Repository Analysis

thedotmack/claude-mem

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

2.8 Likely human-written View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of thedotmack/claude-mem, a JavaScript project with 87,134 GitHub stars. SynthScan v2.0 examined 164,373 lines of code across 755 source files, recording 357 pattern matches distributed across 11 syntactic categories. The overall adjusted score of 2.8 places this repository in the Likely human-written band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

2.8
Adjusted Score
2.8
Raw Score
100%
Time Factor
2026-07-13
Last Push
87.1K
Stars
JavaScript
Language
164.4K
Lines of Code
755
Files
357
Pattern Hits
2026-07-14
Scan Date
0.01
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 11MEDIUM 4LOW 342

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 357 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers239 hits · 248 pts
SeverityFileLineSnippetContext
LOWopenclaw/src/index.ts693 function shouldSkipDuplicatePromptInit(contentSessionId: string, project: string, prompt: string): boolean {CODE
LOWplans/02-spawn-contract-templating.md300export function getWorkerServiceAbsolutePath(): string;CODE
LOWplans/02-spawn-contract-templating.md303export function getVersionCheckAbsolutePath(): string; // for completeness; currently unused by installersCODE
LOWplans/02-spawn-contract-templating.md304export function getPluginRootAbsolutePath(): string; // returns the plugin root used by the helpers aboveCODE
LOWplans/04-installer-transparency.md370async function runNpmInstallInMarketplace(summary: InstallSummary): Promise<void> {CODE
LOWtests/install-non-tty.test.ts230 const markerHelperStart = installSource.indexOf('function writeMarketplaceInstallMarkers(');CODE
LOWtests/install-non-tty.test.ts270 expect(codexInstallerSource).toContain('function removeCodexAgentsMdContext(): boolean');CODE
LOWtests/install-non-tty.test.ts271 expect(codexInstallerSource).toContain('function disableCodexTranscriptAgentsContext(): boolean');CODE
LOWtests/claude-provider-resume.test.ts4 function shouldPassResumeParameter(session: {CODE
LOWtests/gemini_provider.test.ts53function mockSuccessfulGeminiFetch() {CODE
LOWtests/gemini_provider.test.ts63function expectAlternatingGeminiRoles(contents: Array<{ role: string }>) {CODE
LOWtests/context/observation-compiler.test.ts30function createTestSummaryTimelineItem(overrides: Partial<SummaryTimelineItem> = {}): SummaryTimelineItem {CODE
LOWtests/sqlite/session-store-synced-at.test.ts207function expectStampedThroughCursors(db: Database, before: number): void {CODE
LOWtests/sqlite/session-store-migrations.test.ts7function seedLegacyContentHashScenario(db: Database): void {CODE
LOWtests/sqlite/session-store-migrations.test.ts258function seedLegacyGlobalContentIdentityScenario(db: Database): void {CODE
LOWtests/storage/postgres/postgres-storage.test.ts882async function createFixtureScopeWithEventJob(storage: PostgresStorageRepositories) {CODE
LOW…/worker/http/routes/search-routes-welcome-hint.test.ts44function captureContextInjectHandler(routes: SearchRoutes): (req: Request, res: Response) => void {CODE
LOW…es/sqlite/observations-by-file-path-candidates.test.ts24 function seedObservationWithReadPath(readPath: string, sessionSuffix: string): number {CODE
