Home / smol-machines / smolvm
AI Slop Code RIsk Monitor

smol-machines/smolvm

An embeddable, portable, branchable virtual machine to safely run Agents locally.

6.2 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for smol-machines/smolvm, a Rust project with 6,672 GitHub stars. SynthScan examined 303,459 lines of code across 562 source files, recording 1364 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 6.2 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

6.2
Adjusted Signal
6.2
Raw Pattern Score
100%
Time Factor
2026-10-11
Last Push
6.7K
Stars
Rust
Language
303.5K
Lines of Code
562
Files
1.4K
Pattern Hits
2026-10-12
Scan Date
0.01
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 17.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1128 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 1 finding(s).

Agent Over-Engineering Ratio 11.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 236 finding(s).

PR Review Velocity Impact 26.9/100 · MEDIUM

Which changes need focused human review? 1364 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 5MEDIUM 255LOW 1104

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1364 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block1035 hits · 956 pts
SeverityFileLineSnippetContext
LOWMakefile.toml1# cargo-make configuration for smolvmCOMMENT
LOWbuild.rs1//! Build script for smolvm.COMMENT
LOWbuild.rs21//! cp /opt/homebrew/opt/libkrun/lib/libkrun.dylib lib/COMMENT
LOWdemo/bench/run-smolvm.sh1#!/bin/bashCOMMENT
LOWpackaging/nfpm.yaml1# nfpm config for the official smolvm .deb / .rpm packages.COMMENT
LOWbench/bench.sh1#!/bin/bashCOMMENT
LOWbench/matrix.sh1#!/bin/bashCOMMENT
LOWcrates/smolvm-oci-layer/src/lib.rs1//! Pure-Rust extraction of a single OCI image layer into an overlayfs lowerdir.COMMENT
LOWcrates/smolvm-oci-layer/src/lib.rs61/// branch, which performs *destructive* operations (`remove_file`,COMMENT
LOWcrates/smolvm-oci-layer/src/lib.rs221/// Extract one OCI layer blob into `dest`, applying OCI whiteout semantics so theCOMMENT
LOWcrates/smolvm-oci-layer/src/lib.rs261 // A layer can declare a read-only directory before its children. Relax eachCOMMENT
LOWcrates/smolvm-protocol/src/host_pattern.rs1//! Matching for persisted network host entries.COMMENT
LOWcrates/smolvm-protocol/src/credentials.rs1//! Credential policy: which credential bindings a machine may use, and where.COMMENT
LOWcrates/smolvm-protocol/src/credentials.rs21//! A binding names a credential; it never carries the value. Every bindingCOMMENT
LOWcrates/smolvm-protocol/src/credentials.rs81/// One named credential a workload may use against explicit hosts.COMMENT
LOWcrates/smolvm-protocol/src/lib.rs1//! Protocol types for smolvm host-guest communication.COMMENT
LOWcrates/smolvm-protocol/src/lib.rs21/// One S3-compatible bucket to mount inside the workload container.COMMENT
LOWcrates/smolvm-protocol/src/lib.rs101/// guest. Shared host↔guest so the launcher's `krun_add_virtiofs` tag and theCOMMENT
LOWcrates/smolvm-protocol/src/lib.rs121/// Chosen to keep the single-shot frame comfortably under the frameCOMMENT
LOWcrates/smolvm-protocol/src/lib.rs141// The single-shot threshold must be <= the chunk size. They can be equal (aCOMMENT
LOWcrates/smolvm-protocol/src/lib.rs161/// `gpu_vram_mib` cap. It is the compiled-in default. The host-side transferCOMMENT
LOWcrates/smolvm-protocol/src/lib.rs181COMMENT
LOWcrates/smolvm-protocol/src/lib.rs201 /// finishes init, and the host's `accept()` fires — an event-driven readinessCOMMENT
LOWcrates/smolvm-protocol/src/lib.rs421 ///COMMENT
LOWcrates/smolvm-protocol/src/lib.rs441 /// rewritten to a registry mirror by the host.COMMENT
LOWcrates/smolvm-protocol/src/lib.rs501COMMENT
LOWcrates/smolvm-protocol/src/lib.rs541 ///COMMENT
LOWcrates/smolvm-protocol/src/lib.rs561 /// has to hold both the expanded rootfs and a second full copy of it asCOMMENT
LOWcrates/smolvm-protocol/src/lib.rs581 BranchpointRelease {COMMENT
LOWcrates/smolvm-protocol/src/lib.rs621 command: Vec<String>,COMMENT
LOWcrates/smolvm-protocol/src/lib.rs641 stdin_data: Option<String>,COMMENT
LOWcrates/smolvm-protocol/src/lib.rs661 /// Volume mounts to bind into the container.COMMENT
LOWcrates/smolvm-protocol/src/lib.rs681 #[serde(default)]COMMENT
