Home / tradecatlabs / vibe-coding-cn
AI Slop Code RIsk Monitor

tradecatlabs/vibe-coding-cn

Vibe Coding 从入门到精通教程｜AI 结对编程工作流｜Prompt、Skill、Workflow、上下文管理、codex实战指南

4.2 Low pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for tradecatlabs/vibe-coding-cn, a Python project with 17,438 GitHub stars. SynthScan examined 273,130 lines of code across 1864 source files, recording 607 pattern matches distributed across 15 syntactic categories. The legacy adjusted pattern signal is 4.2 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

4.2
Adjusted Signal
4.2
Raw Pattern Score
100%
Time Factor
2026-10-11
Last Push
17.4K
Stars
Python
Language
273.1K
Lines of Code
1.9K
Files
607
Pattern Hits
2026-10-12
Scan Date
0.05
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 8.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 317 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.9/100 · LOW

Are imports declared and package/API names verified? 154 finding(s).

Agent Over-Engineering Ratio 11.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 264 finding(s).

PR Review Velocity Impact 20.1/100 · LOW

Which changes need focused human review? 607 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.

No multi-scan history yet — run the scanner again to build trend data.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 102MEDIUM 53LOW 452

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 607 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Cross-File Repetition75 hits · 375 pts
SeverityFileLineSnippetContext
HIGH…vibe-harness-cn/governance/tools/new_module_context.py0# {name} context ## 代码路径 `{code_path}` ## 模块职责 待补充。 ## 非职责 待补充。 ## 禁止事项 - 待补充。 ## 单一真相源 待补充。 ## 常用验证 {validation_lines} STRING
HIGH…thing-cn-public/governance/tools/new_module_context.py0# {name} context ## 代码路径 `{code_path}` ## 模块职责 待补充。 ## 非职责 待补充。 ## 禁止事项 - 待补充。 ## 单一真相源 待补充。 ## 常用验证 {validation_lines} STRING
HIGH…ybersecurity-cn/governance/tools/new_module_context.py0# {name} context ## 代码路径 `{code_path}` ## 模块职责 待补充。 ## 非职责 待补充。 ## 禁止事项 - 待补充。 ## 单一真相源 待补充。 ## 常用验证 {validation_lines} STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0| gate id | 严重级别 | 标题 | 检测方式 | 来源 | 状态 | 文件 | |---|---|---|---|---|---|---| | `gate-0000` | block | 新增所有权面必须证明存在必要性 | agSTRING
HIGH…-cn-public/governance/tools/init_governance_package.py0| gate id | 严重级别 | 标题 | 检测方式 | 来源 | 状态 | 文件 | |---|---|---|---|---|---|---| | `gate-0000` | block | 新增所有权面必须证明存在必要性 | agSTRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0| gate id | 严重级别 | 标题 | 检测方式 | 来源 | 状态 | 文件 | |---|---|---|---|---|---|---| | `gate-0000` | block | 新增所有权面必须证明存在必要性 | agSTRING
HIGH…harness-cn/governance/tools/init_governance_package.py0本文件是项目级人类入口和代理入口的共享操作模型。它只记录项目当前应该如何被理解、修改、验证和交付；不替代代码、契约、adr、任务包、readme 或 agents。 ## 项目一句话定义 待补充：用一句话说明项目服务的对象、核心价值和运行边STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0本文件是项目级人类入口和代理入口的共享操作模型。它只记录项目当前应该如何被理解、修改、验证和交付；不替代代码、契约、adr、任务包、readme 或 agents。 ## 项目一句话定义 待补充：用一句话说明项目服务的对象、核心价值和运行边STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0本文件是项目级人类入口和代理入口的共享操作模型。它只记录项目当前应该如何被理解、修改、验证和交付；不替代代码、契约、adr、任务包、readme 或 agents。 ## 项目一句话定义 待补充：用一句话说明项目服务的对象、核心价值和运行边STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0文档驱动开发不是多写文档，而是让项目的关键事实先有稳定真相源，再让代码、任务、审查和交付围绕这些真相源闭环。 ## 适用范围 默认适用于： - 新增功能、接口、数据模型、配置、依赖、任务流程或运行模式。 - 修改既有业务逻辑、模块边界、公共STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0文档驱动开发不是多写文档，而是让项目的关键事实先有稳定真相源，再让代码、任务、审查和交付围绕这些真相源闭环。 ## 适用范围 默认适用于： - 新增功能、接口、数据模型、配置、依赖、任务流程或运行模式。 - 修改既有业务逻辑、模块边界、公共STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0文档驱动开发不是多写文档，而是让项目的关键事实先有稳定真相源，再让代码、任务、审查和交付围绕这些真相源闭环。 ## 适用范围 默认适用于： - 新增功能、接口、数据模型、配置、依赖、任务流程或运行模式。 - 修改既有业务逻辑、模块边界、公共STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0本文件记录项目工具链的当前真相，帮助人类和代理优先复用成熟能力、项目既有脚本和稳定验证入口。 ## 成熟工具优先 - 优先使用语言标准工具、官方 cli、包管理器、测试框架、lint/typecheck、数据库迁移工具和云平台能力。 - 自STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0本文件记录项目工具链的当前真相，帮助人类和代理优先复用成熟能力、项目既有脚本和稳定验证入口。 ## 成熟工具优先 - 优先使用语言标准工具、官方 cli、包管理器、测试框架、lint/typecheck、数据库迁移工具和云平台能力。 - 自STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0本文件记录项目工具链的当前真相，帮助人类和代理优先复用成熟能力、项目既有脚本和稳定验证入口。 ## 成熟工具优先 - 优先使用语言标准工具、官方 cli、包管理器、测试框架、lint/typecheck、数据库迁移工具和云平台能力。 - 自STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0version: 1 id: project_operating_model_contract.v1 status: current owner: engineering created: {today} last_reviewed: {tSTRING
HIGH…-cn-public/governance/tools/init_governance_package.py0version: 1 id: project_operating_model_contract.v1 status: current owner: engineering created: {today} last_reviewed: {tSTRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0version: 1 id: project_operating_model_contract.v1 status: current owner: engineering created: {today} last_reviewed: {tSTRING
HIGH…harness-cn/governance/tools/init_governance_package.py0本目录是项目级工程治理包，固定落点为 `governance/`。 它只新增独立治理资产，不改写、不覆盖、不迁移项目原有 `readme.md`、`agents.md`、`claude.md`、模块文档、ci 配置或脚本。 使用入口： 1.STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0本目录是项目级工程治理包，固定落点为 `governance/`。 它只新增独立治理资产，不改写、不覆盖、不迁移项目原有 `readme.md`、`agents.md`、`claude.md`、模块文档、ci 配置或脚本。 使用入口： 1.STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0本目录是项目级工程治理包，固定落点为 `governance/`。 它只新增独立治理资产，不改写、不覆盖、不迁移项目原有 `readme.md`、`agents.md`、`claude.md`、模块文档、ci 配置或脚本。 使用入口： 1.STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0## 启动入口 - `context/agent-entry.md`：代理启动协议。 - `context/project_operating_model.md`：项目操作模型，作为人类和代理的默认项目入口。 - `context/contSTRING
HIGH…-cn-public/governance/tools/init_governance_package.py0## 启动入口 - `context/agent-entry.md`：代理启动协议。 - `context/project_operating_model.md`：项目操作模型，作为人类和代理的默认项目入口。 - `context/contSTRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0## 启动入口 - `context/agent-entry.md`：代理启动协议。 - `context/project_operating_model.md`：项目操作模型，作为人类和代理的默认项目入口。 - `context/contSTRING