LOWtests/services/sync/chroma-mcp-manager-ssl.test.ts110function expectLauncherPrefixBeforeMode(args: string[], mode: 'http' | 'persistent') {CODE
LOWplugin/scripts/bun-runner.js63function isPluginDisabledInClaudeSettings() {CODE
LOWscripts/regenerate-claude-md.ts91function walkDirectoriesWithIgnore(dir: string, folders: Set<string>, depth: number = 0): void {CODE
LOWscripts/regenerate-claude-md.ts193function formatObservationsForClaudeMd(observations: ObservationRow[], folderPath: string): string {CODE
LOWscripts/regenerate-claude-md.ts240function writeClaudeMdToFolderForRegenerate(folderPath: string, newContent: string): void {CODE
LOWscripts/regenerate-claude-md.ts261function cleanupAutoGeneratedFiles(workingDir: string, dryRun: boolean): void {CODE
LOWscripts/build-hooks.js142async function verifyShellTemplateCanonical() {CODE
LOWsrc/ui/viewer/components/WelcomeCard.tsx11export function getStoredWelcomeDismissed(): boolean {CODE
LOWsrc/ui/viewer/components/WelcomeCard.tsx20export function setStoredWelcomeDismissed(dismissed: boolean): void {CODE
LOWsrc/server/middleware/postgres-auth.ts36export function requirePostgresServerAuth(CODE
LOWsrc/server/middleware/postgres-auth.ts51async function authenticatePostgresRequest(CODE
LOWsrc/server/middleware/request-auth-helpers.ts44export function hasForwardedClientHeaders(req: Request): boolean {CODE
LOWsrc/server/auth/sqlite-api-key-service.ts101export function verifyRawKeyAgainstStoredHash(rawKey: string, storedHash: string): boolean {CODE
LOWsrc/server/auth/sqlite-api-key-service.ts130export function upgradeLegacyKeyHashIfNeeded(CODE
LOWsrc/server/auth/sqlite-api-key-service.ts146export function migrateServerApiKeyScopes(CODE
LOWsrc/server/runtime/ServerService.ts447export function assertServerRuntimeForCli(CODE
LOWsrc/server/runtime/ServerService.ts630export async function migrateServerPostgresApiKeyScopes(argv: string[]): Promise<void> {CODE
LOWsrc/server/runtime/ServerService.ts773export async function runServerGenerationWorker(): Promise<void> {CODE
LOWsrc/server/runtime/create-server-service.ts219function buildGenerationWorkerManager(CODE
LOWsrc/server/runtime/create-server-service.ts242function buildServerGenerationProviderFromEnv(): ServerGenerationProvider | null {CODE
LOWsrc/server/runtime/create-server-service.ts256function instantiateServerGenerationProvider(provider: string): ServerGenerationProvider | null {CODE
LOWsrc/server/queue/redis-config.ts22export function getObservationQueueEngineName(): ObservationQueueEngineName {CODE
LOWsrc/server/jobs/types.ts119export function assertServerGenerationJobPayload(CODE
LOWsrc/server/routes/v1/ServerV1PostgresRoutes.ts1748function parseGenericJobListingQuery(req: Request): {CODE
LOWsrc/server/routes/v1/ServerV1PostgresRoutes.ts1992function serializeObservationWithSource(row: ObservationWithSourceRow): Record<string, unknown> {CODE
LOWsrc/server/routes/v1/ServerV1PostgresRoutes.ts2035function serializeJobStatusResponse(CODE
LOWsrc/server/routes/v1/ServerV1PostgresRoutes.ts2053function serializeGenerationJobStatus(CODE
LOWsrc/server/generation/processGeneratedResponse.ts183export async function processSessionSummaryResponse(CODE
LOWsrc/server/generation/processGeneratedResponse.ts232async function persistGeneratedObservations(CODE