LOWcrates/smolvm-protocol/src/lib.rs701 /// The container runs detached; stdout/stderr go to /dev/null.COMMENT
LOWcrates/smolvm-protocol/src/lib.rs721 data: Vec<u8>,COMMENT
LOWcrates/smolvm-protocol/src/lib.rs741 FileWrite {COMMENT
LOWcrates/smolvm-protocol/src/lib.rs761 /// requests. The final chunk sets `done: true` to finalize.COMMENT
LOWcrates/smolvm-protocol/src/lib.rs781 /// receiving exactly this many bytes.COMMENT
LOWcrates/smolvm-protocol/src/lib.rs821COMMENT
LOWcrates/smolvm-protocol/src/lib.rs841 /// Allocate a PTY for the init process.COMMENT
LOWcrates/smolvm-protocol/src/lib.rs901 /// exit: bundle, cgroup, PTY. Exit status was already streamed byCOMMENT
LOWcrates/smolvm-protocol/src/lib.rs1001///COMMENT
LOWcrates/smolvm-protocol/src/lib.rs1061 exit_code: i32,COMMENT
LOWcrates/smolvm-protocol/src/lib.rs1121 /// on the final chunk. Current producers: `ExportLayer` andCOMMENT
LOWcrates/smolvm-protocol/src/lib.rs1141//COMMENT
LOWcrates/smolvm-protocol/src/lib.rs1201 ///COMMENT
LOWcrates/smolvm-protocol/src/lib.rs1241 Err(e) => AgentResponse::error(COMMENT
LOWcrates/smolvm-protocol/src/lib.rs1281 /// Creation timestamp (ISO 8601).COMMENT
LOWcrates/smolvm-protocol/src/lib.rs1321/// This is what a machine is actually using. The host-side `phys_footprint`COMMENT
LOWcrates/smolvm-protocol/src/lib.rs1501COMMENT
LOWcrates/smolvm-protocol/src/intercept.rs1//! Host-side stream interception handshake.COMMENT
LOWcrates/smolvm-protocol/src/intercept.rs21//! ```COMMENT
LOWcrates/smolvm-protocol/src/image_ref.rs1//! Image reference canonicalization.COMMENT
LOWcrates/smolvm-protocol/src/image_ref.rs21/// present it takes precedence and any tag is dropped.COMMENT
LOWcrates/smolvm-protocol/src/image_ref.rs101}COMMENT
LOWcrates/smolvm-protocol/src/forkpoint.rs21/// Optional readiness-marker capability requesting eager clone module loading.COMMENT
LOWcrates/smolvm-protocol/src/forkpoint.rs61///COMMENT
LOWcrates/smolvm-protocol/src/forkpoint.rs101/// every workload container runs as PID 1. A branch helper that finds itselfCOMMENT
LOWcrates/smolvm-protocol/src/egress_rule.rs1//! Ordered, host-enforced L4 egress rules. The list is deliberately small andCOMMENT
LOWcrates/smolvm-protocol/src/publish_socket.rs1//! Shared spec for user-published host↔guest Unix-socket bridges.COMMENT
975 more matches not shown…
Decorative Section Separators229 hits · 722 pts
SeverityFileLineSnippetContext
MEDIUMMakefile.toml16# =============================================================================COMMENT
MEDIUMMakefile.toml18# =============================================================================COMMENT
MEDIUMMakefile.toml78# =============================================================================COMMENT
MEDIUMMakefile.toml80# =============================================================================COMMENT
MEDIUMMakefile.toml102# =============================================================================COMMENT
MEDIUMMakefile.toml104# =============================================================================COMMENT
MEDIUMMakefile.toml169# =============================================================================COMMENT
MEDIUMMakefile.toml171# =============================================================================COMMENT
MEDIUMMakefile.toml183# =============================================================================COMMENT
MEDIUMMakefile.toml185# =============================================================================COMMENT
MEDIUMMakefile.toml208# =============================================================================COMMENT
MEDIUMMakefile.toml210# =============================================================================COMMENT
MEDIUMMakefile.toml249# =============================================================================COMMENT
MEDIUMMakefile.toml251# =============================================================================COMMENT
MEDIUMMakefile.toml263# =============================================================================COMMENT
MEDIUMMakefile.toml265# =============================================================================COMMENT
MEDIUM⚡crates/smolvm-network/src/netns_tap.rs11//! ┌─────────┐ ethernet frames ┌──────────────┐ unixstream ┌────────┐COMMENT
