	CODE
MEDIUM	apps/sim/lib/compare/data/competitors/gumloop.ts	424	url: 'https://www.gumloop.com/blog/agentic-ai-tools',	CODE
MEDIUM	apps/sim/executor/handlers/workflow/handler.ts	886	// internal tool calls (knowledge, guardrails, MCP, Mothership) can	COMMENT
MEDIUM	helm/sim/README.md	536	# The log-redaction path calls the app's own /api/guardrails/mask-batch,	COMMENT
MEDIUM	helm/sim/values.yaml	168	KB_OPENAI_MODEL_NAME: "" # Azure deployment name serving the configured KB embedding mo	CODE
MEDIUM	helm/sim/values.yaml	949	# /api/guardrails/mask-batch, which must be reachable from inside the cluster).	COMMENT
MEDIUM	helm/sim/values.yaml	1731	# Copilot service configuration (optional microservice)	COMMENT
MEDIUM	helm/sim/examples/values-azure.yaml	101	KB_OPENAI_MODEL_NAME: "" # Azure deployment name serving the KB embedding model (used o	CODE

Magic Placeholder Names18 hits · 100 pts

Severity	File	Line	Snippet	Context
HIGH	packages/python-sdk/README.md	35	api_key=os.getenv("SIM_API_KEY", "your-api-key-here"),	CODE
HIGH	packages/ts-sdk/README.md	36	apiKey: 'your-api-key-here',	CODE
HIGH	packages/db/scripts/deregister-sso-provider.ts	11	* DATABASE_URL=your-database-url	COMMENT
HIGH	apps/docs/openapi-core.json	58	"source": "curl -X POST \\\n \"https://www.sim.ai/api/workflows/{id}/execute\" \\\n -H \"X-API-Key: YOUR_A	CODE
HIGH	apps/docs/openapi-core.json	167	"source": "curl \\\n \"https://www.sim.ai/api/workflows/{id}/executions/{executionId}\" \\\n -H \"X-API-Ke	CODE
HIGH	apps/docs/openapi-core.json	173	"source": "curl \\\n \"https://www.sim.ai/api/workflows/{id}/executions/{executionId}?selectedOutputs=block	CODE
HIGH	apps/docs/openapi-core.json	319	"source": "curl -X POST \\\n \"https://www.sim.ai/api/workflows/{id}/executions/{executionId}/cancel\" \\\n	CODE
HIGH	apps/docs/openapi-core.json	389	"source": "curl -X GET \\\n \"https://www.sim.ai/api/jobs/{jobId}\" \\\n -H \"X-API-Key: YOUR_API_KEY\""	CODE
HIGH	apps/docs/openapi-core.json	449	"source": "curl -X GET \\\n \"https://www.sim.ai/api/workflows/{id}/paused?status=paused\" \\\n -H \"X-API	CODE
HIGH	apps/docs/openapi-core.json	559	"source": "curl -X GET \\\n \"https://www.sim.ai/api/workflows/{id}/paused/{executionId}\" \\\n -H \"X-API	CODE
HIGH	apps/docs/openapi-core.json	618	"source": "curl -X GET \\\n \"https://www.sim.ai/api/resume/{workflowId}/{executionId}\" \\\n -H \"X-API-K	CODE
HIGH	apps/docs/openapi-core.json	693	"source": "curl -X GET \\\n \"https://www.sim.ai/api/resume/{workflowId}/{executionId}/{contextId}\" \\\n	CODE
HIGH	apps/docs/openapi-core.json	760	"source": "curl -X POST \\\n \"https://www.sim.ai/api/resume/{workflowId}/{executionId}/{contextId}\" \\\n	CODE
HIGH	apps/docs/openapi-core.json	987	"source": "curl -X GET \\\n \"https://www.sim.ai/api/users/me/usage-limits\" \\\n -H \"X-API-Key: YOUR_API	CODE
HIGH⚡	apps/docs/lib/content/openapi.ts	152	if (scheme.in === 'header') headers[scheme.name] = 'YOUR_API_KEY'	CODE
HIGH⚡	apps/docs/lib/content/openapi.ts	153	else if (scheme.in === 'query') query.set(scheme.name, 'YOUR_API_KEY')	CODE
HIGH⚡	apps/docs/lib/content/openapi.ts	154	else if (scheme.in === 'cookie') headers.Cookie = `${scheme.name}=YOUR_API_KEY`	CODE
HIGH	…onents/mcp-server-form-modal/mcp-server-form-modal.tsx	721	placeholder='https://mcp.server.dev/{{YOUR_API_KEY}}/sse'	CODE