LOW…rver/generation/providers/GeminiObservationProvider.ts41export function categorizeGeminiBadRequest(bodyText: string): GeminiBadRequestCategory {CODE
LOW…rver/generation/providers/GeminiObservationProvider.ts106export function classifyGeminiServerError(input: ClassifyGeminiServerErrorInput): ServerClassifiedProviderError {CODE
LOW…rver/generation/providers/ClaudeObservationProvider.ts172export function classifyClaudeServerError(input: ClassifyInput): ServerClassifiedProviderError {CODE
LOW…er/generation/providers/shared/error-classification.ts73export function classifyHttpProviderError(input: ClassifyHttpInput): ServerClassifiedProviderError {CODE
LOW…c/server/generation/providers/shared/prompt-builder.ts43export function buildServerGenerationPrompt(CODE
LOW…c/server/generation/providers/shared/prompt-builder.ts146function buildObservationOutputSchema(mode: ModeConfig | { observation_types: ReadonlyArray<Pick<ObservationType, 'id'>>CODE
LOWsrc/utils/observer-audit.ts94export function recordObserverToolAttempt(attempt: ObserverToolAttempt): void {CODE
LOWsrc/utils/context-injection.ts9export function injectContextIntoMarkdownFile(CODE
LOWsrc/utils/claude-md-utils.ts23function hasConsecutiveDuplicateSegments(resolvedPath: string): boolean {CODE
LOWsrc/utils/claude-md-utils.ts113export function formatTimelineForClaudeMd(timelineText: string): string {CODE
LOWsrc/utils/claude-md-utils.ts204function isExcludedUnsafeDirectory(folderPath: string): boolean {CODE
LOWsrc/utils/claude-md-utils.ts227export async function updateFolderClaudeMdFiles(CODE
LOWsrc/utils/tag-stripping.ts60export function isInternalProtocolPayload(text: string): boolean {CODE
179 more matches not shown…
Structural Annotation Overuse49 hits · 87 pts
SeverityFileLineSnippetContext
LOWREADME.md263// Step 1: Search for indexCOMMENT
LOWREADME.md266// Step 2: Review index, identify relevant IDs (e.g., #123, #456)COMMENT
LOWREADME.md268// Step 3: Fetch full detailsCOMMENT
LOWopenclaw/SKILL.md43### Step 1: Clone the Claude-Mem RepoCOMMENT
LOWopenclaw/SKILL.md61### Step 2: Get the Worker RunningCOMMENT
LOWopenclaw/SKILL.md118### Step 3: Add the Plugin to Your GatewayCOMMENT
LOWopenclaw/SKILL.md149## Step 4: Restart the Gateway and VerifyCOMMENT
LOWopenclaw/SKILL.md169## Step 5: Verify Observations Are Being RecordedCOMMENT
LOWopenclaw/SKILL.md184## Step 6: Set Up the Observation Feed (Streaming to a Channel)COMMENT
LOWcursor-hooks/STANDALONE-SETUP.md33## Step 1: Clone Claude-MemCOMMENT
LOWcursor-hooks/STANDALONE-SETUP.md47## Step 2: Configure Provider (Choose One)COMMENT
LOWcursor-hooks/STANDALONE-SETUP.md106## Step 3: Install Cursor HooksCOMMENT
LOWcursor-hooks/STANDALONE-SETUP.md121## Step 4: Start the WorkerCOMMENT
LOWcursor-hooks/STANDALONE-SETUP.md133## Step 5: Restart Cursor & VerifyCOMMENT
LOWplugin/skills/timeline-report/SKILL.md35### Step 1: Determine the Project NameCOMMENT
LOWplugin/skills/timeline-report/SKILL.md56### Step 2: Fetch the Full TimelineCOMMENT
LOWplugin/skills/timeline-report/SKILL.md73### Step 3: Estimate Token CountCOMMENT
LOWplugin/skills/timeline-report/SKILL.md85### Step 4: Analyze with a SubagentCOMMENT
LOWplugin/skills/timeline-report/SKILL.md178### Step 5: Save the ReportCOMMENT
