Telegram Desktop messaging app
This report summarizes scanner evidence for telegramdesktop/tdesktop, a C++ project with 33,411 GitHub stars. SynthScan examined 1,545,058 lines of code across 3536 source files, recording 2840 pattern matches distributed across 15 syntactic categories. The legacy adjusted pattern signal is 1.8 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 2746 finding(s).
Are imports declared and package/API names verified? 55 finding(s).
Are wrappers, guards, and repeated structures necessary? 596 finding(s).
Which changes need focused human review? 2840 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2840 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | REVIEW.md | 201 | ```cpp | COMMENT |
| LOW | …nts/shared/evidence/paint_replay_component/fixture.cpp | 1 | /* | COMMENT |
| LOW | …ents/shared/evidence/paint_replay_component/replay.cpp | 1 | /* | COMMENT |
| LOW | …ents/shared/evidence/paint_replay_component/replay.cpp | 21 | #include <QtCore/QJsonObject> | COMMENT |
| LOW | Telegram/CMakeLists.txt | 2561 | PRIVATE | COMMENT |
| LOW | Telegram/cmake/binobj2obj.py | 1 | ''' | COMMENT |
| LOW | Telegram/cmake/obj2binobj.py | 1 | ''' | COMMENT |
| LOW | Telegram/Resources/default_shortcuts-custom.json | 1 | // This is a list of your own shortcuts for Telegram Desktop | COMMENT |
| LOW | Telegram/SourceFiles/apiwrap.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/apiwrap.cpp | 21 | #include "api/api_peer_colors.h" | COMMENT |
| LOW | Telegram/SourceFiles/apiwrap.cpp | 41 | #include "api/api_transcribes.h" | COMMENT |
| LOW | Telegram/SourceFiles/apiwrap.cpp | 61 | #include "data/data_saved_messages.h" | COMMENT |
| LOW | Telegram/SourceFiles/apiwrap.cpp | 81 | #include "history/history.h" | COMMENT |
| LOW | Telegram/SourceFiles/apiwrap.cpp | 101 | #include "ui/item_text_options.h" | COMMENT |
| LOW | Telegram/SourceFiles/stdafx.h | 21 | #elif defined _MSC_VER && _MSC_VER >= 1914 // __clang__ | COMMENT |
| LOW | Telegram/SourceFiles/stdafx.h | 41 | #include <QtCore/QFile> | COMMENT |
| LOW | Telegram/SourceFiles/stdafx.h | 61 | #include <QtGui/QImage> | COMMENT |
| LOW | Telegram/SourceFiles/stdafx.h | 81 | #endif // !Q_OS_WIN | COMMENT |
| LOW | Telegram/SourceFiles/stdafx.h | 101 | #include <optional> | COMMENT |
| LOW | Telegram/SourceFiles/stdafx.h | 121 | #include "base/weak_ptr.h" | COMMENT |
| LOW | Telegram/SourceFiles/tray_accounts_menu.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/config.h | 41 | COMMENT | |
| LOW | Telegram/SourceFiles/config.h | 61 | // This will allow you to use TEST ONLY 'api_id' and 'api_hash' which are | COMMENT |
| LOW | Telegram/SourceFiles/mainwindow.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/mainwindow.cpp | 21 | #include "ui/emoji_config.h" | COMMENT |
| LOW | Telegram/SourceFiles/mainwindow.cpp | 41 | #include "base/options.h" | COMMENT |
| LOW | Telegram/SourceFiles/mainwidget.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/mainwidget.cpp | 21 | #include "data/data_changes.h" | COMMENT |
| LOW | Telegram/SourceFiles/mainwidget.cpp | 41 | #include "window/notifications_manager.h" | COMMENT |
| LOW | Telegram/SourceFiles/mainwidget.cpp | 61 | #include "history/view/media/history_view_media.h" | COMMENT |
| LOW | Telegram/SourceFiles/mainwidget.cpp | 81 | #include "core/update_checker.h" | COMMENT |
| LOW | Telegram/SourceFiles/mainwidget.cpp | 3201 | layout.chatWidth = layout.bodyWidth - layout.dialogsWidth; | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_call.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_call.cpp | 21 | #include "data/data_session.h" | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_instance.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_instance.cpp | 21 | #include "main/session/session_show.h" | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_emoji_fingerprint.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_panel_background.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_box_controller.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_box_controller.cpp | 21 | #include "ui/vertical_list.h" | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_box_controller.cpp | 41 | #include "base/unixtime.h" | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_video_incoming.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_top_bar.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_top_bar.cpp | 21 | #include "lang/lang_keys.h" | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_userpic.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_panel.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_panel.cpp | 21 | #include "calls/group/calls_group_invite_controller.h" | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_panel.cpp | 41 | #include "ui/text/format_values.h" | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_panel.cpp | 61 | #include "base/platform/base_platform_info.h" | COMMENT |
| LOW | Telegram/SourceFiles/calls/calls_panel.cpp | 361 | // // On Windows we replace snap-to-top maximizing with fullscreen. | COMMENT |
| LOW | Telegram/SourceFiles/calls/ui/calls_device_menu.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/group/calls_group_toasts.cpp | 1 | /* | COMMENT |