MEDIUM⚡crates/smolvm-network/src/netns_tap.rs12//! │ tapX │◀───────────────────▶│ netns_tap │◀───────────▶│ libkrun │COMMENT
MEDIUM⚡crates/smolvm-network/src/netns_tap.rs15//! └─────────┘ └──────────────┘ └────────┘COMMENT
MEDIUMcrates/smolvm-shim/src/engine.rs456/// stdin fifo (nonblocking read) ──────────────────────────► │COMMENT
MEDIUMtests/test_gpu.sh38# =============================================================================COMMENT
MEDIUMtests/test_gpu.sh40# =============================================================================COMMENT
MEDIUM⚡tests/test_gpu.sh71# =============================================================================COMMENT
MEDIUM⚡tests/test_gpu.sh73# =============================================================================COMMENT
MEDIUM⚡tests/test_gpu.sh80# =============================================================================COMMENT
MEDIUM⚡tests/test_gpu.sh82# =============================================================================COMMENT
MEDIUMtests/test_gpu.sh187# =============================================================================COMMENT
MEDIUMtests/test_gpu.sh189# =============================================================================COMMENT
MEDIUMtests/test_gpu.sh258# =============================================================================COMMENT
MEDIUMtests/test_gpu.sh260# =============================================================================COMMENT
MEDIUM⚡tests/test_smolfile.sh28# =============================================================================COMMENT
MEDIUM⚡tests/test_smolfile.sh30# =============================================================================COMMENT
MEDIUM⚡tests/test_smolfile.sh39# =============================================================================COMMENT
MEDIUM⚡tests/test_smolfile.sh41# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh157# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh159# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh319# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh321# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh497# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh499# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh557# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh559# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh651# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh653# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh899# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh901# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh928# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh930# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh1006# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh1008# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh1063# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh1065# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh1250# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh1252# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh1350# =============================================================================COMMENT
MEDIUMtests/test_smolfile.sh1352# =============================================================================COMMENT
MEDIUM⚡tests/test_secrets.sh67# =============================================================================COMMENT
MEDIUM⚡tests/test_secrets.sh69# =============================================================================COMMENT
MEDIUM⚡tests/test_secrets.sh83# =============================================================================COMMENT
MEDIUM⚡tests/test_secrets.sh85# =============================================================================COMMENT
169 more matches not shown…
Self-Referential Comments15 hits · 48 pts
SeverityFileLineSnippetContext
MEDIUMtests/common.sh54# Initialize SMOLVM variableCOMMENT
MEDIUMtests/test_gpu.sh155 # Create a named machine with --gpu, stop+start it, verify DRI still present.COMMENT
MEDIUMtests/test_smolfile.sh474 # Create a Smolfile in the temp dir (simulating CWD)COMMENT
MEDIUM⚡tests/test_api.sh248 # Create a fresh machineCOMMENT
MEDIUM⚡tests/test_api.sh680 # Create a machine (never start it)COMMENT
MEDIUMtests/test_machine_bare.sh255 # Create the named VM firstCOMMENT