HIGH…harness-cn/governance/tools/init_governance_package.py0## 项目工作协议 1. 不要在没有验证证据的情况下声明“已完成”或“已测试”。 2. 开始任务前先读取 `governance/index.md`。 3. 根据 `governance/context/context-router.md`STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0## 项目工作协议 1. 不要在没有验证证据的情况下声明“已完成”或“已测试”。 2. 开始任务前先读取 `governance/index.md`。 3. 根据 `governance/context/context-router.md`STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0## 项目工作协议 1. 不要在没有验证证据的情况下声明“已完成”或“已测试”。 2. 开始任务前先读取 `governance/index.md`。 3. 根据 `governance/context/context-router.md`STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0## 领域上下文 | 领域 | 代码目录 | 上下文文件 | 相关 adr | 常用验证 | |---|---|---|---|---| | 项目根 | `.` | `context/project-topology.md` | `deciSTRING
HIGH…-cn-public/governance/tools/init_governance_package.py0## 领域上下文 | 领域 | 代码目录 | 上下文文件 | 相关 adr | 常用验证 | |---|---|---|---|---| | 项目根 | `.` | `context/project-topology.md` | `deciSTRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0## 领域上下文 | 领域 | 代码目录 | 上下文文件 | 相关 adr | 常用验证 | |---|---|---|---|---| | 项目根 | `.` | `context/project-topology.md` | `deciSTRING
HIGH…harness-cn/governance/tools/init_governance_package.py0## 默认入口 所有任务先读： 1. `governance/index.md` 2. `governance/context/project_operating_model.md` 3. `governance/context/projeSTRING
HIGH…-cn-public/governance/tools/init_governance_package.py0## 默认入口 所有任务先读： 1. `governance/index.md` 2. `governance/context/project_operating_model.md` 3. `governance/context/projeSTRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0## 默认入口 所有任务先读： 1. `governance/index.md` 2. `governance/context/project_operating_model.md` 3. `governance/context/projeSTRING
HIGH…harness-cn/governance/tools/init_governance_package.py0## 项目结构 | 路径 | 职责 | 禁止事项 | 主要验证 | |---|---|---|---| | `governance/` | 项目工程治理包、上下文路由、标准、门禁和证据记录 | 不覆盖项目原有 readme、agents、cSTRING
HIGH…-cn-public/governance/tools/init_governance_package.py0## 项目结构 | 路径 | 职责 | 禁止事项 | 主要验证 | |---|---|---|---| | `governance/` | 项目工程治理包、上下文路由、标准、门禁和证据记录 | 不覆盖项目原有 readme、agents、cSTRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0## 项目结构 | 路径 | 职责 | 禁止事项 | 主要验证 | |---|---|---|---| | `governance/` | 项目工程治理包、上下文路由、标准、门禁和证据记录 | 不覆盖项目原有 readme、agents、cSTRING
HIGH…harness-cn/governance/tools/init_governance_package.py0## 基本要求 - 正确性优先。 - 未来最优解优先：先按长期正确终态思考，再切成本轮可验证路径。 - 存在性优先：先证明对象应该存在，再实现。 - 行为可验证。 - 边界清晰。 - 依赖合理。 - 错误处理完整。 - 性能和成本可解释。 STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0## 基本要求 - 正确性优先。 - 未来最优解优先：先按长期正确终态思考，再切成本轮可验证路径。 - 存在性优先：先证明对象应该存在，再实现。 - 行为可验证。 - 边界清晰。 - 依赖合理。 - 错误处理完整。 - 性能和成本可解释。 STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0## 基本要求 - 正确性优先。 - 未来最优解优先：先按长期正确终态思考，再切成本轮可验证路径。 - 存在性优先：先证明对象应该存在，再实现。 - 行为可验证。 - 边界清晰。 - 依赖合理。 - 错误处理完整。 - 性能和成本可解释。 STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0## 原则 非平凡方案、架构、重构、任务拆分和治理沉淀，必须先按最终状态最优、长期可维护、可扩展、可验证的目标结构思考，再评估迁移成本和本轮切片。 不得因为实现时间、代码量、迁移工作量、内部调用方成本或旧结构惯性，主动把方案降级成临时补丁、STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0## 原则 非平凡方案、架构、重构、任务拆分和治理沉淀，必须先按最终状态最优、长期可维护、可扩展、可验证的目标结构思考，再评估迁移成本和本轮切片。 不得因为实现时间、代码量、迁移工作量、内部调用方成本或旧结构惯性，主动把方案降级成临时补丁、STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0## 原则 非平凡方案、架构、重构、任务拆分和治理沉淀，必须先按最终状态最优、长期可维护、可扩展、可验证的目标结构思考，再评估迁移成本和本轮切片。 不得因为实现时间、代码量、迁移工作量、内部调用方成本或旧结构惯性，主动把方案降级成临时补丁、STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0## 原则 任何新增功能、抽象、文件、目录、依赖、配置、框架、接口、任务、文档、测试、脚本、skill、治理规则或自动化流程，必须先证明当前应该存在。 ## 决策阶梯 1. 是否可以不做、删除、合并、内联或延后。 2. 是否已有标准库、系统STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0## 原则 任何新增功能、抽象、文件、目录、依赖、配置、框架、接口、任务、文档、测试、脚本、skill、治理规则或自动化流程，必须先证明当前应该存在。 ## 决策阶梯 1. 是否可以不做、删除、合并、内联或延后。 2. 是否已有标准库、系统STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0## 原则 任何新增功能、抽象、文件、目录、依赖、配置、框架、接口、任务、文档、测试、脚本、skill、治理规则或自动化流程，必须先证明当前应该存在。 ## 决策阶梯 1. 是否可以不做、删除、合并、内联或延后。 2. 是否已有标准库、系统STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0不可接受模式： - 临时补丁替代根因修复。 - 吞异常或假成功。 - 无测试的高风险改动。 - n+1、无界循环、无界并发、全量加载大数据。 - 无 timeout、无限重试、无背压。 - 硬编码业务规则。 - 绕过架构边界。 - 双真相源STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0不可接受模式： - 临时补丁替代根因修复。 - 吞异常或假成功。 - 无测试的高风险改动。 - n+1、无界循环、无界并发、全量加载大数据。 - 无 timeout、无限重试、无背压。 - 硬编码业务规则。 - 绕过架构边界。 - 双真相源STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0不可接受模式： - 临时补丁替代根因修复。 - 吞异常或假成功。 - 无测试的高风险改动。 - n+1、无界循环、无界并发、全量加载大数据。 - 无 timeout、无限重试、无背压。 - 硬编码业务规则。 - 绕过架构边界。 - 双真相源STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0默认检查： - 性能 - 可靠性 - 安全 - 可观测性 - 可扩展性 - 兼容性 - 成本 - 可维护性 - 可测试性STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0默认检查： - 性能 - 可靠性 - 安全 - 可观测性 - 可扩展性 - 兼容性 - 成本 - 可维护性 - 可测试性STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0默认检查： - 性能 - 可靠性 - 安全 - 可观测性 - 可扩展性 - 兼容性 - 成本 - 可维护性 - 可测试性STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0代理执行任务时必须： 1. 读取治理包入口。 2. 按上下文路由加载最小文档。 3. 保留关键证据。 4. 不伪造验证结果。 5. 发现重复错误时写入 agent feedback。 6. 高风险变更说明回滚路径。STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0代理执行任务时必须： 1. 读取治理包入口。 2. 按上下文路由加载最小文档。 3. 保留关键证据。 4. 不伪造验证结果。 5. 发现重复错误时写入 agent feedback。 6. 高风险变更说明回滚路径。STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0代理执行任务时必须： 1. 读取治理包入口。 2. 按上下文路由加载最小文档。 3. 保留关键证据。 4. 不伪造验证结果。 5. 发现重复错误时写入 agent feedback。 6. 高风险变更说明回滚路径。STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0## research - 相关文件 - 当前事实 - 数据流/调用流 - 风险点 - 未确认问题 ## plan - 修改文件列表 - 每个文件修改意图 - 测试策略 - 回滚策略 - 需要更新的治理资产 ## implement - 严STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0## research - 相关文件 - 当前事实 - 数据流/调用流 - 风险点 - 未确认问题 ## plan - 修改文件列表 - 每个文件修改意图 - 测试策略 - 回滚策略 - 需要更新的治理资产 ## implement - 严STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0## research - 相关文件 - 当前事实 - 数据流/调用流 - 风险点 - 未确认问题 ## plan - 修改文件列表 - 每个文件修改意图 - 测试策略 - 回滚策略 - 需要更新的治理资产 ## implement - 严STRING
HIGH…harness-cn/governance/tools/init_governance_package.py0关键用户功能应包含： - 功能清单 - 关键用户旅程 - 成功路径 - 失败路径 - 边界输入 - 验收证据 - pr 应附材料STRING
HIGH…-cn-public/governance/tools/init_governance_package.py0关键用户功能应包含： - 功能清单 - 关键用户旅程 - 成功路径 - 失败路径 - 边界输入 - 验收证据 - pr 应附材料STRING
HIGH…ecurity-cn/governance/tools/init_governance_package.py0关键用户功能应包含： - 功能清单 - 关键用户旅程 - 成功路径 - 失败路径 - 边界输入 - 验收证据 - pr 应附材料STRING