| LOW | …egram/SourceFiles/calls/group/calls_group_viewport.cpp | 1 | /* | COMMENT |
| LOW | …egram/SourceFiles/calls/group/calls_group_viewport.cpp | 21 | #include "media/view/media_view_pip.h" | COMMENT |
| LOW | …egram/SourceFiles/calls/group/calls_group_viewport.cpp | 1101 | // call->scheduleDate() | COMMENT |
| LOW | …egram/SourceFiles/calls/group/calls_choose_join_as.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/group/calls_group_rtmp.cpp | 1 | /* | COMMENT |
| LOW | Telegram/SourceFiles/calls/group/calls_group_rtmp.cpp | 21 | #include "ui/layers/generic_box.h" | COMMENT |
| LOW | …/SourceFiles/calls/group/calls_group_message_field.cpp | 1 | /* | COMMENT |
| LOW | …/SourceFiles/calls/group/calls_group_message_field.cpp | 21 | #include "data/data_document.h" | COMMENT |
| 2036 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/rules/test_hook.py | 35 | def test_one_line_comment_passes(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 38 | def test_two_line_comment_fails(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 44 | def test_why_block_of_three_passes(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 47 | def test_why_block_of_four_fails(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 52 | def test_why_marker_must_open_the_block(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 55 | def test_commented_out_code_is_a_comment(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 58 | def test_block_comment_over_two_lines_fails(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 62 | def test_one_line_block_comment_passes(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 65 | def test_trailing_comment_opening_a_block_is_one_comment(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 74 | def test_moved_block_is_not_new(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 78 | def test_harness_is_exempt_from_comment_rules(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 83 | def test_banned_function_fails_with_replacement(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 91 | def test_banned_name_inside_identifier_passes(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 94 | def test_banned_name_in_comment_or_string_passes(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 98 | def test_banned_call_after_url_string_still_fails(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 101 | def test_untouched_banned_call_on_edited_line_still_fails(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 105 | def test_non_source_paths_are_ignored(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 109 | def test_malformed_payload_passes(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 114 | def test_write_of_new_file_with_license_passes(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 124 | def test_multi_edit_shape_is_read(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 173 | def test_two_plain_lines_pass(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 178 | def test_third_plain_line_fails(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 184 | def test_trailing_comments_count(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 190 | def test_closers_and_directives_carry_free_labels(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 196 | def test_moved_comment_is_free(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 204 | def test_edited_line_keeps_its_trailing_comment(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 213 | def test_one_why_block_on_top_of_budget(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 222 | def test_second_why_block_fails(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 228 | def test_long_block_is_named_by_line(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 234 | def test_banned_call_is_named_by_line(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 240 | def test_harness_is_exempt_from_comment_rules(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 245 | def test_other_files_are_ignored(self): | CODE |
| LOW⚡ | tools/rules/test_hook.py | 251 | def test_license_header_of_new_file_is_free(self): | CODE |
| LOW⚡ | .agents/shared/evidence/motion_window_test.py | 368 | def test_exact_delay_uses_handler_time(self): | STRING |
| LOW⚡ | .agents/shared/evidence/motion_window_test.py | 378 | def test_conservative_bound_without_after(self): | STRING |
| LOW⚡ | .agents/shared/evidence/motion_window_test.py | 386 | def test_rest_and_pressed_windows_pass(self): | STRING |
| LOW⚡ | .agents/shared/evidence/motion_window_test.py | 398 | def test_few_records_covering_every_phase_pass(self): | STRING |
| LOW⚡ | .agents/shared/evidence/motion_window_test.py | 405 | def test_records_of_undeclared_windows_are_listed(self): | STRING |