MEDIUM⚡tests/test_pack.sh647 # Create a named VM with network, install a package, then stop itCOMMENT
MEDIUMtests/test_pack.sh533 # Create a temp dir with a single .smolmachine fileCOMMENT
MEDIUMtests/test_db.sh29 # Create a named VM with specific configurationCOMMENT
MEDIUMtests/test_db.sh58 # Create a named VMCOMMENT
MEDIUMtests/test_db.sh103 # Create a VMCOMMENT
MEDIUMtests/test_volumes.sh29 # Create a host directory with a test fileCOMMENT
MEDIUMdocs/dev-env/scripts/create-dev-machine.sh2# Create a persistent dev machine and bring it up for the first time.COMMENT
MEDIUMdocs/docker-in-machine/scripts/create-docker-machine.sh2# Create the machine and install Docker into it. The install happens on theCOMMENT
MEDIUMsrc/api/mod.rs15//! # Create a machineCOMMENT
AI Slop Vocabulary10 hits · 38 pts
SeverityFileLineSnippetContext
MEDIUMdemo/bench/run-smolvm.sh43# stage shims under both suffixed + unsuffixed names (harness/loader use both)COMMENT
MEDIUMcrates/smolvm-cuda/src/host.rs793 /// clone can RE-CAPTURE the same sequence in its own context — the robustCOMMENT
MEDIUMcrates/smolvm-pack/src/extract.rs8349 // a few. Assert well under a tenth to stay robust across filesystems.COMMENT
MEDIUMdeploy/k3s/install-smolvm-k3s.sh5# `runtimeClassName: smolvm` boot as per-workload microVMs. Version-robust: itCOMMENT
MEDIUM⚡tests/test_secrets.sh76 # `env` (busybox) prints the whole environment — robust across rootfs builds.COMMENT
MEDIUM⚡tests/test_harness.sh11# under test failing rather than as a harness fault.COMMENT
MEDIUM⚡tests/test_harness.sh14# the harness does in-process; this file therefore carries its own small runnerCOMMENT
MEDIUM⚡tests/test_harness.sh17# Pure harness test: no smolvm binary, no VM, no network.COMMENT
MEDIUM⚡.github/workflows/ci.yml317 # the WHP QA harness (unit tests can additionally be run under Wine withCOMMENT
MEDIUMsrc/agent/manager.rs3522 // Combined with agent-side sync(), this provides robust data integrityCOMMENT
Example Usage Blocks17 hits · 25 pts
SeverityFileLineSnippetContext
LOWMakefile.toml4# Usage:COMMENT
LOWtests/test_gpu.sh13# Usage:COMMENT
LOWtests/test_smolfile.sh8# Usage:COMMENT
LOWtests/test_secrets.sh15# Usage:COMMENT
LOWtests/test_cli.sh8# Usage:COMMENT
LOWtests/test_api.sh7# Usage:COMMENT
LOW⚡tests/test_pack_registry.sh12# Usage:COMMENT
LOWtests/test_resize.sh6# Usage:COMMENT
LOWtests/run_tests.sh5# Usage:COMMENT
LOWtests/test_pack.sh8# Usage:COMMENT
LOWtests/test_scale.sh8# Usage:COMMENT
LOWscripts/build-dist.sh4# Usage:COMMENT
LOWscripts/install.sh9# Usage:COMMENT
LOWscripts/test-registry.sh9# Usage:COMMENT
LOWscripts/refresh-cudart-fixtures.sh43# Usage:COMMENT
LOWscripts/install-local.sh4# Usage:COMMENT
LOWscripts/install-k8s-runtime.sh11# Usage:COMMENT
Verbosity Indicators14 hits · 22 pts
SeverityFileLineSnippetContext
LOW⚡crates/smolvm-registry/src/client.rs1209 // Step 1: attach a preemptive bearer to the initial send only.COMMENT
LOW⚡crates/smolvm-registry/src/client.rs1218 // Step 2: send.COMMENT
LOW⚡crates/smolvm-registry/src/client.rs1295 // Step 1: attach preemptive bearer (optimization — wrong scope → extra 401, not corruption).COMMENT
LOW⚡crates/smolvm-registry/src/client.rs1302 // Step 2: send with a fresh body from the factory.COMMENT
LOW⚡crates/smolvm-registry/src/client.rs1323 // Step 3: token for the scope this request actually needs, fresh body.COMMENT
LOW⚡crates/smolvm-registry/src/client.rs1330 // Step 4: force-evict stale cache entry, genuinely fresh token, final body.COMMENT
LOWcrates/smolvm-registry/src/client.rs324 // Step 1: POST to initiate upload.COMMENT
LOWcrates/smolvm-registry/src/client.rs354 // Step 2: PUT the blob data with digest.COMMENT
LOWcrates/smolvm-registry/src/client.rs445 // Step 1: POST to initiate upload (empty body — always replayable).COMMENT
LOWcrates/smolvm-registry/src/client.rs476 // Step 2: PUT with streaming body via factory.COMMENT
LOWcrates/smolvm-registry/src/client.rs583 // Step 1: POST to open an upload session (empty body — replayable).COMMENT
LOWcrates/smolvm-registry/src/client.rs599 // Step 2: PATCH contiguous chunks. The registry hands back a fresh uploadCOMMENT
LOWcrates/smolvm-registry/src/client.rs638 // Step 3: PUT (empty body) to close the session, carrying the digest.COMMENT