15 more matches not shown…
Unused Imports151 hits · 151 pts
SeverityFileLineSnippetContext
LOWresearch/vibe-harness-cn/tests/test_verify_project.py3CODE
LOW…be-harness-cn/tests/test_reference_operator_harness.py3CODE
LOW…ess-cn/examples/reference_harness/reference_harness.py6CODE
LOW…h/vibe-harness-cn/scripts/validate_operator_library.py6CODE
LOWresearch/vibe-harness-cn/scripts/validate_harness.py10CODE
LOWresearch/vibe-harness-cn/scripts/verify_project.py6CODE
LOW…vibe-harness-cn/governance/tools/new_module_context.py3CODE
LOW…arness-cn/governance/tools/rebuild_governance_index.py3CODE
LOW…harness-cn/governance/tools/init_governance_package.py3CODE
LOW…arness-cn/governance/tools/governance_health_report.py3CODE
LOW…e-harness-cn/governance/tools/new_governance_record.py3CODE
LOW…be-harness-cn/governance/tools/scan_principle_gates.py3CODE
LOW…rness-cn/governance/tools/governance_context_bundle.py3CODE
LOW…ess-cn/governance/tools/validate_governance_package.py3CODE
LOW…/vibe-mathing-cn-public/scripts/check_public_readme.py3CODE
LOW…thing-cn-public/scripts/test_run_math_tool_canaries.py6CODE
LOW…thing-cn-public/scripts/validate_math_tool_canaries.py6CODE
LOW…thing-cn-public/scripts/validate_math_tool_maturity.py3CODE
LOW…hing-cn-public/scripts/validate_portable_literature.py6CODE
LOW…ibe-mathing-cn-public/scripts/test_problem_contract.py6CODE
LOW…-mathing-cn-public/scripts/validate_problem_library.py6CODE
LOW…be-mathing-cn-public/scripts/test_query_ai_citation.py3CODE
LOW…h/vibe-mathing-cn-public/scripts/test_lean_pipeline.py6CODE
LOW…ibe-mathing-cn-public/scripts/fetch_problem_library.py6CODE
LOW…-mathing-cn-public/scripts/test_audit_public_status.py3CODE
LOW…e-mathing-cn-public/scripts/validate_plfb_metamodel.py3CODE
LOW…ch/vibe-mathing-cn-public/scripts/sync_supply_chain.py6CODE
LOW…ch/vibe-mathing-cn-public/scripts/sync_supply_chain.py15CODE
LOW…cn-public/scripts/test_build_candidate_observations.py3CODE
LOW…rch/vibe-mathing-cn-public/scripts/vibe_mathing_cli.py6CODE
LOW…rch/vibe-mathing-cn-public/scripts/validate_project.py6CODE
LOW…hing-cn-public/scripts/test_validate_plfb_metamodel.py3CODE
LOW…e-mathing-cn-public/scripts/pipeline_maturity_audit.py6CODE
LOW…-cn-public/scripts/test_validate_math_tool_canaries.py3CODE
LOW…cn-public/scripts/validate_portable_problem_library.py6CODE
LOW…-cn-public/scripts/test_validate_math_tool_maturity.py3CODE
LOW…n-public/scripts/validate_candidate_problem_library.py3CODE
LOW…ibe-mathing-cn-public/scripts/test_check_math_tools.py6CODE
LOW…ibe-mathing-cn-public/scripts/test_check_math_tools.py10CODE
LOW…/vibe-mathing-cn-public/scripts/audit_public_status.py7CODE
LOWresearch/vibe-mathing-cn-public/scripts/compute_plan.py6CODE
LOWresearch/vibe-mathing-cn-public/scripts/compute_plan.py12CODE
LOW…-mathing-cn-public/scripts/validate_public_boundary.py4CODE
LOW…-mathing-cn-public/scripts/validate_research_spaces.py6CODE
LOW…-mathing-cn-public/scripts/validate_research_spaces.py13CODE
LOW…-mathing-cn-public/scripts/validate_research_spaces.py13CODE
LOW…ibe-mathing-cn-public/scripts/test_fetch_candidates.py3CODE
LOW…mathing-cn-public/scripts/audit_candidate_admission.py3CODE
LOW…mathing-cn-public/scripts/test_literature_providers.py6CODE
LOW…lic/scripts/test_validate_candidate_problem_library.py3CODE
LOW…ibe-mathing-cn-public/scripts/query_problem_library.py7CODE
LOW…-mathing-cn-public/scripts/query_vibemathing_public.py7CODE
LOW…-mathing-cn-public/scripts/query_vibemathing_public.py14CODE
LOW…ing-cn-public/scripts/test_query_vibemathing_public.py3CODE
LOW…athing-cn-public/scripts/check_literature_providers.py6CODE
LOW…ch/vibe-mathing-cn-public/scripts/test_smt_pipeline.py6CODE
LOW…ing-cn-public/scripts/test_validate_public_boundary.py2CODE
LOW…rch/vibe-mathing-cn-public/scripts/check_math_tools.py6CODE
LOW…vibe-mathing-cn-public/scripts/test_problem_library.py6CODE
LOW…ch/vibe-mathing-cn-public/scripts/query_ai_citation.py8CODE
91 more matches not shown…
Hyper-Verbose Identifiers128 hits · 140 pts
SeverityFileLineSnippetContext
LOWresearch/vibe-harness-cn/tests/test_verify_project.py26 def test_breaking_change_notice_is_not_compatibility_shim(self) -> None:CODE
LOWresearch/vibe-harness-cn/tests/test_verify_project.py40 def test_architecture_and_rollback_gates(self) -> None:CODE
LOW…be-harness-cn/tests/test_reference_operator_harness.py41 def test_full_loop_is_deterministic_and_minimally_disclosed(self) -> None:CODE
LOW…be-harness-cn/tests/test_reference_operator_harness.py61 def test_three_operator_kinds_and_recursive_model_application(self) -> None:CODE
LOW…be-harness-cn/tests/test_reference_operator_harness.py82 def test_selector_can_use_domain_class_and_query_without_explicit_id(self) -> None:CODE
LOW…be-harness-cn/tests/test_reference_operator_harness.py108 def test_unknown_binding_and_policy_escalation_fail_closed(self) -> None:CODE
LOW…be-harness-cn/tests/test_reference_operator_harness.py119 def test_step_budget_is_enforced_before_success_record(self) -> None:CODE
LOW…be-harness-cn/tests/test_reference_operator_harness.py130 def test_verifier_rejects_tampered_instruction_packet(self) -> None:CODE
LOW…be-harness-cn/tests/test_reference_operator_harness.py160 def test_unknown_and_cyclic_method_references_fail_closed(self) -> None:CODE
LOW…be-harness-cn/tests/test_reference_operator_harness.py207 def test_cli_returns_nonzero_without_printing_a_success_bundle(self) -> None:CODE
LOW…be-harness-cn/tests/test_reference_operator_harness.py233 def test_generated_record_conforms_to_runtime_core(self) -> None:CODE
LOW…h/vibe-harness-cn/scripts/validate_operator_library.py113def validate_operator_pack_document(pack: Any, schema: Any) -> list[Issue]:CODE
LOW…h/vibe-harness-cn/scripts/validate_operator_library.py238def validate_operator_library(catalog_path: Path, load_json: Any) -> LibraryValidationResult:CODE