| LOW⚡ | .agents/shared/evidence/motion_window_test.py | 413 | def test_non_window_rows_are_accounted_only(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 304 | def test_natural_glide_premise(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 312 | def test_natural_window_passes(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 357 | def test_conservative_bound_without_handler_time(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 432 | def test_missing_stopped_terminal(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 437 | def test_pressed_substitution(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 464 | def test_stopped_before_terminal(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 536 | def test_motion_in_rest_window(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 549 | def test_pressed_window_rules(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 572 | def test_clustered_count_cannot_cover_phases(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 604 | def test_records_outside_the_segment_cover_no_phase(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 615 | def test_returning_motion_has_no_progress(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 721 | def test_handler_law_passes_and_caller_stamps_are_diagnosed(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 755 | def test_handler_outside_bracket(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 773 | def test_missing_exact_origin(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 860 | def test_original_stays_byte_identical(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 881 | def test_missing_correction_is_a_usage_error(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 927 | def test_original_modified_while_reassessing(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 956 | def test_natural_window_with_laws(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 973 | def test_rejecting_control_exits_one(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 981 | def test_invalid_spec_exits_one(self): | STRING |
| LOW | .agents/shared/evidence/motion_window_test.py | 994 | def test_input_errors_exit_two(self): | STRING |
| 495 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | .agents/shared/evidence/ninja_target_test.py | 292 | ("a && b", [["a"], ["b"]]), | CODE |
| HIGH⚡ | .agents/shared/evidence/ninja_target_test.py | 295 | ("cd /x && c++ -o y", [["cd", "/x"], ["c++", "-o", "y"]]), | CODE |
| HIGH⚡ | .agents/shared/evidence/ninja_target_test.py | 307 | ("a || b", "'\\|'"), | CODE |
| HIGH⚡ | .agents/shared/evidence/ninja_target_test.py | 350 | "cd /work/out/Telegram && mkdir -p x && cd /work/out && " | CODE |
| HIGH⚡ | .agents/shared/evidence/ninja_target_test.py | 351 | "ccache /usr/bin/g++ a.o -o Debug/app && cd /work/out/Telegram && :") | CODE |
| HIGH⚡ | .agents/shared/evidence/ninja_target_test.py | 360 | "cd /home/u/out && c++ /usr/src/fx/out/a.o -o Debug/app", | CODE |
| HIGH⚡ | .agents/shared/evidence/ninja_target_test.py | 370 | ("c++ a.o -o Debug/app && c++ b.o -o Debug/app", | CODE |
| HIGH⚡ | .agents/shared/evidence/ninja_target_test.py | 373 | ("cd /elsewhere && c++ a.o -o Debug/app", "not the build directory"), | CODE |
| HIGH⚡ | .agents/shared/evidence/ninja_target_test.py | 374 | ("cd relative && c++ a.o -o Debug/app", "unsupported cd form"), | CODE |
| HIGH | .agents/shared/evidence/ninja_target_test.py | 940 | f"{APP_MAIN} (undefined)"), | CODE |
| HIGH | .agents/skills/process-inbox/scripts/workspace_test.py | 2256 | return (fclose(file) != 0 || written < 0) ? -1 : 0; | CODE |
| HIGH | .agents/skills/process-inbox/scripts/workspace_test.py | 2302 | } while (got < 0 && errno == EINTR); | CODE |
| HIGH | .agents/skills/process-inbox/scripts/workspace_test.py | 2303 | return (got != 0 || save(marker, "a", "TEST_COMPLETE\\n") != 0) ? 1 : 0; | CODE |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7649 | pushed = self.push(second, second_slot, "xps-second", TASK_B) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7659 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7661 | self.push(second, second_slot, "xps-second", TASK_B) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7686 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7688 | self.push(second, second_slot, "xps-second", TASK_B) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7703 | self.push(second, second_slot, "xps-second", TASK_B) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7704 | self.push(second, second_slot, "xps-second", TASK_B, rewritten=True) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7732 | self.push( | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7737 | self.push( | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7829 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7839 | self.push(second, second_slot, "xps-second", TASK_B, rewritten=True) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7850 | self.push(second, second_slot, "xps-second", TASK_B, rewritten=True) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7863 | self.push(second, second_slot, "xps-second", TASK_B) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7868 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7893 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 7905 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8028 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8030 | self.push(second, second_slot, "xps-second", TASK_B) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8034 | self.push(second, second_slot, "xps-second", TASK_B, rewritten=True) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8046 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8062 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8064 | self.push(second, second_slot, "xps-second", TASK_B) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8115 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8117 | self.push(second, second_slot, "xps-second", TASK_B) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8120 | self.push(second, second_slot, "xps-second", TASK_B, rewritten=True) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8160 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH⚡ | .agents/skills/process-inbox/scripts/workspace_test.py | 8168 | self.push(second, second_slot, "xps-second", TASK_B) | STRING |