LOWcrates/smolvm-registry/src/client.rs1252 // Step 5: force-evict and fetch a genuinely fresh token → second retry.COMMENT
Structural Annotation Overuse14 hits · 22 pts
SeverityFileLineSnippetContext
LOW⚡crates/smolvm-registry/src/client.rs1209 // Step 1: attach a preemptive bearer to the initial send only.COMMENT
LOW⚡crates/smolvm-registry/src/client.rs1218 // Step 2: send.COMMENT
LOW⚡crates/smolvm-registry/src/client.rs1295 // Step 1: attach preemptive bearer (optimization — wrong scope → extra 401, not corruption).COMMENT
LOW⚡crates/smolvm-registry/src/client.rs1302 // Step 2: send with a fresh body from the factory.COMMENT
LOW⚡crates/smolvm-registry/src/client.rs1323 // Step 3: token for the scope this request actually needs, fresh body.COMMENT
LOW⚡crates/smolvm-registry/src/client.rs1330 // Step 4: force-evict stale cache entry, genuinely fresh token, final body.COMMENT
LOWcrates/smolvm-registry/src/client.rs324 // Step 1: POST to initiate upload.COMMENT
LOWcrates/smolvm-registry/src/client.rs354 // Step 2: PUT the blob data with digest.COMMENT
LOWcrates/smolvm-registry/src/client.rs445 // Step 1: POST to initiate upload (empty body — always replayable).COMMENT
LOWcrates/smolvm-registry/src/client.rs476 // Step 2: PUT with streaming body via factory.COMMENT
LOWcrates/smolvm-registry/src/client.rs583 // Step 1: POST to open an upload session (empty body — replayable).COMMENT
LOWcrates/smolvm-registry/src/client.rs599 // Step 2: PATCH contiguous chunks. The registry hands back a fresh uploadCOMMENT
LOWcrates/smolvm-registry/src/client.rs638 // Step 3: PUT (empty body) to close the session, carrying the digest.COMMENT
LOWcrates/smolvm-registry/src/client.rs1252 // Step 5: force-evict and fetch a genuinely fresh token → second retry.COMMENT
Empty Error Handlers4 hits · 20 pts
SeverityFileLineSnippetContext
HIGHtests/test_api_resize_interruption.py86except (OSError, http.client.HTTPException):CODE
HIGHtests/test_api_resize_interruption.py156except (OSError, http.client.HTTPException):CODE
HIGHtests/test_api_shutdown.py83except OSError:CODE
HIGHtests/test_api_exec_interactive.py88except OSError:CODE
Redundant / Tautological Comments13 hits · 19 pts
SeverityFileLineSnippetContext
LOWtests/common.sh420# Check if any smolvm processes are running that might interfere with testsCOMMENT
LOWtests/test_pack.sh1452 # Check if docker is availableCOMMENT
LOWtests/test_volumes.sh45 # Read the file via machine exec (VmExec) — this exercises boot-time mountCOMMENT
LOWtests/bench_vm_startup.sh41# Check if smolvm is availableCOMMENT
LOWscripts/build-dist.sh312# Set CODESIGN_IDENTITY to a Developer ID for distribution signing.COMMENT
LOWscripts/smolvm-wrapper.sh53# Check if binary existsCOMMENT
LOWscripts/smolvm-wrapper.sh60# Check if libraries existCOMMENT
LOWscripts/install.sh672 # Check if already in PATHCOMMENT
LOWscripts/install.sh678 # Check if already in profileCOMMENT
LOWscripts/rebuild-agent.sh47# Check if rootfs directory existsCOMMENT
LOWscripts/install-local.sh194 # Check if it's a tarball or directoryCOMMENT
LOWscripts/smol-wrapper.sh54# Check if binary existsCOMMENT
LOWscripts/smol-wrapper.sh61# Check if libraries existCOMMENT
Deep Nesting8 hits · 8 pts
SeverityFileLineSnippetContext
LOWbench/segmented_graph_throughput.py58CODE
LOWtests/test_api_clone_export.py18CODE
LOWtests/test_api_checkpoint_host_image.py37CODE
LOWtests/test_api_delete_cleanup.py249CODE
LOWtests/test_api_shutdown.py28CODE
LOWtests/test_api_exec_interactive.py125CODE
LOWtests/test_api_checkpoint_ports.py25CODE
LOWtests/test_api_uid_checkpoint.py20CODE
Cross-Language Confusion1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHtests/test_api_checkpoint_host_image.py83 result = target_exec(restored, 'echo again >>/root/marker && cat /root/marker')CODE
Modern AI Meta-Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMscripts/check-secrets-guards.sh3# Static guardrails for host-side secret references.COMMENT
Excessive Try-Catch Wrapping2 hits · 2 pts
SeverityFileLineSnippetContext
LOWbench/bench.sh93 except Exception: return NoneCODE
LOWtests/test_network.sh705 except Exception:CODE
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippetContext
LOWtests/test_agent_signal_receipt.py26 def test_exact_handler_before_sync(self):CODE