Decorative Section Separators31 hits · 93 pts

Severity	File	Line	Snippet	Context
MEDIUM	apps/sim/blocks/blocks/azure_devops.ts	128	// ── Shared auth + org/project ────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/blocks/blocks/azure_devops.ts	152	// ── Pipeline fields ──────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/blocks/blocks/azure_devops.ts	175	// ── Build fields ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/blocks/blocks/azure_devops.ts	235	// ── Work Item fields ─────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/sandboxes/pptx-generate.ts	25	// ── Image helpers ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	12	// ── List Pipelines ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	38	// ── Get Pipeline ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	71	// ── List Pipeline Runs ──────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	98	// ── Get Pipeline Run ────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	124	// ── List Builds ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	161	// ── List Build Logs ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	186	// ── Get Build Log ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	204	// ── Get Build Timeline ────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	234	// ── Get Work Items Between Builds ────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	256	// ── Query Work Items ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	283	// ── Get Work Item ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	298	// ── Get Work Items Batch ───────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	315	// ── Create Work Item ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	351	// ── Update Work Item ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	385	// ── Add Comment ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	415	// ── Response Union ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/sim/tools/azure_devops/types.ts	417	// ── Get Comments ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	helm/sim/examples/values-gcp.yaml	24	# --------------------------	COMMENT
MEDIUM	helm/sim/examples/values-gcp.yaml	351	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	helm/sim/examples/values-gcp.yaml	353	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	helm/sim/examples/values-aws.yaml	26	# --------------------------	COMMENT
MEDIUM	helm/sim/examples/values-aws.yaml	309	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	helm/sim/examples/values-aws.yaml	311	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	helm/sim/examples/values-azure.yaml	24	# --------------------------	COMMENT
MEDIUM	helm/sim/examples/values-azure.yaml	299	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	helm/sim/examples/values-azure.yaml	301	# -----------------------------------------------------------------------------	COMMENT

Excessive Try-Catch Wrapping28 hits · 36 pts

Severity	File	Line	Snippet	Context
LOW	packages/python-sdk/README.md	43	except Exception as error:	CODE
LOW	packages/python-sdk/README.md	354	except Exception as error:	CODE
LOW	packages/python-sdk/README.md	384	except Exception as error:	CODE
LOW	packages/python-sdk/README.md	493	except Exception as error:	CODE
MEDIUM	packages/python-sdk/README.md	332	def run_workflow():	CODE
MEDIUM	packages/python-sdk/README.md	368	def execute_with_error_handling():	CODE
LOW	packages/python-sdk/examples/basic_usage.py	28	except Exception as error:	CODE
LOW	packages/python-sdk/examples/basic_usage.py	63	except Exception as error:	CODE
LOW⚡	packages/python-sdk/examples/basic_usage.py	89	except Exception as error:	CODE
MEDIUM⚡	packages/python-sdk/examples/basic_usage.py	90	print(f"Error: {error}")	CODE
LOW⚡	packages/python-sdk/examples/basic_usage.py	99	except Exception as error:	CODE
MEDIUM⚡	packages/python-sdk/examples/basic_usage.py	100	print(f"Error: {error}")	CODE
LOW	packages/python-sdk/examples/basic_usage.py	141	except Exception as error:	CODE
LOW	packages/python-sdk/examples/basic_usage.py	180	except Exception as error:	CODE
LOW	packages/python-sdk/examples/basic_usage.py	214	except Exception as error:	CODE
LOW	packages/python-sdk/examples/basic_usage.py	256	except Exception as e:	CODE
LOW	apps/desktop/native/computer-use/tests/electron-live.py	334	except Exception as error:	CODE
LOW	apps/sim/scripts/parser-eval/reference-extract.py	14	except Exception as e: out['pdfplumber_error'] = str(e)	CODE
LOW	apps/sim/scripts/parser-eval/reference-extract.py	50	except Exception as e: ref = {'error': str(e)}	CODE
LOW	apps/sim/scripts/parser-eval/bench/reference.py	46	except Exception:	CODE
LOW⚡	apps/sim/scripts/parser-eval/bench/reference.py	86	except Exception:	CODE
LOW⚡	apps/sim/scripts/parser-eval/bench/reference.py	89	except Exception as e:	CODE
LOW⚡	apps/sim/scripts/parser-eval/bench/reference.py	93	except Exception as e:	CODE
LOW	apps/sim/scripts/parser-eval/bench/reference.py	193	except Exception as e:	CODE
LOW	apps/sim/scripts/parser-eval/bench/reference.py	204	except Exception as e:	CODE
LOW	apps/sim/scripts/parser-eval/bench/reference.py	219	except Exception as e:	CODE
LOW	apps/sim/lib/uploads/documents/compile.ts	361	except Exception as __sim_recalc_err:	CODE
LOW	…/lib/execution/remote-sandbox/session-file-snapshot.ts	61	except Exception as error:	CODE