LOWplugin/skills/timeline-report/SKILL.md188### Step 6: Report CompletionCOMMENT
LOWplugin/skills/weekly-digests/SKILL.md39### Step 1: Determine the Project NameCOMMENT
LOWplugin/skills/weekly-digests/SKILL.md54### Step 2: Fetch the Full Timeline and Save ItCOMMENT
LOWplugin/skills/weekly-digests/SKILL.md65### Step 3: Split the Timeline Into Per-ISO-Week FilesCOMMENT
LOWplugin/skills/weekly-digests/SKILL.md87### Step 4: Build the Weekly Index READMECOMMENT
LOWplugin/skills/weekly-digests/SKILL.md91### Step 5: Run the Consecutive Subagent PipelineCOMMENT
LOWplugin/skills/weekly-digests/SKILL.md188### Step 6: Rename Files for Sortable OrderCOMMENT
LOWplugin/skills/weekly-digests/SKILL.md209### Step 7: Report CompletionCOMMENT
LOWplugin/skills/knowledge-agent/SKILL.md18### Step 1: Build a corpusCOMMENT
LOWplugin/skills/knowledge-agent/SKILL.md33### Step 2: Prime the corpusCOMMENT
LOWplugin/skills/knowledge-agent/SKILL.md41### Step 3: QueryCOMMENT
LOWplugin/skills/knowledge-agent/SKILL.md49### Step 4: List corporaCOMMENT
LOWplugin/skills/smart-explore/SKILL.md26### Step 1: Search -- Discover Files and SymbolsCOMMENT
LOWplugin/skills/smart-explore/SKILL.md54### Step 2: Outline -- Get File StructureCOMMENT
LOWplugin/skills/smart-explore/SKILL.md68### Step 3: Unfold -- See ImplementationCOMMENT
LOWplugin/skills/mem-search/SKILL.md22### Step 1: Search - Get Index with IDsCOMMENT
LOWplugin/skills/mem-search/SKILL.md51### Step 2: Timeline - Get Context Around Interesting ResultsCOMMENT
LOWplugin/skills/mem-search/SKILL.md75### Step 3: Fetch - Get Full Details ONLY for Filtered IDsCOMMENT
LOWdocs/i18n/README.ar.md266// Step 1: Search for indexCOMMENT
LOWdocs/i18n/README.ar.md269// Step 2: Review index, identify relevant IDs (e.g., #123, #456)COMMENT
LOWdocs/i18n/README.ar.md271// Step 3: Fetch full detailsCOMMENT
LOWdocs/i18n/README.zh-tw.md264// Step 1: Search for indexCOMMENT
LOWdocs/i18n/README.zh-tw.md267// Step 2: Review index, identify relevant IDs (e.g., #123, #456)COMMENT
LOWdocs/i18n/README.zh-tw.md269// Step 3: Fetch full detailsCOMMENT
LOWdocs/i18n/README.el.md264// Step 1: Search for indexCOMMENT
LOWdocs/i18n/README.el.md267// Step 2: Review index, identify relevant IDs (e.g., #123, #456)COMMENT
LOWdocs/i18n/README.el.md269// Step 3: Fetch full detailsCOMMENT
LOWdocs/i18n/README.tl.md264// Step 1: Search for indexCOMMENT
LOWdocs/i18n/README.tl.md267// Step 2: Review index, identify relevant IDs (e.g., #123, #456)COMMENT
LOWdocs/i18n/README.tl.md269// Step 3: Fetch full detailsCOMMENT
Over-Commented Block48 hits · 48 pts
SeverityFileLineSnippetContext
LOWdocker-compose.yml1# Phase 10 — server-beta deployable runtime.COMMENT
LOWdocker-compose.yml21# CLAUDE_MEM_RUNTIME=server-betaCOMMENT
LOWdocker-compose.yml41# server/worker containers (see the commented `secrets:` blocks below) insteadCOMMENT
LOWtests/antigravity-cli-compat.test.ts141// NOTE: an automated regression test for the B0 empty-mcp-config-file edgeCOMMENT
LOWtests/env-isolation.test.ts141 // .env, which does not exist in this test).COMMENT
LOWtests/server/server-runtime-smoke.test.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWtests/server/runtime/server-mcp-http-routes.test.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWtests/shared/worker-spawn-gate.test.ts1import { describe, it, expect, beforeEach, afterEach } from 'bun:test';COMMENT