LOW…h/vibe-harness-cn/scripts/validate_operator_library.py270def validate_operator_library_documents(documents: LibraryDocuments) -> LibraryValidationResult:CODE
LOWresearch/vibe-harness-cn/scripts/validate_harness.py276def run_operator_library_self_test() -> int:CODE
LOWresearch/vibe-harness-cn/scripts/validate_harness.py422def run_operator_runtime_self_test() -> int:CODE
LOW…harness-cn/governance/tools/init_governance_package.py94def default_gate_rules_index_doc() -> str:CODE
LOW…harness-cn/governance/tools/init_governance_package.py120def project_operating_model_doc() -> str:CODE
LOW…harness-cn/governance/tools/init_governance_package.py195def document_driven_development_doc() -> str:CODE
LOW…harness-cn/governance/tools/init_governance_package.py296def project_operating_model_contract_doc() -> str:CODE
LOW…e-harness-cn/governance/tools/new_governance_record.py240def normalize_record_index_content(content: str) -> str:CODE
LOW…e-harness-cn/governance/tools/new_governance_record.py266def normalize_gate_index_content(content: str) -> str:CODE
LOW…ess-cn/governance/tools/validate_governance_package.py212def markdown_link_destination(raw_target: str) -> str:CODE
LOW…ess-cn/governance/tools/validate_governance_package.py322def check_duplicate_index_table_ids(rel: Path, text: str, issues: list[dict[str, str]]) -> None:CODE
LOW…ess-cn/governance/tools/validate_governance_package.py403def check_route_index_contract(root: Path, issues: list[dict[str, str]]) -> None:CODE
LOW…/vibe-mathing-cn-public/scripts/check_public_readme.py331def check_external_problem_index(root: Path) -> None:CODE
LOW…/vibe-mathing-cn-public/scripts/check_public_readme.py584def check_bounty_readme_tables(root: Path) -> None:CODE
LOW…thing-cn-public/scripts/test_run_math_tool_canaries.py18 def test_tool_selection_is_deduplicated_and_ordered(self) -> None:CODE
LOW…thing-cn-public/scripts/test_run_math_tool_canaries.py23 def test_expected_timeout_is_pass_only_after_timeout(self) -> None:CODE
LOW…thing-cn-public/scripts/test_run_math_tool_canaries.py36 def test_expected_success_requires_marker(self) -> None:CODE
LOW…thing-cn-public/scripts/test_run_math_tool_canaries.py45 def test_detail_does_not_include_command_paths(self) -> None:CODE
LOW…ibe-mathing-cn-public/scripts/fetch_problem_library.py396def replace_math_and_remove_noise(node: Tag) -> None:CODE
LOW…-mathing-cn-public/scripts/test_audit_public_status.py17def test_public_snapshot_is_empty_and_digest_bound() -> None:CODE
LOW…-mathing-cn-public/scripts/test_audit_public_status.py33def test_non_empty_snapshot_is_reported_without_admission() -> None:CODE
LOW…-mathing-cn-public/scripts/test_audit_public_status.py49def test_malformed_jsonl_fails_closed() -> None:CODE
LOW…ch/vibe-mathing-cn-public/scripts/sync_supply_chain.py242def validate_git_reference_source(source: dict[str, object]) -> None:CODE
LOW⚡…ibe-mathing-cn-public/scripts/test_check_math_tools.py21 def test_missing_command_is_explicit(self) -> None:CODE
LOW⚡…ibe-mathing-cn-public/scripts/test_check_math_tools.py27 def test_command_accepts_tool_specific_exit_code(self) -> None:CODE
LOW⚡…ibe-mathing-cn-public/scripts/test_check_math_tools.py36 def test_portable_profile_uses_declared_core_dependencies(self) -> None:CODE
LOW⚡…ibe-mathing-cn-public/scripts/test_check_math_tools.py39 def test_millennium_profile_deduplicates_shared_runtimes(self) -> None:CODE
LOW⚡…ibe-mathing-cn-public/scripts/test_check_math_tools.py48 def test_python_failure_preserves_error(self) -> None:CODE
LOW⚡…ibe-mathing-cn-public/scripts/test_check_math_tools.py57 def test_runtime_label_does_not_expose_executable_path(self) -> None:CODE
LOW⚡…ibe-mathing-cn-public/scripts/test_check_math_tools.py67 def test_command_override_is_explicit(self) -> None:CODE
LOW⚡…ibe-mathing-cn-public/scripts/test_check_math_tools.py74 def test_current_dolfinx_api_is_used(self) -> None:CODE
LOW…-mathing-cn-public/scripts/validate_research_spaces.py210def accepted_independent_capabilities(CODE
LOW…-mathing-cn-public/scripts/validate_research_spaces.py269def has_direct_solution_evidence(kind: str, capabilities: set[str]) -> bool:CODE
LOW…-mathing-cn-public/scripts/validate_research_spaces.py368def validate_cross_references(CODE
LOW…ibe-mathing-cn-public/scripts/query_problem_library.py216def _validate_candidate_record(record: dict[str, Any]) -> None:CODE
LOW…ing-cn-public/scripts/test_validate_public_boundary.py17 def test_exact_public_origin_forms(self) -> None:CODE
LOW…ing-cn-public/scripts/test_validate_public_boundary.py43 def test_sensitive_content_patterns(self) -> None:CODE
LOW…ing-cn-public/scripts/test_validate_public_boundary.py52 def test_non_repository_fails_closed(self) -> None:CODE
LOW…rch/vibe-mathing-cn-public/scripts/fetch_candidates.py969def fetch_multilingual_conjectures(fetcher: Fetcher, sink: Sink, *, refresh: bool) -> None:CODE
LOW…rch/vibe-mathing-cn-public/scripts/fetch_candidates.py1164def fetch_wikipedia_categories(fetcher: Fetcher, sink: Sink, *, refresh: bool) -> None:CODE
LOW…rch/vibe-mathing-cn-public/scripts/fetch_candidates.py1225def fetch_wikipedia_conjectures(fetcher: Fetcher, sink: Sink, *, refresh: bool) -> None:CODE
LOW⚡…thing-cn-public/scripts/test_validate_failed_routes.py11 def test_accepts_utc_z_on_all_supported_python_versions(self) -> None:CODE
LOW⚡…thing-cn-public/scripts/test_validate_failed_routes.py16 def test_accepts_explicit_timezone_offset(self) -> None:CODE
LOW⚡…thing-cn-public/scripts/test_validate_failed_routes.py20 def test_rejects_naive_timestamp(self) -> None:CODE
LOW…be-mathing-cn-public/scripts/test_sync_supply_chain.py35 def test_reference_source_rejects_untrusted_git_fields(self) -> None:CODE
LOW⚡…be-mathing-cn-public/scripts/test_sync_supply_chain.py50 def test_reference_path_must_stay_in_reference_root(self) -> None:CODE
LOW⚡…be-mathing-cn-public/scripts/test_sync_supply_chain.py56 def test_reference_path_must_be_direct_child(self) -> None:CODE
68 more matches not shown…
Empty Error Handlers21 hits · 105 pts