| HIGH | .agents/skills/process-inbox/scripts/workspace_test.py | 7627 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH | .agents/skills/process-inbox/scripts/workspace_test.py | 7770 | self.push(first, first_slot, "xps-first", TASK_A) | STRING |
| HIGH | .agents/skills/process-inbox/scripts/workspace_test.py | 7923 | self.push(second, second_slot, "xps-second", TASK_B, rewritten=True) | STRING |
| HIGH | .agents/skills/process-inbox/scripts/workspace_test.py | 8078 | self.push(second, second_slot, "xps-second", TASK_B, rewritten=True) | STRING |
| HIGH | .github/scripts/generate_changelog.py | 288 | history.replaceState(null, '', anchor.getAttribute('href')); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/rules/hook.py | 153 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 48 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 1158 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 261 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 899 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 926 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 952 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 988 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 1022 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 1057 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 1103 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 1365 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 1111 | CODE | |
| LOW | .agents/shared/evidence/motion_window.py | 636 | CODE | |
| LOW | .agents/shared/evidence/motion_window.py | 1130 | CODE | |
| LOW | .agents/shared/evidence/elf_identity.py | 521 | CODE | |
| LOW | .agents/shared/evidence/elf_identity.py | 848 | CODE | |
| LOW | .agents/shared/evidence/elf_identity.py | 975 | CODE | |
| LOW | .agents/shared/evidence/elf_identity.py | 1022 | CODE | |
| LOW | .agents/shared/evidence/elf_identity.py | 360 | CODE | |
| LOW | .agents/shared/evidence/ninja_target.py | 373 | CODE | |
| LOW | .agents/shared/evidence/ninja_target.py | 418 | CODE | |
| LOW | .agents/shared/evidence/ninja_target.py | 582 | CODE | |
| LOW | .agents/shared/evidence/ninja_target.py | 681 | CODE | |
| LOW | .agents/shared/evidence/ninja_target.py | 1212 | CODE | |
| LOW | .agents/shared/evidence/ninja_target_test.py | 577 | CODE | |
| LOW | .agents/shared/evidence/ninja_target_test.py | 1035 | CODE | |
| LOW | .agents/shared/evidence/paint_replay_test.py | 753 | CODE | |
| LOW | .agents/shared/scripts/codex_leaf.py | 119 | CODE | |
| LOW | .agents/shared/scripts/codex_leaf.py | 205 | CODE | |
| LOW | .agents/shared/scripts/codex_leaf.py | 595 | CODE | |
| LOW | .agents/shared/scripts/codex_leaf.py | 797 | CODE | |
| LOW | .agents/shared/scripts/codex_leaf.py | 955 | CODE | |
| LOW | .agents/shared/scripts/codex_leaf.py | 1134 | CODE | |
| LOW | .agents/shared/scripts/codex_leaf.py | 1220 | CODE | |
| LOW | .agents/shared/scripts/codex_leaf_test.py | 973 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 30 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 2649 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 3330 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 4571 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 4741 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 4909 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 5011 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 5183 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 5373 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 5450 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 5479 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 959 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 2150 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 2335 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 2735 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 2784 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 2895 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 2952 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 3189 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 3792 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 4004 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 5516 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 6848 | CODE | |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 6862 | CODE | |