LOWtests/sdk/pg-isolation.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWtests/servers/mcp-server-name-safety.test.ts1// #2473 — Plugin MCP server tools were never surfaced to the assistant becauseCOMMENT
LOWplugin/scripts/version-check.js41}COMMENT
LOWscripts/e2e-server-docker.sh1#!/usr/bin/env bashCOMMENT
LOWscripts/check-postinstall-allowlist.js1#!/usr/bin/env nodeCOMMENT
LOWsrc/server/compat/SessionsObservationsAdapter.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWsrc/server/compat/SessionsSummarizeAdapter.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWsrc/server/auth/sqlite-api-key-service.ts41// default to the full read+write memory scope so a default key actually worksCOMMENT
LOWsrc/server/runtime/ServerViewerRoutes.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWsrc/server/mcp/recall-mcp-server.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWsrc/server/jobs/ServerJobQueue.ts21// ServerJobQueue is a thin wrapper around the BullMQ Queue + Worker pair forCOMMENT
LOWsrc/server/routes/v1/ServerV1PostgresRoutes.ts1481 });COMMENT
LOWsrc/server/generation/processGeneratedResponse.ts21} from '../../storage/postgres/pool.js';COMMENT
LOWsrc/server/generation/ProviderObservationGenerator.ts41// 1. Reload the Postgres outbox row and the source agent_events row.COMMENT
LOW…c/server/generation/providers/shared/prompt-builder.ts21COMMENT
LOWsrc/utils/bmp-safe.ts1// BMP-safe context sanitization (issue #2787).COMMENT
LOWsrc/shared/EnvManager.ts21const BLOCKED_ENV_VARS = [COMMENT
LOWsrc/shared/EnvManager.ts221 const isolatedEnv = buildIsolatedEnv(includeCredentials);COMMENT
LOWsrc/cli/hook-command.ts101}COMMENT
LOWsrc/sdk/prompts.ts81COMMENT
LOWsrc/npx-cli/install/setup-runtime.ts261 } catch {COMMENT
LOWsrc/npx-cli/commands/uninstall.ts141 // Symmetric counterpart to disableClaudeAutoMemory() in install.ts. TheCOMMENT
LOWsrc/npx-cli/commands/server-jobs.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWsrc/services/worker-service.ts1081 }COMMENT
LOWsrc/services/worker-service.ts1101 let spawnLockHeld = false;COMMENT
LOWsrc/services/hooks/server-bootstrap.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWsrc/services/hooks/server-client.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWsrc/services/hooks/runtime-selector.ts1// SPDX-License-Identifier: Apache-2.0COMMENT
LOWsrc/services/telemetry/buffer.ts101// whitelisted, install-correlatable). See computeSessionCompressedRollup.COMMENT
LOWsrc/services/telemetry/scrub.ts81 'days_since_last_obs',COMMENT
LOWsrc/services/telemetry/backfill.ts341 const rows = dbCOMMENT
LOWsrc/services/telemetry/backfill.ts361 // tokens_saved_vs_naive := discovery_tokens (rolled up above) - read_tokens,COMMENT
LOWsrc/services/telemetry/telemetry.ts81 // claude-mem's worker runs on the user's own machine, so the ingestionCOMMENT
LOWsrc/services/telemetry/telemetry.ts601 // client's queue (constructing the client lazily via getClient() if noCOMMENT
LOWsrc/services/sync/CloudSync.ts1// Worker-native cloud sync (cmem.ai Pro) — the database is the queue.COMMENT
LOWsrc/services/sync/CloudSync.ts381COMMENT
LOWsrc/services/sync/ChromaMcpManager.ts41//COMMENT