SeverityFileLineSnippetContext
HIGH…be-mathing-cn-public/scripts/test_query_ai_citation.py53except module.RetrievalError:CODE
HIGH…be-mathing-cn-public/scripts/test_query_ai_citation.py47except module.RetrievalError:CODE
HIGH…n-public/scripts/validate_candidate_problem_library.py332except OSError:CODE
HIGHresearch/vibe-mathing-cn-public/scripts/compute_plan.py127except (OSError, ValueError, IndexError):CODE
HIGHresearch/vibe-mathing-cn-public/scripts/compute_plan.py134except (OSError, ValueError, IndexError):CODE
HIGH…ibe-mathing-cn-public/scripts/test_fetch_candidates.py35except module.FetchError:CODE
HIGH…ibe-mathing-cn-public/scripts/test_fetch_candidates.py52except module.ResponseTooLarge:CODE
HIGH…ibe-mathing-cn-public/scripts/test_fetch_candidates.py72except ValueError:CODE
HIGH…ibe-mathing-cn-public/scripts/test_fetch_candidates.py79except ValueError:CODE
HIGH…ing-cn-public/scripts/test_query_vibemathing_public.py78except module.PublicIndexError:CODE
HIGH…/vibe-mathing-cn-public/scripts/test_research_store.py97except StoreError:CODE
HIGH…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py246except ValueError:CODE
HIGH…h/vibe-mathing-cn-public/scripts/vibe_mathing/store.py186except OSError:CODE
HIGH…vibe-mathing-cn-public/scripts/vibe_mathing/runtime.py210except OSError:CODE
HIGH…vibe-mathing-cn-public/scripts/vibe_mathing/runtime.py462except (PermissionError, ProcessLookupError):CODE
HIGH…vibe-mathing-cn-public/scripts/vibe_mathing/runtime.py496except KeyError:CODE
HIGH…vibe-mathing-cn-public/scripts/vibe_mathing/runtime.py469except ProcessLookupError:CODE
HIGHtools/prompts-library/main.py338except:CODE
HIGHtools/prompts-library/main.py266except:CODE
HIGHtools/prompts-library/main.py361except:CODE
HIGHtools/prompts-library/scripts/convert_local.py352except Exception:CODE
Deep Nesting99 hits · 99 pts
SeverityFileLineSnippetContext
LOW…ess-cn/examples/reference_harness/reference_harness.py201CODE
LOW…ess-cn/examples/reference_harness/reference_harness.py349CODE
LOW…h/vibe-harness-cn/scripts/validate_operator_library.py270CODE
LOWresearch/vibe-harness-cn/scripts/validate_harness.py89CODE
LOW…arness-cn/governance/tools/rebuild_governance_index.py194CODE
LOW…e-harness-cn/governance/tools/new_governance_record.py240CODE
LOW…e-harness-cn/governance/tools/new_governance_record.py266CODE
LOW…ess-cn/governance/tools/validate_governance_package.py322CODE
LOW…ess-cn/governance/tools/validate_governance_package.py433CODE
LOW…/vibe-mathing-cn-public/scripts/check_public_readme.py304CODE
LOW…thing-cn-public/scripts/validate_math_tool_maturity.py97CODE
LOW…hing-cn-public/scripts/validate_portable_literature.py116CODE
LOW…ibe-mathing-cn-public/scripts/fetch_problem_library.py441CODE
LOW…ibe-mathing-cn-public/scripts/fetch_problem_library.py477CODE
LOW…ch/vibe-mathing-cn-public/scripts/sync_supply_chain.py310CODE
LOW…ch/vibe-mathing-cn-public/scripts/sync_supply_chain.py605CODE
LOW…ch/vibe-mathing-cn-public/scripts/sync_supply_chain.py669CODE
LOW…rch/vibe-mathing-cn-public/scripts/vibe_mathing_cli.py75CODE
LOW…cn-public/scripts/validate_portable_problem_library.py151CODE
LOW…n-public/scripts/validate_candidate_problem_library.py310CODE
LOW…n-public/scripts/validate_candidate_problem_library.py336CODE
LOW…n-public/scripts/validate_candidate_problem_library.py374CODE
LOWresearch/vibe-mathing-cn-public/scripts/compute_plan.py114CODE
LOWresearch/vibe-mathing-cn-public/scripts/compute_plan.py203CODE
LOW…-mathing-cn-public/scripts/validate_research_spaces.py325CODE
LOW…-mathing-cn-public/scripts/validate_research_spaces.py368CODE
LOW…-mathing-cn-public/scripts/query_vibemathing_public.py45CODE
LOW…-mathing-cn-public/scripts/query_vibemathing_public.py259CODE
LOW…rch/vibe-mathing-cn-public/scripts/fetch_candidates.py437CODE
LOW…be-mathing-cn-public/scripts/consolidate_candidates.py286CODE
LOW…be-mathing-cn-public/scripts/consolidate_candidates.py433CODE
LOW…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py203CODE
LOW…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py423CODE
LOW…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py736CODE
LOW…/vibe-mathing-cn-public/scripts/validate_literature.py175CODE
LOW…hing-cn-public/scripts/build_candidate_observations.py408CODE
LOW…hing-cn-public/scripts/build_candidate_observations.py819CODE
LOW…h/vibe-mathing-cn-public/scripts/vibe_mathing/store.py286CODE
LOW…h/vibe-mathing-cn-public/scripts/vibe_mathing/store.py570CODE
LOW…rch/vibe-mathing-cn-public/scripts/vibe_mathing/smt.py74CODE
LOW…vibe-mathing-cn-public/scripts/vibe_mathing/runtime.py338CODE
LOW…e-mathing-cn-public/scripts/vibe_mathing/literature.py435CODE
LOW…ibe-mathing-cn-public/scripts/vibe_mathing/evidence.py317CODE
LOW…cn-public/governance/tools/rebuild_governance_index.py194CODE
LOW…ng-cn-public/governance/tools/new_governance_record.py240CODE
LOW…ng-cn-public/governance/tools/new_governance_record.py266CODE
LOW…public/governance/tools/validate_governance_package.py322CODE
LOW…public/governance/tools/validate_governance_package.py433CODE
LOW…ibe-cybersecurity-cn/web3-lab/validate_lab_evidence.py23CODE
LOW…s/0005-admit-web3-toolchain/validate_web3_admission.py41CODE
LOW…curity-cn/governance/tools/rebuild_governance_index.py194CODE
LOW…rsecurity-cn/governance/tools/new_governance_record.py240CODE
LOW…rsecurity-cn/governance/tools/new_governance_record.py266CODE
LOW…ity-cn/governance/tools/validate_governance_package.py322CODE
LOW…ity-cn/governance/tools/validate_governance_package.py433CODE
LOW…iting-foundry-smart-contract-security/scripts/agent.py216CODE
LOWtools/chat-vault/services/chat-vault/src/storage.py217CODE
LOWtools/chat-vault/services/chat-vault/src/main.py65CODE
LOWtools/chat-vault/services/chat-vault/src/main.py142CODE
LOWtools/chat-vault/services/chat-vault/src/main.py273CODE
39 more matches not shown…
Structural Annotation Overuse42 hits · 88 pts
SeverityFileLineSnippetContext
LOW⚡…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md226# Step 1: ReconCOMMENT