Self-Referential Comments16 hits · 36 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/helm.yml	471	# Creating the pages branch and turning on GitHub Pages are one-time	COMMENT
MEDIUM	apps/sim/blocks/blocks/google_sheets.ts	1371	'# Create a Spreadsheet\n\nStand up a new spreadsheet.\n\n## Steps\n1. Set the Spreadsheet Title.\n2. Optionally	CODE
MEDIUM	apps/sim/blocks/blocks/trello.ts	1513	'# Create a Trello Card\n\nAdd a new card to a list so work is captured on the right board.\n\n## Steps\n1. Use	CODE
MEDIUM	apps/sim/blocks/blocks/wealthbox.ts	385	'# Create a Wealthbox Follow-up Task\n\nAdd a task to a client record so an advisor follow-up is not missed.\n\n	CODE
MEDIUM	apps/sim/blocks/blocks/jira.ts	1676	'# Create a Bug From a Report\n\nConvert a raw bug report into a clean, actionable Jira issue.\n\n## Steps\n1. P	CODE
MEDIUM	apps/sim/blocks/blocks/google_forms.ts	652	'# Create a Form\n\nBuild a new Google Form with questions.\n\n## Steps\n1. Run Create Form with the form title	CODE
MEDIUM	apps/sim/blocks/blocks/google_groups.ts	611	'# Create a Group\n\nStand up a new Workspace group.\n\n## Steps\n1. Decide the group email address, display nam	CODE
MEDIUM	apps/sim/blocks/blocks/google_docs.ts	746	'# Create a Document from Content\n\nGenerate a new Google Doc from supplied or drafted content.\n\n## Steps\n1.	CODE
MEDIUM	apps/sim/blocks/blocks/google_meet.ts	289	'# Create a Meeting Space\n\nSpin up a Google Meet space to share.\n\n## Steps\n1. Decide the Access Type: Open	CODE
MEDIUM	apps/sim/blocks/blocks/typeform.ts	587	'# Create a Typeform Form\n\nSpin up a new form or quiz programmatically.\n\n## Steps\n1. Use the Create Form op	CODE
MEDIUM	apps/sim/blocks/blocks/zendesk.ts	886	'# Create a Zendesk Ticket\n\nLog an inbound issue as a support ticket.\n\n## Steps\n1. Gather the subject, desc	CODE
MEDIUM	apps/sim/blocks/blocks/launchdarkly.ts	496	'# Create a Feature Flag\n\nStand up a new feature flag for an upcoming release.\n\n## Steps\n1. Choose the proj	CODE
MEDIUM	apps/sim/lib/workflows/skills/builtin-skills.ts	148	const CREATE_TABLE_CONTENT = `# Create a Table	CODE
MEDIUM	helm/sim/examples/values-copilot.yaml	83	# Create a Secret from the values above. Set create=false to reference an existing secret instead.	COMMENT
MEDIUM	helm/sim/examples/values-azure.yaml	113	# Create a storage account and containers in your Azure subscription	COMMENT
MEDIUM	helm/sim/examples/values-existing-secret.yaml	9	# Create the Secret objects before `helm install`. Example:	COMMENT