LOWsrc/services/sync/ChromaMcpManager.ts141 // Singleton invariant (#2313): kill any pre-existing chroma-mcp subprocessCOMMENT
LOWsrc/services/sync/ChromaMcpManager.ts1341 };COMMENT
LOWsrc/services/worker/http/routes/SessionRoutes.ts201 // No retry: the generator failed, the in-RAM batch is dropped, and theCOMMENT
Magic Placeholder Names8 hits · 40 pts
SeverityFileLineSnippetContext
HIGHcursor-hooks/QUICKSTART.md40claude-mem settings set CLAUDE_MEM_GEMINI_API_KEY your-api-keyCODE
HIGHcursor-hooks/QUICKSTART.md44claude-mem settings set CLAUDE_MEM_OPENROUTER_API_KEY your-api-keyCODE
HIGHtests/server/connect-keys.test.ts126 expect(body.connectCommand).toContain('<YOUR_API_KEY>');CODE
HIGHtests/server/connect-keys.test.ts126 expect(body.connectCommand).toContain('<YOUR_API_KEY>');CODE
HIGHdocs/api.md70- `GET /v1/connect` (read scope) returns the same command with a `<YOUR_API_KEY>`CODE
HIGHdocs/api.md70- `GET /v1/connect` (read scope) returns the same command with a `<YOUR_API_KEY>`CODE
HIGHsrc/server/routes/v1/ServerV1PostgresRoutes.ts238 connectCommand: mcpConnectCommand(mcpUrl, '<YOUR_API_KEY>'),CODE
HIGHsrc/server/routes/v1/ServerV1PostgresRoutes.ts238 connectCommand: mcpConnectCommand(mcpUrl, '<YOUR_API_KEY>'),CODE
Synthetic Comment Markers3 hits · 18 pts
SeverityFileLineSnippetContext
HIGH.claude/reports/test-audit-2026-01-05.md290*Report generated by Claude Code (Opus 4.5) on 2026-01-05*COMMENT
HIGHdocs/context/cursor-hooks-reference.md217| [Semgrep](https://semgrep.dev/blog/2025/cursor-hooks-mcp-server) | Automatically scan AI-generated code for vulnerabilCODE
HIGHsrc/cli/claude-md-commands.ts193 lines.push('<!-- This section is auto-generated by claude-mem. Edit content outside the tags. -->');CODE
Decorative Section Separators2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMtests/infrastructure/process-manager.test.ts7// ── Data-dir isolation (Phase 6, worker-restart plan) ──────────────────────COMMENT
MEDIUMtests/infrastructure/graceful-shutdown.test.ts14// ── Data-dir isolation (Phase 6, worker-restart plan) ──────────────────────COMMENT
Fake / Example Data3 hits · 3 pts
SeverityFileLineSnippetContext
LOWtests/storage/sqlite/server-storage.test.ts89 name: 'placeholder',CODE
LOWplugin/ui/viewer-bundle.js12In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function lS(e,t){return $b(e)||eS(eCODE
LOWsrc/services/integrations/OpenCodeInstaller.ts308 let contextSource = 'placeholder';CODE
AI Slop Vocabulary1 hit · 2 pts
SeverityFileLineSnippetContext
MEDIUMplugin/ui/viewer-bundle.js9`).replace(Yy,"")}function E0(e,t){return t=xm(t),xm(e)===t}function te(e,t,l,n,a,u){switch(l){case"children":typeof n==CODE
Modern AI Meta-Vocabulary1 hit · 2 pts
SeverityFileLineSnippetContext
MEDIUMdocs/context/cursor-hooks-reference.md209| [Oasis Security](https://www.oasis.security/blog/cursor-oasis-governing-agentic-access) | Enforce least-privilege poliCODE
Redundant / Tautological Comments2 hits · 2 pts
SeverityFileLineSnippetContext
LOWsrc/services/integrations/CursorHooksInstaller.ts469 claude-mem cursor status # Check if hooks are installedCODE
LOW…/services/integrations/AntigravityCliHooksInstaller.ts494 claude-mem antigravity-cli status # Check if installedCODE
Excessive Try-Catch Wrapping1 hit · 1 pts
SeverityFileLineSnippetContext
LOWopenclaw/install.sh249except Exception:CODE