LOW⚡…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md230# Step 2: Hunt specific classCOMMENT
LOW⚡…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md234# Step 3: Validate before submittingCOMMENT
LOW⚡…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md238# Step 4: Generate reportCOMMENT
LOW⚡…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md352# Step 1: Find all state variables that two+ functions writeCOMMENT
LOW⚡…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md356# Step 2: Find functions that DON'T revert but have side effectsCOMMENT
LOW⚡…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md360# Step 3: Find constructors without role grantsCOMMENT
LOW⚡…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md365# Step 4: Slither with specific AI-code detectorsCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-bug-classes/SKILL.md782# Step 1: Find all external callsCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-bug-classes/SKILL.md785# Step 2: For each — is state updated BEFORE this call?COMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-bug-classes/SKILL.md788# Step 3: ERC777 tokens with hooksCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-bug-classes/SKILL.md791# Step 4: External state read during execution (read-only reentrancy)COMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md417 // Step 1: Inflate pool priceCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md422 // Step 2: Exploit price-dependent function (borrow at inflated collateral value)COMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md425 // Step 3: Deflate price (swap back)COMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md430 // Step 4: Repay flash loanCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md574 // Step 1: Attacker deposits 1 wei → gets 1 shareCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md578 // Step 2: Donate 1M USDC directly to contract (inflates price per share)COMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md581 // Step 3: Victim deposits 1000 USDC → rounds to 0 sharesCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md590 // Step 4: Attacker redeems → gets their share + victim's fundsCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md659 // Step 1: Flash borrow governance tokensCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md660 // Step 2: Vote on malicious proposal (must be pre-created)COMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md662 // Step 3: Proposal passesCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md663 // Step 4: Repay flash loanCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md664 // Step 5: Execute malicious proposal (drain funds)COMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md709 // Step 1: Attacker deposits 1 wei → gets 1 shareCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md714 // Step 2: Donate 1M USDC directly → 1 share now = 1M USDCCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md717 // Step 3: Victim deposits ~1M USDC → rounds to 0 sharesCOMMENT
LOW⚡…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md724 // Step 4: Attacker redeems → gets ~2M USDCCOMMENT
LOW…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md355 // Step 1: Legitimate claim on mainnetCOMMENT
LOW…ills/web3-bug-bounty-hunting/web3-poc-foundry/SKILL.md360 // Step 2: Replay same signature on ArbitrumCOMMENT
LOW…udit/auditing-foundry-smart-contract-security/SKILL.md90### Step 1: Build and sanity-check the projectCOMMENT
LOW…udit/auditing-foundry-smart-contract-security/SKILL.md98### Step 2: Static analysis (fast, run every time)COMMENT
LOW…udit/auditing-foundry-smart-contract-security/SKILL.md114### Step 3: Symbolic execution on critical contracts (optional, slow)COMMENT
LOW…udit/auditing-foundry-smart-contract-security/SKILL.md122### Step 4: Property-based testing — fuzz + invariantsCOMMENT
LOW…udit/auditing-foundry-smart-contract-security/SKILL.md135### Step 5: Manual review against the checklistCOMMENT
LOW…udit/auditing-foundry-smart-contract-security/SKILL.md143### Step 6: Key hygiene & secure deployCOMMENT
LOW…udit/auditing-foundry-smart-contract-security/SKILL.md159### Step 7: Triage and reportCOMMENT
LOW⚡…yzing-ethereum-smart-contract-vulnerabilities/SKILL.md53### Step 1: Run Slither Static AnalysisCOMMENT
LOW⚡…yzing-ethereum-smart-contract-vulnerabilities/SKILL.md57### Step 2: Run Mythril Symbolic ExecutionCOMMENT
LOW⚡…yzing-ethereum-smart-contract-vulnerabilities/SKILL.md61### Step 3: Triage and Correlate FindingsCOMMENT
LOW⚡…yzing-ethereum-smart-contract-vulnerabilities/SKILL.md65### Step 4: Generate Audit ReportCOMMENT
Modern AI Meta-Vocabulary36 hits · 83 pts
SeverityFileLineSnippetContext
MEDIUM…rch/vibe-harness-cn/research/DOMAIN_EVIDENCE_MATRIX.md113| EEF 将反馈定义为对齐目标和差距的下一步行动，并建议显式教、示范、支架、监控、评价后逐步淡出。[EEF Feedback](https://educationendowmentfoundation.org.uk/education-eCODE
MEDIUM…ks/0002-survey-vibe-mathing-practices/SOURCE_LEDGER.md33| S15 | Adjacent / Primary | [cameronfreer/lean4-skills](https://github.com/cameronfreer/lean4-skills) | MIT 仓库、prove/reCODE
MEDIUMresearch/affaan-m-ecc/raw/github-readme.raw.md.txt1084|-- scripts/ # install, repair, sync, orchestration, and checksCODE
MEDIUMresearch/affaan-m-ecc/raw/github-readme.raw.md.txt1202| |-- autonomous-loops/ # Autonomous loop patterns: sequential pipelines, PR loops, DAG orchestrationCODE
MEDIUM⚡research/affaan-m-ecc/raw/github-readme.raw.md.txt1228| |-- multi-execute.md # /multi-execute - Orchestrated multi-agent workflowsCODE
MEDIUM⚡research/affaan-m-ecc/raw/github-readme.raw.md.txt1229| |-- multi-backend.md # /multi-backend - Backend multi-service orchestrationCODE
MEDIUM⚡research/affaan-m-ecc/raw/github-readme.raw.md.txt1230| |-- multi-frontend.md # /multi-frontend - Frontend multi-service orchestrationCODE
MEDIUMresearch/affaan-m-ecc/raw/github-readme.raw.md.txt1242| |-- orchestrate.md # /orchestrate - Prefer dmux-workflows or multi-workflowCODE