Docstring Block Structure6 hits · 30 pts

Severity	File	Line	Snippet	Context
HIGH	packages/python-sdk/simstudio/__init__.py	214	Execute a workflow with optional input data. If async_execution is True, returns immediately with a run	STRING
HIGH	packages/python-sdk/simstudio/__init__.py	349	Get the status of a workflow (deployment status, etc.). Args: workflow_id: The ID	STRING
HIGH	packages/python-sdk/simstudio/__init__.py	413	Execute a workflow synchronously (ensures non-async mode). Args: workflow_id: The ID of th	STRING
HIGH	packages/python-sdk/simstudio/__init__.py	462	Get the status of a legacy async job. Args: job_id: The job ID returned from legacy async	STRING
HIGH	packages/python-sdk/simstudio/__init__.py	505	Get a workflow run's current status and optional outputs from the v2 API. Args: workflow_i	STRING
HIGH	packages/python-sdk/simstudio/__init__.py	567	Execute workflow with automatic retry on rate limit. Args: workflow_id: The ID of the work	STRING

Empty Error Handlers5 hits · 25 pts

Severity	File	Line	Snippet	Context
HIGH	apps/desktop/native/computer-use/tests/electron-live.py	75	except (FileNotFoundError, json.JSONDecodeError):	CODE
HIGH	apps/sim/scripts/parser-eval/bench/reference.py	46	except Exception:	CODE
HIGH	apps/sim/scripts/parser-eval/bench/reference.py	166	except UnicodeDecodeError:	CODE
HIGH	apps/sim/scripts/parser-eval/bench/reference.py	86	except Exception:	CODE
HIGH	apps/sim/scripts/parser-eval/bench/reference.py	173	except (UnicodeDecodeError, LookupError):	CODE

Synthetic Comment Markers5 hits · 25 pts

Severity	File	Line	Snippet	Context
HIGH	apps/sim/blocks/blocks/cbinsights.ts	949	'# Generate Company Brief\n\nProduce a one-page brief on a private company.\n\n## Steps\n1. Resolve the company	CODE
HIGH	apps/sim/blocks/blocks/cbinsights.ts	956	"# Map Competitor Strategy\n\nRead a competitor's posture from who it is connected to.\n\n## Steps\n1. Resolve t	CODE
HIGH	apps/sim/blocks/blocks/instagram.ts	1249	'# Publish Instagram Image\n\nPublish a single image post to the connected Instagram professional account.\n\n##	CODE
HIGH	apps/sim/blocks/blocks/dagster.ts	816	'# Manage Dagster Schedules\n\nControl which automated triggers are running.\n\n## Steps\n1. List schedules and	CODE
HIGH	apps/sim/blocks/blocks/emailbison.ts	763	'# Manage Campaign Status\n\nControl whether an Email Bison campaign is actively sending and tune its limits.\n\	CODE

AI Slop Vocabulary5 hits · 15 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/ci.yml	1359	# path. GitHub cannot elevate a caller's token, even though this prerelease	COMMENT
MEDIUM	apps/sim/tools/google_sheets/append.ts	105	// try a more robust approach	COMMENT
MEDIUM	…ceId]/files/components/file-viewer/mermaid-diagram.tsx	231	// Not yet rendered: hold the diagram's own frame (not a distinct card) so the fill-in is seamless.	COMMENT
MEDIUM	apps/sim/hooks/use-undo-redo.ts	1084	// Set directly rather than toggling: more robust in collaborative scenarios	COMMENT
MEDIUM	helm/sim/examples/values-production.yaml	246	# Telemetry and observability (comprehensive monitoring and tracing)	COMMENT