| 27 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .claude/scripts/crash_triage.py | 35 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 37 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 98 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 100 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 256 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 258 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 392 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 394 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 510 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 512 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 594 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 596 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 635 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 637 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 855 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .claude/scripts/crash_triage.py | 857 | # -------------------------------------------------------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .agents/shared/evidence/elf_identity_test.py | 74 | except ProcessLookupError: | CODE |
| HIGH | .agents/shared/evidence/elf_identity_test.py | 1290 | except ProcessLookupError: | CODE |
| HIGH | .agents/shared/evidence/elf_identity_test.py | 1302 | except ProcessLookupError: | CODE |
| HIGH | .agents/shared/evidence/elf_identity_test.py | 1304 | except ChildProcessError: | CODE |
| HIGH | .agents/shared/scripts/codex_leaf.py | 96 | except (OSError, ValueError): | CODE |
| HIGH | .agents/shared/scripts/codex_leaf.py | 684 | except OSError: | CODE |
| HIGH | .agents/shared/scripts/codex_leaf.py | 200 | except OSError: | CODE |
| HIGH | .agents/shared/scripts/codex_leaf.py | 1125 | except OSError: | CODE |
| HIGH | .agents/skills/process-inbox/scripts/workspace.py | 3117 | except OSError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …legram/SourceFiles/iv/markdown/iv_markdown_article.cpp | 2677 | > selection.listItems.block.container.steps.size()) | CODE |
| CRITICAL | …SourceFiles/iv/editor/iv_editor_prepared_selection.cpp | 332 | > selection.listItems.block.container.steps.size()) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | Telegram/configure.py | 0 | this file is part of telegram desktop, the official desktop application for the telegram messaging service. for license | STRING |
| HIGH | Telegram/cmake/binobj2obj.py | 0 | this file is part of telegram desktop, the official desktop application for the telegram messaging service. for license | STRING |
| HIGH | Telegram/cmake/obj2binobj.py | 0 | this file is part of telegram desktop, the official desktop application for the telegram messaging service. for license | STRING |
| HIGH | Telegram/SourceFiles/codegen/scheme/codegen_scheme.py | 0 | this file is part of telegram desktop, the official desktop application for the telegram messaging service. for license | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/shared/evidence/motion_window.py | 703 | except Exception as error: | CODE |
| LOW | .agents/shared/evidence/motion_window.py | 1013 | except Exception as error: | CODE |
| MEDIUM | .agents/shared/evidence/motion_window.py | 993 | def read_bytes(path): | CODE |
| LOW | .agents/shared/scripts/codex_leaf.py | 1101 | except Exception as e: | CODE |
| MEDIUM | .agents/shared/scripts/codex_leaf.py | 92 | def log(text): | CODE |
| MEDIUM | .agents/skills/process-inbox/scripts/workspace.py | 3869 | def path_inside(path, root): | CODE |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 4158 | except Exception as error: | CODE |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 4448 | except Exception as failure: | CODE |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 4502 | except Exception as failure: | CODE |
| LOW | .agents/skills/process-inbox/scripts/workspace.py | 4511 | except Exception as failure: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/code-health/scripts/health.py | 25 | CODE | |
| LOW | .agents/skills/code-health/scripts/includes.py | 7 | CODE | |
| LOW | .agents/skills/code-health/scripts/harness_test.py | 3 | CODE | |
| LOW | Telegram/Resources/langs/stale.py | 1 | CODE | |
| LOW | Telegram/Resources/langs/refresh.py | 1 | CODE | |
| LOW | Telegram/SourceFiles/codegen/scheme/codegen_scheme.py | 8 | CODE | |
| LOW | Telegram/SourceFiles/codegen/scheme/codegen_scheme.py | 8 | CODE | |
| LOW | Telegram/SourceFiles/codegen/scheme/codegen_scheme.py | 8 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Telegram/SourceFiles/wallet/wallet_amount_field.cpp | 1094 | // All modes paint the same at v == 1, so the hand-over is seamless. | COMMENT |
| MEDIUM | Telegram/SourceFiles/api/api_user_names.h | 59 | // Used for a seamless display of usernames list. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .agents/skills/perform-task/references/phase-prompts.md | 5 | - [Orchestration rules](#orchestration-rules) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/process-inbox/scripts/workspace_test.py | 7589 | def run_task(self, handler, source, slot, tag, **arguments): | STRING |
| LOW | .agents/skills/code-health/scripts/harness_test.py | 30 | def helper(self, name='test_rare', when='2026-07-24', task=None, header='void Rare();\n'): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/shared/evidence/elf_identity_test.py | 93 | CODE | |
| LOW | .agents/shared/evidence/elf_identity_test.py | 204 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ourceFiles/platform/mac/touchbar/mac_touchbar_common.h | 19 | id block = [^{ callable(); } copy]; // Don't forget to -release. | CODE |