MEDIUMresearch/affaan-m-ecc/raw/github-readme.raw.md.txt1294| |-- go-microservice-CLAUDE.md # Real-world Go microservice (gRPC + PostgreSQL)CODE
MEDIUMresearch/affaan-m-ecc/raw/github-readme.raw.md.txt2145I've been using Claude Code since the experimental rollout. Won the Anthropic x Forum Ventures hackathon in Sep 2025 witCODE
MEDIUM…gario-awesome-vibe-coding/raw/github-readme.raw.md.txt26- [Vibe coding is passé - The New Stack](https://thenewstack.io/vibe-coding-is-passe/) - Karpathy's evolution of the conCODE
MEDIUM…gario-awesome-vibe-coding/raw/github-readme.raw.md.txt45- [Firebase Studio](https://studio.firebase.google.com/) - Google's agentic cloud-based development environment that helCODE
MEDIUM…gario-awesome-vibe-coding/raw/github-readme.raw.md.txt60- [Google Antigravity](https://antigravity.google/) - Google's agentic development platform with Manager view for orchesCODE
MEDIUM…gario-awesome-vibe-coding/raw/github-readme.raw.md.txt79- [GitHub Copilot](https://github.com/features/copilot) - AI pair programmer with agent mode, multi-model support (ClaudCODE
MEDIUM…gario-awesome-vibe-coding/raw/github-readme.raw.md.txt87- [Qodo Gen](https://www.qodo.ai/) - AI-powered coding platform for VS Code with testing, code review, and agentic toolsCODE
MEDIUM…gario-awesome-vibe-coding/raw/github-readme.raw.md.txt111- [GitHub Copilot CLI](https://github.com/github/copilot-cli) - Full agentic development environment in the terminal witCODE
MEDIUM…ilian-weng-harness-engineering-for-self-improvement.md159The design space for workflow is _enormous_, and naturally we can think of workflow design as a search problem, and therCODE
MEDIUM…ilian-weng-harness-engineering-for-self-improvement.md174**AFlow** ([Zhang et al. 2025](https://arxiv.org/abs/2410.10762)) represents an agentic workflow as a graph, where nodesCODE
MEDIUM…arch/openai-agents-python/raw/github-readme.raw.md.txt121. [**Agents**](https://openai.github.io/openai-agents-python/agents): LLMs configured with instructions, tools, guardraCODE
MEDIUM…arch/openai-agents-python/raw/github-readme.raw.md.txt181. [**Guardrails**](https://openai.github.io/openai-agents-python/guardrails/): Configurable safety checks for input andCODE
MEDIUM…penai-agents-python/raw/github-latest-release.raw.json41 "body": "## What's Changed\r\n\r\n* feat(core): support image results in web search tools by @seratch in https://githuCODE
MEDIUM…penai-agents-python/raw/github-latest-release.raw.json41 "body": "## What's Changed\r\n\r\n* feat(core): support image results in web search tools by @seratch in https://githuCODE
MEDIUM…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md161# Build RAG knowledge base (one-time, ~5 min):COMMENT
MEDIUM…/luzhenqian-ai-coding-lab/raw/github-readme.raw.md.txt40#### RAGCOMMENT
MEDIUM⚡research/openai-agents-js/raw/github-readme.raw.md.txt111. [**Agents**](https://openai.github.io/openai-agents-js/guides/agents): LLMs configured with instructions, tools, guarCODE
MEDIUM⚡research/openai-agents-js/raw/github-readme.raw.md.txt131. [**Realtime Agents**](https://openai.github.io/openai-agents-js/guides/voice-agents/quickstart/): Low-latency agents CODE
MEDIUM⚡research/openai-agents-js/raw/github-readme.raw.md.txt161. [**Guardrails**](https://openai.github.io/openai-agents-js/guides/guardrails/): Configurable safety checks for input CODE
MEDIUM…ch/openai-agents-js/raw/github-latest-release.raw.json41 "body": "## What's Changed\r\n\r\n* feat: add server-wide MCP tool guardrails by @seratch in https://github.com/openaiCODE
MEDIUM…claude-code-best-practice/raw/github-readme.raw.md.txt86## <a href="orchestration-workflow/orchestration-workflow.md"><img src="!/tags/orchestration-workflow-hd.svg" alt="OrcheCOMMENT
MEDIUM…claude-code-best-practice/raw/github-readme.raw.md.txt470### 🤔 [Does code matter?](https://github.com/shanraisshan/agentic-engineering)COMMENT
MEDIUM…claude-code-best-practice/raw/github-readme.raw.md.txt470### 🤔 [Does code matter?](https://github.com/shanraisshan/agentic-engineering)COMMENT
MEDIUM…ch/obra-superpowers/raw/github-latest-release.raw.json41 "body": "\n### Harness Support\n\n- **Devin CLI**: `devin plugins install obra/superpowers` now works, and skills autoCODE
MEDIUM…ch/obra-superpowers/raw/github-latest-release.raw.json41 "body": "\n### Harness Support\n\n- **Devin CLI**: `devin plugins install obra/superpowers` now works, and skills autoCODE
MEDIUM…rch/shouzhengai-cs146s-cn/raw/github-readme.raw.md.txt206 - [智能体 AI 威胁：身份欺骗和冒充风险: Agentic AI Threats: Identity Spoofing and Impersonation Risks](https://www.google.com/search?qCODE
MEDIUMdocs/gongfa/enterprise-architecture-template.md79│ ├── templates/ # Golden paths, scaffolding, service templatesCODE
MEDIUMdocs/gongfa/enterprise-architecture-template.md293│ ├── compose.yaml # local / integration orchestration entry pointCODE
Decorative Section Separators12 hits · 36 pts
SeverityFileLineSnippetContext
MEDIUMresearch/vibe-mathing-cn-public/scripts/compute_plan.py24# ================================================================================COMMENT
MEDIUM…rch/vibe-mathing-cn-public/scripts/fetch_candidates.py636# ---------------------------------------------------------------------------COMMENT
MEDIUM…rch/vibe-mathing-cn-public/scripts/fetch_candidates.py638# ---------------------------------------------------------------------------COMMENT
MEDIUM…rch/vibe-mathing-cn-public/scripts/fetch_candidates.py1333# ---------------------------------------------------------------------------COMMENT
MEDIUM…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py128# --------------------------------------------------------------------------COMMENT
MEDIUM…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py130# --------------------------------------------------------------------------COMMENT