Verbosity Indicators8 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	apps/sim/lib/guardrails/validate-hallucination.ts	290	// Step 1: Query knowledge base with RAG	COMMENT
LOW	apps/sim/lib/guardrails/validate-hallucination.ts	341	// Step 2: Use LLM to score confidence	COMMENT
LOW	apps/sim/lib/guardrails/validate-hallucination.ts	359	// Step 3: Check against threshold. Lower scores = less confidence = fail validation	COMMENT
LOW	apps/sim/lib/workflows/sanitization/validation.ts	213	// In the workflow state, we need to check if the block type has valid tool access	COMMENT
LOW	apps/sim/executor/utils/parallel-expansion.test.ts	358	// Step 1: Expand P1 (outermost) — this pre-clones P2 and recursively P3	COMMENT
LOW	apps/sim/executor/utils/parallel-expansion.test.ts	377	// Step 2: Expand P2 (original, branch 0 of P1) — this creates P3__obranch-1 at runtime	COMMENT
LOW	apps/sim/executor/utils/parallel-expansion.test.ts	392	// Step 3: Expand P2__obranch-1 (cloned, branch 1 of P1)	COMMENT
LOW	apps/sim/executor/utils/parallel-expansion.test.ts	406	// Step 4: Expand all P3 variants and verify no node collisions	COMMENT

Redundant / Tautological Comments6 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	packages/python-sdk/simstudio/__init__.py	164	# Check if this is a file-like object	COMMENT
LOW	packages/python-sdk/simstudio/__init__.py	169	# Read file bytes	COMMENT
LOW	packages/python-sdk/examples/basic_usage.py	72	# Check if workflow is ready	COMMENT
LOW	packages/python-sdk/examples/basic_usage.py	222	# Check if API key is set	COMMENT
LOW	.github/workflows/ci.yml	1133	# Check if docs changed	COMMENT
LOW	helm/artifacthub-repo.yml	18	# Set this to the repository's Artifact Hub ID once the repository has been	COMMENT

Deep Nesting8 hits · 8 pts

Severity	File	Line	Context
LOW	packages/python-sdk/examples/basic_usage.py	184	CODE
LOW	apps/desktop/native/computer-use/tests/electron-live.py	111	CODE
LOW	apps/sim/scripts/parser-eval/generate-corpus.py	71	CODE
LOW	apps/sim/scripts/parser-eval/reference-extract.py	16	CODE
LOW	apps/sim/scripts/parser-eval/reference-extract.py	25	CODE
LOW	apps/sim/scripts/parser-eval/bench/reference.py	60	CODE
LOW	apps/sim/scripts/parser-eval/bench/reference.py	105	CODE
LOW	apps/sim/scripts/parser-eval/bench/reference.py	113	CODE

Unused Imports6 hits · 6 pts

Severity	File	Line	Context
LOW	apps/desktop/native/computer-use/tests/live.py	5	CODE
LOW	apps/sim/scripts/probes/session-process.py	1	CODE
LOW	apps/sim/scripts/parser-eval/generate-corpus.py	5	CODE
LOW	apps/sim/scripts/parser-eval/generate-corpus.py	5	CODE
LOW	apps/sim/scripts/parser-eval/bench/manifest.py	3	CODE
LOW	apps/sim/scripts/parser-eval/bench/reference.py	107	CODE

Modern Structural Boilerplate4 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	packages/python-sdk/simstudio/__init__.py	39	__all__ = [	CODE
LOW	packages/python-sdk/simstudio/__init__.py	438	def set_api_key(self, api_key: str) -> None:	CODE
LOW	packages/python-sdk/simstudio/__init__.py	448	def set_base_url(self, base_url: str) -> None:	CODE
LOW	packages/python-sdk/simstudio/__init__.py	639	def _update_rate_limit_info(self, response: requests.Response) -> None:	CODE

Slop Phrases2 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	apps/sim/lib/compare/data/competitors/power-automate.ts	755	'No: the code surface Power Platform exposes runs on a fixed, Microsoft-curated runtime. Custom connector code	CODE
MEDIUM	apps/sim/executor/handlers/evaluator/handler.test.ts	372	content: 'Sorry, I cannot provide a score.',	CODE

AI Structural Patterns1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	packages/python-sdk/simstudio/__init__.py	552		CODE

simstudioai/sim

Open-Source Code Quality, Security and Technical Debt Review