MEDIUM…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py195# --------------------------------------------------------------------------COMMENT
MEDIUM…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py197# --------------------------------------------------------------------------COMMENT
MEDIUM…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py419# --------------------------------------------------------------------------COMMENT
MEDIUM…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py421# --------------------------------------------------------------------------COMMENT
MEDIUM…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py596# --------------------------------------------------------------------------COMMENT
MEDIUM…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py598# --------------------------------------------------------------------------COMMENT
Synthetic Comment Markers4 hits · 28 pts
SeverityFileLineSnippetContext
HIGH…earch/vibe-mathing-cn-public/assets/ai-citation/faq.md19## Why is an AI-generated proof not automatically a Result?COMMENT
HIGH…opers-awesome-vibe-coding/raw/github-readme.raw.md.txt66* [MyVibe](https://myvibe.so/) — Instant deployment for AI-generated web apps. Publish via Claude Code skills or direct COMMENT
HIGH…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md335grep -rn "// AI generated\|// Generated by\|// Copilot" src/ --include="*.sol"CODE
HIGH…/skills/web3-bug-bounty-hunting/web3-ai-tools/SKILL.md339# High NatSpec count but low test coverage = likely AI-generatedCOMMENT
Excessive Try-Catch Wrapping21 hits · 21 pts
SeverityFileLineSnippetContext
LOW…rch/vibe-mathing-cn-public/scripts/fetch_candidates.py1434 except Exception as exc: # noqa: BLE001 - record failure, continue auditing other selected sourcesCODE
LOW…be-mathing-cn-public/scripts/consolidate_candidates.py528 except Exception as exc: # noqa: BLE001CODE
LOW…hing-cn-public/scripts/build_candidate_observations.py798 except Exception:CODE
LOW…hing-cn-public/scripts/build_candidate_observations.py897 except Exception as exc: # an explicit snapshot error, never a silent warningCODE
LOWtools/chat-vault/services/chat-vault/src/main.py194 except Exception as e:CODE
LOWtools/chat-vault/services/chat-vault/src/main.py290 except Exception as e:CODE
LOWtools/chat-vault/services/chat-vault/src/main.py313 except Exception as e:CODE
LOWtools/external/XHS-image-to-PDF-conversion/pdf.py74 except Exception as e:CODE
LOWtools/external/XHS-image-to-PDF-conversion/pdf.py111 except Exception as e:CODE
LOWtools/prompts-library/main.py100except Exception: # pragma: no coverSTRING
LOWtools/prompts-library/main.py107except Exception: # pragma: no coverSTRING
LOWtools/prompts-library/main.py580 except Exception:CODE
LOWtools/prompts-library/docs/开发文档.md411 except Exception as e:CODE
LOWtools/prompts-library/docs/开发文档.md730 except Exception as e:CODE
LOWtools/prompts-library/scripts/convert_local.py41except Exception: # pragma: no coverCODE
LOWtools/prompts-library/scripts/convert_local.py126 except Exception:CODE
LOWtools/prompts-library/scripts/convert_local.py352 except Exception:CODE
MEDIUMtools/prompts-library/scripts/convert_local.py348def fmt(x) -> str:CODE
LOWtools/prompts-library/scripts/gemini_jsonl_batch.py124 except Exception as exc: # noqa: BLE001CODE
LOWtools/prompts-library/scripts/start_convert.py172 except Exception:CODE
LOWscripts/sync-gongfa-catalog.py393 except Exception as error:CODE
AI Slop Vocabulary4 hits · 11 pts
SeverityFileLineSnippetContext
MEDIUM⚡…s/0019-reference-operator-runtime-proof/TREE_SPEC.json160 "package_context_blocks": "## TP-01\n- Step Key: `runtime-contract`\n- 标题: 定义运行时互操作契约\n- 类型: `action`\n- 目标: 定义三个宽松 CODE
MEDIUM⚡…s/0019-reference-operator-runtime-proof/TREE_SPEC.json161 "package_acceptance_blocks": "## TP-01\n- 标题: 定义运行时互操作契约\n- 验收标准:\n - 有效样例通过，缺失稳定字段的反例被拒绝\n- Verify: 核对验收项: 有效样例通过，CODE
MEDIUM⚡…s/0019-reference-operator-runtime-proof/TREE_SPEC.json162 "package_acceptance_checklists": "## TP-01\n- 标题: 定义运行时互操作契约\n- 验收项:\n - [ ] 有效样例通过，缺失稳定字段的反例被拒绝\n- Verify: 核对验收项: CODE
MEDIUM…search/affaan-m-ecc/raw/github-latest-release.raw.json114 "body": "ECC 2.2 is here, led by one guided installer for Claude Code, Codex, and Kimi.\r\nIt also adds native AntigraCODE
Magic Placeholder Names2 hits · 10 pts
SeverityFileLineSnippetContext
HIGH…/google-gemini-gemini-cli/raw/github-readme.raw.md.txt190export GEMINI_API_KEY="YOUR_API_KEY"CODE
HIGH…/google-gemini-gemini-cli/raw/github-readme.raw.md.txt206export GOOGLE_API_KEY="YOUR_API_KEY"CODE
Modern Structural Boilerplate7 hits · 7 pts
SeverityFileLineSnippetContext
LOW…ibe-mathing-cn-public/scripts/fetch_problem_library.py196def _set_response_timeout(response: Any, timeout: float) -> None:CODE
LOW…rch/vibe-mathing-cn-public/scripts/fetch_candidates.py343def _set_response_timeout(response: Any, timeout: float) -> None:CODE
LOW…ibe-mathing-cn-public/scripts/vibe_mathing/__init__.py6__all__ = [CODE
LOW…e-mathing-cn-public/scripts/vibe_mathing/literature.py134def _set_response_timeout(response: Any, timeout: float) -> None:CODE
LOW…iting-foundry-smart-contract-security/scripts/agent.py27logger = logging.getLogger(__name__)CODE
LOW…hereum-smart-contract-vulnerabilities/scripts/agent.py12logger = logging.getLogger(__name__)CODE
LOW…chat-vault/services/chat-vault/src/parsers/__init__.py7__all__ = ["CodexParser", "GeminiParser", "ClaudeParser", "KiroParser", "SessionData"]CODE
Over-Commented Block4 hits · 4 pts
SeverityFileLineSnippetContext
LOW…rch/vibe-mathing-cn-public/scripts/fetch_candidates.py1#!/usr/bin/env python3COMMENT
LOW…/vibe-mathing-cn-public/scripts/fetch_erdosproblems.py1#!/usr/bin/env python3COMMENT
LOWtools/chat-vault/Sublime-Text.txt1# Sublime-Text.txtCOMMENT
LOW.github/FUNDING.yml1# GitHub 赞助配置文件COMMENT
Fake / Example Data1 hit · 1 pts
SeverityFileLineSnippetContext
LOWtools/prompts-library/scripts/convert_local.py197 classifications.append(RowClassification(r, "other", {"placeholder": True, "raw": row_vals}))CODE